$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft File: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft (raw, json) Hash identifier: Cq4ESPmjQCOT7IjaabrCYaX1o3QwJZ1Y6L/F9GZjarA= Subject key identifier: 4D:10:EA:05:76:EE:EF:04:D0:C0:B8:2A:D8:25:5D:53:96:2E:8A:A7 Authority key identifier: F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 Certificate issuer: /CN=A911911C/serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Certificate serial: 3673 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft Manifest number: 35E7 Signing time: Thu 16 Apr 2026 14:23:11 +0000 Manifest this update: Thu 16 Apr 2026 14:23:11 +0000 Manifest next update: Thu 23 Apr 2026 14:23:11 +0000 Files and hashes: 1: 9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl (hash: Glc8QenVqFSXok5ApuGMcefKMe8CJ9USxLHE3TY1V74=) 2: 3217A18E809711EFB1A3805FC4F9AE02.roa (hash: EqtETornrjuBXG0deVGQTGhQLRaMgo2akZ1GXGnFWxA=) 3: 1A938A72619D11F0B4D0AB3BC4F9AE02.roa (hash: jKzQbg9WKOQNob9UElPhMaLUY02yHChdAbg8QnRVcoI=) 4: 24D0960C4AFA11EFB1EEA481C4F9AE02.roa (hash: S5zCvB1C6JfQINJasEPZi7XNeuOQmEGs2c56d+Kw5Mw=) 5: 8EEE648AE63811EB91D48033C4F9AE02.roa (hash: TBlyYgM+DcvFNapT40yw9if/xNsl7LZqhEtq12uGiME=) 6: 6E340B9C4EA811EFA593A24CC4F9AE02.roa (hash: sqiE/uLgZvQuA5aRiKo0PL0079tzeNC+Wydytf6zOrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13939 (0x3673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F457EF8C19AA0976CE0459A5FF709C5DCA4FC7D6 Validity Not Before: Apr 16 14:23:11 2026 GMT Not After : Apr 23 14:23:11 2026 GMT Subject: CN=69e0f0cf-315b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:06:b1:b9:d0:17:da:a1:00:83:a0:22:01:2c: 93:2e:b8:02:5e:00:5b:d8:5d:fe:58:ca:b7:c0:7b: 94:68:ac:83:36:b5:2b:5a:a1:80:07:48:d4:c7:86: 7f:3a:91:3f:44:f1:53:01:55:c3:d6:54:a6:6d:6e: 1b:7a:a0:e2:58:73:51:3e:1c:a2:58:84:18:7f:02: c3:20:71:59:d6:c1:90:65:ae:a3:75:f1:9a:b1:86: 87:e5:76:f0:71:5f:16:56:7f:d2:bc:54:35:ed:95: b6:81:69:44:0a:0b:f4:7e:79:24:24:53:0f:f6:c3: e9:7b:f9:af:b7:a9:b4:ac:d0:f1:1a:a9:0c:a9:fc: b1:ae:27:16:d2:25:59:c3:d3:ea:c0:51:f0:57:c4: 44:fe:19:b1:58:a4:d6:a3:c9:0d:b5:f9:14:0f:c2: 8c:8d:9e:ee:a2:0c:49:dc:73:ab:f1:7d:67:5a:cc: e0:79:b9:bc:d9:ac:f7:a6:ac:0b:7d:d0:f6:e3:d2: 79:12:5b:00:02:ad:38:90:d3:14:cb:21:d9:4c:75: 2b:8a:44:8e:ee:fd:c7:2c:75:77:f4:2e:6f:f6:dd: 29:f3:7e:20:52:c6:47:94:32:81:9a:81:ed:59:61: 46:99:3a:9f:43:af:61:c0:ab:b3:d4:c1:77:55:ae: 93:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:10:EA:05:76:EE:EF:04:D0:C0:B8:2A:D8:25:5D:53:96:2E:8A:A7 X509v3 Authority Key Identifier: keyid:F4:57:EF:8C:19:AA:09:76:CE:04:59:A5:FF:70:9C:5D:CA:4F:C7:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/BBC54BA41D8311E28E7E2DD908B02CD2/9FfvjBmqCXbOBFml_3CcXcpPx9Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:dd:10:4b:06:88:e6:49:3c:b2:df:79:69:b8:9e:70:a3:8a: 10:e6:66:e5:ab:fe:d1:32:1b:2d:4d:e5:e0:b3:de:14:fb:8d: 1a:b9:ee:14:68:b6:be:41:6b:38:53:e3:8b:40:cc:c0:a5:2f: be:8f:49:85:d0:4b:6c:ea:05:5c:eb:ec:d9:96:cc:c2:04:73: e9:52:4e:a0:a8:7a:91:2c:3c:c2:68:a9:9c:a9:80:61:25:b2: d0:00:16:55:c2:d3:81:48:36:70:a6:78:9b:3f:59:21:c9:6d: 80:a0:16:b9:5a:e1:ca:e4:0d:da:c6:db:3d:e1:e1:66:38:ad: 94:b2:7f:8b:6c:59:7f:b7:a9:e5:b8:16:cc:a2:b1:1c:85:b9: a5:58:9e:55:72:fa:2f:b2:dc:8f:69:5d:cb:88:ca:b3:b6:c2: 59:83:5e:45:d7:67:4f:ef:cc:5c:8f:88:ad:1d:bf:7e:7b:7e: 1a:70:cd:27:4a:0d:4e:2e:b8:49:10:76:64:84:05:4f:71:d6: 84:aa:d1:9d:f9:ef:2b:7c:ce:36:92:03:95:c2:4a:10:04:c4: 02:f2:da:83:f5:41:4b:28:e3:d4:66:ae:5b:93:1b:d4:4e:9e: b8:b9:0f:8a:06:e6:46:16:1c:ee:70:b6:be:64:b8:49:c4:dd: 8a:91:1d:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEY0NTdFRjhDMTlBQTA5NzZDRTA0NTlBNUZGNzA5QzVE Q0E0RkM3RDYwHhcNMjYwNDE2MTQyMzExWhcNMjYwNDIzMTQyMzExWjAYMRYwFAYD VQQDEw02OWUwZjBjZi0zMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gaxudAX2qEAg6AiASyTLrgCXgBb2F3+WMq3wHuUaKyDNrUrWqGAB0jUx4Z/ OpE/RPFTAVXD1lSmbW4beqDiWHNRPhyiWIQYfwLDIHFZ1sGQZa6jdfGasYaH5Xbw cV8WVn/SvFQ17ZW2gWlECgv0fnkkJFMP9sPpe/mvt6m0rNDxGqkMqfyxricW0iVZ w9PqwFHwV8RE/hmxWKTWo8kNtfkUD8KMjZ7uogxJ3HOr8X1nWszgebm82az3pqwL fdD249J5ElsAAq04kNMUyyHZTHUrikSO7v3HLHV39C5v9t0p834gUsZHlDKBmoHt WWFGmTqfQ69hwKuz1MF3Va6T8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE0Q6gV2 7u8E0MC4KtglXVOWLoqnMB8GA1UdIwQYMBaAFPRX74wZqgl2zgRZpf9wnF3KT8fW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy9CQkM1NEJBNDFE ODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNYYk9CRm1sXzNDY1hjcFB4 OVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlGZnZqQm1xQ1hiT0JGbWxfM0NjWGNwUHg5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy9CQkM1NEJBNDFEODMxMUUyOEU3RTJERDkwOEIwMkNEMi85RmZ2akJtcUNY Yk9CRm1sXzNDY1hjcFB4OVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfd0QSwaI5kk8st95abiecKOKEOZm5av+0TIbLU3l4LPeFPuNGrnuFGi2vkFr OFPji0DMwKUvvo9JhdBLbOoFXOvs2ZbMwgRz6VJOoKh6kSw8wmipnKmAYSWy0AAW VcLTgUg2cKZ4mz9ZIcltgKAWuVrhyuQN2sbbPeHhZjitlLJ/i2xZf7ep5bgWzKKx HIW5pVieVXL6L7Lcj2ldy4jKs7bCWYNeRddnT+/MXI+IrR2/fnt+GnDNJ0oNTi64 SRB2ZIQFT3HWhKrRnfnvK3zONpIDlcJKEATEAvLag/VBSyjj1GauW5Mb1E6euLkP igbmRhYc7nC2vmS4ScTdipEdDw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:57:43 2026 by rpki-client