$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: xEbyXEpzmAnm/T7fNHqe31HiWVuvsvS9UBQPXZWIoLo= Subject key identifier: 76:63:36:60:88:8E:65:C0:65:01:DB:4D:09:9E:2F:54:F2:D1:E1:0F Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 027B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 0275 Signing time: Fri 17 Apr 2026 01:45:32 +0000 Manifest this update: Fri 17 Apr 2026 01:45:32 +0000 Manifest next update: Fri 24 Apr 2026 01:45:32 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: 6MdNSz/9jSH1Nqd7mw+xG4Tq/zL0SoNdPnMSZ3gG6SU=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: yfzx4N8e3wjfsr320pF+EFitreK6BjvCPZ0wmG/4y/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 635 (0x27b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Apr 17 01:45:32 2026 GMT Not After : Apr 24 01:45:32 2026 GMT Subject: CN=69e190bc-8e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:44:9b:7f:e1:13:cc:9e:bf:d7:ba:c1:5a: b3:fc:1a:c9:9b:bd:5d:a2:a9:6a:09:19:1d:16:21: 6f:33:58:3a:83:f1:fc:5a:55:cc:24:4e:af:fd:f2: 84:77:cc:6d:3a:20:5a:93:f5:36:77:56:0e:cb:e5: 01:d8:27:8e:77:86:d1:a3:f2:88:48:b5:3b:db:e7: 26:06:9a:b1:c0:0f:5e:08:e9:f3:44:ea:09:70:fd: 2e:fe:9a:3d:96:28:bb:b2:e1:9f:22:4b:9f:ef:f5: df:50:0a:a9:8c:50:ef:e5:4d:43:e6:44:59:3a:45: 3c:fa:c1:ba:49:da:f3:39:ae:2b:99:99:8c:f9:da: d8:53:a0:b1:f6:08:73:7e:56:84:d6:80:bc:9c:ce: e3:71:6b:4d:c1:34:df:ea:60:8d:91:a2:91:d2:bb: b3:88:25:e8:16:16:d3:73:a3:b5:cb:5a:57:5c:f7: 4b:1c:47:1d:77:28:b2:99:2d:e0:ec:38:2f:ba:da: 5e:63:1c:a7:ef:b5:1c:86:a8:20:ec:76:37:3d:76: 50:c6:2e:73:9d:8f:3c:41:90:16:a1:80:c4:42:81: 6d:cd:dd:f0:58:64:00:08:b7:3a:84:bb:22:33:8b: 20:a6:b2:26:74:e4:62:8c:15:36:50:14:cc:71:ca: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:63:36:60:88:8E:65:C0:65:01:DB:4D:09:9E:2F:54:F2:D1:E1:0F X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:95:b3:aa:79:ea:3a:eb:ee:e5:42:44:8f:a2:96:1d:7b:37: 59:20:76:71:bb:78:55:d8:1f:e9:7d:54:bd:18:54:0a:f1:1e: 54:8d:cf:00:c2:d4:fe:c2:24:71:ca:d8:e4:46:35:a0:04:10: 29:ea:47:33:25:8d:fd:8e:d6:1c:d2:82:cb:a2:b8:78:cc:d5: 27:82:ba:af:53:74:54:43:9c:3e:1a:0b:58:8c:8e:56:c2:a1: 4e:9d:80:b3:7c:0d:c5:2f:1f:28:37:84:ed:72:17:56:d0:a6: 5b:33:ca:7e:87:19:4b:7d:56:91:c6:22:44:0d:c9:15:fa:3a: 44:9b:2a:d2:2d:85:5b:cc:36:19:e1:1e:a1:cf:21:9d:20:9c: 7a:bf:0d:02:82:1d:04:3a:66:8d:5f:d4:56:29:25:b4:2a:2a: 6b:19:d3:b9:b7:eb:65:ff:14:bc:37:fd:a7:0c:62:d8:70:62: be:56:d3:87:2a:2b:67:d6:44:eb:27:0c:a0:7c:7a:23:e8:97: b8:13:37:96:c4:66:21:a7:c9:62:5b:f3:ff:77:40:a8:49:55: 9b:02:fa:5b:23:24:c5:89:a0:1d:4c:cb:3d:94:47:02:71:d9: d0:bd:f7:7c:0f:54:7b:de:fa:76:9c:2f:4b:f7:8c:56:db:fc: 88:9f:18:41 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjYwNDE3MDE0NTMyWhcNMjYwNDI0MDE0NTMyWjAYMRYwFAYD VQQDEw02OWUxOTBiYy04ZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCZEm3/hE8yev9e6wVqz/BrJm71doqlqCRkdFiFvM1g6g/H8WlXMJE6v/fKE d8xtOiBak/U2d1YOy+UB2CeOd4bRo/KISLU72+cmBpqxwA9eCOnzROoJcP0u/po9 lii7suGfIkuf7/XfUAqpjFDv5U1D5kRZOkU8+sG6SdrzOa4rmZmM+drYU6Cx9ghz flaE1oC8nM7jcWtNwTTf6mCNkaKR0ruziCXoFhbTc6O1y1pXXPdLHEcddyiymS3g 7DgvutpeYxyn77Uchqgg7HY3PXZQxi5znY88QZAWoYDEQoFtzd3wWGQACLc6hLsi M4sgprImdORijBU2UBTMccogawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHZjNmCI jmXAZQHbTQmeL1Ty0eEPMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEpWzqnnqOuvu5UJEj6KWHXs3WSB2cbt4Vdgf6X1UvRhUCvEeVI3PAMLU/sIk ccrY5EY1oAQQKepHMyWN/Y7WHNKCy6K4eMzVJ4K6r1N0VEOcPhoLWIyOVsKhTp2A s3wNxS8fKDeE7XIXVtCmWzPKfocZS31WkcYiRA3JFfo6RJsq0i2FW8w2GeEeoc8h nSCcer8NAoIdBDpmjV/UVikltCoqaxnTubfrZf8UvDf9pwxi2HBivlbThyorZ9ZE 6ycMoHx6I+iXuBM3lsRmIafJYlvz/3dAqElVmwL6WyMkxYmgHUzLPZRHAnHZ0L33 fA9Ue976dpwvS/eMVtv8iJ8YQQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:08:03 2026 by rpki-client