$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft File: D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft (raw, json) Hash identifier: 7EAqChJBk4ky58d6RPD0d4irLvEF6394mHBp7QZSUPU= Subject key identifier: C9:04:FD:28:DA:0C:EA:FD:A9:3F:0B:F7:47:44:36:5D:7F:F5:9C:86 Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 Certificate issuer: /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft Manifest number: 0107 Signing time: Fri 17 Apr 2026 05:49:12 +0000 Manifest this update: Fri 17 Apr 2026 05:49:12 +0000 Manifest next update: Fri 24 Apr 2026 05:49:12 +0000 Files and hashes: 1: D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl (hash: KqllLdRDG/rMxh3qvaFgyD8gwjETp4mwueDEuzSUyvo=) 2: 5AF3ECBEAFBA11EF91955453C4F9AE02.roa (hash: oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3 Validity Not Before: Apr 17 05:49:12 2026 GMT Not After : Apr 24 05:49:12 2026 GMT Subject: CN=69e1c9d8-4c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:2e:b6:f3:9c:d7:52:78:11:9e:67:4e:00: 7f:f2:36:e7:4d:26:12:6a:86:7e:c7:11:1f:62:3c: a2:09:a8:fd:bc:44:ae:41:de:ff:f8:95:f7:2f:d1: c8:11:99:76:95:4d:31:87:ab:7e:d1:08:da:f9:d5: ce:f0:d7:94:d7:97:a7:c2:0e:04:af:b2:4a:a0:74: 9c:06:81:b6:f5:e2:85:c3:32:72:2f:ba:3b:42:24: bf:ff:83:8a:da:d8:2b:08:99:7d:e4:b4:41:df:35: b8:e6:5b:94:37:59:10:21:82:73:2c:3b:1a:80:64: e2:59:2c:65:fa:b6:5a:45:e9:0b:a1:e1:43:5b:0b: 7d:fb:86:1b:37:85:d6:20:d3:cf:13:bf:ae:c8:92: 32:4b:ee:b5:a0:8b:90:ad:a5:27:ad:38:e6:ca:48: 7b:05:b4:78:88:82:87:d5:56:87:13:74:b0:8a:0a: 1c:9d:09:d7:dd:fe:7a:cc:1c:69:e2:17:97:1a:1a: bd:5c:fa:5b:39:8d:10:7a:76:10:e3:3b:1b:89:a9: e8:a8:d9:ac:13:74:40:b0:32:f7:2a:7f:c1:89:4a: ce:a6:ac:08:81:c7:83:e9:6b:5e:72:bb:c1:c9:03: e5:03:c8:ab:68:f3:ab:24:ad:d3:e9:b3:5f:fd:68: c5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:04:FD:28:DA:0C:EA:FD:A9:3F:0B:F7:47:44:36:5D:7F:F5:9C:86 X509v3 Authority Key Identifier: keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:30:25:3b:bf:d3:93:6b:bf:59:db:d6:82:b8:f5:f7:9a:b7: 7e:a7:f3:76:9f:7e:f0:bf:be:b7:02:eb:d8:91:a9:fe:76:88: b4:76:af:6b:5a:92:d8:79:16:a3:47:21:1d:1c:54:9e:5c:cb: 1e:d7:98:d8:70:a4:9e:c4:ed:47:c7:31:41:03:a2:61:be:98: 90:93:00:6b:a1:65:f9:d4:fd:d3:f8:cc:4c:99:ec:1c:c9:9a: 6e:df:f8:aa:5c:d3:b8:46:ed:fb:09:a0:13:1c:51:f3:6c:b9: 5d:d7:5f:57:8c:38:ab:90:20:e1:37:b7:a8:59:8a:55:00:f5: c3:f7:6d:0f:54:5c:78:af:60:70:4e:67:d6:15:a3:1a:1a:50: c8:1d:af:d6:75:ad:8d:95:88:77:0a:ef:87:60:63:a3:98:48: d6:4b:26:c6:23:61:0f:e5:4d:e3:45:40:b7:56:8c:5b:41:c5: ad:90:dc:94:f5:2a:17:c3:14:aa:f7:01:d2:f3:bd:8a:0b:0c: 82:fd:e6:09:1b:bb:48:ab:bb:c4:68:14:71:d8:39:be:a4:a1: 43:16:12:db:6c:fe:79:27:88:bf:0f:b8:b2:dc:2e:22:81:30: 4c:2c:22:9c:dc:8f:78:79:7b:8e:87:0f:93:cf:f9:ba:8f:47: 03:e3:39:dc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC NjcxRjg2RjMwHhcNMjYwNDE3MDU0OTEyWhcNMjYwNDI0MDU0OTEyWjAYMRYwFAYD VQQDEw02OWUxYzlkOC00YzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWAutvOc11J4EZ5nTgB/8jbnTSYSaoZ+xxEfYjyiCaj9vESuQd7/+JX3L9HI EZl2lU0xh6t+0Qja+dXO8NeU15enwg4Er7JKoHScBoG29eKFwzJyL7o7QiS//4OK 2tgrCJl95LRB3zW45luUN1kQIYJzLDsagGTiWSxl+rZaRekLoeFDWwt9+4YbN4XW INPPE7+uyJIyS+61oIuQraUnrTjmykh7BbR4iIKH1VaHE3SwigocnQnX3f56zBxp 4heXGhq9XPpbOY0QenYQ4zsbianoqNmsE3RAsDL3Kn/BiUrOpqwIgceD6WtecrvB yQPlA8iraPOrJK3T6bNf/WjFCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMkE/Sja DOr9qT8L90dENl1/9ZyGMB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTBCNC9FOTY0ODlBRUFGMzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhB dkpua1cxbDFUX2UyY2Zodk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAjAlO7/Tk2u/WdvWgrj195q3fqfzdp9+8L++twLr2JGp/naItHava1qS2HkW o0chHRxUnlzLHteY2HCknsTtR8cxQQOiYb6YkJMAa6Fl+dT90/jMTJnsHMmabt/4 qlzTuEbt+wmgExxR82y5XddfV4w4q5Ag4Te3qFmKVQD1w/dtD1RceK9gcE5n1hWj GhpQyB2v1nWtjZWIdwrvh2Bjo5hI1ksmxiNhD+VN40VAt1aMW0HFrZDclPUqF8MU qvcB0vO9igsMgv3mCRu7SKu7xGgUcdg5vqShQxYS22z+eSeIvw+4stwuIoEwTCwi nNyPeHl7jocPk8/5uo9HA+M53A== -----END CERTIFICATE-----Generated at Fri Apr 17 07:31:48 2026 by rpki-client