$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft File: k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json) Hash identifier: C+7+71bRnMUeUrUbk/6jwLpoE6vFJ7P4hkEer8DbI8s= Subject key identifier: 9A:0B:C4:5D:93:BB:2B:D8:05:21:80:F4:E6:1A:D6:10:43:00:F0:DF Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 Certificate issuer: /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Certificate serial: 08EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft Manifest number: 08D4 Signing time: Thu 16 Apr 2026 20:17:59 +0000 Manifest this update: Thu 16 Apr 2026 20:17:58 +0000 Manifest next update: Thu 23 Apr 2026 20:17:58 +0000 Files and hashes: 1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: ZPV+HBysd4ogQfzaUVzuZMh+5ZWfU+ok25Td7PLh6kQ=) 2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: L4cLpZwwCZ10zCVLhR1vyw0wh/3vcnCO5sVsoXu+2hs=) 3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: /CRw6E1vIEc7eVb62+omgoF8qhFxYxHMoooVUbjUl3E=) 4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: qB0RRqeSWEL7TTLu1HM6B7BoFOWF6xTcsw18m7Kj/MM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2284 (0x8ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E64C, serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12 Validity Not Before: Apr 16 20:17:58 2026 GMT Not After : Apr 23 20:17:58 2026 GMT Subject: CN=69e143f7-e5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:36:47:63:86:97:d6:0c:6d:39:e2:d5:bd:80: b4:80:5e:f1:aa:ce:22:84:9f:97:b9:06:0b:07:ca: 0b:29:2b:26:b7:75:67:7f:22:54:53:c1:07:d0:42: 5d:19:af:9f:1b:8b:ea:bf:19:db:ac:0c:1b:a8:1c: 91:f5:41:1c:a6:e6:f1:03:62:03:5e:a1:87:74:12: f5:e4:1c:09:1e:f4:c5:69:fe:fb:7e:ff:43:36:5b: 4f:52:62:70:67:1f:bf:82:8b:7d:3e:57:ed:1b:31: dd:71:28:be:68:0d:6f:a9:00:a4:c3:61:65:3a:70: 74:83:a2:87:e0:66:39:a1:ae:b7:20:4f:61:eb:5e: 3b:e6:f0:c8:5f:75:88:1a:b7:ff:03:f0:de:1a:f4: 5d:f1:69:55:1c:10:6d:88:a3:c4:8b:aa:2b:e4:01: bb:4e:43:a6:8f:f9:a0:3f:3c:92:29:9e:fd:3c:5b: fa:20:63:3b:13:07:e4:c0:26:c5:f9:bb:6e:13:ce: ed:61:9c:e4:e1:6d:9e:34:cf:2c:02:96:51:95:2f: 43:c4:85:f4:cf:ae:54:8a:e7:e5:57:4d:89:cb:ca: 73:19:37:84:0d:3e:38:4d:1f:8d:c2:1c:6f:00:da: 19:ca:04:3d:79:7d:bc:10:77:f7:8f:a7:49:5e:34: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0B:C4:5D:93:BB:2B:D8:05:21:80:F4:E6:1A:D6:10:43:00:F0:DF X509v3 Authority Key Identifier: keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ba:44:6f:d2:86:42:44:70:1e:b0:2c:44:48:32:25:0a:54: f5:44:77:77:82:a1:5d:2a:c4:1d:67:3f:0b:43:29:b4:55:b7: e8:49:cf:b0:7f:d0:6e:b7:01:56:3b:07:ed:ef:ca:7d:a2:5b: 0a:9b:3c:65:58:93:31:75:41:7a:8e:13:01:b7:3c:2f:96:47: 53:5a:e3:2f:59:85:ec:83:5e:1f:0f:2a:b3:63:c8:35:6a:4a: a6:95:09:b9:d0:61:fa:0e:88:e4:bb:e9:07:29:c1:e9:a8:49: b6:8d:15:ee:40:44:0a:e2:93:4b:26:c0:5c:c5:fb:04:26:46: 51:52:8a:f6:64:6b:6c:a5:c2:2d:8d:d9:30:dc:1a:b7:97:ab: 19:bb:cd:4a:b3:b8:a2:36:28:aa:06:7d:37:35:56:57:c0:fa: 3e:98:60:01:a6:c6:68:ce:b9:5c:01:01:82:d8:13:fa:5a:f4: 73:bc:f4:66:29:f3:49:8c:48:a4:3a:63:e3:a5:e8:62:3c:53: 85:e4:ad:79:b0:82:af:0d:e8:73:c5:5f:9d:ac:67:05:dc:11: 8c:32:c2:2b:7a:21:f5:08:b4:bc:72:bc:64:03:b5:de:9e:11: be:72:80:a8:b6:ec:49:ac:c0:ec:0b:e0:a2:44:e4:81:2a:19: 9c:a6:c1:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC QzNBMzBCMTIwHhcNMjYwNDE2MjAxNzU4WhcNMjYwNDIzMjAxNzU4WjAYMRYwFAYD VQQDEw02OWUxNDNmNy1lNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8TZHY4aX1gxtOeLVvYC0gF7xqs4ihJ+XuQYLB8oLKSsmt3VnfyJUU8EH0EJd Ga+fG4vqvxnbrAwbqByR9UEcpubxA2IDXqGHdBL15BwJHvTFaf77fv9DNltPUmJw Zx+/got9PlftGzHdcSi+aA1vqQCkw2FlOnB0g6KH4GY5oa63IE9h61475vDIX3WI Grf/A/DeGvRd8WlVHBBtiKPEi6or5AG7TkOmj/mgPzySKZ79PFv6IGM7EwfkwCbF +btuE87tYZzk4W2eNM8sApZRlS9DxIX0z65UiuflV02Jy8pzGTeEDT44TR+Nwhxv ANoZygQ9eX28EHf3j6dJXjSYYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJoLxF2T uyvYBSGA9OYa1hBDAPDfMB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI WU9kMGdfay02dnE4T2pDeEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABbpEb9KGQkRwHrAsREgyJQpU9UR3d4KhXSrEHWc/C0MptFW36EnPsH/QbrcB VjsH7e/KfaJbCps8ZViTMXVBeo4TAbc8L5ZHU1rjL1mF7INeHw8qs2PINWpKppUJ udBh+g6I5LvpBynB6ahJto0V7kBECuKTSybAXMX7BCZGUVKK9mRrbKXCLY3ZMNwa t5erGbvNSrO4ojYoqgZ9NzVWV8D6PphgAabGaM65XAEBgtgT+lr0c7z0ZinzSYxI pDpj46XoYjxTheStebCCrw3oc8VfnaxnBdwRjDLCK3oh9Qi0vHK8ZAO13p4RvnKA qLbsSazA7AvgokTkgSoZnKbB4w== -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:21 2026 by rpki-client