$ rpki-client -vvf rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft File: kNWYT8dsavN1n-qq7ix1ilRoIxE.mft (raw, json) Hash identifier: 0zBGRsgPXyPbsZ/nzfuscE769c08jba0dOSwCJMVpp4= Subject key identifier: 29:C9:B6:0B:66:F9:48:E6:B9:6A:1F:C1:73:C0:4E:59:C1:01:21:A0 Authority key identifier: 90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 Certificate issuer: /CN=A9121E02/serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft Manifest number: 0D Signing time: Fri 17 Apr 2026 08:49:55 +0000 Manifest this update: Fri 17 Apr 2026 08:49:55 +0000 Manifest next update: Fri 24 Apr 2026 08:49:55 +0000 Files and hashes: 1: kNWYT8dsavN1n-qq7ix1ilRoIxE.crl (hash: qd/4+8qRoHn//eG1CtEN5P39OVViu+r6NFZVxe1EhY0=) 2: E667E45629D211F19DF1399897833773.roa (hash: In+uAzwGHzP5ECvS0wGnb/464h9DxbhINKbE8cQ+KEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121E02, serialNumber=90D5984FC76C6AF3759FEAAAEE2C758A54682311 Validity Not Before: Apr 17 08:49:55 2026 GMT Not After : Apr 24 08:49:55 2026 GMT Subject: CN=69e1f433-dee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b7:a4:db:a7:c4:c0:43:f5:e4:73:10:d8:91: 9d:3a:04:99:a8:76:de:21:96:b8:96:17:87:d1:6e: 9b:dc:f9:57:5d:3b:21:c9:15:d9:0f:e6:a8:b8:11: 06:ef:4b:a6:f3:d0:51:43:8a:78:dc:95:21:03:43: 03:13:d2:99:a4:93:13:ed:58:41:f2:3b:80:a1:0e: 8b:46:e2:c3:4b:78:98:07:41:d5:95:15:b3:b2:08: aa:ff:82:65:51:15:68:59:9a:b5:d5:2f:d7:0e:0e: 22:9b:98:03:7a:e7:72:cb:ab:d1:43:85:02:5c:b3: 8d:26:5b:68:5d:81:85:53:8b:64:e8:5c:6d:60:4c: bb:ab:df:40:4e:c8:49:8e:36:3a:41:f6:b4:bd:13: 35:12:f2:f1:9c:f3:e6:cc:c4:1d:7a:2d:a6:23:e7: 0d:37:81:34:33:38:7c:8d:11:c5:eb:b9:96:b8:03: 72:0f:c6:7e:70:88:7d:51:36:98:b6:60:d6:cc:44: 4b:bf:32:c8:a9:64:5a:66:04:36:8e:13:cc:2b:49: 2b:e9:c1:e9:e8:46:3c:6e:57:0a:83:5d:84:14:6f: c6:dc:b0:6c:b7:fa:02:64:5e:af:e5:f1:93:a8:28: 17:83:7e:d4:0f:83:61:69:82:58:a2:a2:6c:a1:5b: 48:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C9:B6:0B:66:F9:48:E6:B9:6A:1F:C1:73:C0:4E:59:C1:01:21:A0 X509v3 Authority Key Identifier: keyid:90:D5:98:4F:C7:6C:6A:F3:75:9F:EA:AA:EE:2C:75:8A:54:68:23:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kNWYT8dsavN1n-qq7ix1ilRoIxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121E02/A17F4B4A29D211F1A261589397833773/kNWYT8dsavN1n-qq7ix1ilRoIxE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:a2:63:86:e7:c4:b1:54:1d:ca:43:bb:e1:04:d8:ec:b7:2d: 31:24:f5:e2:bc:ec:ed:dd:57:30:48:72:fa:98:aa:03:90:63: c6:10:bd:87:91:ce:ce:53:17:0c:b7:e8:e9:e9:f4:01:03:fa: 0a:4c:bf:fe:f7:71:75:9e:6f:77:0b:cc:5a:26:91:16:8c:88: f3:93:d2:e3:5a:88:b1:5d:2f:b6:34:ff:cd:9d:b9:e4:30:11: 89:e8:3c:ac:c2:72:66:87:8d:20:5f:b1:79:64:57:e1:e8:08: 0e:80:8e:78:71:cb:88:16:5e:fe:4f:2f:93:b9:ec:6e:9b:c8: 1d:94:c6:87:20:2f:34:aa:1b:78:92:ad:24:ef:7d:9a:59:fd: ac:83:78:6a:23:05:52:f1:29:15:ff:37:d4:47:39:64:52:f8: 8a:40:4f:af:d2:57:8e:61:44:94:b9:ad:fe:07:0a:a8:b1:11: 58:a3:e9:d3:0e:96:88:94:af:97:df:70:42:a4:ee:c7:97:be: fb:e3:2c:8a:8f:96:5d:da:f7:70:bf:a4:4f:28:db:48:4d:12: b2:40:4e:47:c2:9c:f4:37:dd:c5:88:83:a8:a9:3e:7d:e5:61: 78:0b:77:16:fc:c3:a9:74:b6:77:91:dd:2e:2c:a7:9e:2e:e1: bb:42:83:11 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MUUwMjExMC8GA1UEBRMoOTBENTk4NEZDNzZDNkFGMzc1OUZFQUFBRUUyQzc1OEE1 NDY4MjMxMTAeFw0yNjA0MTcwODQ5NTVaFw0yNjA0MjQwODQ5NTVaMBgxFjAUBgNV BAMTDTY5ZTFmNDMzLWRlZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRt6Tbp8TAQ/XkcxDYkZ06BJmodt4hlriWF4fRbpvc+VddOyHJFdkP5qi4EQbv S6bz0FFDinjclSEDQwMT0pmkkxPtWEHyO4ChDotG4sNLeJgHQdWVFbOyCKr/gmVR FWhZmrXVL9cODiKbmAN653LLq9FDhQJcs40mW2hdgYVTi2ToXG1gTLur30BOyEmO NjpB9rS9EzUS8vGc8+bMxB16LaYj5w03gTQzOHyNEcXruZa4A3IPxn5wiH1RNpi2 YNbMREu/MsipZFpmBDaOE8wrSSvpwenoRjxuVwqDXYQUb8bcsGy3+gJkXq/l8ZOo KBeDftQPg2FpgliiomyhW0hbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUKcm2C2b5 SOa5ah/Bc8BOWcEBIaAwHwYDVR0jBBgwFoAUkNWYT8dsavN1n+qq7ix1ilRoIxEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxRTAyL0ExN0Y0QjRBMjlE MjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZOMW4tcXE3aXgxaWxSb0l4 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIva05XWVQ4ZHNhdk4xbi1xcTdpeDFpbFJvSXhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx RTAyL0ExN0Y0QjRBMjlEMjExRjFBMjYxNTg5Mzk3ODMzNzczL2tOV1lUOGRzYXZO MW4tcXE3aXgxaWxSb0l4RS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbomOG58SxVB3KQ7vhBNjsty0xJPXivOzt3VcwSHL6mKoDkGPGEL2Hkc7OUxcM t+jp6fQBA/oKTL/+93F1nm93C8xaJpEWjIjzk9LjWoixXS+2NP/NnbnkMBGJ6Dys wnJmh40gX7F5ZFfh6AgOgI54ccuIFl7+Ty+Tuexum8gdlMaHIC80qht4kq0k732a Wf2sg3hqIwVS8SkV/zfURzlkUviKQE+v0leOYUSUua3+BwqosRFYo+nTDpaIlK+X 33BCpO7Hl7774yyKj5Zd2vdwv6RPKNtITRKyQE5Hwpz0N93FiIOoqT595WF4C3cW /MOpdLZ3kd0uLKeeLuG7QoMR -----END CERTIFICATE-----Generated at Fri Apr 17 13:01:56 2026 by rpki-client