$ rpki-client -vvf rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft File: PP5vPrHYknFeQTbpuoVrmPZxR7A.mft (raw, json) Hash identifier: dYIBhl+FuAvTCAEHmYG3nKccBPcS1FEC1Qm7j1LbwDE= Subject key identifier: 68:AE:B5:04:8D:12:50:32:09:0A:38:88:5F:3C:7E:88:A9:FA:54:7E Authority key identifier: 3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 Certificate issuer: /CN=A9122D89/serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Certificate serial: 084A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft Manifest number: 0841 Signing time: Thu 16 Apr 2026 20:47:57 +0000 Manifest this update: Thu 16 Apr 2026 20:47:56 +0000 Manifest next update: Thu 23 Apr 2026 20:47:56 +0000 Files and hashes: 1: PP5vPrHYknFeQTbpuoVrmPZxR7A.crl (hash: XhYVgltm8wIsj7STWTCBKTXd2deOlRZ1TyHicqs9wow=) 2: 7E8114F414E611EB82C98471C4F9AE02.roa (hash: 4jo636T6jYuAB4lWYCYJ4Jdk6gTR1xHLVvPQO5ElmxA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2122 (0x84a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122D89, serialNumber=3CFE6F3EB1D892715E4136E9BA856B98F67147B0 Validity Not Before: Apr 16 20:47:56 2026 GMT Not After : Apr 23 20:47:56 2026 GMT Subject: CN=69e14afd-7aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:5b:fc:ae:a9:91:b0:d2:e5:a2:f2:05:f1: 51:14:9b:c0:59:45:90:08:a3:ec:bd:70:30:54:7e: 4e:38:2d:75:b8:26:c2:1a:e1:d5:db:63:21:d6:21: 9b:92:b3:53:77:e5:5e:d1:df:d2:c4:ab:23:b0:d2: e5:fc:9a:51:c1:7b:22:c7:e2:a1:20:51:0c:1d:49: 49:6e:b1:40:ab:51:a9:7c:ea:e6:5a:30:19:5f:d6: 5a:5e:7a:e0:48:95:a0:f3:f0:b0:50:9b:df:72:9e: 8e:00:97:0e:d7:84:4f:0e:2b:f0:8e:11:39:bd:36: cb:33:0a:b4:0b:9e:5d:3e:72:4b:82:c7:b9:f4:a8: 69:f0:b2:57:ae:af:4e:1c:39:85:fb:4e:f3:22:62: 58:ff:a4:b6:c3:3c:63:31:f4:b8:79:d0:f0:37:10: d8:0f:93:92:f5:59:70:9b:37:a1:bc:d8:d9:65:76: 66:2b:a3:9b:be:05:d1:c2:e7:1b:1a:2b:c1:e3:00: 53:b7:24:95:f3:87:1a:1d:e1:2c:e4:72:dc:76:26: 26:cd:a7:a6:4d:28:59:29:52:c5:69:63:f1:b2:56: 6d:c3:07:b0:64:c1:37:ab:ba:34:f4:3f:6e:be:29: 1d:90:d9:9a:14:21:e5:97:91:51:b4:ce:74:75:58: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AE:B5:04:8D:12:50:32:09:0A:38:88:5F:3C:7E:88:A9:FA:54:7E X509v3 Authority Key Identifier: keyid:3C:FE:6F:3E:B1:D8:92:71:5E:41:36:E9:BA:85:6B:98:F6:71:47:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PP5vPrHYknFeQTbpuoVrmPZxR7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122D89/C6A4A5E2084411EB9C736514C4F9AE02/PP5vPrHYknFeQTbpuoVrmPZxR7A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:44:8c:f4:0b:d8:6b:36:f9:9d:6f:27:52:71:cd:62:33:d9: c5:a9:fe:a9:e3:70:60:81:f0:f4:09:5d:57:ce:dd:31:a8:85: 2d:bf:4c:21:9f:7b:34:90:ac:35:a1:47:21:99:27:2e:3d:d4: 5c:02:68:d0:71:14:01:61:4b:a2:f4:71:ba:40:5d:b3:e2:c3: b6:0a:8a:94:7e:43:c0:6e:f5:6f:e9:dc:15:7a:14:37:6b:05: c3:91:7b:15:06:93:3d:bb:bf:07:95:fe:9c:d3:f0:76:74:ed: ec:07:f4:48:dd:6b:f9:da:90:9e:a5:c8:7e:b7:37:ef:db:b4: b1:f5:60:a0:80:3d:dc:13:98:5d:f8:7b:83:f2:a6:dd:c1:42: 88:bc:01:d7:ed:78:38:32:27:4e:fd:40:cb:6a:77:e3:e5:8b: c1:96:a0:69:29:7d:2e:cd:dc:8f:0b:08:8d:d4:fc:37:e1:1b: 8d:1e:a4:8c:38:03:90:7d:a6:f0:9f:df:3d:7d:ab:fa:14:1d: 44:fa:30:f2:ab:08:4a:8c:e3:69:06:16:5b:31:78:88:98:19: 19:34:f0:f4:79:54:42:87:51:4f:21:35:62:f6:f9:4d:dc:1a: 8d:f0:df:1f:8a:14:48:f0:5d:ea:42:0a:84:c3:07:c1:8c:88: d8:fa:15:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJEODkxMTAvBgNVBAUTKDNDRkU2RjNFQjFEODkyNzE1RTQxMzZFOUJBODU2Qjk4 RjY3MTQ3QjAwHhcNMjYwNDE2MjA0NzU2WhcNMjYwNDIzMjA0NzU2WjAYMRYwFAYD VQQDEw02OWUxNGFmZC03YWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmFb/K6pkbDS5aLyBfFRFJvAWUWQCKPsvXAwVH5OOC11uCbCGuHV22Mh1iGb krNTd+Ve0d/SxKsjsNLl/JpRwXsix+KhIFEMHUlJbrFAq1GpfOrmWjAZX9ZaXnrg SJWg8/CwUJvfcp6OAJcO14RPDivwjhE5vTbLMwq0C55dPnJLgse59Khp8LJXrq9O HDmF+07zImJY/6S2wzxjMfS4edDwNxDYD5OS9VlwmzehvNjZZXZmK6ObvgXRwucb GivB4wBTtySV84caHeEs5HLcdiYmzaemTShZKVLFaWPxslZtwwewZME3q7o09D9u vikdkNmaFCHll5FRtM50dVhgCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGiutQSN ElAyCQo4iF88foip+lR+MB8GA1UdIwQYMBaAFDz+bz6x2JJxXkE26bqFa5j2cUew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkQ4OS9DNkE0QTVFMjA4 NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtuRmVRVGJwdW9Wcm1QWnhS N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BQNXZQckhZa25GZVFUYnB1b1ZybVBaeFI3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkQ4OS9DNkE0QTVFMjA4NDQxMUVCOUM3MzY1MTRDNEY5QUUwMi9QUDV2UHJIWWtu RmVRVGJwdW9Wcm1QWnhSN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ0SM9AvYazb5nW8nUnHNYjPZxan+qeNwYIHw9AldV87dMaiFLb9MIZ97NJCs NaFHIZknLj3UXAJo0HEUAWFLovRxukBds+LDtgqKlH5DwG71b+ncFXoUN2sFw5F7 FQaTPbu/B5X+nNPwdnTt7Af0SN1r+dqQnqXIfrc379u0sfVgoIA93BOYXfh7g/Km 3cFCiLwB1+14ODInTv1Ay2p34+WLwZagaSl9Ls3cjwsIjdT8N+EbjR6kjDgDkH2m 8J/fPX2r+hQdRPow8qsISozjaQYWWzF4iJgZGTTw9HlUQodRTyE1Yvb5TdwajfDf H4oUSPBd6kIKhMMHwYyI2PoVgg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:08 2026 by rpki-client