$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft File: CStU0vnpbT_OHwwNuzGxuCyNLOA.mft (raw, json) Hash identifier: 4u7aT/fiQI70FVJWleAML+hfuwzvHcDkIYwM7sS4KAc= Subject key identifier: 73:8D:E8:64:89:5A:F7:17:C0:E1:6F:36:D4:64:AA:83:62:64:D3:91 Authority key identifier: 09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 Certificate issuer: /CN=A9122EA2/serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 01:49:58 +0000 Manifest this update: Fri 17 Apr 2026 01:49:58 +0000 Manifest next update: Fri 24 Apr 2026 01:49:58 +0000 Files and hashes: 1: CStU0vnpbT_OHwwNuzGxuCyNLOA.crl (hash: VlfkKpyvvSQ6kpMCe93OOBxX7fENNjvcLtQxI4wM/vU=) 2: C20F71E0992A11EEBDE4AF84C4F9AE02.roa (hash: ZBpZFHSjfj1bISXLZ4G9TvJh+gywnnw40Zr1cDFnGAA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:49:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EA2, serialNumber=092B54D2F9E96D3FCE1F0C0DBB31B1B82C8D2CE0 Validity Not Before: Apr 17 01:49:58 2026 GMT Not After : Apr 24 01:49:58 2026 GMT Subject: CN=69e191c6-41df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:b7:a5:4c:29:b2:a8:88:27:a4:6c:05:fc: 3e:d8:57:cf:e4:71:41:71:07:b5:77:9c:64:49:00: e3:e7:04:72:20:bc:46:38:4d:d7:07:c2:93:5b:44: 8a:d8:23:06:aa:c1:1f:d4:bf:74:26:97:ea:a1:f9: 17:71:9b:f1:93:74:58:27:cb:93:39:9a:df:e6:a9: 56:3c:79:72:b1:66:8b:ee:77:ff:3e:60:4a:19:ed: f3:89:ea:07:b2:39:de:7d:75:99:f0:47:bc:b9:3a: 20:5d:70:87:ba:31:67:c9:07:7e:47:4b:b8:07:d2: 78:a0:46:ad:4d:c7:1a:51:84:32:2d:c0:53:cb:56: b6:21:31:a9:80:2b:a3:9c:50:64:39:aa:03:26:bd: 76:ee:ce:4b:09:3d:52:0f:bd:db:61:a2:92:1e:d1: d5:ea:f5:67:64:d2:7a:8f:cc:c6:60:1a:9c:4c:94: b8:f8:24:48:fe:75:6e:7b:be:c1:15:f1:64:41:ba: 16:45:99:25:22:e0:9e:8e:0a:da:5d:2f:31:43:64: 8c:1e:60:8a:93:f1:bc:8b:21:62:15:f2:b4:d7:16: 43:ac:c8:05:62:0a:9f:68:b5:54:64:a6:07:f3:e0: 9d:69:57:f8:1e:79:eb:a0:7a:06:99:48:75:e1:7a: b7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8D:E8:64:89:5A:F7:17:C0:E1:6F:36:D4:64:AA:83:62:64:D3:91 X509v3 Authority Key Identifier: keyid:09:2B:54:D2:F9:E9:6D:3F:CE:1F:0C:0D:BB:31:B1:B8:2C:8D:2C:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CStU0vnpbT_OHwwNuzGxuCyNLOA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EA2/15253414856311ED82FB102DC4F9AE02/CStU0vnpbT_OHwwNuzGxuCyNLOA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:61:79:44:83:6b:93:8f:79:81:55:ee:c0:f4:0a:3e:ef:80: 4d:70:94:da:d0:76:9f:38:70:c0:28:c1:77:07:bd:99:8c:16: 7e:5d:00:ed:19:28:90:30:93:4b:e8:8c:6e:42:9b:b0:cc:4a: 0a:30:b2:b4:74:16:91:9f:2b:7f:ac:71:9b:37:7b:4f:e3:32: 3d:bd:35:6e:52:2a:58:4b:69:de:e2:d2:75:4b:be:66:d3:71: 9d:32:c7:38:91:e4:f0:e5:9d:60:c7:d7:84:dd:04:bc:f7:6c: ec:5d:7e:a6:59:c1:ff:f8:8d:15:1b:37:7d:ea:16:c8:49:da: ae:5d:46:6f:d9:b3:8f:c4:ee:6f:a2:b1:77:96:ee:f7:b8:d3: 43:41:48:38:a3:ce:60:20:70:e6:0c:4d:53:17:ed:55:9a:96: 79:1f:cb:0d:b9:8e:af:43:6d:72:55:fd:bc:a7:80:27:2d:4b: b3:d0:4b:3e:95:41:e2:57:7a:d2:33:13:2b:7c:4d:df:35:a8: 2b:15:6a:bc:8d:ed:d3:91:3f:6e:27:67:21:e2:ed:92:bb:22: f5:67:7a:58:03:2f:c3:d1:cf:50:8a:ab:da:90:89:4f:80:cc: 28:4a:c4:b6:8d:19:d4:a1:84:12:fd:a7:30:f1:75:ec:b2:0b: 94:7a:14:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQTIxMTAvBgNVBAUTKDA5MkI1NEQyRjlFOTZEM0ZDRTFGMEMwREJCMzFCMUI4 MkM4RDJDRTAwHhcNMjYwNDE3MDE0OTU4WhcNMjYwNDI0MDE0OTU4WjAYMRYwFAYD VQQDEw02OWUxOTFjNi00MWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeu3pUwpsqiIJ6RsBfw+2FfP5HFBcQe1d5xkSQDj5wRyILxGOE3XB8KTW0SK 2CMGqsEf1L90JpfqofkXcZvxk3RYJ8uTOZrf5qlWPHlysWaL7nf/PmBKGe3zieoH sjnefXWZ8Ee8uTogXXCHujFnyQd+R0u4B9J4oEatTccaUYQyLcBTy1a2ITGpgCuj nFBkOaoDJr127s5LCT1SD73bYaKSHtHV6vVnZNJ6j8zGYBqcTJS4+CRI/nVue77B FfFkQboWRZklIuCejgraXS8xQ2SMHmCKk/G8iyFiFfK01xZDrMgFYgqfaLVUZKYH 8+CdaVf4HnnroHoGmUh14Xq3PQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHON6GSJ WvcXwOFvNtRkqoNiZNORMB8GA1UdIwQYMBaAFAkrVNL56W0/zh8MDbsxsbgsjSzg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVBMi8xNTI1MzQxNDg1 NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJUX09Id3dOdXpHeHVDeU5M T0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NTdFUwdm5wYlRfT0h3d051ekd4dUN5TkxPQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVBMi8xNTI1MzQxNDg1NjMxMUVEODJGQjEwMkRDNEY5QUUwMi9DU3RVMHZucGJU X09Id3dOdXpHeHVDeU5MT0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZGF5RINrk495gVXuwPQKPu+ATXCU2tB2nzhwwCjBdwe9mYwWfl0A7RkokDCT S+iMbkKbsMxKCjCytHQWkZ8rf6xxmzd7T+MyPb01blIqWEtp3uLSdUu+ZtNxnTLH OJHk8OWdYMfXhN0EvPds7F1+plnB//iNFRs3feoWyEnarl1Gb9mzj8Tub6Kxd5bu 97jTQ0FIOKPOYCBw5gxNUxftVZqWeR/LDbmOr0NtclX9vKeAJy1Ls9BLPpVB4ld6 0jMTK3xN3zWoKxVqvI3t05E/bidnIeLtkrsi9Wd6WAMvw9HPUIqr2pCJT4DMKErE to0Z1KGEEv2nMPF17LILlHoUUA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:25:21 2026 by rpki-client