$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: SJMWsDXT71xf3QSczpzfPJQcEcdXKF9t9MKxba8FxzY= Subject key identifier: FD:59:6E:F6:BB:D5:89:95:D8:90:D6:8D:35:13:7C:4F:52:8F:4D:89 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 97 Signing time: Wed 15 Apr 2026 07:01:12 +0000 Manifest this update: Wed 15 Apr 2026 07:01:11 +0000 Manifest next update: Wed 22 Apr 2026 07:01:11 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: UB5YZLy0FzDylSvXceQu/qhU8RFY1YM9qAtATjl1/mo=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Apr 15 07:01:11 2026 GMT Not After : Apr 22 07:01:11 2026 GMT Subject: CN=69df37b7-9ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:21:2a:98:e0:d6:35:b5:09:a0:ef:4b:8f:d6: a5:cf:63:e5:a1:c7:3d:56:97:29:3d:b6:4b:1c:a0: 11:09:80:a0:dd:8a:20:83:56:27:44:87:87:ce:fe: 89:98:37:ab:ff:28:2d:e3:af:b2:8f:c3:fc:4e:fd: f8:9e:f5:4c:83:e2:fc:40:62:48:4b:49:07:18:bd: b3:e5:d1:43:91:34:1a:2a:41:c8:18:6a:71:4d:66: 9f:e7:50:fc:ab:d2:ca:13:fb:09:52:20:4a:bc:b8: 25:eb:62:92:20:db:4d:1d:70:2f:ff:ab:cf:0b:92: f8:7e:93:a4:73:cb:f7:22:10:24:41:df:a8:3c:05: f1:50:5c:3c:b5:dc:ea:de:4a:04:0d:fe:93:0c:d9: 2a:c4:6e:e5:79:8a:cd:d1:49:9d:00:a2:27:04:3d: b6:4f:ab:6e:f0:65:98:61:96:e8:13:99:e5:35:79: 45:ac:e3:42:c4:b6:e6:8e:40:dd:55:8f:39:92:9b: 99:f3:f0:26:ed:7f:ce:56:be:f6:23:d6:35:93:38: f1:fb:d8:8e:ed:ae:ec:83:9f:fc:70:46:70:42:46: 4b:5c:82:3e:07:56:53:0e:55:a8:c4:d1:24:73:0e: 06:5e:28:19:d4:05:ef:84:b7:fc:a4:34:8f:22:58: e6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:59:6E:F6:BB:D5:89:95:D8:90:D6:8D:35:13:7C:4F:52:8F:4D:89 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7c:f9:e3:e0:e4:8b:d2:a2:e3:02:64:18:64:e8:c5:ff:0c: e9:14:b8:1c:1e:ab:fe:b8:40:e0:33:40:d6:d9:46:5d:34:6a: a7:7d:de:14:55:aa:69:09:92:6c:1f:58:5f:16:83:46:08:c6: 56:f3:32:7a:2b:28:44:d4:b9:40:11:a7:b5:76:73:8d:2f:89: 86:f0:a5:8f:41:42:03:95:e4:61:41:ce:67:41:df:5b:61:da: 6a:0e:9f:7d:43:92:6f:a7:54:44:45:3c:d2:50:d4:07:64:25: 0c:02:d1:fa:66:23:46:75:73:52:f7:e2:29:f6:2d:d8:95:e1: 8c:04:74:31:8b:7f:22:5c:02:fc:ce:53:c3:12:be:cb:ad:bb: 8b:16:d7:a8:7b:b3:96:72:12:b0:78:79:a8:b1:c5:8f:60:b2: 1a:d1:26:21:0f:28:d6:d5:ba:34:82:f6:6c:51:e5:26:da:94: 7d:01:3d:7f:f5:5d:ef:9e:6d:72:cd:f1:7b:71:94:61:34:b2: cb:4c:4a:06:2e:88:bf:2f:00:22:63:b0:d7:2e:6c:f1:95:62: fd:4b:01:b1:1c:a4:be:46:0c:67:a5:3a:04:3b:a1:6f:7d:06: 43:29:a8:d1:c8:40:0a:a1:9b:1b:6a:67:e8:6a:0c:66:1a:5d: d1:de:ed:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4 RUMyQTMyODkwHhcNMjYwNDE1MDcwMTExWhcNMjYwNDIyMDcwMTExWjAYMRYwFAYD VQQDEw02OWRmMzdiNy05ZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryEqmODWNbUJoO9Lj9alz2Plocc9VpcpPbZLHKARCYCg3Yogg1YnRIeHzv6J mDer/ygt46+yj8P8Tv34nvVMg+L8QGJIS0kHGL2z5dFDkTQaKkHIGGpxTWaf51D8 q9LKE/sJUiBKvLgl62KSINtNHXAv/6vPC5L4fpOkc8v3IhAkQd+oPAXxUFw8tdzq 3koEDf6TDNkqxG7leYrN0UmdAKInBD22T6tu8GWYYZboE5nlNXlFrONCxLbmjkDd VY85kpuZ8/Am7X/OVr72I9Y1kzjx+9iO7a7sg5/8cEZwQkZLXII+B1ZTDlWoxNEk cw4GXigZ1AXvhLf8pDSPIljmgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP1Zbva7 1YmV2JDWjTUTfE9Sj02JMB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4 REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf3z54+Dki9Ki4wJkGGToxf8M6RS4HB6r/rhA4DNA1tlGXTRqp33eFFWqaQmS bB9YXxaDRgjGVvMyeisoRNS5QBGntXZzjS+JhvClj0FCA5XkYUHOZ0HfW2Haag6f fUOSb6dUREU80lDUB2QlDALR+mYjRnVzUvfiKfYt2JXhjAR0MYt/IlwC/M5TwxK+ y627ixbXqHuzlnISsHh5qLHFj2CyGtEmIQ8o1tW6NIL2bFHlJtqUfQE9f/Vd755t cs3xe3GUYTSyy0xKBi6Ivy8AImOw1y5s8ZVi/UsBsRykvkYMZ6U6BDuhb30GQymo 0chACqGbG2pn6GoMZhpd0d7tYg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:57:11 2026 by rpki-client