$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft File: _OAw6zAgOlEM28-cfDpDADu9-mI.mft (raw, json) Hash identifier: BC7Eh5DBqm8VnkP8FyTkVBTVnTV6Ksrz82FfvEpuEjw= Subject key identifier: AD:59:A5:A9:AB:8B:06:11:53:CD:50:CB:FC:73:36:4A:5D:6D:6C:A6 Authority key identifier: FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 Certificate issuer: /CN=A9127E8D/serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Certificate serial: 01A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft Manifest number: 01A3 Signing time: Fri 17 Apr 2026 03:55:59 +0000 Manifest this update: Fri 17 Apr 2026 03:55:58 +0000 Manifest next update: Fri 24 Apr 2026 03:55:58 +0000 Files and hashes: 1: _OAw6zAgOlEM28-cfDpDADu9-mI.crl (hash: lZM1watic+CIZU2mZkgdZTAFzZDWQT4ckAFRK2koLBI=) 2: D13703C6BF4611EE9ECAAC65C4F9AE02.roa (hash: kEA6yeUhDISU7WpJDe7H86w819sEogR4lALDsAB0ROU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 424 (0x1a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E8D, serialNumber=FCE030EB30203A510CDBCF9C7C3A43003BBDFA62 Validity Not Before: Apr 17 03:55:58 2026 GMT Not After : Apr 24 03:55:58 2026 GMT Subject: CN=69e1af4f-70da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6c:fc:46:51:db:8e:50:e7:df:62:e9:0a:72: ec:d7:07:af:8c:bc:b9:d7:cb:fd:49:64:2a:48:10: 37:fc:af:5d:89:f5:c7:15:e1:b1:97:9d:3b:34:c5: 37:2d:8f:64:9b:2e:6e:93:63:7b:d6:2e:68:5d:99: 95:36:f3:8a:af:7d:5c:4d:d1:2b:69:6d:ca:b6:72: cc:6c:98:2c:1b:9e:9f:73:0f:66:78:57:da:33:3a: a6:df:17:63:81:a1:fc:9d:0a:94:d3:7b:84:c7:2d: 5a:85:89:69:23:2d:e8:60:d1:53:dd:7f:f9:4c:32: 4a:f4:e7:c3:c0:e7:f6:69:7d:2b:6b:e3:43:d2:9c: e4:f6:96:4b:4b:04:00:ff:fe:63:25:5e:55:87:93: eb:17:0c:e1:d1:3f:9d:96:ac:b7:94:e3:b3:e5:a0: 2e:2c:01:fc:26:c7:10:f6:f2:f8:fa:95:f6:04:c4: 46:db:b6:d5:e9:54:03:45:22:59:cf:8f:e3:99:c2: 35:27:2d:73:33:9b:82:3d:ec:3e:4f:2e:4a:d6:81: 94:70:33:cc:84:36:59:cf:c9:49:9b:f1:5a:5d:b6: a2:5e:10:ee:70:8b:6f:0a:48:01:5d:6e:40:d2:86: 23:9e:b6:5f:c1:9e:70:e9:1e:c9:2f:d9:3f:42:cf: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:59:A5:A9:AB:8B:06:11:53:CD:50:CB:FC:73:36:4A:5D:6D:6C:A6 X509v3 Authority Key Identifier: keyid:FC:E0:30:EB:30:20:3A:51:0C:DB:CF:9C:7C:3A:43:00:3B:BD:FA:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_OAw6zAgOlEM28-cfDpDADu9-mI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E8D/64B16A98BF4611EEB1B3D764C4F9AE02/_OAw6zAgOlEM28-cfDpDADu9-mI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:f6:ce:35:c1:d9:fb:42:62:7b:7a:da:a9:dc:9c:76:97:fb: 1c:8e:98:bb:58:dc:d6:81:64:c9:54:be:51:7d:f7:bb:08:66: 42:bb:a6:e7:ea:d2:c7:73:5d:13:c0:24:6f:c3:28:57:a9:55: d5:9e:07:55:b4:33:24:6a:9f:d4:32:50:86:a5:ac:00:28:7d: 36:60:5b:8a:7b:82:71:2c:cf:40:e2:86:fd:78:50:d9:55:31: f4:a5:0e:87:08:de:b2:7e:0f:6a:18:ef:10:64:05:66:31:84: 23:63:47:53:d3:b0:fa:58:af:d3:4c:a9:76:83:f6:0f:9e:b2: 9b:9f:51:9b:ff:c1:40:9e:5f:51:76:7c:87:c5:10:34:27:7e: 50:34:f9:02:d7:40:39:0d:2e:f4:b1:59:3b:f7:10:21:cd:ba: 4b:fc:5b:07:ac:23:5c:70:0f:b3:81:fd:76:5a:88:cd:3f:7c: e0:94:5f:42:0d:d5:5d:8c:a1:04:61:24:da:f2:f9:88:1d:bc: 20:98:5b:c9:88:fd:69:6c:b9:9c:c7:6b:ca:30:3c:38:48:cd: 4e:ce:9f:d6:0f:44:17:12:8a:bf:ce:a5:65:b6:55:67:04:24: c9:5a:b5:87:8c:0a:40:06:45:1e:16:2b:f5:6b:42:63:74:51: cd:bd:6a:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAagwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOEQxMTAvBgNVBAUTKEZDRTAzMEVCMzAyMDNBNTEwQ0RCQ0Y5QzdDM0E0MzAw M0JCREZBNjIwHhcNMjYwNDE3MDM1NTU4WhcNMjYwNDI0MDM1NTU4WjAYMRYwFAYD VQQDEw02OWUxYWY0Zi03MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Wz8RlHbjlDn32LpCnLs1wevjLy518v9SWQqSBA3/K9difXHFeGxl507NMU3 LY9kmy5uk2N71i5oXZmVNvOKr31cTdEraW3KtnLMbJgsG56fcw9meFfaMzqm3xdj gaH8nQqU03uExy1ahYlpIy3oYNFT3X/5TDJK9OfDwOf2aX0ra+ND0pzk9pZLSwQA //5jJV5Vh5PrFwzh0T+dlqy3lOOz5aAuLAH8JscQ9vL4+pX2BMRG27bV6VQDRSJZ z4/jmcI1Jy1zM5uCPew+Ty5K1oGUcDPMhDZZz8lJm/FaXbaiXhDucItvCkgBXW5A 0oYjnrZfwZ5w6R7JL9k/Qs8PLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK1Zpamr iwYRU81Qy/xzNkpdbWymMB8GA1UdIwQYMBaAFPzgMOswIDpRDNvPnHw6QwA7vfpi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U4RC82NEIxNkE5OEJG NDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09sRU0yOC1jZkRwREFEdTkt bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19PQXc2ekFnT2xFTTI4LWNmRHBEQUR1OS1tSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U4RC82NEIxNkE5OEJGNDYxMUVFQjFCM0Q3NjRDNEY5QUUwMi9fT0F3NnpBZ09s RU0yOC1jZkRwREFEdTktbUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtPbONcHZ+0Jie3raqdycdpf7HI6Yu1jc1oFkyVS+UX33uwhmQrum5+rSx3Nd E8Akb8MoV6lV1Z4HVbQzJGqf1DJQhqWsACh9NmBbinuCcSzPQOKG/XhQ2VUx9KUO hwjesn4PahjvEGQFZjGEI2NHU9Ow+liv00ypdoP2D56ym59Rm//BQJ5fUXZ8h8UQ NCd+UDT5AtdAOQ0u9LFZO/cQIc26S/xbB6wjXHAPs4H9dlqIzT984JRfQg3VXYyh BGEk2vL5iB28IJhbyYj9aWy5nMdryjA8OEjNTs6f1g9EFxKKv86lZbZVZwQkyVq1 h4wKQAZFHhYr9WtCY3RRzb1qvw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:48:39 2026 by rpki-client