$ rpki-client -vvf rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft File: 4lNNJseMlwF5CZZDjBFBCCVHdqo.mft (raw, json) Hash identifier: Zw0y7+YKQuc4qlKxG8LARzc/ajL9kO+n45Pe3TR5oG0= Subject key identifier: 88:46:AA:AC:2F:3E:52:33:A0:3F:52:B1:26:1D:27:F9:AE:75:66:49 Authority key identifier: E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA Certificate issuer: /CN=A9127E99/serialNumber=E2534D26C78C9701790996438C114108254776AA Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft Manifest number: 027A Signing time: Fri 17 Apr 2026 01:45:59 +0000 Manifest this update: Fri 17 Apr 2026 01:45:58 +0000 Manifest next update: Fri 24 Apr 2026 01:45:58 +0000 Files and hashes: 1: 4lNNJseMlwF5CZZDjBFBCCVHdqo.crl (hash: nZeC4QI84i6kahPUMap+Go7mR6QAypW8zCprkXo/qFI=) 2: 3AA7BED6ECBA11EE8736F274C4F9AE02.roa (hash: bytZ59Ia8ZFaLY4XNox1TiPwLTz6zD1b+H+2egXVeZ0=) 3: 64D427963D8B11EE80D1E96DC4F9AE02.roa (hash: poF5iER85gmZG51MJJTxxsmqAYXARy0knubqmMXJg/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127E99, serialNumber=E2534D26C78C9701790996438C114108254776AA Validity Not Before: Apr 17 01:45:58 2026 GMT Not After : Apr 24 01:45:58 2026 GMT Subject: CN=69e190d6-36dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:04:ec:c6:0b:00:44:04:66:9f:c4:5e:d8:bc: 56:c0:f3:42:17:0c:b6:22:5d:ed:99:05:e4:14:48: f6:3a:a8:01:58:e8:ee:ab:3d:7d:ef:9a:e6:de:d5: 27:fb:4e:d1:1c:77:fc:1c:60:96:cd:56:e7:2f:d0: 5b:86:9b:9c:00:7e:44:6d:bb:0b:5a:03:c7:8f:73: f2:e2:c7:b1:5a:1c:50:84:19:cf:a8:38:be:90:ed: 27:bd:2c:7f:5b:f1:2f:b3:64:c9:c6:74:ba:fe:5c: 42:9c:dd:bb:6a:0d:09:4f:91:75:44:b2:af:9d:8b: ed:be:87:0b:a8:a5:5d:c5:34:58:4a:a2:67:29:69: 92:40:db:8c:94:bd:7e:85:d1:15:e9:f7:56:1e:4a: da:60:8b:5c:e0:ee:c2:94:06:b0:fa:e9:dc:01:55: 48:43:94:6e:09:83:73:2f:c1:30:82:91:71:b3:8e: de:4b:5f:7a:cd:59:3f:9f:e2:51:84:fa:10:67:ad: 3e:1e:7d:e4:1d:e9:68:f0:1d:c0:4d:bb:9a:c3:4d: 00:c6:62:fb:8b:33:51:00:41:d0:f9:9d:b3:01:6a: 81:7b:06:d9:73:87:0b:65:95:63:bb:8e:8d:d1:03: 92:fd:35:e0:3e:8f:74:40:3a:53:e4:a1:38:34:c5: a3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:46:AA:AC:2F:3E:52:33:A0:3F:52:B1:26:1D:27:F9:AE:75:66:49 X509v3 Authority Key Identifier: keyid:E2:53:4D:26:C7:8C:97:01:79:09:96:43:8C:11:41:08:25:47:76:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4lNNJseMlwF5CZZDjBFBCCVHdqo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127E99/0ACE19B07A8511EDAD692887C4F9AE02/4lNNJseMlwF5CZZDjBFBCCVHdqo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:e5:dc:2d:aa:67:25:fb:d8:cf:77:c1:d0:17:39:47:0c:87: f4:a3:2e:8f:51:01:51:9d:8b:32:71:84:26:18:45:77:41:79: 4e:d4:b4:67:67:e7:2f:03:2b:4a:28:95:27:cb:f0:87:cd:34: 1f:43:75:11:0f:99:33:ed:a9:40:ae:c8:68:75:8a:02:9c:c2: 5e:96:a2:b1:d8:80:d4:85:2c:1f:fc:ec:b2:51:c7:0f:a8:6e: 3a:47:e8:30:8e:2f:57:0a:a4:08:b4:73:6b:28:a9:93:a7:92: 5a:cd:e2:29:6a:1f:b3:88:32:bf:ad:5c:ec:6d:57:d0:c8:d6: 42:f5:d4:96:9f:cb:1f:b7:2c:1f:56:51:b1:ad:2e:d6:0d:60: e0:a1:0a:6b:68:34:cf:c4:ef:b4:28:3d:1f:43:45:f7:70:a9: 87:eb:25:95:fb:43:d0:e0:39:80:d3:62:e5:0d:1e:dd:0b:30: 85:fc:23:84:c6:db:b4:b7:8d:eb:d8:99:07:72:20:70:70:84: 50:1b:95:b8:c3:1e:d9:6d:84:9e:41:0f:42:bc:f5:df:45:90: 12:31:0f:60:d8:b1:f8:7e:cd:f8:1b:8e:99:1a:f9:66:77:e4: 95:bb:84:69:6f:78:67:84:3f:47:4b:db:98:1b:67:0e:46:1e: d5:e0:21:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdFOTkxMTAvBgNVBAUTKEUyNTM0RDI2Qzc4Qzk3MDE3OTA5OTY0MzhDMTE0MTA4 MjU0Nzc2QUEwHhcNMjYwNDE3MDE0NTU4WhcNMjYwNDI0MDE0NTU4WjAYMRYwFAYD VQQDEw02OWUxOTBkNi0zNmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwTsxgsARARmn8Re2LxWwPNCFwy2Il3tmQXkFEj2OqgBWOjuqz1975rm3tUn +07RHHf8HGCWzVbnL9BbhpucAH5EbbsLWgPHj3Py4sexWhxQhBnPqDi+kO0nvSx/ W/Evs2TJxnS6/lxCnN27ag0JT5F1RLKvnYvtvocLqKVdxTRYSqJnKWmSQNuMlL1+ hdEV6fdWHkraYItc4O7ClAaw+uncAVVIQ5RuCYNzL8EwgpFxs47eS196zVk/n+JR hPoQZ60+Hn3kHelo8B3ATbuaw00AxmL7izNRAEHQ+Z2zAWqBewbZc4cLZZVju46N 0QOS/TXgPo90QDpT5KE4NMWjhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhGqqwv PlIzoD9SsSYdJ/mudWZJMB8GA1UdIwQYMBaAFOJTTSbHjJcBeQmWQ4wRQQglR3aq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0U5OS8wQUNFMTlCMDdB ODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3RjVDWlpEakJGQkNDVkhk cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRsTk5Kc2VNbHdGNUNaWkRqQkZCQ0NWSGRxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0U5OS8wQUNFMTlCMDdBODUxMUVEQUQ2OTI4ODdDNEY5QUUwMi80bE5OSnNlTWx3 RjVDWlpEakJGQkNDVkhkcW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg+XcLapnJfvYz3fB0Bc5RwyH9KMuj1EBUZ2LMnGEJhhFd0F5TtS0Z2fnLwMr SiiVJ8vwh800H0N1EQ+ZM+2pQK7IaHWKApzCXpaisdiA1IUsH/zsslHHD6huOkfo MI4vVwqkCLRzayipk6eSWs3iKWofs4gyv61c7G1X0MjWQvXUlp/LH7csH1ZRsa0u 1g1g4KEKa2g0z8TvtCg9H0NF93Cph+sllftD0OA5gNNi5Q0e3QswhfwjhMbbtLeN 69iZB3IgcHCEUBuVuMMe2W2EnkEPQrz130WQEjEPYNix+H7N+BuOmRr5ZnfklbuE aW94Z4Q/R0vbmBtnDkYe1eAhJA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:21:58 2026 by rpki-client