$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: e17qAhBTvTNhtI9cWK2QppB0Y9ryCvDa89uZCxyPWTk= Subject key identifier: 92:25:F2:9E:BE:DB:FB:0D:13:55:CA:34:EB:E6:6D:BC:23:B1:CD:DA Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 0422 Signing time: Fri 17 Apr 2026 00:23:19 +0000 Manifest this update: Fri 17 Apr 2026 00:23:19 +0000 Manifest next update: Fri 24 Apr 2026 00:23:19 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: K4EWcnjr0aYFoCfYEShGnplDke0gXqVXczloHnqqSJI=) 2: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: UcvM8IWUVo62fNbVlItsUgMGb0u4yppk8S9qIfLe7pI=) 3: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: wHIEc0JT3olfj86i79xTv/WCaO/VfEKTQ7Om7UWFzE4=) 4: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: kHDQejmqjPobOzP4RpQqwvEFOqclUXhG9PAka+bN9iQ=) 5: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: XKoeDmYjE0yysdP5l673w8or1oKAp76jZNEv1XZ67fc=) 6: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: bujDqUQBYDEOHRylquQ9lrhwkzTG5J4D6+3AWwTVyYY=) 7: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: c8UFaho10sHWq4V66Fx+BVNv/vFU1ajRLCGfXC+In2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:23:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Apr 17 00:23:19 2026 GMT Not After : Apr 24 00:23:19 2026 GMT Subject: CN=69e17d77-60f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:45:fa:e6:9f:30:6b:e7:7f:d2:75:a4:14: 34:18:b9:e2:dc:15:12:fa:21:54:77:c3:d6:df:3b: 94:e1:f5:3d:e8:c7:f1:98:59:08:e8:58:67:52:a9: 98:3f:fb:0c:4d:65:ed:8e:5f:02:1c:75:b9:0f:5d: 66:be:7d:dd:a7:ea:1a:f9:18:ce:27:f6:f1:ec:25: 37:ef:9f:71:6f:1a:05:88:cf:dd:b9:45:a6:2d:72: 94:10:09:f1:32:fa:f3:9b:d0:d4:dc:ee:3b:9a:a2: 80:42:df:02:18:40:2a:06:58:9f:8b:f4:24:ca:d9: 4a:9d:74:2d:d0:4b:79:a0:85:fe:69:25:f7:3f:b9: a7:d3:89:9f:e1:3d:4a:0e:62:ad:9b:4c:88:be:2a: 53:79:78:a5:d7:01:d7:99:a0:6a:67:a8:8a:42:fd: 6c:b9:1b:35:19:81:2c:94:74:56:90:6e:a0:f3:ba: 44:4c:8a:3f:bb:dd:f4:cf:a2:de:76:c1:bc:3a:9e: 7a:45:08:1f:03:1e:54:d5:83:f4:84:df:3d:c7:f0: a2:84:bd:4c:96:85:95:40:c1:20:d8:c3:2a:2f:3b: 07:c7:62:0b:10:8e:d5:8e:81:b0:0e:dc:27:5d:00: 43:ea:b6:b0:c9:fd:b9:c1:c4:8d:46:5e:fb:5b:54: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:25:F2:9E:BE:DB:FB:0D:13:55:CA:34:EB:E6:6D:BC:23:B1:CD:DA X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:7e:fc:dd:7b:fe:cf:d1:e0:2e:20:f8:cd:fe:0d:54:bb:f8: a2:f3:83:05:75:e1:f7:df:72:1a:fb:d5:fb:e6:aa:61:6c:a1: 3a:0c:b4:3f:ba:79:e2:45:1d:48:36:89:c4:da:39:cd:51:10: 0d:a3:29:5f:b1:18:08:45:3f:c6:f3:70:45:87:00:31:b5:e9: 63:9b:46:ec:c6:f2:e5:18:07:6b:98:48:a1:b6:ce:5f:0f:ab: 4c:0a:c6:34:60:df:81:70:73:a2:4d:a2:1a:f2:c2:8b:da:dd: 42:4d:98:10:96:05:2b:58:3b:2d:56:33:8b:91:11:17:9d:5e: 01:39:0e:1b:de:10:87:11:25:63:72:98:9c:a1:2b:8c:4d:13: 90:8b:72:b3:d0:6f:0a:43:c3:20:4d:64:ae:6e:76:3f:e8:8e: c2:87:98:29:f7:ec:3c:6e:c9:d7:48:05:9d:04:be:5e:ca:c5: 85:d5:4e:e2:62:d2:96:82:6f:59:8f:21:cf:38:42:45:77:6e: 62:bd:2a:84:2b:9c:dc:ad:cc:3b:df:58:69:ca:6a:1a:1e:e7: dd:03:54:ff:50:34:c0:58:28:c2:e8:ec:9c:50:45:0b:69:bc: 0a:71:98:44:0d:f5:b0:89:d1:99:1b:3e:57:4f:8f:d1:e3:2f: b3:a4:7b:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwNDE3MDAyMzE5WhcNMjYwNDI0MDAyMzE5WjAYMRYwFAYD VQQDEw02OWUxN2Q3Ny02MGY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjwJF+uafMGvnf9J1pBQ0GLni3BUS+iFUd8PW3zuU4fU96MfxmFkI6FhnUqmY P/sMTWXtjl8CHHW5D11mvn3dp+oa+RjOJ/bx7CU3759xbxoFiM/duUWmLXKUEAnx Mvrzm9DU3O47mqKAQt8CGEAqBlifi/QkytlKnXQt0Et5oIX+aSX3P7mn04mf4T1K DmKtm0yIvipTeXil1wHXmaBqZ6iKQv1suRs1GYEslHRWkG6g87pETIo/u930z6Le dsG8Op56RQgfAx5U1YP0hN89x/CihL1MloWVQMEg2MMqLzsHx2ILEI7VjoGwDtwn XQBD6rawyf25wcSNRl77W1QYRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJIl8p6+ 2/sNE1XKNOvmbbwjsc3aMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAw3783Xv+z9HgLiD4zf4NVLv4ovODBXXh999yGvvV++aqYWyhOgy0P7p54kUd SDaJxNo5zVEQDaMpX7EYCEU/xvNwRYcAMbXpY5tG7Mby5RgHa5hIobbOXw+rTArG NGDfgXBzok2iGvLCi9rdQk2YEJYFK1g7LVYzi5ERF51eATkOG94QhxElY3KYnKEr jE0TkItys9BvCkPDIE1krm52P+iOwoeYKffsPG7J10gFnQS+XsrFhdVO4mLSloJv WY8hzzhCRXduYr0qhCuc3K3MO99YacpqGh7n3QNU/1A0wFgowujsnFBFC2m8CnGY RA31sInRmRs+V0+P0eMvs6R7JQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:25:05 2026 by rpki-client