$ rpki-client -vvf rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft File: -Xh9LKFDLKbpMzLg7e9rB7JF17A.mft (raw, json) Hash identifier: PzEfYFo0NIGfR4aHI/ylb6H7lcMDdwCJZSk0dTFdpWg= Subject key identifier: 47:DC:30:4A:E7:D9:39:81:7F:E4:7D:3A:F4:30:1D:8C:F0:88:D1:0C Authority key identifier: F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 Certificate issuer: /CN=A912DA1F/serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Certificate serial: 08C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft Manifest number: 08B5 Signing time: Thu 16 Apr 2026 20:20:15 +0000 Manifest this update: Thu 16 Apr 2026 20:20:14 +0000 Manifest next update: Thu 23 Apr 2026 20:20:14 +0000 Files and hashes: 1: -Xh9LKFDLKbpMzLg7e9rB7JF17A.crl (hash: wE65T7nsuRAX8Et/RJmBvN1UNs3P2boQkvmam93HpS8=) 2: D6883996DABE11EAB12A5209C4F9AE02.roa (hash: D05It9UAiO51r8ILKVDfdiFJE2qz6LfsL6XWmNrhCuI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2240 (0x8c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DA1F, serialNumber=F9787D2CA1432CA6E93332E0EDEF6B07B245D7B0 Validity Not Before: Apr 16 20:20:14 2026 GMT Not After : Apr 23 20:20:14 2026 GMT Subject: CN=69e1447f-3db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:d6:81:ec:ea:b5:c6:11:bf:f7:8f:d1:93: 9d:e4:ec:cb:ff:35:be:be:2f:dd:e0:97:00:e9:28: 8f:2a:48:9c:b3:5a:ce:76:d6:4a:c9:a9:a9:8a:98: af:ee:04:d5:9d:53:e8:fd:6c:f7:6a:ab:22:fc:c5: ed:57:7d:16:36:ee:c7:4e:4b:0d:b6:2a:c3:ec:50: e8:4f:b1:34:0d:93:c8:f7:03:e1:d9:e1:85:5d:9b: ab:8c:3c:2f:e8:18:f8:fd:a3:22:42:52:3d:f7:0c: a2:ac:77:02:3a:37:eb:39:02:0e:7e:08:6a:13:0c: a1:c3:86:08:60:73:c7:c9:db:bc:a0:34:af:23:80: 03:5d:db:29:cf:19:3c:59:54:0c:a4:d4:d3:ad:ee: c2:57:84:ef:74:76:a1:53:58:6d:37:45:96:31:6a: 44:ce:d8:de:11:d3:5a:14:77:80:79:14:36:0f:f3: c0:c4:cc:c5:96:d2:3b:f5:25:b5:7e:b3:70:7e:97: 29:14:ca:8b:bc:b7:02:90:63:b6:76:ec:ed:b0:ba: 27:eb:07:ec:35:65:ce:fc:09:6e:1a:16:a3:93:cd: c4:8b:77:93:2d:5f:25:3c:c8:cc:4c:82:3a:46:ce: 72:ad:6c:d7:ca:62:ca:89:1b:b5:a6:52:74:76:57: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DC:30:4A:E7:D9:39:81:7F:E4:7D:3A:F4:30:1D:8C:F0:88:D1:0C X509v3 Authority Key Identifier: keyid:F9:78:7D:2C:A1:43:2C:A6:E9:33:32:E0:ED:EF:6B:07:B2:45:D7:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Xh9LKFDLKbpMzLg7e9rB7JF17A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DA1F/FB14A882DABC11EAA6202C85C4F9AE02/-Xh9LKFDLKbpMzLg7e9rB7JF17A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:76:38:6c:93:4b:75:cd:9b:47:92:e9:eb:b4:a7:77:cd:e8: 70:b5:1e:16:67:ba:ee:2e:a8:b1:49:1d:67:ee:0e:9f:f9:14: d8:64:95:d0:5f:7b:99:10:f1:91:39:df:a6:9b:ce:35:99:76: 3e:26:4a:d2:28:d1:70:1e:91:c9:fc:e6:26:96:24:8d:1f:9e: e4:b3:af:32:b1:19:d0:3d:57:c3:a8:bf:1c:4e:39:2c:11:c6: 8e:68:ef:26:81:04:36:37:04:ca:61:e9:2e:be:9a:fc:a4:25: 6e:1e:62:17:ba:62:e9:e9:05:85:b0:44:22:6f:14:53:d3:44: 5a:3c:8f:08:65:79:f5:42:0e:0f:d5:67:b9:eb:a6:94:61:94: d8:2e:ec:44:d7:01:4e:b7:22:5c:07:ff:8f:b3:a3:c4:f0:0c: 0d:ac:49:34:be:ed:09:60:e3:8f:8b:c5:a5:d6:3c:1f:05:b1: 83:6d:29:3a:92:87:f6:ab:f4:25:e4:4e:d3:9f:9a:15:cd:ee: f8:02:f0:c8:b0:91:b3:47:3c:ef:bd:46:9d:a5:c9:1f:f0:28: 98:28:f9:db:5c:42:34:dc:e4:f1:41:6b:c3:13:b9:02:ac:96: c1:e0:00:d0:73:e8:ea:3a:d2:25:d7:5d:2d:90:a2:0f:88:d0: a0:9d:79:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRBMUYxMTAvBgNVBAUTKEY5Nzg3RDJDQTE0MzJDQTZFOTMzMzJFMEVERUY2QjA3 QjI0NUQ3QjAwHhcNMjYwNDE2MjAyMDE0WhcNMjYwNDIzMjAyMDE0WjAYMRYwFAYD VQQDEw02OWUxNDQ3Zi0zZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkjWgezqtcYRv/eP0ZOd5OzL/zW+vi/d4JcA6SiPKkics1rOdtZKyampipiv 7gTVnVPo/Wz3aqsi/MXtV30WNu7HTksNtirD7FDoT7E0DZPI9wPh2eGFXZurjDwv 6Bj4/aMiQlI99wyirHcCOjfrOQIOfghqEwyhw4YIYHPHydu8oDSvI4ADXdspzxk8 WVQMpNTTre7CV4TvdHahU1htN0WWMWpEztjeEdNaFHeAeRQ2D/PAxMzFltI79SW1 frNwfpcpFMqLvLcCkGO2duztsLon6wfsNWXO/AluGhajk83Ei3eTLV8lPMjMTII6 Rs5yrWzXymLKiRu1plJ0dlcu2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEfcMErn 2TmBf+R9OvQwHYzwiNEMMB8GA1UdIwQYMBaAFPl4fSyhQyym6TMy4O3vaweyRdew MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREExRi9GQjE0QTg4MkRB QkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExLYnBNekxnN2U5ckI3SkYx N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YaDlMS0ZETEticE16TGc3ZTlyQjdKRjE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REExRi9GQjE0QTg4MkRBQkMxMUVBQTYyMDJDODVDNEY5QUUwMi8tWGg5TEtGRExL YnBNekxnN2U5ckI3SkYxN0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN3Y4bJNLdc2bR5Lp67Snd83ocLUeFme67i6osUkdZ+4On/kU2GSV0F97mRDx kTnfppvONZl2PiZK0ijRcB6RyfzmJpYkjR+e5LOvMrEZ0D1Xw6i/HE45LBHGjmjv JoEENjcEymHpLr6a/KQlbh5iF7pi6ekFhbBEIm8UU9NEWjyPCGV59UIOD9Vnueum lGGU2C7sRNcBTrciXAf/j7OjxPAMDaxJNL7tCWDjj4vFpdY8HwWxg20pOpKH9qv0 JeRO05+aFc3u+ALwyLCRs0c8771GnaXJH/AomCj521xCNNzk8UFrwxO5AqyWweAA 0HPo6jrSJdddLZCiD4jQoJ15LA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:06:39 2026 by rpki-client