$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: A5NenAbASGN52AZqI26mMsAdzHvryKgNgjxXLTe+B7c= Subject key identifier: 9C:40:BB:B3:34:D4:E0:D5:A9:C5:87:C6:C7:16:60:AD:90:E4:4C:60 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: C1 Signing time: Fri 17 Apr 2026 06:38:42 +0000 Manifest this update: Fri 17 Apr 2026 06:38:42 +0000 Manifest next update: Fri 24 Apr 2026 06:38:42 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: 23ztz2oQzzqiS1fVvM2fgxS7XM7POp2SQ5LQFMQXDZ4=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: VS76jVfnUICZ9bJBzzkEK0ZrDmbbMRlLDj2ohqAMUKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Apr 17 06:38:42 2026 GMT Not After : Apr 24 06:38:42 2026 GMT Subject: CN=69e1d572-07d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:71:41:b4:e1:61:b0:cb:49:22:e5:d2:e2:12: 53:38:82:ed:b7:24:b8:02:0b:c9:36:a8:f5:7f:ef: 3b:fc:20:71:3b:be:02:00:f6:31:0f:02:94:12:a8: 62:c4:ab:0b:12:62:5d:c2:e7:6d:56:da:ca:13:d5: e2:d5:18:b3:95:0f:ee:f4:eb:78:aa:3c:5e:c0:e6: 7b:3e:90:40:8d:01:06:f8:a7:61:b2:29:60:73:de: e5:9b:22:a3:c1:08:b2:5e:88:59:74:08:a5:be:03: 5b:a9:38:f3:99:f1:47:4b:11:b7:36:14:06:61:df: ae:38:5e:9a:30:90:5a:fb:65:a0:15:c8:cd:29:b9: cf:41:9d:f2:54:ef:e2:6f:51:34:1a:7c:69:45:ba: eb:a7:08:b7:f8:2b:59:85:3f:d6:b1:e6:aa:bd:78: 3f:78:03:6f:e1:01:c6:28:1d:e7:26:dd:30:b6:40: 7c:60:4c:5b:24:1a:02:a1:9d:50:ff:f5:a3:0f:0e: e2:95:10:f9:28:87:68:f2:bf:89:d2:af:cb:2d:34: 42:1e:de:94:a2:c9:ab:2d:5a:28:8c:95:be:e7:cf: 44:5f:f2:f3:79:fd:ad:fe:cf:56:38:62:2a:e9:16: 3c:b3:fe:05:58:1b:e7:58:3e:66:81:5e:14:ef:20: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:40:BB:B3:34:D4:E0:D5:A9:C5:87:C6:C7:16:60:AD:90:E4:4C:60 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fb:d2:65:48:ce:15:f6:e4:0b:c2:e7:af:d7:13:c6:a8:5d: 51:a1:66:d1:2a:d7:7f:d3:e8:05:ec:83:4e:78:7b:57:48:90: 16:99:2d:a5:0d:f4:46:d2:aa:ee:ed:4d:2a:d5:ad:30:2d:ae: e3:fa:13:83:ae:5f:2b:89:0c:ff:d3:68:bb:c7:4e:54:55:7a: 7d:04:37:d4:e2:8f:3a:a1:30:11:9f:cb:37:ea:fc:be:62:95: a6:b3:ad:ee:03:66:8d:91:c9:d8:31:93:ee:26:f9:27:42:02: fb:ac:5d:b5:13:a7:64:49:52:c4:e1:08:4a:1a:cd:6d:d0:f3: 63:3c:da:88:6d:ad:4a:88:2f:83:1d:e0:35:14:d4:ba:16:f2: 8f:d5:4e:7f:8c:f3:45:a7:6a:9b:5c:a6:8a:03:97:ad:e3:5e: 02:af:ec:fc:c7:c2:3c:21:7c:c8:d0:0c:f0:66:26:42:67:cb: ed:f5:ea:75:03:0f:35:9d:7d:cc:51:0e:32:90:a7:5e:bf:4c: 09:cb:8d:d8:73:3f:96:22:df:bb:e4:c4:6f:32:83:a2:54:02: 8c:9e:17:fc:d7:0c:35:d7:26:46:57:01:a4:a4:50:28:33:85: 80:fa:68:20:ab:50:c8:7c:c6:e7:7c:89:ab:31:f7:00:71:ed: 8c:90:58:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGMjExMTAvBgNVBAUTKDcwRDI2MDFDQjBEMEZBNEY5QzVGMEUwMjg2RDhCNkFG RDkyMzVBMDYwHhcNMjYwNDE3MDYzODQyWhcNMjYwNDI0MDYzODQyWjAYMRYwFAYD VQQDEw02OWUxZDU3Mi0wN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1HFBtOFhsMtJIuXS4hJTOILttyS4AgvJNqj1f+87/CBxO74CAPYxDwKUEqhi xKsLEmJdwudtVtrKE9Xi1RizlQ/u9Ot4qjxewOZ7PpBAjQEG+Kdhsilgc97lmyKj wQiyXohZdAilvgNbqTjzmfFHSxG3NhQGYd+uOF6aMJBa+2WgFcjNKbnPQZ3yVO/i b1E0GnxpRbrrpwi3+CtZhT/WseaqvXg/eANv4QHGKB3nJt0wtkB8YExbJBoCoZ1Q //WjDw7ilRD5KIdo8r+J0q/LLTRCHt6UosmrLVoojJW+589EX/Lzef2t/s9WOGIq 6RY8s/4FWBvnWD5mgV4U7yDS0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJxAu7M0 1ODVqcWHxscWYK2Q5ExgMB8GA1UdIwQYMBaAFHDSYByw0PpPnF8OAobYtq/ZI1oG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEYyMS84NTE3RkIwODE0 MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1rLWNYdzRDaHRpMnI5a2pX Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NOSmdITERRLWstY1h3NENodGkycjlraldnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEYyMS84NTE3RkIwODE0MTMxMUYwOEYxQTFENzNDNEY5QUUwMi9jTkpnSExEUS1r LWNYdzRDaHRpMnI5a2pXZ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIPvSZUjOFfbkC8Lnr9cTxqhdUaFm0SrXf9PoBeyDTnh7V0iQFpktpQ30RtKq 7u1NKtWtMC2u4/oTg65fK4kM/9Nou8dOVFV6fQQ31OKPOqEwEZ/LN+r8vmKVprOt 7gNmjZHJ2DGT7ib5J0IC+6xdtROnZElSxOEIShrNbdDzYzzaiG2tSogvgx3gNRTU uhbyj9VOf4zzRadqm1ymigOXreNeAq/s/MfCPCF8yNAM8GYmQmfL7fXqdQMPNZ19 zFEOMpCnXr9MCcuN2HM/liLfu+TEbzKDolQCjJ4X/NcMNdcmRlcBpKRQKDOFgPpo IKtQyHzG53yJqzH3AHHtjJBYsw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:21:04 2026 by rpki-client