$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft File: E4zRCkd43g41kR6cnJRPSyHE2wk.mft (raw, json) Hash identifier: 7MEUCE+D8FcHOPKOUug4eRxXNxvxGU/OVuJx3A9Iqkc= Subject key identifier: 97:8E:5B:DC:B8:1B:73:5B:EB:E4:47:3F:86:F1:D0:18:F8:E0:D1:C3 Authority key identifier: 13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 Certificate issuer: /CN=A9130F9C/serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Certificate serial: 0D5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft Manifest number: 0D3D Signing time: Sat 18 Apr 2026 17:58:52 +0000 Manifest this update: Sat 18 Apr 2026 17:58:51 +0000 Manifest next update: Sat 25 Apr 2026 17:58:51 +0000 Files and hashes: 1: E4zRCkd43g41kR6cnJRPSyHE2wk.crl (hash: yeEPgDdDFFsv8PHP2EVTl+j7GjAH4K6pIWji8piWxa0=) 2: 41CBB5B87F7611ECAD50FA4EC4F9AE02.roa (hash: Un5EoRL9PQC9xIW5CX3zoZdwpivD2GxDkHynm1gEUVk=) 3: 0827E4147F7911EC86DE4B56C4F9AE02.roa (hash: HpflIZHPJw/jzbgP6VSoBVTn6YCT3C7WFMC80MZUPak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3422 (0xd5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F9C, serialNumber=138CD10A4778DE0E35911E9C9C944F4B21C4DB09 Validity Not Before: Apr 18 17:58:51 2026 GMT Not After : Apr 25 17:58:51 2026 GMT Subject: CN=69e3c65c-83db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:6b:e2:31:ae:81:91:e6:9b:42:bc:12:f5: 9a:05:24:49:9e:14:02:1b:a3:07:fd:36:63:94:52: d2:98:38:16:09:34:26:cb:ec:38:6f:b3:35:bb:47: 42:a8:9c:a1:5a:3b:69:6d:41:dd:46:19:2e:17:32: c2:ea:d7:f4:d5:98:ef:f1:bd:3f:32:04:98:d0:04: a9:7d:19:33:f6:68:70:e2:86:b9:9f:48:95:0b:c1: 7d:a7:a3:ec:85:82:84:a7:1b:9c:a0:24:05:a4:c1: aa:fc:80:f6:c1:4c:87:07:e3:a4:e9:5d:46:be:ca: f9:88:d4:f4:cd:61:ce:b3:ba:62:e6:13:4a:38:a2: ac:e2:00:db:d0:d7:7f:c4:03:34:e9:52:96:72:bb: b5:38:58:9e:62:7d:51:1a:8d:cf:ae:59:56:4a:78: 23:6b:08:5d:bf:08:c0:eb:52:70:00:5b:a2:d3:90: 30:5d:e4:38:48:0b:04:d3:cf:ad:f0:45:7b:c1:75: 26:6e:af:78:f3:a2:4e:58:2e:08:eb:7c:9a:27:1f: 87:94:56:de:96:e4:62:58:9d:6e:ab:c2:ec:ef:ca: e7:fe:5a:85:e6:05:1b:46:1e:bc:30:cb:30:25:58: 85:5a:66:cc:a7:83:19:94:ad:d0:4b:de:6d:b7:1a: a7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:5B:DC:B8:1B:73:5B:EB:E4:47:3F:86:F1:D0:18:F8:E0:D1:C3 X509v3 Authority Key Identifier: keyid:13:8C:D1:0A:47:78:DE:0E:35:91:1E:9C:9C:94:4F:4B:21:C4:DB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E4zRCkd43g41kR6cnJRPSyHE2wk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F9C/29CB020EFA0B11E9978B0A32C4F9AE02/E4zRCkd43g41kR6cnJRPSyHE2wk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:6a:5b:ad:7d:1d:35:85:c0:cc:af:43:9b:7a:ab:af:5c:38: ec:76:85:ab:30:9a:ae:11:0d:3e:22:74:88:59:1d:a3:99:6e: 92:de:a1:4a:45:8a:f4:88:06:22:3c:ff:1d:35:30:5b:d5:f7: 38:34:d2:92:fe:2c:97:68:d6:b2:47:95:c6:53:f2:5d:4b:90: de:23:a0:bd:32:a0:b1:08:ab:ac:0d:fa:4d:bd:e2:b8:c6:da: e8:39:8e:2f:ec:06:06:a5:15:65:91:af:02:c8:9b:5f:c1:05: 54:2c:03:05:88:ca:8c:8d:72:1b:08:b1:1b:06:df:0e:28:5a: cf:87:41:86:5a:4a:26:ad:9b:fd:af:e1:aa:fe:ee:f4:d0:1a: 93:0f:9c:91:51:dc:0e:43:28:6f:f3:03:b6:d7:07:a1:9f:8c: 40:fc:78:95:eb:da:75:bb:54:c2:d4:44:16:32:58:a4:89:8c: ce:1d:10:13:9d:79:31:c2:d4:d3:e6:5e:64:fc:a7:09:07:fe: 42:74:4d:0c:0e:73:ff:9c:19:80:af:37:eb:3e:28:a3:76:75: a8:34:6c:c8:8c:f0:85:b7:c3:bc:c1:b9:55:ef:b9:31:64:ea: 1c:8a:3a:45:84:c7:60:a0:44:67:86:2d:bb:55:d6:e7:22:57: 1f:9e:95:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBGOUMxMTAvBgNVBAUTKDEzOENEMTBBNDc3OERFMEUzNTkxMUU5QzlDOTQ0RjRC MjFDNERCMDkwHhcNMjYwNDE4MTc1ODUxWhcNMjYwNDI1MTc1ODUxWjAYMRYwFAYD VQQDEw02OWUzYzY1Yy04M2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteZr4jGugZHmm0K8EvWaBSRJnhQCG6MH/TZjlFLSmDgWCTQmy+w4b7M1u0dC qJyhWjtpbUHdRhkuFzLC6tf01Zjv8b0/MgSY0ASpfRkz9mhw4oa5n0iVC8F9p6Ps hYKEpxucoCQFpMGq/ID2wUyHB+Ok6V1Gvsr5iNT0zWHOs7pi5hNKOKKs4gDb0Nd/ xAM06VKWcru1OFieYn1RGo3PrllWSngjawhdvwjA61JwAFui05AwXeQ4SAsE08+t 8EV7wXUmbq9486JOWC4I63yaJx+HlFbeluRiWJ1uq8Ls78rn/lqF5gUbRh68MMsw JViFWmbMp4MZlK3QS95ttxqnCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeOW9y4 G3Nb6+RHP4bx0Bj44NHDMB8GA1UdIwQYMBaAFBOM0QpHeN4ONZEenJyUT0shxNsJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY5Qy8yOUNCMDIwRUZB MEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNnNDFrUjZjbkpSUFN5SEUy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U0elJDa2Q0M2c0MWtSNmNuSlJQU3lIRTJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEY5Qy8yOUNCMDIwRUZBMEIxMUU5OTc4QjBBMzJDNEY5QUUwMi9FNHpSQ2tkNDNn NDFrUjZjbkpSUFN5SEUyd2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAx2pbrX0dNYXAzK9Dm3qrr1w47HaFqzCarhENPiJ0iFkdo5lukt6hSkWK9IgG Ijz/HTUwW9X3ODTSkv4sl2jWskeVxlPyXUuQ3iOgvTKgsQirrA36Tb3iuMba6DmO L+wGBqUVZZGvAsibX8EFVCwDBYjKjI1yGwixGwbfDihaz4dBhlpKJq2b/a/hqv7u 9NAakw+ckVHcDkMob/MDttcHoZ+MQPx4levadbtUwtREFjJYpImMzh0QE515McLU 0+ZeZPynCQf+QnRNDA5z/5wZgK836z4oo3Z1qDRsyIzwhbfDvMG5Ve+5MWTqHIo6 RYTHYKBEZ4Ytu1XW5yJXH56Vxw== -----END CERTIFICATE-----Generated at Sun Apr 19 09:00:48 2026 by rpki-client