$ rpki-client -vvf rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft File: 4dsvyCXsO7vnKFenPsCGoIIeIP0.mft (raw, json) Hash identifier: GxpHUV/W8h1kZtmRApu6siz6PQVY9Ro1bu246eA0XjE= Subject key identifier: E7:E9:E2:33:2C:67:AB:E9:29:A9:33:02:41:56:A9:B8:6B:5B:DC:33 Authority key identifier: E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD Certificate issuer: /CN=A9131589/serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Certificate serial: 0329 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft Manifest number: 0322 Signing time: Fri 17 Apr 2026 01:02:20 +0000 Manifest this update: Fri 17 Apr 2026 01:02:19 +0000 Manifest next update: Fri 24 Apr 2026 01:02:19 +0000 Files and hashes: 1: 4dsvyCXsO7vnKFenPsCGoIIeIP0.crl (hash: fXX6Rd6fdmXC2/BHgZAFIDZFTSUr4ByDf4BwcRWUw4Q=) 2: 82759C100CCE11ED97C94316C4F9AE02.roa (hash: r5uKcofx90HTHUTbqd06vEskUT1MLjmemfMajVokYGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 809 (0x329) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131589, serialNumber=E1DB2FC825EC3BBBE72857A73EC086A0821E20FD Validity Not Before: Apr 17 01:02:19 2026 GMT Not After : Apr 24 01:02:19 2026 GMT Subject: CN=69e1869c-02c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:a2:cd:81:90:e0:40:9b:43:2c:f3:87:7d: 61:b5:f6:de:ce:37:39:9e:b9:e3:42:f1:8d:f5:d5: 86:32:39:85:5e:bf:75:a5:e1:4e:03:25:f4:9e:ff: 97:2c:11:f6:23:1c:02:1b:49:d7:f4:a1:25:35:8d: fc:57:79:7b:cc:5c:46:2b:a7:6d:f2:e3:e2:5b:9c: f4:5d:63:ce:62:b6:62:11:1b:35:6a:08:3a:73:d6: 2b:c9:bc:bb:43:48:24:68:b7:8e:2b:1a:56:e3:ea: a5:fc:91:6b:38:55:f5:70:15:f6:c9:2e:09:39:b7: f1:a6:13:cf:b4:36:6f:76:20:ae:2f:9f:7c:8b:fb: a0:2c:ed:ce:ae:26:fb:00:e8:a0:f6:13:cc:dd:d6: 15:92:c2:bd:6d:15:d1:34:09:97:1d:2c:92:4b:c0: cf:21:0b:37:4c:0d:b7:ed:77:d0:da:80:f7:bf:5c: 65:0e:50:4a:0e:91:5e:e0:c1:45:63:56:63:8e:91: 1d:ab:dc:02:39:21:7c:dc:91:39:2c:ef:0b:d6:db: f4:36:1e:a0:97:86:9a:d6:fa:27:ef:b4:0e:c7:bd: 65:66:bc:7f:a7:ae:ba:ee:e7:13:28:03:f5:a7:e4: 78:1f:38:45:3d:4b:ed:38:95:c6:b8:ce:d9:71:3d: aa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E9:E2:33:2C:67:AB:E9:29:A9:33:02:41:56:A9:B8:6B:5B:DC:33 X509v3 Authority Key Identifier: keyid:E1:DB:2F:C8:25:EC:3B:BB:E7:28:57:A7:3E:C0:86:A0:82:1E:20:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4dsvyCXsO7vnKFenPsCGoIIeIP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131589/37E390A00CCC11EDB0993C15C4F9AE02/4dsvyCXsO7vnKFenPsCGoIIeIP0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:07:63:3e:22:7a:da:3a:34:14:73:df:42:a0:7d:d1:53:cf: 31:a7:92:76:dd:e8:47:37:c4:52:58:a0:d0:25:5f:7e:a5:f2: 18:94:e8:64:98:f4:f2:c5:65:df:dc:98:14:ef:78:3f:bc:0b: 43:37:07:d5:55:f0:fe:eb:d4:e4:94:5b:7b:2b:4e:3b:b7:41: 23:9c:34:b1:a4:a7:db:8d:54:ad:03:3c:f5:47:18:2f:8c:df: 5c:90:3a:ef:80:39:67:0a:76:5c:42:f7:23:29:d6:8b:d2:0d: 4f:b6:d7:29:64:88:21:da:a3:45:2e:e2:c1:3f:34:8a:c1:03: 61:39:a1:8b:c2:f8:6e:72:1f:a0:b5:70:9c:19:1e:5e:95:e6: 05:8c:f0:4e:c2:c1:76:d4:03:b7:9f:e8:aa:31:49:20:51:e2: c8:4b:a3:cc:84:16:37:41:ca:32:a9:61:c0:e3:b4:27:40:88: 6c:b3:b7:e2:47:8a:44:3c:b3:30:87:43:3e:63:a6:54:26:d7: e7:2b:c9:35:09:bc:55:a1:4b:f6:ae:2c:b3:95:14:e9:e1:c2: 32:0a:bc:2c:dc:81:87:43:d6:d4:4a:b3:b7:c9:3c:14:9f:ae: f1:41:83:6b:4f:8e:dd:93:96:4c:be:02:9e:40:b3:bd:0c:13: a4:b4:27:ae -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1ODkxMTAvBgNVBAUTKEUxREIyRkM4MjVFQzNCQkJFNzI4NTdBNzNFQzA4NkEw ODIxRTIwRkQwHhcNMjYwNDE3MDEwMjE5WhcNMjYwNDI0MDEwMjE5WjAYMRYwFAYD VQQDEw02OWUxODY5Yy0wMmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAifSizYGQ4ECbQyzzh31htfbezjc5nrnjQvGN9dWGMjmFXr91peFOAyX0nv+X LBH2IxwCG0nX9KElNY38V3l7zFxGK6dt8uPiW5z0XWPOYrZiERs1agg6c9Yryby7 Q0gkaLeOKxpW4+ql/JFrOFX1cBX2yS4JObfxphPPtDZvdiCuL598i/ugLO3Orib7 AOig9hPM3dYVksK9bRXRNAmXHSySS8DPIQs3TA237XfQ2oD3v1xlDlBKDpFe4MFF Y1ZjjpEdq9wCOSF83JE5LO8L1tv0Nh6gl4aa1von77QOx71lZrx/p6667ucTKAP1 p+R4HzhFPUvtOJXGuM7ZcT2quQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOfp4jMs Z6vpKakzAkFWqbhrW9wzMB8GA1UdIwQYMBaAFOHbL8gl7Du75yhXpz7AhqCCHiD9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTU4OS8zN0UzOTBBMDBD Q0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083dm5LRmVuUHNDR29JSWVJ UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRkc3Z5Q1hzTzd2bktGZW5Qc0NHb0lJZUlQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTU4OS8zN0UzOTBBMDBDQ0MxMUVEQjA5OTNDMTVDNEY5QUUwMi80ZHN2eUNYc083 dm5LRmVuUHNDR29JSWVJUDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABQdjPiJ62jo0FHPfQqB90VPPMaeSdt3oRzfEUlig0CVffqXyGJToZJj08sVl 39yYFO94P7wLQzcH1VXw/uvU5JRbeytOO7dBI5w0saSn241UrQM89UcYL4zfXJA6 74A5Zwp2XEL3IynWi9INT7bXKWSIIdqjRS7iwT80isEDYTmhi8L4bnIfoLVwnBke XpXmBYzwTsLBdtQDt5/oqjFJIFHiyEujzIQWN0HKMqlhwOO0J0CIbLO34keKRDyz MIdDPmOmVCbX5yvJNQm8VaFL9q4ss5UU6eHCMgq8LNyBh0PW1Eqzt8k8FJ+u8UGD a0+O3ZOWTL4CnkCzvQwTpLQnrg== -----END CERTIFICATE-----Generated at Fri Apr 17 06:47:11 2026 by rpki-client