$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: LhGS/G/NlMYWKArfdF+di1qbyzb2wPlokdOMUaz8kUg= Subject key identifier: E4:3A:3F:35:EE:B4:C4:29:AB:F2:F1:FF:C4:22:85:0B:06:09:EB:61 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 01A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 019C Signing time: Fri 17 Apr 2026 04:01:17 +0000 Manifest this update: Fri 17 Apr 2026 04:01:16 +0000 Manifest next update: Fri 24 Apr 2026 04:01:16 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: B5DCWmxfSeRBf0DJSKmn0ZGx96FEN9fVSkCONWvIQyg=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 420 (0x1a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Apr 17 04:01:16 2026 GMT Not After : Apr 24 04:01:16 2026 GMT Subject: CN=69e1b08c-0004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:a3:c6:b4:08:fd:4c:7f:6f:98:5d:d3:30: 8c:1e:10:74:c3:0d:61:83:1d:68:8a:a7:a5:0a:93: e3:15:cd:4b:00:88:e4:14:9a:ea:35:f3:af:f3:a2: 62:60:7f:ab:0e:52:ca:59:9f:1d:25:d8:b8:d3:80: bc:15:94:13:03:4c:dd:2b:54:fa:a3:19:89:0b:ca: 2d:10:cd:bb:f0:e6:82:e0:0d:65:b2:8f:bd:eb:8a: fa:aa:0d:62:f3:5b:f8:20:6b:a8:b0:55:29:c5:f7: c4:1b:bf:85:62:de:dd:c4:07:97:f2:c0:9d:ea:53: f8:bc:03:c7:b9:27:eb:0c:ac:ee:45:eb:b1:19:a4: 17:07:42:7f:1e:11:8a:b3:0d:53:53:eb:9f:bf:0e: 7e:b6:8d:c1:95:12:d9:52:44:54:c5:4b:af:14:82: 02:ea:5b:bf:9f:49:d3:1e:38:be:ca:d7:2e:c5:14: 78:8f:fa:f6:b0:05:63:6f:be:23:fb:a1:1f:6f:b6: 2f:72:8e:4d:17:db:e6:bb:2f:3a:1c:e3:69:db:98: 26:8b:2e:19:b5:a8:44:8f:b6:80:e9:7d:2c:e6:1f: 74:99:7c:f9:d2:b4:51:b9:ad:21:cb:a7:ac:99:5e: f6:3d:07:ea:3d:df:63:9e:a4:68:eb:03:1b:72:2f: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3A:3F:35:EE:B4:C4:29:AB:F2:F1:FF:C4:22:85:0B:06:09:EB:61 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:97:34:18:11:56:85:0a:e4:3a:3e:55:e0:64:5a:14:56:2f: 33:68:a9:bc:fc:0e:d4:11:3a:3c:2f:85:05:86:4b:89:62:8c: 71:83:a4:78:67:b7:cb:d7:6f:4a:ad:64:f2:dc:08:4e:fb:7c: 02:e8:f6:93:bd:74:86:52:39:1f:18:5f:61:cc:ad:c4:97:68: 42:14:74:cd:0e:3e:85:93:39:7f:39:ed:dc:97:c2:74:39:8c: 00:d2:75:2f:35:54:1b:8f:47:e7:1d:a7:9b:50:c4:ca:44:6c: 9a:26:b9:77:16:34:27:3f:04:b4:39:76:fe:ca:6a:c0:e7:69: bd:62:66:ca:fd:74:77:19:c5:41:cd:ef:08:d3:14:e9:7f:cf: 9a:02:70:67:85:9f:cb:7f:de:f7:80:c8:12:11:c6:71:59:25: fd:ba:1a:01:89:68:31:57:9f:be:3d:33:ec:d9:a0:6c:70:b7: c7:28:58:dc:ac:07:91:eb:74:e3:3f:12:92:ae:d0:ce:09:30: e6:6e:70:19:da:b6:27:5a:95:bc:8b:d2:78:77:14:67:44:49: 0a:1c:7c:b3:ce:2a:0d:4e:da:dd:ba:10:ed:68:ca:27:0b:3e: f9:18:84:cb:59:fc:d9:55:64:7c:27:1c:01:8b:e3:47:0f:72: 1e:0a:84:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjYwNDE3MDQwMTE2WhcNMjYwNDI0MDQwMTE2WjAYMRYwFAYD VQQDEw02OWUxYjA4Yy0wMDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsROjxrQI/Ux/b5hd0zCMHhB0ww1hgx1oiqelCpPjFc1LAIjkFJrqNfOv86Ji YH+rDlLKWZ8dJdi404C8FZQTA0zdK1T6oxmJC8otEM278OaC4A1lso+964r6qg1i 81v4IGuosFUpxffEG7+FYt7dxAeX8sCd6lP4vAPHuSfrDKzuReuxGaQXB0J/HhGK sw1TU+ufvw5+to3BlRLZUkRUxUuvFIIC6lu/n0nTHji+ytcuxRR4j/r2sAVjb74j +6Efb7Yvco5NF9vmuy86HONp25gmiy4ZtahEj7aA6X0s5h90mXz50rRRua0hy6es mV72PQfqPd9jnqRo6wMbci8F2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOQ6PzXu tMQpq/Lx/8QihQsGCethMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeZc0GBFWhQrkOj5V4GRaFFYvM2ipvPwO1BE6PC+FBYZLiWKMcYOkeGe3y9dv Sq1k8twITvt8Auj2k710hlI5HxhfYcytxJdoQhR0zQ4+hZM5fznt3JfCdDmMANJ1 LzVUG49H5x2nm1DEykRsmia5dxY0Jz8EtDl2/spqwOdpvWJmyv10dxnFQc3vCNMU 6X/PmgJwZ4Wfy3/e94DIEhHGcVkl/boaAYloMVefvj0z7NmgbHC3xyhY3KwHket0 4z8Skq7Qzgkw5m5wGdq2J1qVvIvSeHcUZ0RJChx8s84qDU7a3boQ7WjKJws++RiE y1n82VVkfCccAYvjRw9yHgqEzw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:50 2026 by rpki-client