$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft File: x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft (raw, json) Hash identifier: 4HR7WHEOvqL/6hT2xj6Jm5qHweJQk+nzVu+xDoeffZY= Subject key identifier: 89:64:9F:94:40:F7:6F:FA:95:2A:4A:38:6B:3C:F2:64:07:AE:E8:78 Authority key identifier: C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B Certificate issuer: /CN=A9131A5E/serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft Manifest number: 0213 Signing time: Sun 19 Apr 2026 02:38:53 +0000 Manifest this update: Sun 19 Apr 2026 02:38:52 +0000 Manifest next update: Sun 26 Apr 2026 02:38:52 +0000 Files and hashes: 1: x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl (hash: jcI6AFExw506QgqBG+xGKqf+wItzHXGcy++UZuQAtpU=) 2: 96BD724A36E411F0AAE1DE39C4F9AE02.roa (hash: shoLPgC/NpsBS7wBYyvhBSwKP6LoO6Nubl4gi/Om0Kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 02:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A5E, serialNumber=C74B34F5084C3D427D2DB5284E0A5E30770B933B Validity Not Before: Apr 19 02:38:52 2026 GMT Not After : Apr 26 02:38:52 2026 GMT Subject: CN=69e4403c-1b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ce:39:5a:f4:83:d5:d9:87:1a:e1:24:4a:7f: 69:37:66:8b:25:95:a4:f7:e6:cc:6b:08:82:fb:fa: f9:0a:89:b4:3f:88:63:41:7c:78:68:46:87:18:e8: 5f:ab:86:60:4c:06:b3:91:d3:56:01:f7:3a:d6:4f: e8:46:b4:e4:25:0c:41:f5:96:2b:43:e5:dc:4e:c5: 14:c7:9f:40:7b:5b:1b:f3:90:a5:3f:79:ac:65:f0: 04:be:91:ff:a1:7e:26:2d:41:6c:66:1e:7b:41:a8: 90:fa:4b:aa:a3:27:b6:f3:08:ca:3f:f3:39:47:0c: f9:ba:e9:f7:e1:8e:ef:e3:c9:4f:93:88:4b:bd:c4: ce:9d:a6:4f:6e:7b:e4:96:53:9f:13:c0:98:e7:49: 72:31:42:8e:49:a6:cd:b7:57:17:d9:50:44:5b:d6: bd:65:e6:11:9b:73:24:e8:63:84:c6:43:29:da:8f: f4:fe:68:ca:8f:7a:3d:20:e2:58:2d:23:d3:2c:18: ed:b8:a1:aa:1d:57:90:54:4b:7c:8d:06:34:f8:5d: ca:d5:52:06:10:a3:23:8a:0d:9d:42:de:91:b9:95: 96:50:65:58:74:9d:ff:3c:17:b4:6e:8b:19:1d:ae: ed:0e:3b:9a:a0:fa:46:c3:02:93:bb:a3:af:8d:f9: 74:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:9F:94:40:F7:6F:FA:95:2A:4A:38:6B:3C:F2:64:07:AE:E8:78 X509v3 Authority Key Identifier: keyid:C7:4B:34:F5:08:4C:3D:42:7D:2D:B5:28:4E:0A:5E:30:77:0B:93:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x0s09QhMPUJ9LbUoTgpeMHcLkzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A5E/03462E6610EA11EE9A48F17BC4F9AE02/x0s09QhMPUJ9LbUoTgpeMHcLkzs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:d7:2a:8f:ed:5d:b6:2d:75:a4:de:4e:9d:41:fd:83:03:5a: 73:f8:8e:e1:2f:e6:0d:52:77:15:2c:90:a1:1a:34:4d:d4:fe: 1a:3a:d5:78:90:a5:7c:e7:84:6f:01:81:16:e8:04:d2:7b:02: 41:a9:85:2f:48:30:1c:1e:77:7f:40:b4:38:89:62:c5:81:8f: 4b:46:46:ed:ce:f6:68:08:c7:c8:b6:c6:dc:f5:c5:98:82:36: 12:ba:b5:bf:7e:12:75:99:a9:25:1e:33:53:e0:a0:8e:78:8f: 65:08:76:b5:1c:13:a4:86:da:a9:b2:dd:d4:36:b8:ca:45:46: d0:8d:b8:14:38:96:94:c4:15:e2:c0:9e:29:05:3e:fe:b9:10: 41:6e:bb:42:b9:08:b3:cc:be:ae:d8:66:ee:63:7a:0d:8f:ba: 4d:4b:2d:36:81:23:65:50:b4:d5:da:c6:ad:62:e5:67:dc:d8: ee:c3:33:a1:ec:58:bf:56:ad:d0:c7:a7:38:80:62:8a:48:37: f9:54:1b:cc:98:98:10:92:4d:31:88:6e:0f:77:0c:c4:96:51: b8:da:b7:8f:d3:eb:9d:1a:6b:40:0d:1b:48:d6:c3:c8:70:5f: 26:0f:97:40:39:17:b9:58:8a:72:e9:68:2e:7e:ef:18:90:d9: 4a:f9:4e:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBNUUxMTAvBgNVBAUTKEM3NEIzNEY1MDg0QzNENDI3RDJEQjUyODRFMEE1RTMw NzcwQjkzM0IwHhcNMjYwNDE5MDIzODUyWhcNMjYwNDI2MDIzODUyWjAYMRYwFAYD VQQDEw02OWU0NDAzYy0xYjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqs45WvSD1dmHGuEkSn9pN2aLJZWk9+bMawiC+/r5Com0P4hjQXx4aEaHGOhf q4ZgTAazkdNWAfc61k/oRrTkJQxB9ZYrQ+XcTsUUx59Ae1sb85ClP3msZfAEvpH/ oX4mLUFsZh57QaiQ+kuqoye28wjKP/M5Rwz5uun34Y7v48lPk4hLvcTOnaZPbnvk llOfE8CY50lyMUKOSabNt1cX2VBEW9a9ZeYRm3Mk6GOExkMp2o/0/mjKj3o9IOJY LSPTLBjtuKGqHVeQVEt8jQY0+F3K1VIGEKMjig2dQt6RuZWWUGVYdJ3/PBe0bosZ Ha7tDjuaoPpGwwKTu6Ovjfl0qwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIlkn5RA 92/6lSpKOGs88mQHruh4MB8GA1UdIwQYMBaAFMdLNPUITD1CfS21KE4KXjB3C5M7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUE1RS8wMzQ2MkU2NjEw RUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBVSjlMYlVvVGdwZU1IY0xr enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gwczA5UWhNUFVKOUxiVW9UZ3BlTUhjTGt6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUE1RS8wMzQ2MkU2NjEwRUExMUVFOUE0OEYxN0JDNEY5QUUwMi94MHMwOVFoTVBV SjlMYlVvVGdwZU1IY0xrenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGNcqj+1dti11pN5OnUH9gwNac/iO4S/mDVJ3FSyQoRo0TdT+GjrVeJClfOeE bwGBFugE0nsCQamFL0gwHB53f0C0OIlixYGPS0ZG7c72aAjHyLbG3PXFmII2Erq1 v34SdZmpJR4zU+CgjniPZQh2tRwTpIbaqbLd1Da4ykVG0I24FDiWlMQV4sCeKQU+ /rkQQW67QrkIs8y+rthm7mN6DY+6TUstNoEjZVC01drGrWLlZ9zY7sMzoexYv1at 0MenOIBiikg3+VQbzJiYEJJNMYhuD3cMxJZRuNq3j9PrnRprQA0bSNbDyHBfJg+X QDkXuViKculoLn7vGJDZSvlO8A== -----END CERTIFICATE-----Generated at Sun Apr 19 15:32:42 2026 by rpki-client