$ rpki-client -vvf rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft File: 28EoRfH6o1sy_s32oO1NFEKSyMw.mft (raw, json) Hash identifier: kmxNnpLGUO2RpxlHdNcJRV4+keUL9DDxdNk0L52GTLk= Subject key identifier: A4:93:C0:7E:7B:29:A2:3A:61:04:55:84:6B:D1:8A:22:3E:A2:16:69 Authority key identifier: DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC Certificate issuer: /CN=A9134790/serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft Manifest number: A1 Signing time: Fri 17 Apr 2026 07:00:04 +0000 Manifest this update: Fri 17 Apr 2026 07:00:03 +0000 Manifest next update: Fri 24 Apr 2026 07:00:03 +0000 Files and hashes: 1: 28EoRfH6o1sy_s32oO1NFEKSyMw.crl (hash: XPMD2KpkC6Ya3/4PtjYyEuTAwF/cgxr8wyQshB9um0k=) 2: 078FA91C44EA11F09EB11858C4F9AE02.roa (hash: 0SuulOZroh5YKmFDmSJwtaMeguYZYVtHHGTdUFtkVFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134790, serialNumber=DBC12845F1FAA35B32FECDF6A0ED4D144292C8CC Validity Not Before: Apr 17 07:00:03 2026 GMT Not After : Apr 24 07:00:03 2026 GMT Subject: CN=69e1da74-c07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:de:b1:c0:4f:c9:ee:3d:7a:ec:ab:94:14: c8:1e:83:b9:86:cb:96:78:a9:e4:63:07:df:e4:d8: b1:46:40:a1:27:38:ff:b0:5a:ce:55:d0:e2:b5:07: a5:2f:1a:f3:26:7f:5a:d1:1b:18:22:1e:00:7f:ed: fa:0c:13:92:9b:dd:37:5f:08:97:2d:c8:bc:97:e2: 39:d0:bc:44:bc:70:92:a6:bd:20:1f:c6:29:6c:39: 2c:a1:05:d3:0a:40:60:74:b3:67:5f:b0:96:85:96: 3c:4f:82:c6:56:9b:d0:dd:f4:70:ef:26:ad:66:f3: d0:58:2f:c3:5e:51:06:9c:4e:eb:fc:8f:81:47:bd: fc:8e:b4:50:01:84:40:38:83:71:c5:ce:0f:1e:80: b8:24:54:d3:42:9e:91:67:70:06:79:1f:8f:1c:92: c4:d0:20:02:50:48:7a:1f:82:20:62:fc:99:63:50: fc:d6:41:4f:20:66:dd:3b:cb:da:f6:f9:b7:02:c5: ff:b1:3d:2d:9d:5e:b7:2b:49:37:41:d5:43:f9:a2: 2e:7f:e4:e7:8d:0a:77:52:2a:fb:03:08:10:f0:63: f2:b9:df:e7:0c:04:0b:6e:01:12:42:82:9f:c3:14: e2:d1:ea:b4:0d:6f:38:95:3f:68:e4:8b:bd:a4:ce: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:93:C0:7E:7B:29:A2:3A:61:04:55:84:6B:D1:8A:22:3E:A2:16:69 X509v3 Authority Key Identifier: keyid:DB:C1:28:45:F1:FA:A3:5B:32:FE:CD:F6:A0:ED:4D:14:42:92:C8:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28EoRfH6o1sy_s32oO1NFEKSyMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134790/5133FEAC44E911F091A96E53C4F9AE02/28EoRfH6o1sy_s32oO1NFEKSyMw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d2:76:9d:46:d0:d1:d4:c6:07:15:79:5a:d6:09:fb:7d:40: b4:21:2a:96:e8:06:df:99:af:40:b1:04:a0:10:28:08:4a:5f: 34:0d:e8:4a:01:3d:8f:65:79:2b:58:86:67:33:6e:f1:73:79: 06:25:a1:7a:b7:4f:91:89:18:1d:b5:6d:bc:44:7f:e2:90:ef: e5:e4:60:57:58:0a:6d:75:c1:7f:8b:71:1d:10:4f:15:db:fa: bf:c8:06:da:a4:d0:82:9a:b1:d6:95:55:3c:15:c6:68:a5:ce: fb:0b:b5:0a:64:ee:f1:f5:b8:c1:15:b3:bf:a7:f7:89:9c:3b: a3:61:df:39:e9:a6:a1:69:88:06:d2:6f:ba:8a:d1:f0:9d:51: f7:4f:2b:32:41:57:67:96:4b:e6:b0:ae:d6:35:d4:02:d9:09: 8d:5d:00:d9:16:13:96:9c:ce:f7:1b:37:75:5f:50:b7:29:10: 4d:e6:6e:34:2e:63:e2:44:1a:10:22:58:e6:4a:3b:2e:a4:35: 06:3f:43:ac:4d:89:71:9f:86:a8:9b:59:1a:0f:3f:00:b0:7e: eb:cb:a2:c3:a7:72:6b:7d:74:5b:73:ee:cc:ee:50:d6:58:42: 68:10:f2:ea:48:94:17:45:b3:c2:1d:2c:28:60:dd:51:f1:77: 9f:69:f2:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ3OTAxMTAvBgNVBAUTKERCQzEyODQ1RjFGQUEzNUIzMkZFQ0RGNkEwRUQ0RDE0 NDI5MkM4Q0MwHhcNMjYwNDE3MDcwMDAzWhcNMjYwNDI0MDcwMDAzWjAYMRYwFAYD VQQDEw02OWUxZGE3NC1jMDdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhnescBPye49euyrlBTIHoO5hsuWeKnkYwff5NixRkChJzj/sFrOVdDitQel LxrzJn9a0RsYIh4Af+36DBOSm903XwiXLci8l+I50LxEvHCSpr0gH8YpbDksoQXT CkBgdLNnX7CWhZY8T4LGVpvQ3fRw7yatZvPQWC/DXlEGnE7r/I+BR738jrRQAYRA OINxxc4PHoC4JFTTQp6RZ3AGeR+PHJLE0CACUEh6H4IgYvyZY1D81kFPIGbdO8va 9vm3AsX/sT0tnV63K0k3QdVD+aIuf+TnjQp3Uir7AwgQ8GPyud/nDAQLbgESQoKf wxTi0eq0DW84lT9o5Iu9pM5xhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKSTwH57 KaI6YQRVhGvRiiI+ohZpMB8GA1UdIwQYMBaAFNvBKEXx+qNbMv7N9qDtTRRCksjM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDc5MC81MTMzRkVBQzQ0 RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8xc3lfczMyb08xTkZFS1N5 TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI4RW9SZkg2bzFzeV9zMzJvTzFORkVLU3lNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDc5MC81MTMzRkVBQzQ0RTkxMUYwOTFBOTZFNTNDNEY5QUUwMi8yOEVvUmZINm8x c3lfczMyb08xTkZFS1N5TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANdJ2nUbQ0dTGBxV5WtYJ+31AtCEqlugG35mvQLEEoBAoCEpfNA3oSgE9j2V5 K1iGZzNu8XN5BiWherdPkYkYHbVtvER/4pDv5eRgV1gKbXXBf4txHRBPFdv6v8gG 2qTQgpqx1pVVPBXGaKXO+wu1CmTu8fW4wRWzv6f3iZw7o2HfOemmoWmIBtJvuorR 8J1R908rMkFXZ5ZL5rCu1jXUAtkJjV0A2RYTlpzO9xs3dV9QtykQTeZuNC5j4kQa ECJY5ko7LqQ1Bj9DrE2JcZ+GqJtZGg8/ALB+68uiw6dya310W3PuzO5Q1lhCaBDy 6kiUF0Wzwh0sKGDdUfF3n2nyFQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:48:18 2026 by rpki-client