$ rpki-client -vvf rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft File: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft (raw, json) Hash identifier: 3zXVBCFn/0UnUQp4nm4c8RLB+p27ciWW+lwsQ7vs5qQ= Subject key identifier: D0:98:22:FF:56:7C:8B:A5:64:52:24:55:B8:79:40:90:25:E3:41:5F Authority key identifier: F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E Certificate issuer: /CN=A9135604/serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Certificate serial: 0244 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft Manifest number: 023E Signing time: Fri 17 Apr 2026 02:17:58 +0000 Manifest this update: Fri 17 Apr 2026 02:17:58 +0000 Manifest next update: Fri 24 Apr 2026 02:17:58 +0000 Files and hashes: 1: 9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl (hash: eTeoHXD3oySYWvbugF0XZ1JHAzWb5h2nebwVwvWC8gA=) 2: D2528232D2A011ED86EB1F59C4F9AE02.roa (hash: SjpU2DHJY1cKYJ6gFYOmQrsv1wcliGyg64y2iPs/pk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 580 (0x244) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135604, serialNumber=F6498B99B77A8F01B399261FBCB904E14282552E Validity Not Before: Apr 17 02:17:58 2026 GMT Not After : Apr 24 02:17:58 2026 GMT Subject: CN=69e19856-393f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:58:7c:d3:20:ea:72:52:a4:d6:08:b4:7a:12: c0:87:e9:78:10:69:b8:b8:ce:c4:c5:b1:6e:59:11: 38:f7:b0:1e:a8:57:17:7d:2d:37:b3:8c:73:dc:52: 56:9d:56:99:04:17:7c:f7:19:e5:1c:90:20:08:08: 0b:d9:e6:03:a0:43:6d:28:1a:3e:88:f9:e1:34:9e: 62:ad:9d:b5:74:02:04:8e:77:84:61:e5:a0:52:71: 9f:a2:dd:7a:f6:ae:36:02:5e:99:5e:06:de:55:2f: 21:37:22:44:61:9a:ed:63:6d:e9:93:e5:ca:30:93: ea:d5:09:b9:bd:89:37:1d:70:2d:6b:36:fc:96:63: 86:15:ff:14:0f:ee:4b:3f:cf:b1:4f:35:8e:c6:6a: 35:a9:55:28:7a:7f:0c:fd:3a:f8:c9:34:3a:58:b8: 0d:8f:80:ac:69:29:c8:4c:c9:da:24:f2:c8:07:df: 56:99:a6:b9:53:8c:cc:92:62:4e:fe:74:c8:cc:17: 28:76:6b:89:06:b5:2e:a6:18:d1:f6:81:eb:f9:38: 96:df:10:4e:65:9e:91:f3:18:20:84:c3:a4:5c:e2: 20:32:61:64:6d:4b:0b:80:24:f1:90:dc:ea:cd:44: a0:0a:0f:42:23:9f:ff:ed:d9:8f:0c:ee:27:aa:18: fc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:98:22:FF:56:7C:8B:A5:64:52:24:55:B8:79:40:90:25:E3:41:5F X509v3 Authority Key Identifier: keyid:F6:49:8B:99:B7:7A:8F:01:B3:99:26:1F:BC:B9:04:E1:42:82:55:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmLmbd6jwGzmSYfvLkE4UKCVS4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135604/102648DCD29C11EDB411C45DC4F9AE02/9kmLmbd6jwGzmSYfvLkE4UKCVS4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:f4:a6:36:55:38:ab:9c:c5:ad:17:99:25:f0:56:21:0f: e1:d8:c5:0c:4e:db:29:34:fb:b3:ec:0f:14:bb:c4:cb:64:38: a8:d7:8d:1d:c0:16:0a:35:28:b8:44:31:a0:9b:f2:1c:87:c5: e1:cc:0d:f4:ec:ff:70:b0:e3:fd:b6:6a:c1:f5:07:d4:b5:29: 8e:8f:31:3b:3c:aa:5a:bd:eb:1e:19:9f:31:4f:19:47:8e:9f: b7:25:c0:96:7c:3e:82:5a:4f:36:9f:85:f9:85:a8:2a:a9:51: e4:ff:26:98:83:a8:d3:d0:13:76:1c:5d:c2:c8:27:9f:3d:43: b9:f8:2b:b5:cd:9a:30:54:c1:d6:36:56:4e:82:1e:71:a9:01: 84:96:ce:aa:e8:d0:47:22:d4:30:92:fb:85:e8:1d:a5:72:e3: 28:db:96:66:75:fd:fc:61:a0:db:42:73:35:80:38:fa:59:df: 99:17:0a:a2:fe:68:e2:80:9a:72:02:81:9d:22:49:46:a3:ec: e0:ab:33:d3:50:16:45:cc:c2:06:74:4c:96:89:59:66:76:79: 37:57:22:8f:22:61:86:c3:e3:30:13:96:44:ab:24:48:e3:7c: 1e:3d:e9:6a:ff:be:85:2a:b3:fc:e5:ce:e4:c4:cb:4b:ee:b4: f8:4e:d1:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU2MDQxMTAvBgNVBAUTKEY2NDk4Qjk5Qjc3QThGMDFCMzk5MjYxRkJDQjkwNEUx NDI4MjU1MkUwHhcNMjYwNDE3MDIxNzU4WhcNMjYwNDI0MDIxNzU4WjAYMRYwFAYD VQQDEw02OWUxOTg1Ni0zOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Vh80yDqclKk1gi0ehLAh+l4EGm4uM7ExbFuWRE497AeqFcXfS03s4xz3FJW nVaZBBd89xnlHJAgCAgL2eYDoENtKBo+iPnhNJ5irZ21dAIEjneEYeWgUnGfot16 9q42Al6ZXgbeVS8hNyJEYZrtY23pk+XKMJPq1Qm5vYk3HXAtazb8lmOGFf8UD+5L P8+xTzWOxmo1qVUoen8M/Tr4yTQ6WLgNj4CsaSnITMnaJPLIB99Wmaa5U4zMkmJO /nTIzBcodmuJBrUuphjR9oHr+TiW3xBOZZ6R8xgghMOkXOIgMmFkbUsLgCTxkNzq zUSgCg9CI5//7dmPDO4nqhj8eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCYIv9W fIulZFIkVbh5QJAl40FfMB8GA1UdIwQYMBaAFPZJi5m3eo8Bs5kmH7y5BOFCglUu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTYwNC8xMDI2NDhEQ0Qy OUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3R3ptU1lmdkxrRTRVS0NW UzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlrbUxtYmQ2andHem1TWWZ2TGtFNFVLQ1ZTNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTYwNC8xMDI2NDhEQ0QyOUMxMUVEQjQxMUM0NURDNEY5QUUwMi85a21MbWJkNmp3 R3ptU1lmdkxrRTRVS0NWUzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANaP0pjZVOKucxa0XmSXwViEP4djFDE7bKTT7s+wPFLvEy2Q4qNeNHcAWCjUo uEQxoJvyHIfF4cwN9Oz/cLDj/bZqwfUH1LUpjo8xOzyqWr3rHhmfMU8ZR46ftyXA lnw+glpPNp+F+YWoKqlR5P8mmIOo09ATdhxdwsgnnz1Dufgrtc2aMFTB1jZWToIe cakBhJbOqujQRyLUMJL7hegdpXLjKNuWZnX9/GGg20JzNYA4+lnfmRcKov5o4oCa cgKBnSJJRqPs4Ksz01AWRczCBnRMlolZZnZ5N1cijyJhhsPjMBOWRKskSON8Hj3p av++hSqz/OXO5MTLS+60+E7R+w== -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:21 2026 by rpki-client