$ rpki-client -vvf rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft File: ko6KqA2ZpyP2qQIa5eewMqzt23o.mft (raw, json) Hash identifier: FdOsSbZGCgN/4cnL99+oe6ljQNEHQ6+DbNp/l4PBRCo= Subject key identifier: 53:DC:1E:0B:78:2B:D8:6E:4A:C8:76:42:6D:B1:D6:87:F3:05:47:FE Authority key identifier: 92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A Certificate issuer: /CN=A9135A27/serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft Manifest number: A4 Signing time: Fri 17 Apr 2026 07:02:33 +0000 Manifest this update: Fri 17 Apr 2026 07:02:33 +0000 Manifest next update: Fri 24 Apr 2026 07:02:33 +0000 Files and hashes: 1: ko6KqA2ZpyP2qQIa5eewMqzt23o.crl (hash: nHNnwnnpiDKlgDGKyd0lkDAbv6iAGiwVu5ZTZHPW17E=) 2: 49B14A284A5B11F0BB8BCD26C4F9AE02.roa (hash: /bxoDydlBnXQXqec5/Xh6lqt0u+nbWaabKQ7eRpi4K0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135A27, serialNumber=928E8AA80D99A723F6A9021AE5E7B032ACEDDB7A Validity Not Before: Apr 17 07:02:33 2026 GMT Not After : Apr 24 07:02:33 2026 GMT Subject: CN=69e1db09-fdde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:4d:50:67:1b:d7:e7:27:48:61:5d:cd:7a: e4:4b:32:f6:f9:fa:df:13:31:e7:6b:9c:20:81:6d: b2:83:51:a8:cf:16:54:03:e5:23:4f:74:b3:4e:9a: a3:fa:a3:f0:28:91:6e:a9:7d:64:9d:ae:d7:d4:06: 92:18:f9:83:b1:0e:2d:dd:78:1f:f0:b6:19:3f:46: 6b:0f:34:13:16:b4:44:f0:fe:a4:04:21:75:f1:26: f7:40:58:cf:66:1a:46:eb:31:2f:6c:f7:60:1d:c8: e0:9d:f7:89:55:01:8b:54:8d:9f:db:2f:2f:0c:61: 0e:c9:2a:47:8b:a9:90:9d:de:28:b9:ee:76:c1:a6: 7d:2e:da:82:45:7a:62:ec:a1:d2:b8:e3:84:b4:86: 2c:de:9b:27:e0:9d:6f:2a:54:e3:42:51:20:06:dc: dc:57:ad:9f:e4:19:05:bf:1a:f9:0f:ae:05:0b:04: 10:9d:b6:e2:a5:b3:74:8f:9f:aa:28:d3:4d:f5:86: 57:92:7d:dc:3c:2e:d6:9b:fe:af:ab:be:9c:63:dd: c7:fd:50:0e:b7:28:8f:7d:88:58:cd:e7:0f:c0:7f: 5b:f2:ef:26:d8:ca:1b:57:dc:f2:f2:ee:96:29:a9: 3a:8a:fb:37:82:d2:ee:13:11:78:96:7a:60:55:29: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DC:1E:0B:78:2B:D8:6E:4A:C8:76:42:6D:B1:D6:87:F3:05:47:FE X509v3 Authority Key Identifier: keyid:92:8E:8A:A8:0D:99:A7:23:F6:A9:02:1A:E5:E7:B0:32:AC:ED:DB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ko6KqA2ZpyP2qQIa5eewMqzt23o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135A27/9DC220544A5811F0B9773180C4F9AE02/ko6KqA2ZpyP2qQIa5eewMqzt23o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:93:50:08:dd:b0:11:3c:a8:1c:c0:c5:55:87:ed:3a:cd:eb: 7f:3a:41:1d:eb:52:09:35:90:4c:65:25:30:7e:9b:80:ab:7d: c2:88:8b:79:9c:f8:0e:d6:86:2b:32:fb:b2:b1:be:91:38:51: fb:43:a7:ec:b0:fb:78:8c:9c:86:9f:ee:16:03:75:5d:a0:35: 98:80:2a:b5:68:de:3d:7a:5c:e0:f8:90:09:c6:2f:32:08:df: 43:7b:d4:a2:da:62:71:c1:f2:2a:bf:1e:85:b2:2b:fc:e2:3b: 46:e5:4e:a5:15:97:7b:9f:39:53:6d:ff:0a:86:c8:a0:19:2b: 93:b3:b9:fe:c8:09:54:4c:9b:25:b1:0c:38:05:2a:4e:0c:d3: 8e:a5:ac:b7:5f:38:b3:18:2e:4c:35:fd:5b:4b:ce:33:6b:4b: f7:18:49:b3:5b:04:43:95:fc:49:cb:4e:ed:8c:4d:59:c0:c7: 1e:24:b0:bc:68:38:b8:32:92:d4:9c:2d:a1:2e:47:54:b8:30: 1e:ab:ed:6f:21:21:5f:ef:37:da:0b:cd:94:cd:5f:23:03:47: 75:ac:c4:da:0c:46:9a:88:ce:d9:7c:fa:1e:cc:6b:44:5f:34: 97:b0:1a:c9:ce:46:45:9c:33:a0:ba:f5:9a:54:89:49:e4:f9: 64:f4:d9:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVBMjcxMTAvBgNVBAUTKDkyOEU4QUE4MEQ5OUE3MjNGNkE5MDIxQUU1RTdCMDMy QUNFRERCN0EwHhcNMjYwNDE3MDcwMjMzWhcNMjYwNDI0MDcwMjMzWjAYMRYwFAYD VQQDEw02OWUxZGIwOS1mZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S1NUGcb1+cnSGFdzXrkSzL2+frfEzHna5wggW2yg1GozxZUA+UjT3SzTpqj +qPwKJFuqX1kna7X1AaSGPmDsQ4t3Xgf8LYZP0ZrDzQTFrRE8P6kBCF18Sb3QFjP ZhpG6zEvbPdgHcjgnfeJVQGLVI2f2y8vDGEOySpHi6mQnd4oue52waZ9LtqCRXpi 7KHSuOOEtIYs3psn4J1vKlTjQlEgBtzcV62f5BkFvxr5D64FCwQQnbbipbN0j5+q KNNN9YZXkn3cPC7Wm/6vq76cY93H/VAOtyiPfYhYzecPwH9b8u8m2MobV9zy8u6W Kak6ivs3gtLuExF4lnpgVSmvVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFPcHgt4 K9huSsh2Qm2x1ofzBUf+MB8GA1UdIwQYMBaAFJKOiqgNmacj9qkCGuXnsDKs7dt6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUEyNy85REMyMjA1NDRB NTgxMUYwQjk3NzMxODBDNEY5QUUwMi9rbzZLcUEyWnB5UDJxUUlhNWVld01xenQy M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tvNktxQTJacHlQMnFRSWE1ZWV3TXF6dDIzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUEyNy85REMyMjA1NDRBNTgxMUYwQjk3NzMxODBDNEY5QUUwMi9rbzZLcUEyWnB5 UDJxUUlhNWVld01xenQyM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGZNQCN2wETyoHMDFVYftOs3rfzpBHetSCTWQTGUlMH6bgKt9woiLeZz4DtaG KzL7srG+kThR+0On7LD7eIychp/uFgN1XaA1mIAqtWjePXpc4PiQCcYvMgjfQ3vU otpiccHyKr8ehbIr/OI7RuVOpRWXe585U23/CobIoBkrk7O5/sgJVEybJbEMOAUq TgzTjqWst184sxguTDX9W0vOM2tL9xhJs1sEQ5X8SctO7YxNWcDHHiSwvGg4uDKS 1JwtoS5HVLgwHqvtbyEhX+832gvNlM1fIwNHdazE2gxGmojO2Xz6HsxrRF80l7Aa yc5GRZwzoLr1mlSJSeT5ZPTZww== -----END CERTIFICATE-----Generated at Fri Apr 17 12:21:04 2026 by rpki-client