$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: ccRTw8NfA2R21VKeie0RnXBcdWGgLrCUnjx+ucMom1s= Subject key identifier: 14:67:B9:A4:E4:BC:5A:C2:96:35:1B:48:17:3B:05:28:DB:1C:79:74 Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 09F0 Signing time: Thu 16 Apr 2026 19:46:28 +0000 Manifest this update: Thu 16 Apr 2026 19:46:28 +0000 Manifest next update: Thu 23 Apr 2026 19:46:28 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: v/PGGts/30sO23MJASXPILM/xqmsKH+vnWXwCXrtOQ4=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: uCqwfowHtQ8vPR+sncnEXEdldLZsVFqnmIJTdvUAfsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Apr 16 19:46:28 2026 GMT Not After : Apr 23 19:46:28 2026 GMT Subject: CN=69e13c94-4e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:3f:a1:12:b6:80:bd:34:96:92:c2:73:5e: 05:df:00:1b:0d:bf:c4:7d:bf:80:cf:d6:9c:8f:99: c0:97:e8:19:bf:9f:f3:80:65:47:2e:e1:ef:51:cf: 62:9a:74:35:b7:a6:01:7d:64:00:ec:2a:13:8d:e8: 48:e7:3c:a1:40:ef:60:7c:17:24:c3:88:6f:aa:6a: af:cb:54:ea:6d:b6:45:70:dc:8b:7c:63:e2:1f:d8: 61:12:9c:05:35:be:b4:f1:10:0d:aa:82:9e:c0:ca: ec:57:03:63:43:b4:9e:eb:1f:1b:16:b8:e3:28:9d: 01:16:bb:40:ec:38:79:29:41:bf:35:6b:e8:78:e8: 23:88:42:00:3b:a4:cf:36:bf:0f:bd:40:8b:3e:27: b1:b8:99:6a:a3:fc:11:21:f1:d0:9e:30:21:c9:3f: b3:d1:90:25:bd:9a:77:cd:3e:6a:a6:a0:d9:6b:e3: f4:ce:4f:46:5b:37:d8:85:92:36:0a:a9:92:62:96: e8:99:9a:1d:1c:0c:57:2c:72:6d:ed:7d:ae:9e:3d: 13:26:c4:99:38:f2:67:63:da:ad:2d:a8:6e:c4:d5: 28:a1:f6:81:46:64:e0:50:05:7d:3a:90:93:56:eb: 44:17:5e:7a:e4:e0:10:23:fd:2f:13:33:72:cb:7c: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:B9:A4:E4:BC:5A:C2:96:35:1B:48:17:3B:05:28:DB:1C:79:74 X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3e:9c:e7:56:c8:2e:0f:78:f9:d0:ec:03:e2:a6:d2:2a:68: af:20:a7:37:89:03:09:af:58:8a:5a:18:6a:06:05:e7:ee:f1: e7:6e:f8:d6:a0:c3:2e:ea:56:14:f8:46:dd:72:b1:df:6e:e5: 9f:c5:e9:3a:7f:54:e2:00:d9:56:fb:ba:77:98:75:43:63:b1: 5a:fb:89:09:a8:c7:09:fe:7e:d7:87:10:81:c3:16:94:89:7a: 7f:1c:25:f1:ca:f9:eb:83:c8:3a:fc:76:d0:3e:42:22:82:55: 7d:b9:68:fe:cc:ae:b0:92:a0:71:74:4f:d7:73:27:9c:b3:3d: ae:73:a1:59:55:5c:6d:c2:8a:82:9d:b5:93:1e:bb:bd:c4:06: a5:e1:a5:8d:c3:7a:4f:2f:e9:19:82:50:ed:9c:7a:39:ff:ec: f0:34:e5:e7:6c:88:f2:f2:ea:00:3b:c1:87:96:81:9e:78:3d: 35:31:60:82:22:68:25:51:0a:7c:df:29:27:8e:53:19:15:6c: 12:8d:1e:71:87:57:a9:29:c0:1a:7e:2c:42:28:31:c1:40:50: 52:75:63:55:76:63:a0:52:a7:ce:bd:09:4e:83:76:b0:a8:cc: 8b:e0:ed:3a:05:e4:7c:53:e6:92:9c:6e:37:34:03:14:2e:33: 7d:46:fb:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjYwNDE2MTk0NjI4WhcNMjYwNDIzMTk0NjI4WjAYMRYwFAYD VQQDEw02OWUxM2M5NC00ZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/k/oRK2gL00lpLCc14F3wAbDb/Efb+Az9acj5nAl+gZv5/zgGVHLuHvUc9i mnQ1t6YBfWQA7CoTjehI5zyhQO9gfBckw4hvqmqvy1TqbbZFcNyLfGPiH9hhEpwF Nb608RANqoKewMrsVwNjQ7Se6x8bFrjjKJ0BFrtA7Dh5KUG/NWvoeOgjiEIAO6TP Nr8PvUCLPiexuJlqo/wRIfHQnjAhyT+z0ZAlvZp3zT5qpqDZa+P0zk9GWzfYhZI2 CqmSYpbomZodHAxXLHJt7X2unj0TJsSZOPJnY9qtLahuxNUoofaBRmTgUAV9OpCT VutEF1565OAQI/0vEzNyy3yTGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBRnuaTk vFrCljUbSBc7BSjbHHl0MB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcj6c51bILg94+dDsA+Km0iporyCnN4kDCa9YiloYagYF5+7x52741qDDLupW FPhG3XKx327ln8XpOn9U4gDZVvu6d5h1Q2OxWvuJCajHCf5+14cQgcMWlIl6fxwl 8cr564PIOvx20D5CIoJVfblo/syusJKgcXRP13MnnLM9rnOhWVVcbcKKgp21kx67 vcQGpeGljcN6Ty/pGYJQ7Zx6Of/s8DTl52yI8vLqADvBh5aBnng9NTFggiJoJVEK fN8pJ45TGRVsEo0ecYdXqSnAGn4sQigxwUBQUnVjVXZjoFKnzr0JToN2sKjMi+Dt OgXkfFPmkpxuNzQDFC4zfUb7vw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:50:27 2026 by rpki-client