$ rpki-client -vvf rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft File: D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft (raw, json) Hash identifier: BDMzj6l3iUUNmm2w5sa7YHrGuz2uuF+KSIfxhppfjJU= Subject key identifier: 56:F1:9F:09:3A:EF:CB:55:53:0B:07:5A:F9:DB:E8:A4:2E:73:38:BB Authority key identifier: 0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 Certificate issuer: /CN=A9139661/serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft Manifest number: A0 Signing time: Fri 17 Apr 2026 07:09:09 +0000 Manifest this update: Fri 17 Apr 2026 07:09:09 +0000 Manifest next update: Fri 24 Apr 2026 07:09:09 +0000 Files and hashes: 1: D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl (hash: ilRPfEHTPraqQSTJtxHR2gurx7ceNZEX/sfAnhRupjY=) 2: C4C4028A5B4C11F0807A3A60C4F9AE02.roa (hash: ki7xh64GIKfwbhwFIwfLQ7ubTp/Y8e6eL9BMSGhKC7E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139661, serialNumber=0F914A1DC94F5BE42E883C2ADD5430BCDF6DF334 Validity Not Before: Apr 17 07:09:09 2026 GMT Not After : Apr 24 07:09:09 2026 GMT Subject: CN=69e1dc95-bc13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fa:83:b7:07:38:0c:f0:1a:38:f4:45:a1:55: bf:87:17:eb:64:a4:d5:13:49:b2:9c:00:38:60:8b: cf:84:13:57:f5:05:8f:d4:af:6c:44:fd:43:b4:62: 06:b8:76:c2:2c:87:cc:22:f8:2f:22:8e:d2:6d:9e: d9:f9:70:db:92:ae:54:77:b5:6b:05:1b:36:6c:2a: 91:eb:96:c8:84:8f:de:77:61:50:2f:ab:69:13:41: 3c:69:ca:48:f0:f2:4d:95:22:d3:d2:91:73:d3:fe: 21:cd:6a:31:f2:04:04:e1:2d:f1:26:8c:57:59:68: 16:3f:8b:2a:62:30:ff:33:dc:e5:f1:1b:e7:55:97: a8:b1:6b:55:c7:75:15:53:2e:45:38:05:c4:34:f8: 9b:3d:5a:5a:94:88:4d:c3:1d:8e:7b:29:89:64:54: 99:63:28:1b:c5:a0:5a:df:61:3f:16:86:29:f5:b9: b5:59:73:29:d9:ab:2b:5b:33:08:17:27:c3:da:5e: ec:fe:e8:28:5b:f4:2a:11:cd:f8:83:32:cc:e8:85: b4:91:47:03:ec:1c:72:6e:51:98:ca:35:ed:bc:d9: 86:d1:bd:a5:94:08:b0:27:14:92:2c:6d:5b:ea:ca: cb:00:62:d3:a8:a1:7e:1f:28:3e:68:f0:b6:86:87: 81:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F1:9F:09:3A:EF:CB:55:53:0B:07:5A:F9:DB:E8:A4:2E:73:38:BB X509v3 Authority Key Identifier: keyid:0F:91:4A:1D:C9:4F:5B:E4:2E:88:3C:2A:DD:54:30:BC:DF:6D:F3:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5FKHclPW-QuiDwq3VQwvN9t8zQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139661/0F43EC3C58E411F08726A57AC4F9AE02/D5FKHclPW-QuiDwq3VQwvN9t8zQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:8b:5c:ef:81:12:1b:93:63:09:69:08:c0:c1:ec:29:c3:77: 78:88:d3:b8:86:17:49:d7:98:3c:d0:5e:ca:53:36:76:78:8b: e1:50:df:ac:35:57:25:04:b2:44:37:3e:0e:66:17:75:82:a4: 74:e8:d2:0a:d1:c3:6c:78:01:e0:dc:bf:1a:27:ae:33:c8:d5: b1:8c:d4:71:80:66:b8:16:bc:41:f3:dd:2b:8f:4b:f6:8d:05: e7:b5:7c:9f:4d:79:d8:c2:b1:79:1e:48:34:05:27:38:5d:b5: 3d:44:42:18:8c:a1:49:95:a8:35:16:78:1c:37:29:69:8d:d1: b2:87:27:c8:ad:62:d3:85:4d:d2:fc:ec:05:da:d7:39:fe:32: 84:a7:0d:6b:f4:db:4c:6c:bd:8c:ad:f5:66:bb:3f:f5:be:06: f8:56:24:59:92:5c:eb:47:0b:dc:bd:2b:6a:27:6e:6f:9c:86: d8:f8:0d:cf:41:db:13:0e:47:7f:fd:da:7c:7e:1d:9e:bb:04: f3:84:c8:e8:4e:e0:b3:76:7c:39:12:f6:68:1b:79:19:b2:18: 18:d7:8f:9a:31:5a:6b:05:c4:48:5f:74:95:15:6d:f2:7d:8a: 28:6a:0a:b0:31:ee:19:6d:62:f4:46:fe:94:8d:4a:b9:67:60: 3a:cc:ba:c5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk2NjExMTAvBgNVBAUTKDBGOTE0QTFEQzk0RjVCRTQyRTg4M0MyQURENTQzMEJD REY2REYzMzQwHhcNMjYwNDE3MDcwOTA5WhcNMjYwNDI0MDcwOTA5WjAYMRYwFAYD VQQDEw02OWUxZGM5NS1iYzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/qDtwc4DPAaOPRFoVW/hxfrZKTVE0mynAA4YIvPhBNX9QWP1K9sRP1DtGIG uHbCLIfMIvgvIo7SbZ7Z+XDbkq5Ud7VrBRs2bCqR65bIhI/ed2FQL6tpE0E8acpI 8PJNlSLT0pFz0/4hzWox8gQE4S3xJoxXWWgWP4sqYjD/M9zl8RvnVZeosWtVx3UV Uy5FOAXENPibPVpalIhNwx2OeymJZFSZYygbxaBa32E/FoYp9bm1WXMp2asrWzMI FyfD2l7s/ugoW/QqEc34gzLM6IW0kUcD7BxyblGYyjXtvNmG0b2llAiwJxSSLG1b 6srLAGLTqKF+Hyg+aPC2hoeBHQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFbxnwk6 78tVUwsHWvnb6KQuczi7MB8GA1UdIwQYMBaAFA+RSh3JT1vkLog8Kt1UMLzfbfM0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTY2MS8wRjQzRUMzQzU4 RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFctUXVpRHdxM1ZRd3ZOOXQ4 elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Q1RktIY2xQVy1RdWlEd3EzVlF3dk45dDh6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTY2MS8wRjQzRUMzQzU4RTQxMUYwODcyNkE1N0FDNEY5QUUwMi9ENUZLSGNsUFct UXVpRHdxM1ZRd3ZOOXQ4elEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT4tc74ESG5NjCWkIwMHsKcN3eIjTuIYXSdeYPNBeylM2dniL4VDfrDVXJQSy RDc+DmYXdYKkdOjSCtHDbHgB4Ny/GieuM8jVsYzUcYBmuBa8QfPdK49L9o0F57V8 n0152MKxeR5INAUnOF21PURCGIyhSZWoNRZ4HDcpaY3RsocnyK1i04VN0vzsBdrX Of4yhKcNa/TbTGy9jK31Zrs/9b4G+FYkWZJc60cL3L0raidub5yG2PgNz0HbEw5H f/3afH4dnrsE84TI6E7gs3Z8ORL2aBt5GbIYGNePmjFaawXESF90lRVt8n2KKGoK sDHuGW1i9Eb+lI1KuWdgOsy6xQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:28:21 2026 by rpki-client