$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft File: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft (raw, json) Hash identifier: XKVcIhnzaPmH7xvaCe6rTLuE0KTm+NXT442huQKVN4Q= Subject key identifier: 46:09:24:B0:AF:11:C8:BA:43:22:87:68:7E:F7:D8:F9:0F:53:7C:2D Authority key identifier: AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 Certificate issuer: /CN=A913BA97/serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft Manifest number: 026F Signing time: Fri 17 Apr 2026 02:02:21 +0000 Manifest this update: Fri 17 Apr 2026 02:02:21 +0000 Manifest next update: Fri 24 Apr 2026 02:02:21 +0000 Files and hashes: 1: r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl (hash: /cRIC9/e77Mq4Q5wK6vOwQjhp9dzJqGFpYRnftKyqa8=) 2: 6B4DE806568411EF8FE2C24EC4F9AE02.roa (hash: zL+0GILNq3N6RlaPpOmQcCTITpel7i2coFIgiZ3nFug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA97, serialNumber=AFD943E4B142763659E08F8DBF6CE7E6D80CC517 Validity Not Before: Apr 17 02:02:21 2026 GMT Not After : Apr 24 02:02:21 2026 GMT Subject: CN=69e194ad-332a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:df:8c:d7:ec:58:71:6d:9f:c2:59:d5:ec: 60:25:d2:99:1c:f0:37:cb:5f:12:1f:dd:ff:93:35: 0a:99:0d:57:06:47:65:35:ff:b1:ec:e3:60:c1:3e: f6:bd:4d:13:9d:60:22:fe:3b:3a:df:6b:6f:3c:df: d7:23:43:09:09:71:fd:7c:7a:c6:0f:ac:b9:dd:40: af:e2:49:03:c3:79:d0:21:f4:22:e0:f6:72:90:4a: 4d:d2:ea:0b:68:d7:24:c3:e2:61:59:03:b6:83:1d: 83:bb:6f:cc:1c:be:ff:f0:9b:8d:4d:0d:74:6f:f4: 90:63:d9:07:bc:f6:92:7a:e5:3d:18:ea:00:6c:e7: 64:ab:41:ae:d9:45:d7:7e:53:22:0c:c8:ef:34:44: d6:7c:81:5d:cb:a0:e4:85:d8:fe:27:f0:90:3f:f2: 90:39:fd:ba:b8:86:6d:e4:1b:c4:a5:95:90:e5:61: 67:40:60:16:05:dd:8a:65:4b:43:04:76:d4:06:e4: cd:0b:ee:9a:db:4b:6f:c4:b8:23:34:03:32:b1:f2: 21:ce:0a:1a:20:5a:f7:e6:2e:d5:61:2f:8a:0f:33: ea:0c:46:0e:d9:90:5a:64:2f:6b:8b:2c:03:ed:f1: 44:17:97:2d:c5:4d:7e:cb:90:2d:bb:4b:21:2f:68: 84:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:09:24:B0:AF:11:C8:BA:43:22:87:68:7E:F7:D8:F9:0F:53:7C:2D X509v3 Authority Key Identifier: keyid:AF:D9:43:E4:B1:42:76:36:59:E0:8F:8D:BF:6C:E7:E6:D8:0C:C5:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA97/F1FEB1FEAC4A11EDA7F1B044C4F9AE02/r9lD5LFCdjZZ4I-Nv2zn5tgMxRc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:47:54:1a:a6:5a:fe:a7:52:20:f1:ad:b3:e6:33:09:53:00: 8d:06:b0:71:8d:5a:db:2d:e5:e6:fa:e6:60:b1:21:16:83:a5: c2:27:62:68:d6:84:c3:16:35:05:c5:16:1c:b3:05:0c:dd:9a: 73:de:1a:54:95:f1:d9:ca:d3:95:27:33:54:a8:f3:ca:43:07: 1c:5e:62:67:7d:d9:08:7a:1a:31:7a:ef:67:d6:37:45:80:4d: 48:61:72:c5:0a:d3:b8:16:3e:a8:f2:80:d8:52:c1:07:a7:4e: 40:99:91:3c:5e:80:aa:41:8a:51:73:ba:80:2e:8a:8e:29:75: 98:80:d2:bb:12:5b:40:82:74:b2:cc:b5:9c:a5:8e:98:38:67: cc:83:bb:09:78:2c:73:2d:7b:73:fd:6d:4a:dc:1b:03:c1:1b: ab:5e:7e:0e:ef:38:2d:4d:e2:9c:55:77:3a:bc:d8:87:5e:f4: c7:e2:ea:bd:08:2e:6e:56:db:fd:76:fb:7a:43:54:48:3d:53: 85:42:70:4c:24:0d:4c:56:68:39:f2:bc:d1:36:93:1c:2b:c1: e4:3e:b2:85:b5:98:b0:59:70:eb:25:6b:3f:81:a4:70:5e:f3: ae:96:59:47:c4:4c:a7:c9:17:79:c4:e3:4a:fe:73:da:90:3b: 6c:8e:a1:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JBOTcxMTAvBgNVBAUTKEFGRDk0M0U0QjE0Mjc2MzY1OUUwOEY4REJGNkNFN0U2 RDgwQ0M1MTcwHhcNMjYwNDE3MDIwMjIxWhcNMjYwNDI0MDIwMjIxWjAYMRYwFAYD VQQDEw02OWUxOTRhZC0zMzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0UrfjNfsWHFtn8JZ1exgJdKZHPA3y18SH93/kzUKmQ1XBkdlNf+x7ONgwT72 vU0TnWAi/js632tvPN/XI0MJCXH9fHrGD6y53UCv4kkDw3nQIfQi4PZykEpN0uoL aNckw+JhWQO2gx2Du2/MHL7/8JuNTQ10b/SQY9kHvPaSeuU9GOoAbOdkq0Gu2UXX flMiDMjvNETWfIFdy6Dkhdj+J/CQP/KQOf26uIZt5BvEpZWQ5WFnQGAWBd2KZUtD BHbUBuTNC+6a20tvxLgjNAMysfIhzgoaIFr35i7VYS+KDzPqDEYO2ZBaZC9riywD 7fFEF5ctxU1+y5Atu0shL2iEYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEYJJLCv Eci6QyKHaH732PkPU3wtMB8GA1UdIwQYMBaAFK/ZQ+SxQnY2WeCPjb9s5+bYDMUX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkE5Ny9GMUZFQjFGRUFD NEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2RqWlo0SS1OdjJ6bjV0Z014 UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I5bEQ1TEZDZGpaWjRJLU52MnpuNXRnTXhSYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkE5Ny9GMUZFQjFGRUFDNEExMUVEQTdGMUIwNDRDNEY5QUUwMi9yOWxENUxGQ2Rq Wlo0SS1OdjJ6bjV0Z014UmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAikdUGqZa/qdSIPGts+YzCVMAjQawcY1a2y3l5vrmYLEhFoOlwidiaNaEwxY1 BcUWHLMFDN2ac94aVJXx2crTlSczVKjzykMHHF5iZ33ZCHoaMXrvZ9Y3RYBNSGFy xQrTuBY+qPKA2FLBB6dOQJmRPF6AqkGKUXO6gC6Kjil1mIDSuxJbQIJ0ssy1nKWO mDhnzIO7CXgscy17c/1tStwbA8Ebq15+Du84LU3inFV3OrzYh170x+LqvQgublbb /Xb7ekNUSD1ThUJwTCQNTFZoOfK80TaTHCvB5D6yhbWYsFlw6yVrP4GkcF7zrpZZ R8RMp8kXecTjSv5z2pA7bI6h1g== -----END CERTIFICATE-----Generated at Fri Apr 17 11:54:15 2026 by rpki-client