$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: qWqY8S6nYDJ0RLlsWs0v0YbbBz0hvyR8Eg/zwqvkxlk= Subject key identifier: 82:E9:0D:91:4D:6F:24:02:40:B4:66:4B:6E:FA:13:73:B8:55:42:20 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 1085 Signing time: Sat 18 Apr 2026 17:17:45 +0000 Manifest this update: Sat 18 Apr 2026 17:17:44 +0000 Manifest next update: Sat 25 Apr 2026 17:17:44 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: 3QkoAd+Be76gpu7vzWh4kq4BGNREwgYQ1SlA/GF4/e0=) 2: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: FSH4LGHmCoYoOJO4j4TtaEvquXPAlXoI4u1Q0paHlwc=) 3: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: sXBQBxueKe1CqsSkcLSZtAl1yOR3L97KsnKbAwvpYXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Apr 18 17:17:44 2026 GMT Not After : Apr 25 17:17:44 2026 GMT Subject: CN=69e3bcb8-5d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:03:e1:85:37:10:85:26:8e:04:07:f6:4c: 25:fa:20:af:8b:9b:13:3e:8e:7f:ca:78:3d:f3:df: b5:ea:ef:4a:51:82:a2:56:97:0f:6e:9c:12:c1:36: d4:2c:30:56:82:b1:9e:59:fd:53:41:b7:e7:ac:1b: 65:20:57:3b:bc:e6:1c:3d:4b:57:93:b7:07:11:2a: 52:5e:3c:98:df:b9:52:3f:92:a8:e3:10:8c:54:09: d3:6f:2d:88:59:94:ca:dd:dc:60:b4:3e:cb:ee:81: 1b:12:dc:41:b5:e8:d8:16:48:87:d2:64:57:fe:03: 27:73:c8:7e:2e:32:bc:2c:08:38:42:a4:c5:70:f5: 6e:4d:d3:e9:22:d7:b4:1e:21:fe:51:d0:dd:f9:61: 4d:0f:35:80:7f:8c:b3:e3:9f:c9:5e:9a:f6:1a:0c: a5:bc:5a:10:8e:12:ff:9d:4b:37:f4:b7:49:87:a3: ea:44:bb:15:9d:8f:e5:be:d3:bc:ba:dc:82:d9:6e: e1:7b:c5:a3:70:2a:11:79:03:91:c1:5c:d7:f5:1a: c2:1c:17:20:e5:e9:93:5a:2d:d2:c9:ee:f4:25:1d: 04:e3:fc:87:d8:49:9e:a1:f3:54:f2:09:8d:5f:94: b8:ae:76:6d:ee:7a:2e:95:f6:12:21:c2:83:34:3c: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E9:0D:91:4D:6F:24:02:40:B4:66:4B:6E:FA:13:73:B8:55:42:20 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c7:a1:d1:47:b9:fd:4a:9a:cc:14:6c:c6:d4:0c:61:49:e6: e2:31:9a:70:ff:65:ea:1c:e2:7b:44:56:57:8a:06:54:7f:af: 9b:8e:07:1b:d9:88:7b:03:cf:f0:24:ff:41:3f:59:4b:ec:8d: 4d:30:36:6d:ee:01:b0:9a:87:85:e6:f8:b4:de:dd:68:94:29: 0d:85:43:af:ee:8a:61:e2:70:0c:25:8e:a5:ce:c1:17:54:44: a2:05:22:aa:3f:21:43:77:2d:ef:6b:16:06:fd:c2:d1:e3:db: a1:07:ff:2a:ff:d8:95:cc:8a:01:6f:d9:38:6b:f6:10:8f:43: 72:1b:e8:83:21:ea:30:32:d7:dc:14:e0:9c:b5:eb:d0:67:23: 92:2e:5e:ed:f4:3e:82:a6:6d:60:ce:3f:ca:9d:fa:2a:3e:c7: 37:93:ee:ca:48:8d:f2:03:d7:42:30:e2:5f:d7:9d:fd:c7:74: e1:00:5f:19:0a:98:9e:50:57:1f:d9:10:91:f2:3b:f3:cc:7f: bf:5f:52:e9:0e:90:21:45:17:e4:93:19:ee:33:46:dc:6b:a1: 18:dc:b3:c6:08:f1:4b:c6:95:19:76:58:fb:9a:0f:b3:c8:92: 8c:66:0a:22:ce:4c:42:84:dc:23:35:b7:3c:b7:8a:93:c5:a1: f1:5e:a6:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjYwNDE4MTcxNzQ0WhcNMjYwNDI1MTcxNzQ0WjAYMRYwFAYD VQQDEw02OWUzYmNiOC01ZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnAD4YU3EIUmjgQH9kwl+iCvi5sTPo5/yng989+16u9KUYKiVpcPbpwSwTbU LDBWgrGeWf1TQbfnrBtlIFc7vOYcPUtXk7cHESpSXjyY37lSP5Ko4xCMVAnTby2I WZTK3dxgtD7L7oEbEtxBtejYFkiH0mRX/gMnc8h+LjK8LAg4QqTFcPVuTdPpIte0 HiH+UdDd+WFNDzWAf4yz45/JXpr2GgylvFoQjhL/nUs39LdJh6PqRLsVnY/lvtO8 utyC2W7he8WjcCoReQORwVzX9RrCHBcg5emTWi3Sye70JR0E4/yH2EmeofNU8gmN X5S4rnZt7noulfYSIcKDNDwOVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILpDZFN byQCQLRmS276E3O4VUIgMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqMeh0Ue5/UqazBRsxtQMYUnm4jGacP9l6hzie0RWV4oGVH+vm44HG9mIewPP 8CT/QT9ZS+yNTTA2be4BsJqHheb4tN7daJQpDYVDr+6KYeJwDCWOpc7BF1REogUi qj8hQ3ct72sWBv3C0ePboQf/Kv/YlcyKAW/ZOGv2EI9DchvogyHqMDLX3BTgnLXr 0Gcjki5e7fQ+gqZtYM4/yp36Kj7HN5PuykiN8gPXQjDiX9ed/cd04QBfGQqYnlBX H9kQkfI788x/v19S6Q6QIUUX5JMZ7jNG3GuhGNyzxgjxS8aVGXZY+5oPs8iSjGYK Is5MQoTcIzW3PLeKk8Wh8V6myw== -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:07 2026 by rpki-client