$ rpki-client -vvf rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft File: -7tvOPZwPQLXJu3kYjmzvtih8eQ.mft (raw, json) Hash identifier: OYGQ8l+z5FkSLgmxVfWHcXi9ETYPKUgXpCzH/MCQ4wo= Subject key identifier: 75:64:79:FF:20:8E:9F:88:55:A6:2C:45:A7:86:EC:A9:FD:1F:24:15 Authority key identifier: FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 Certificate issuer: /CN=A9141B4C/serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft Manifest number: 28 Signing time: Fri 17 Apr 2026 08:32:13 +0000 Manifest this update: Fri 17 Apr 2026 08:32:12 +0000 Manifest next update: Fri 24 Apr 2026 08:32:12 +0000 Files and hashes: 1: -7tvOPZwPQLXJu3kYjmzvtih8eQ.crl (hash: LN5Z/j5+uQhgFTpt25twkOUAaOv51H5XBxx7La3B7wk=) 2: A8CF90D807E711F1BD5B02F0213D8C67.roa (hash: hV/y2S97hrz2Q67W/IE/R1j506bwev+zG5Z7LB9xvfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141B4C, serialNumber=FBBB6F38F6703D02D726EDE46239B3BED8A1F1E4 Validity Not Before: Apr 17 08:32:12 2026 GMT Not After : Apr 24 08:32:12 2026 GMT Subject: CN=69e1f00c-a891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a8:53:45:87:cb:cf:20:04:0a:ac:9f:34:cd: 3f:69:eb:2e:cc:be:e5:a1:95:21:a5:a2:8f:20:e7: 78:01:57:d9:bd:8a:b3:75:eb:40:14:84:3c:33:76: 85:f8:6c:27:f1:43:ed:33:44:f2:e5:a4:d1:25:40: cb:09:34:09:eb:22:51:41:b9:56:cf:ac:9b:8f:72: ba:9e:ed:f6:3d:f2:c9:fd:ab:eb:d7:fd:f0:11:24: e1:e8:bb:9e:9d:60:41:b9:4f:02:62:ba:44:e0:75: 17:f5:53:19:64:a2:ce:04:1e:26:75:cf:af:50:c8: ed:af:29:23:7a:df:d3:3b:ff:de:78:2f:f2:e0:00: 1c:dd:e8:b4:7e:c5:9e:bf:4c:3b:6c:0a:aa:44:3e: 1a:b6:73:2e:50:df:45:4d:55:84:8f:55:85:7c:4a: 68:74:77:57:ef:78:e5:1c:c9:3f:63:9c:6a:6e:69: 45:a9:40:96:59:40:30:4e:6f:09:13:94:b6:5a:de: 41:69:58:cf:40:8b:c9:2c:f6:5d:5e:d4:4d:c5:9f: 2e:37:38:46:cc:bf:01:5c:34:1a:77:16:2c:a9:ab: d3:43:b5:22:6c:09:88:c4:72:57:af:7c:35:0c:ec: 0e:9f:cd:d2:67:82:d1:0d:8c:61:86:4c:f0:a4:9e: 02:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:64:79:FF:20:8E:9F:88:55:A6:2C:45:A7:86:EC:A9:FD:1F:24:15 X509v3 Authority Key Identifier: keyid:FB:BB:6F:38:F6:70:3D:02:D7:26:ED:E4:62:39:B3:BE:D8:A1:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-7tvOPZwPQLXJu3kYjmzvtih8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141B4C/A0B579B207E211F18C562569213D8C67/-7tvOPZwPQLXJu3kYjmzvtih8eQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:29:5c:20:6a:be:ae:95:18:71:46:d2:1d:0c:1f:6d:b9:90: ca:dd:fc:19:14:63:16:98:82:92:dc:dc:7e:05:e8:83:07:40: 31:43:ca:cb:06:02:04:cb:f0:88:87:5d:d2:93:4f:e1:10:7b: 21:f1:a7:79:2f:3a:c4:d9:f7:c5:98:3f:5e:c6:cc:1b:b2:15: 30:1c:51:3c:da:03:6a:7e:92:4a:a3:9c:9b:fd:e3:c3:77:74: f0:4f:8d:da:8e:84:7b:dc:dd:0c:00:c3:3d:34:96:df:87:ca: 55:f7:aa:83:c5:8c:67:4d:7a:81:a7:5e:08:2f:15:f3:8b:a0: ca:61:dd:4a:ad:bf:dc:08:c7:24:fd:fc:20:2f:fb:ad:b8:6d: 21:8f:18:ad:2a:d8:a7:83:5d:95:3d:92:3a:f4:52:c3:c9:25: 78:f4:3d:85:2f:6c:90:bb:95:b5:cb:02:84:7b:68:a0:8a:93: aa:5d:e7:8a:14:6d:5f:7a:b5:17:39:7b:a4:bd:93:66:04:01: 6c:9c:91:e8:1f:09:fc:ba:a7:f0:7c:cf:01:a2:27:57:ed:19: f5:fe:35:d2:ab:0a:90:36:1a:6e:6e:bc:b9:be:59:16:e1:e3: 75:b7:9b:80:d1:15:59:57:8f:35:b4:25:ce:ac:dc:9f:b0:be: 44:73:0f:a7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MUI0QzExMC8GA1UEBRMoRkJCQjZGMzhGNjcwM0QwMkQ3MjZFREU0NjIzOUIzQkVE OEExRjFFNDAeFw0yNjA0MTcwODMyMTJaFw0yNjA0MjQwODMyMTJaMBgxFjAUBgNV BAMTDTY5ZTFmMDBjLWE4OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoqFNFh8vPIAQKrJ80zT9p6y7MvuWhlSGloo8g53gBV9m9irN160AUhDwzdoX4 bCfxQ+0zRPLlpNElQMsJNAnrIlFBuVbPrJuPcrqe7fY98sn9q+vX/fARJOHou56d YEG5TwJiukTgdRf1Uxlkos4EHiZ1z69QyO2vKSN639M7/954L/LgABzd6LR+xZ6/ TDtsCqpEPhq2cy5Q30VNVYSPVYV8Smh0d1fveOUcyT9jnGpuaUWpQJZZQDBObwkT lLZa3kFpWM9Ai8ks9l1e1E3Fny43OEbMvwFcNBp3Fiypq9NDtSJsCYjEclevfDUM 7A6fzdJngtENjGGGTPCkngJzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdWR5/yCO n4hVpixFp4bsqf0fJBUwHwYDVR0jBBgwFoAU+7tvOPZwPQLXJu3kYjmzvtih8eQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxQjRDL0EwQjU3OUIyMDdF MjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFMWEp1M2tZam16dnRpaDhl US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLTd0dk9QWndQUUxYSnUza1lqbXp2dGloOGVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx QjRDL0EwQjU3OUIyMDdFMjExRjE4QzU2MjU2OTIxM0Q4QzY3Ly03dHZPUFp3UFFM WEp1M2tZam16dnRpaDhlUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBEKVwgar6ulRhxRtIdDB9tuZDK3fwZFGMWmIKS3Nx+BeiDB0AxQ8rLBgIEy/CI h13Sk0/hEHsh8ad5LzrE2ffFmD9exswbshUwHFE82gNqfpJKo5yb/ePDd3TwT43a joR73N0MAMM9NJbfh8pV96qDxYxnTXqBp14ILxXzi6DKYd1Krb/cCMck/fwgL/ut uG0hjxitKting12VPZI69FLDySV49D2FL2yQu5W1ywKEe2igipOqXeeKFG1ferUX OXukvZNmBAFsnJHoHwn8uqfwfM8BoidX7Rn1/jXSqwqQNhpubry5vlkW4eN1t5uA 0RVZV481tCXOrNyfsL5Ecw+n -----END CERTIFICATE-----Generated at Sat Apr 18 05:00:48 2026 by rpki-client