$ rpki-client -vvf rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft File: bw3LHOJgwKE4iU38RIrdySQTaYE.mft (raw, json) Hash identifier: dFIPShwWHpuoJpzdc9wOvvqKJT7xS4zeVz/XJo1mheo= Subject key identifier: F4:9D:CC:3F:DE:27:E6:F3:28:4A:B8:2C:85:F8:DE:CB:E2:74:63:41 Authority key identifier: 6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 Certificate issuer: /CN=A9142747/serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft Manifest number: 08A8 Signing time: Thu 16 Apr 2026 20:25:14 +0000 Manifest this update: Thu 16 Apr 2026 20:25:14 +0000 Manifest next update: Thu 23 Apr 2026 20:25:14 +0000 Files and hashes: 1: bw3LHOJgwKE4iU38RIrdySQTaYE.crl (hash: XcqlACampPe79P64RhddD4i2KQCly/hGwoZ4DmTVE+s=) 2: A15F9276E2A911EAADD4CF7AC4F9AE02.roa (hash: DuimfMM6Nd+7rzuoSGk/U4fJnXKvq7EhcZ9WZtUqy1I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142747, serialNumber=6F0DCB1CE260C0A138894DFC448ADDC924136981 Validity Not Before: Apr 16 20:25:14 2026 GMT Not After : Apr 23 20:25:14 2026 GMT Subject: CN=69e145aa-b39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:6e:1d:5c:56:87:e1:cc:d4:9f:0d:34:3c: fa:35:76:4a:33:2e:95:f2:6a:5c:08:08:11:88:6a: 74:a4:78:ce:47:fe:bc:d0:27:f3:f1:a6:85:c5:91: 93:71:df:50:cc:dd:d5:38:83:8c:c9:e7:bb:ea:2c: 0d:8a:ae:f1:c0:ee:f0:62:2e:5e:c2:40:b0:b3:38: 97:4b:d3:88:90:87:54:1f:d3:76:1d:7c:c6:6d:26: a3:5f:6e:02:6e:33:7d:b0:a5:1d:47:63:f6:18:c2: 2d:28:67:d0:13:40:de:7c:18:76:c2:07:a2:2a:f9: 7f:ac:97:01:8e:2e:bb:61:bd:54:33:08:4b:3e:5f: 90:e5:6e:46:65:e4:41:1a:b6:f9:1e:13:74:88:1b: 5a:c9:96:96:d8:c7:b5:14:03:27:0c:23:3f:c2:4a: 9d:e6:e0:94:5e:7a:ad:49:5a:19:ae:76:84:85:a8: b2:0c:e4:dc:39:f4:d3:c6:19:f9:38:80:08:03:be: a4:ff:08:f2:ad:17:0f:42:15:20:82:f5:81:df:47: 20:04:5d:5a:28:38:30:63:2e:e2:36:cb:e0:cb:89: 2b:78:4f:2a:32:4c:68:0b:37:46:31:aa:9f:6b:da: 8d:d7:e0:a6:d1:5c:a9:a9:c1:c9:8a:1a:84:22:48: f1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9D:CC:3F:DE:27:E6:F3:28:4A:B8:2C:85:F8:DE:CB:E2:74:63:41 X509v3 Authority Key Identifier: keyid:6F:0D:CB:1C:E2:60:C0:A1:38:89:4D:FC:44:8A:DD:C9:24:13:69:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bw3LHOJgwKE4iU38RIrdySQTaYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142747/AFE88120E20611EABB166D5FC4F9AE02/bw3LHOJgwKE4iU38RIrdySQTaYE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:78:ed:a2:61:d4:e2:19:6b:13:93:c6:1b:1e:27:95:10:7b: e6:be:00:0d:9f:83:f6:26:a4:08:84:1d:6c:b3:27:b4:27:f3: df:52:cb:e6:51:e6:83:fb:7e:fa:ff:2b:66:03:ec:2c:37:62: 8b:40:80:e1:cd:40:80:ee:3c:8e:db:d2:7f:7e:a8:73:3a:5e: de:c1:2d:14:50:14:34:41:e8:1b:9b:4e:fb:0e:74:2c:29:62: c6:10:34:7f:77:f5:f8:1d:e3:76:90:a9:8b:2f:7e:5c:a6:0c: a5:50:3a:5b:b1:3b:19:a7:de:e6:84:24:22:b4:72:4f:c7:20: e5:ab:40:d2:ee:aa:6c:f7:f3:54:aa:04:37:51:42:95:de:64: de:4e:f6:c2:dc:39:5b:75:38:21:b3:a2:13:74:7f:a4:83:dd: 0b:9b:e0:b7:5d:44:56:57:91:62:b6:e1:1a:5e:42:f8:7b:af: 77:b5:5a:82:04:f5:09:a7:37:79:07:54:7c:c2:2a:7b:08:f7: 55:30:fb:eb:06:0d:79:b3:42:77:a2:f4:95:64:29:6a:e9:4d: ba:5e:1b:c0:7c:39:b7:4f:e0:7e:2b:26:05:40:43:9f:88:aa: a1:24:7f:a9:af:63:1e:0f:97:76:1b:f6:68:6b:5f:e5:fa:c8: 9b:ff:40:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3NDcxMTAvBgNVBAUTKDZGMERDQjFDRTI2MEMwQTEzODg5NERGQzQ0OEFEREM5 MjQxMzY5ODEwHhcNMjYwNDE2MjAyNTE0WhcNMjYwNDIzMjAyNTE0WjAYMRYwFAYD VQQDEw02OWUxNDVhYS1iMzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzVuHVxWh+HM1J8NNDz6NXZKMy6V8mpcCAgRiGp0pHjOR/680Cfz8aaFxZGT cd9QzN3VOIOMyee76iwNiq7xwO7wYi5ewkCwsziXS9OIkIdUH9N2HXzGbSajX24C bjN9sKUdR2P2GMItKGfQE0DefBh2wgeiKvl/rJcBji67Yb1UMwhLPl+Q5W5GZeRB Grb5HhN0iBtayZaW2Me1FAMnDCM/wkqd5uCUXnqtSVoZrnaEhaiyDOTcOfTTxhn5 OIAIA76k/wjyrRcPQhUggvWB30cgBF1aKDgwYy7iNsvgy4kreE8qMkxoCzdGMaqf a9qN1+Cm0VypqcHJihqEIkjxQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPSdzD/e J+bzKEq4LIX43svidGNBMB8GA1UdIwQYMBaAFG8NyxziYMChOIlN/ESK3ckkE2mB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc0Ny9BRkU4ODEyMEUy MDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dLRTRpVTM4UklyZHlTUVRh WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J3M0xIT0pnd0tFNGlVMzhSSXJkeVNRVGFZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjc0Ny9BRkU4ODEyMEUyMDYxMUVBQkIxNjZENUZDNEY5QUUwMi9idzNMSE9KZ3dL RTRpVTM4UklyZHlTUVRhWUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg3jtomHU4hlrE5PGGx4nlRB75r4ADZ+D9iakCIQdbLMntCfz31LL5lHmg/t+ +v8rZgPsLDdii0CA4c1AgO48jtvSf36oczpe3sEtFFAUNEHoG5tO+w50LClixhA0 f3f1+B3jdpCpiy9+XKYMpVA6W7E7Gafe5oQkIrRyT8cg5atA0u6qbPfzVKoEN1FC ld5k3k72wtw5W3U4IbOiE3R/pIPdC5vgt11EVleRYrbhGl5C+Huvd7VaggT1Cac3 eQdUfMIqewj3VTD76wYNebNCd6L0lWQpaulNul4bwHw5t0/gfismBUBDn4iqoSR/ qa9jHg+Xdhv2aGtf5frIm/9AgA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:30:28 2026 by rpki-client