$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: K77q9lG3em8JqukFPKHGE7/qaA1kzcVDuplPDjn/tJs= Subject key identifier: BD:F2:E9:8E:E7:C1:8B:A8:8D:BC:ED:FE:9D:21:38:F0:7B:E9:1C:D9 Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 0118 Signing time: Fri 17 Apr 2026 05:34:53 +0000 Manifest this update: Fri 17 Apr 2026 05:34:53 +0000 Manifest next update: Fri 24 Apr 2026 05:34:53 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: KKKPX+2WczMBHrq1GnhY6swkAqyIj7qXXVeYAWNAiQo=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Apr 17 05:34:53 2026 GMT Not After : Apr 24 05:34:53 2026 GMT Subject: CN=69e1c67d-d2d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:63:e0:25:61:0c:d3:b2:af:9b:a9:19:86: 19:39:ff:ed:27:68:78:cd:b1:a6:d2:64:ee:7b:5a: a7:71:3f:ce:04:a5:99:37:f0:f1:6c:14:02:c3:c4: 02:a2:26:93:df:5a:55:08:19:bb:e8:ef:12:9e:94: 61:29:ac:b1:90:bc:e1:7b:94:e8:ad:65:28:81:3c: e8:d9:c0:0d:e4:6d:fc:0b:b4:cd:ef:4a:28:5c:f2: 65:0b:4f:d7:32:b6:be:d1:fb:5d:e9:62:a2:09:4f: b9:1c:0a:fc:3c:6d:63:d7:e3:50:bf:ee:76:16:fd: 3e:fe:9b:03:de:d3:aa:ef:ea:c6:11:e8:35:1a:a7: 37:0e:1f:e6:8c:e5:9b:68:64:27:bf:84:11:93:d3: dd:9a:0a:17:cf:88:3c:7b:21:3d:e1:0e:9b:d6:b6: 5f:10:a7:65:5b:ab:8a:7f:fd:e2:9a:da:d5:8f:a2: 66:3f:e8:f6:1b:bc:8e:05:e5:9b:a9:db:ff:35:b1: 98:a1:8e:89:70:43:51:a9:33:db:23:c2:19:b7:08: f1:ad:c8:ad:14:c3:2a:29:52:78:55:96:f3:b2:3f: df:45:a3:d8:47:e6:f0:9f:b9:4a:09:f6:0b:a3:d4: d3:3c:f9:49:15:3a:8d:95:63:e7:5f:29:32:ba:bb: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F2:E9:8E:E7:C1:8B:A8:8D:BC:ED:FE:9D:21:38:F0:7B:E9:1C:D9 X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:7a:1f:0a:38:d0:05:b4:23:a6:ae:d9:80:45:5d:16:d6:09: b0:ed:01:54:55:d7:8c:26:21:71:c2:7d:d5:0c:ae:7e:67:19: 73:d7:61:eb:92:a3:cf:9b:8b:f9:db:e7:6c:bb:37:43:6a:37: ab:cf:e3:46:15:57:9d:68:90:57:b0:28:55:58:0e:f3:76:ae: aa:95:2e:8c:56:98:57:09:0e:5e:1f:8f:2c:2c:e7:09:bc:3f: 54:8a:07:a3:46:c2:55:90:b4:69:84:41:90:a0:04:75:8b:5d: a0:78:c8:2f:71:a2:a1:5a:7e:ce:19:3a:df:9f:0b:3e:ad:aa: 8d:34:07:5e:50:dc:ff:80:0a:6a:fa:ad:f6:ed:dd:81:7a:b6: f5:76:48:0e:30:b9:24:1a:a2:37:ea:b3:0e:c4:e8:82:3b:3c: 5f:f8:f2:13:e3:e7:b2:58:3b:0f:a4:b9:82:3d:61:ac:95:6d: 1f:40:ae:66:28:1f:33:16:78:68:16:ce:e8:21:76:26:89:4c: 63:a3:64:97:2f:6a:8b:a4:e5:d7:a1:5e:28:7e:3c:f9:e6:68: a3:c0:eb:c0:6a:00:7b:10:4b:b6:56:28:23:94:7c:24:59:52: e3:da:73:99:93:c1:78:d4:b7:e0:b0:04:fd:fe:8a:6e:85:b0: 52:e8:2d:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjYwNDE3MDUzNDUzWhcNMjYwNDI0MDUzNDUzWjAYMRYwFAYD VQQDEw02OWUxYzY3ZC1kMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqVj4CVhDNOyr5upGYYZOf/tJ2h4zbGm0mTue1qncT/OBKWZN/DxbBQCw8QC oiaT31pVCBm76O8SnpRhKayxkLzhe5TorWUogTzo2cAN5G38C7TN70ooXPJlC0/X Mra+0ftd6WKiCU+5HAr8PG1j1+NQv+52Fv0+/psD3tOq7+rGEeg1Gqc3Dh/mjOWb aGQnv4QRk9PdmgoXz4g8eyE94Q6b1rZfEKdlW6uKf/3imtrVj6JmP+j2G7yOBeWb qdv/NbGYoY6JcENRqTPbI8IZtwjxrcitFMMqKVJ4VZbzsj/fRaPYR+bwn7lKCfYL o9TTPPlJFTqNlWPnXykyuruzPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3y6Y7n wYuojbzt/p0hOPB76RzZMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeHofCjjQBbQjpq7ZgEVdFtYJsO0BVFXXjCYhccJ91QyufmcZc9dh65Kjz5uL +dvnbLs3Q2o3q8/jRhVXnWiQV7AoVVgO83auqpUujFaYVwkOXh+PLCznCbw/VIoH o0bCVZC0aYRBkKAEdYtdoHjIL3GioVp+zhk6358LPq2qjTQHXlDc/4AKavqt9u3d gXq29XZIDjC5JBqiN+qzDsTogjs8X/jyE+Pnslg7D6S5gj1hrJVtH0CuZigfMxZ4 aBbO6CF2JolMY6Nkly9qi6Tl16FeKH48+eZoo8DrwGoAexBLtlYoI5R8JFlS49pz mZPBeNS34LAE/f6KboWwUugtKg== -----END CERTIFICATE-----Generated at Fri Apr 17 18:25:12 2026 by rpki-client