$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft File: mlZqEuG8RjUyb14CrunbcYHdO94.mft (raw, json) Hash identifier: A2nLhr8oJaNA2tPI19aVdRY9O23ROL8ryjjZJYbYSFE= Subject key identifier: 4D:D2:BD:8D:9D:98:C2:7F:F2:57:37:A6:55:FB:A8:12:43:36:1B:8B Authority key identifier: 9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE Certificate issuer: /CN=A9142B64/serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Certificate serial: 3539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft Manifest number: 3537 Signing time: Sat 18 Apr 2026 14:53:25 +0000 Manifest this update: Sat 18 Apr 2026 14:53:24 +0000 Manifest next update: Sat 25 Apr 2026 14:53:24 +0000 Files and hashes: 1: mlZqEuG8RjUyb14CrunbcYHdO94.crl (hash: brTqQyPupszhjU5goBx9RFDwPx4L4FO2DxrlRrKlND0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:53:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13625 (0x3539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B64, serialNumber=9A566A12E1BC4635326F5E02AEE9DB7181DD3BDE Validity Not Before: Apr 18 14:53:24 2026 GMT Not After : Apr 25 14:53:24 2026 GMT Subject: CN=69e39ae4-edf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:50:d1:b1:a4:86:4d:be:d3:fb:bf:d6:30: f3:24:27:39:48:a1:ea:e2:d2:5d:c6:b3:7d:b6:c8: e8:05:f0:eb:b9:fd:b4:e5:a3:41:90:58:aa:65:70: df:e5:09:c7:60:4c:85:c9:50:b6:3d:1d:84:4c:2f: 12:17:65:96:68:b6:b4:d7:0b:de:80:16:b3:44:d4: 8d:16:3d:10:c3:b1:72:01:39:c3:40:ba:77:3c:fc: 0e:6a:68:9d:f6:dd:07:2b:c0:f1:a3:69:f6:e4:e9: d7:f4:08:46:40:dc:1a:d9:0b:9e:85:9e:ed:ba:bc: a2:6d:51:72:78:bb:39:60:6c:6f:b3:21:14:8c:e6: 93:df:3b:72:7f:3a:7b:11:2f:60:73:a1:eb:eb:8c: ab:08:27:f3:85:7d:d5:55:16:7d:7d:3e:db:c7:61: 2d:7f:72:fd:68:63:d6:9c:ca:fd:c0:b2:3c:15:9e: 10:67:98:3e:60:b2:0b:42:ca:8c:fe:9a:a3:ad:0c: ed:d1:5c:89:d6:1e:0d:45:13:c5:09:94:a1:69:84: 6a:d1:c4:65:d9:de:95:3c:ff:27:ab:04:af:b6:10: 69:9e:ee:31:2b:e0:1d:e3:d3:e9:b8:a9:46:d9:19: 98:22:3c:57:39:4a:ca:26:86:af:78:82:0e:62:70: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D2:BD:8D:9D:98:C2:7F:F2:57:37:A6:55:FB:A8:12:43:36:1B:8B X509v3 Authority Key Identifier: keyid:9A:56:6A:12:E1:BC:46:35:32:6F:5E:02:AE:E9:DB:71:81:DD:3B:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlZqEuG8RjUyb14CrunbcYHdO94.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B64/EA59A85A1D9911E292B9C68608B02CD2/mlZqEuG8RjUyb14CrunbcYHdO94.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:9c:26:d1:c3:56:cb:b6:ac:65:89:a3:ac:2b:4f:3d:ae:e5: d5:01:87:8f:7c:5b:d2:0f:83:35:36:fa:30:ea:ab:a9:cb:99: e0:64:1b:f9:29:14:8a:65:d2:e7:83:54:a8:bb:33:e4:f9:89: 38:23:ba:90:21:35:c0:36:ca:6f:4b:c1:68:a4:83:a6:a6:7a: 75:6e:c1:83:ca:6a:ec:4b:42:ad:62:c5:15:b4:38:97:21:87: 00:73:06:b2:df:55:54:1d:46:48:07:dc:f6:7b:2a:c4:f7:d3: 31:f2:06:60:2b:b8:c6:0c:16:bd:c4:28:56:67:ce:a9:8e:28: 44:be:4d:e4:f5:a6:ae:95:7e:a9:06:82:ab:3d:fb:90:12:01: a0:a4:b0:b0:fb:f3:1c:32:6a:f0:e4:4e:06:f4:3c:3a:40:57: 5b:34:ee:33:41:f9:e8:61:95:cd:35:b4:c6:ff:24:b9:f2:c9: f3:bf:65:d6:10:7c:e8:1a:b5:a5:b7:77:11:44:59:bd:54:70: a9:4e:07:9d:f9:31:95:b3:8a:47:d7:13:46:27:75:ee:0b:94: 13:06:92:5e:91:cd:2c:ea:34:ce:d1:80:00:e0:d9:f1:87:a9: de:6c:ab:53:93:60:45:df:97:a8:10:86:76:b1:1c:8b:b2:1e: 2a:e6:36:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNjQxMTAvBgNVBAUTKDlBNTY2QTEyRTFCQzQ2MzUzMjZGNUUwMkFFRTlEQjcx ODFERDNCREUwHhcNMjYwNDE4MTQ1MzI0WhcNMjYwNDI1MTQ1MzI0WjAYMRYwFAYD VQQDEw02OWUzOWFlNC1lZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5H9Q0bGkhk2+0/u/1jDzJCc5SKHq4tJdxrN9tsjoBfDruf205aNBkFiqZXDf 5QnHYEyFyVC2PR2ETC8SF2WWaLa01wvegBazRNSNFj0Qw7FyATnDQLp3PPwOamid 9t0HK8Dxo2n25OnX9AhGQNwa2QuehZ7turyibVFyeLs5YGxvsyEUjOaT3ztyfzp7 ES9gc6Hr64yrCCfzhX3VVRZ9fT7bx2Etf3L9aGPWnMr9wLI8FZ4QZ5g+YLILQsqM /pqjrQzt0VyJ1h4NRRPFCZShaYRq0cRl2d6VPP8nqwSvthBpnu4xK+Ad49PpuKlG 2RmYIjxXOUrKJoaveIIOYnAaEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE3SvY2d mMJ/8lc3plX7qBJDNhuLMB8GA1UdIwQYMBaAFJpWahLhvEY1Mm9eAq7p23GB3Tve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI2NC9FQTU5QTg1QTFE OTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJqVXliMTRDcnVuYmNZSGRP OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sWnFFdUc4UmpVeWIxNENydW5iY1lIZE85NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkI2NC9FQTU5QTg1QTFEOTkxMUUyOTJCOUM2ODYwOEIwMkNEMi9tbFpxRXVHOFJq VXliMTRDcnVuYmNZSGRPOTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAA5wm0cNWy7asZYmjrCtPPa7l1QGHj3xb0g+DNTb6MOqrqcuZ4GQb+SkUimXS 54NUqLsz5PmJOCO6kCE1wDbKb0vBaKSDpqZ6dW7Bg8pq7EtCrWLFFbQ4lyGHAHMG st9VVB1GSAfc9nsqxPfTMfIGYCu4xgwWvcQoVmfOqY4oRL5N5PWmrpV+qQaCqz37 kBIBoKSwsPvzHDJq8OROBvQ8OkBXWzTuM0H56GGVzTW0xv8kufLJ879l1hB86Bq1 pbd3EURZvVRwqU4HnfkxlbOKR9cTRid17guUEwaSXpHNLOo0ztGAAODZ8Yep3myr U5NgRd+XqBCGdrEci7IeKuY29g== -----END CERTIFICATE-----Generated at Sun Apr 19 11:33:29 2026 by rpki-client