$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft File: CKORxrOJyBDpW8YTnOyynV05WMQ.mft (raw, json) Hash identifier: wXu1lOHU8rkkwcbCyHWQNXgkuL2iSzx4FH8Act74iKc= Subject key identifier: 2E:2B:6D:46:F2:87:9A:15:84:E4:44:BF:59:04:89:0A:07:AB:AB:3D Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft Manifest number: CA Signing time: Fri 17 Apr 2026 06:33:50 +0000 Manifest this update: Fri 17 Apr 2026 06:33:50 +0000 Manifest next update: Fri 24 Apr 2026 06:33:50 +0000 Files and hashes: 1: CKORxrOJyBDpW8YTnOyynV05WMQ.crl (hash: 5WI0uRaV9+nuAfI6VFjnEYsxnY/26wuWjQOV6V+xyhY=) 2: EE04266A08C811F09F9B7B57C4F9AE02.roa (hash: cNFpk4xvE3+xhetFVsHGb9R/5Z63kJbCCHb2RP80z/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Validity Not Before: Apr 17 06:33:50 2026 GMT Not After : Apr 24 06:33:50 2026 GMT Subject: CN=69e1d44e-9119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:87:6b:6e:a7:72:f1:2a:db:cb:7d:d5:16:13: d4:20:58:db:90:5d:db:2c:fb:fe:57:9a:c9:3e:ac: 1f:fc:71:ad:44:df:a5:60:77:b1:9f:fa:18:20:76: 56:45:5c:b2:64:6a:eb:7a:13:70:f3:70:f0:28:d2: 23:30:de:e0:4f:2a:0c:7b:16:5c:c3:ec:b1:87:95: 1c:c6:b9:8e:26:a1:24:7e:c6:af:64:fa:76:9d:2f: 78:4b:ae:47:52:4d:ef:d7:26:49:0b:03:2f:dd:b4: 40:eb:78:c1:64:4d:7e:aa:5d:b8:24:bd:1e:13:fa: d1:51:00:cd:d7:17:b4:09:64:9e:8b:1c:5c:a7:18: be:ae:f9:77:a3:b8:c9:b6:88:4f:d3:ef:93:08:d7: 90:87:05:10:b7:df:5b:15:bd:38:1b:9a:93:c5:5b: ec:fa:e2:08:c2:dd:eb:bd:f1:43:e1:d1:e8:73:e1: fd:66:85:ef:8b:1d:c1:be:15:d4:3a:72:23:a1:4e: b7:dc:9a:c5:28:dc:9e:3e:43:a4:ce:b2:3e:30:1f: 27:da:2c:70:9e:e6:50:12:7a:be:05:16:b2:ac:b8: f9:d4:f3:27:31:a9:a8:58:69:7e:36:db:a6:89:e2: 76:51:0c:f4:18:ca:59:5f:e1:d3:f9:8e:f7:84:eb: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:2B:6D:46:F2:87:9A:15:84:E4:44:BF:59:04:89:0A:07:AB:AB:3D X509v3 Authority Key Identifier: keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:d9:c6:1e:af:64:7e:b8:86:d2:a5:a9:ae:ff:43:f3:b7:22: 2f:06:d3:4b:d6:27:17:b6:88:54:dd:de:c4:19:4f:49:72:6e: fb:fc:56:d8:2a:49:00:a5:0b:19:0e:9e:13:0a:61:2b:16:35: 5b:55:1f:6c:78:5d:55:08:fe:ee:8c:f7:e9:c5:45:2a:6b:b2: 69:89:62:6f:f5:cf:9c:95:ea:95:b0:b3:a4:07:b0:98:48:9a: 2b:46:95:0d:4d:71:26:5b:c9:85:b2:08:fc:a2:0b:19:02:40: 1c:d9:ea:4d:62:e8:e4:51:51:7d:61:4e:72:55:1b:fd:6f:9c: 94:2f:2d:f0:59:fd:c1:1e:b7:93:a5:58:9b:24:b5:2a:3e:88: 9e:44:f6:8e:9d:45:fe:bb:d7:97:b9:f9:17:0c:8c:a9:cf:4c: 69:c1:00:64:8f:14:0f:e4:8c:79:48:48:cf:26:55:c0:bd:3e: df:3a:87:ce:9b:6c:17:f6:88:ce:82:65:4d:23:c2:d9:47:c5: 6d:3b:45:71:dc:5a:c7:47:5c:25:e6:e3:e6:c4:e9:ab:ab:5e: 5d:63:36:c6:7c:40:ae:02:d5:b2:6e:a8:85:65:a8:ff:65:05: 02:a5:39:b9:22:6b:d9:e0:42:a6:69:e9:c6:0b:07:83:8f:62: 3f:f2:a2:ad -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVFMDkxMTAvBgNVBAUTKDA4QTM5MUM2QjM4OUM4MTBFOTVCQzYxMzlDRUNCMjlE NUQzOTU4QzQwHhcNMjYwNDE3MDYzMzUwWhcNMjYwNDI0MDYzMzUwWjAYMRYwFAYD VQQDEw02OWUxZDQ0ZS05MTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIdrbqdy8Srby33VFhPUIFjbkF3bLPv+V5rJPqwf/HGtRN+lYHexn/oYIHZW RVyyZGrrehNw83DwKNIjMN7gTyoMexZcw+yxh5UcxrmOJqEkfsavZPp2nS94S65H Uk3v1yZJCwMv3bRA63jBZE1+ql24JL0eE/rRUQDN1xe0CWSeixxcpxi+rvl3o7jJ tohP0++TCNeQhwUQt99bFb04G5qTxVvs+uIIwt3rvfFD4dHoc+H9ZoXvix3BvhXU OnIjoU633JrFKNyePkOkzrI+MB8n2ixwnuZQEnq+BRayrLj51PMnMamoWGl+Ntum ieJ2UQz0GMpZX+HT+Y73hOv6gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4rbUby h5oVhOREv1kEiQoHq6s9MB8GA1UdIwQYMBaAFAijkcazicgQ6VvGE5zssp1dOVjE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUUwOS84NzA1NUIzMjA4 QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlCRHBXOFlUbk95eW5WMDVX TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUUwOS84NzA1NUIzMjA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9DS09SeHJPSnlC RHBXOFlUbk95eW5WMDVXTVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwNnGHq9kfriG0qWprv9D87ciLwbTS9YnF7aIVN3exBlPSXJu+/xW2CpJAKUL GQ6eEwphKxY1W1UfbHhdVQj+7oz36cVFKmuyaYlib/XPnJXqlbCzpAewmEiaK0aV DU1xJlvJhbII/KILGQJAHNnqTWLo5FFRfWFOclUb/W+clC8t8Fn9wR63k6VYmyS1 Kj6InkT2jp1F/rvXl7n5FwyMqc9MacEAZI8UD+SMeUhIzyZVwL0+3zqHzptsF/aI zoJlTSPC2UfFbTtFcdxax0dcJebj5sTpq6teXWM2xnxArgLVsm6ohWWo/2UFAqU5 uSJr2eBCpmnpxgsHg49iP/KirQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:04:17 2026 by rpki-client