$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft File: gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft (raw, json) Hash identifier: CdOsbl+IliDKNfRqxGAKKRMfoWBJGqmpwELCPgwLssI= Subject key identifier: 16:85:3C:31:34:62:6D:06:98:27:C9:84:51:89:37:D7:90:18:25:5D Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 Certificate issuer: /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft Manifest number: B7 Signing time: Fri 17 Apr 2026 06:43:58 +0000 Manifest this update: Fri 17 Apr 2026 06:43:57 +0000 Manifest next update: Fri 24 Apr 2026 06:43:57 +0000 Files and hashes: 1: gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl (hash: cyMGWLlj4ARknLDEaYXPTAXhIYTHdxyn5J260XsXUpw=) 2: 04FD874E1FDF11F094B3136AC4F9AE02.roa (hash: FnYin0UiwJQP6hi7lM7gz0Ixigka5o2aszBJSr3nCik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254 Validity Not Before: Apr 17 06:43:57 2026 GMT Not After : Apr 24 06:43:57 2026 GMT Subject: CN=69e1d6ad-6ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:38:de:bd:77:76:08:9c:bf:a7:4c:b0:86:46: 70:35:38:37:a0:0b:28:a6:03:2b:0b:c9:38:a4:d0: 12:82:a7:08:f3:61:c9:f9:ea:ab:43:32:95:ad:50: 69:91:2f:03:2f:d7:b2:82:a8:46:8f:5d:ef:68:66: bc:23:22:56:bb:0a:e3:3b:72:c4:e4:ab:2d:a6:b1: dd:b2:5c:fc:fc:57:01:02:49:3f:a4:f0:7a:51:44: cd:54:02:c2:8f:97:dd:ce:45:1f:7f:90:e0:2d:e7: 25:9c:5b:c4:f3:ad:37:96:36:99:f4:de:67:eb:b0: de:93:dd:85:ba:fd:d5:fd:fc:63:2f:06:35:62:fe: 9a:22:15:42:e8:04:df:55:2b:19:5f:45:3d:71:c9: 0e:e4:32:d9:be:0a:e4:a6:19:da:ee:03:2d:df:0a: 09:0e:79:73:d0:a6:f0:6d:9d:55:bd:05:48:91:80: 32:37:a1:53:e4:8c:e2:2c:54:c0:ae:4b:22:ca:c4: 55:f5:a6:75:76:1b:ce:44:6f:ff:f8:10:00:67:63: 3f:ee:08:46:72:79:c5:70:e4:f7:1a:0e:6d:d2:b7: e7:61:e8:63:5a:a7:fa:ee:0f:84:b1:8c:49:ff:cd: 3d:3e:21:74:02:fa:89:46:f5:e9:80:92:b4:0d:c5: 61:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:85:3C:31:34:62:6D:06:98:27:C9:84:51:89:37:D7:90:18:25:5D X509v3 Authority Key Identifier: keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:fb:c4:f8:cc:35:c1:e9:79:3b:b5:27:cd:c3:be:25:4d:f9: 2b:34:5b:57:b0:02:a5:f3:c9:61:95:e8:da:bf:13:12:30:2f: 41:ca:ce:c0:e1:51:f1:e3:1d:3e:21:d5:30:06:48:12:4c:2d: 00:2f:a0:2c:95:96:db:31:2c:07:ab:c9:37:40:62:6e:f1:1a: f5:f2:cf:fa:39:64:67:fb:ac:b5:aa:f7:88:8e:43:60:a4:04: f4:29:7c:d2:32:32:f7:af:ec:95:14:41:37:3e:91:2a:81:b6: fb:54:a4:69:b8:44:55:50:da:48:1f:6b:a6:6d:2a:bb:ab:ad: d7:f8:11:ef:4c:3b:82:0a:3c:f8:f0:d6:8f:93:02:53:6b:c8: fe:04:93:6f:6d:48:aa:2a:7e:df:5e:ea:55:ca:60:c0:ee:a3: f6:3a:fd:2d:96:80:39:b0:7e:df:19:06:a5:f2:3e:bd:69:4b: e9:93:3f:a1:27:22:4f:3b:69:07:5b:2d:04:f7:86:9e:5d:12: dd:74:42:67:00:8b:41:8a:65:11:83:03:ae:20:80:e8:85:ca: 84:24:88:b4:bf:f3:93:24:5e:a6:f4:fc:54:f6:4f:71:3e:87: c5:fc:e6:7a:5c:89:bc:b3:47:0e:89:37:6b:2f:71:9b:f8:d1: 41:cb:b5:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZFQjcxMTAvBgNVBAUTKDgwNUFBQTM2QzAxN0U5RTg2QzMwMzJBM0RBQUU4RDI2 OEJERDQyNTQwHhcNMjYwNDE3MDY0MzU3WhcNMjYwNDI0MDY0MzU3WjAYMRYwFAYD VQQDEw02OWUxZDZhZC02ZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwzjevXd2CJy/p0ywhkZwNTg3oAsopgMrC8k4pNASgqcI82HJ+eqrQzKVrVBp kS8DL9eygqhGj13vaGa8IyJWuwrjO3LE5KstprHdslz8/FcBAkk/pPB6UUTNVALC j5fdzkUff5DgLeclnFvE8603ljaZ9N5n67Dek92Fuv3V/fxjLwY1Yv6aIhVC6ATf VSsZX0U9cckO5DLZvgrkphna7gMt3woJDnlz0KbwbZ1VvQVIkYAyN6FT5IziLFTA rksiysRV9aZ1dhvORG//+BAAZ2M/7ghGcnnFcOT3Gg5t0rfnYehjWqf67g+EsYxJ /809PiF0AvqJRvXpgJK0DcVhMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBaFPDE0 Ym0GmCfJhFGJN9eQGCVdMB8GA1UdIwQYMBaAFIBaqjbAF+nobDAyo9qujSaL3UJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkVCNy84MzFBODQyQTFG REUxMUYwQjk2NTQ3MTdDNEY5QUUwMi9nRnFxTnNBWDZlaHNNREtqMnE2TkpvdmRR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkVCNy84MzFBODQyQTFGREUxMUYwQjk2NTQ3MTdDNEY5QUUwMi9nRnFxTnNBWDZl aHNNREtqMnE2TkpvdmRRbFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANfvE+Mw1wel5O7UnzcO+JU35KzRbV7ACpfPJYZXo2r8TEjAvQcrOwOFR8eMd PiHVMAZIEkwtAC+gLJWW2zEsB6vJN0BibvEa9fLP+jlkZ/ustar3iI5DYKQE9Cl8 0jIy96/slRRBNz6RKoG2+1SkabhEVVDaSB9rpm0qu6ut1/gR70w7ggo8+PDWj5MC U2vI/gSTb21Iqip+317qVcpgwO6j9jr9LZaAObB+3xkGpfI+vWlL6ZM/oSciTztp B1stBPeGnl0S3XRCZwCLQYplEYMDriCA6IXKhCSItL/zkyRepvT8VPZPcT6Hxfzm elyJvLNHDok3ay9xm/jRQcu1vQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:56:14 2026 by rpki-client