$ rpki-client -vvf rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft File: r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft (raw, json) Hash identifier: 8jjVw+BkHxGVapI0ejWdCsCdZbGBHhWmlZAgsOTukIk= Subject key identifier: C3:07:E4:95:B9:BF:A8:66:2E:6A:77:BB:B8:69:6E:54:7E:B2:C0:F9 Authority key identifier: AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 Certificate issuer: /CN=A9147750/serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft Manifest number: 0F Signing time: Fri 17 Apr 2026 08:48:57 +0000 Manifest this update: Fri 17 Apr 2026 08:48:57 +0000 Manifest next update: Fri 24 Apr 2026 08:48:57 +0000 Files and hashes: 1: r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl (hash: j64HCORs6GlzgiDvyXFVGXUShJzF7pTmy78fVSTaeS8=) 2: C6185536273011F1A8149F74AC833773.roa (hash: XZNI2I+TEYcAvEVGQBDMHCtqr9clDTEVottNypWj6ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147750, serialNumber=AF568EBC26B14C1281E812837786B5A38BC78B87 Validity Not Before: Apr 17 08:48:57 2026 GMT Not After : Apr 24 08:48:57 2026 GMT Subject: CN=69e1f3f9-c8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4f:89:10:0d:5c:b9:43:1f:8e:2b:f0:40:14: df:1a:18:34:19:42:c1:d5:a9:25:d5:61:20:31:5f: dc:7f:9a:ad:d1:c3:f1:ed:84:87:a4:ac:c1:d7:8f: ca:8f:c0:64:d0:25:29:35:69:a4:78:7e:78:14:31: c3:76:cc:77:15:0a:f5:c1:d7:65:55:5b:6f:32:79: 86:14:a3:7d:49:6a:e3:bd:0e:6c:3b:83:8c:a8:30: 35:f2:4f:25:9e:4b:a6:85:83:25:6f:a3:09:03:e2: 80:41:1e:d2:99:c3:86:fb:58:03:c7:9d:f5:9f:6f: ed:20:ce:ec:b9:83:d0:41:89:ea:73:94:91:15:d3: 45:5e:dd:31:7f:ab:11:75:0c:05:9f:69:29:1c:ee: 5b:24:8d:49:23:e8:9e:2f:b2:aa:69:cb:02:b8:8e: 20:f9:00:26:43:91:7e:c4:eb:15:34:14:03:1e:d1: b6:62:88:c8:78:93:08:63:cf:75:fd:7b:68:92:df: fc:2b:af:eb:11:fb:0c:a3:74:66:27:a8:b9:a1:18: 11:d5:99:a3:1a:e1:1e:98:42:66:06:06:fd:44:30: 54:c5:5f:a2:aa:02:1d:7d:b1:f9:ca:6c:db:eb:0a: 7e:5a:79:69:29:9d:ea:ea:ba:f7:ea:25:77:a3:de: a4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:07:E4:95:B9:BF:A8:66:2E:6A:77:BB:B8:69:6E:54:7E:B2:C0:F9 X509v3 Authority Key Identifier: keyid:AF:56:8E:BC:26:B1:4C:12:81:E8:12:83:77:86:B5:A3:8B:C7:8B:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1aOvCaxTBKB6BKDd4a1o4vHi4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147750/4C7E0FAA272F11F1843252FEAB833773/r1aOvCaxTBKB6BKDd4a1o4vHi4c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a5:e8:c6:ab:7d:0c:a4:02:17:c2:3f:10:1a:fe:12:92:0e: 3e:3a:53:37:b5:2f:bb:fd:83:8c:27:59:11:0c:d2:2b:0e:13: 24:24:7e:fc:fc:cf:9c:15:ee:be:28:6c:59:63:f3:78:98:7f: ac:03:83:ce:87:2d:9f:29:c2:37:09:83:5d:02:49:94:76:6c: 7d:df:a2:54:7c:5b:62:67:5e:5f:83:0b:e4:cf:ae:33:ba:05: 6f:e1:7f:41:6c:2b:43:5f:53:99:98:31:7d:3e:f0:a2:43:9a: 77:63:2d:cb:33:dd:37:03:d8:0d:74:75:fa:c2:b7:ff:f3:27: 66:70:02:3e:31:3e:2e:c1:9a:ff:4e:01:47:85:45:ca:d7:4d: 4f:aa:b4:4f:b5:ba:c1:90:a9:a6:73:7a:a7:3a:d9:b6:c1:3f: 77:d2:af:2e:6b:ca:f3:3b:97:a1:46:6a:e5:e9:d7:57:e4:42: 4e:0e:26:1e:b8:e2:b8:d2:25:8d:a8:cc:e0:36:86:5d:c4:b1: 28:21:4a:d9:9d:9f:48:6e:01:d1:35:9b:db:0d:3d:c7:3b:b8: 12:f6:f0:9b:e4:c5:76:f1:e0:bf:38:84:35:4e:6b:69:cc:31: 16:71:49:8d:b6:8e:e5:4a:26:05:5a:9a:84:e2:62:97:01:8b: 93:0a:8f:e3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Nzc1MDExMC8GA1UEBRMoQUY1NjhFQkMyNkIxNEMxMjgxRTgxMjgzNzc4NkI1QTM4 QkM3OEI4NzAeFw0yNjA0MTcwODQ4NTdaFw0yNjA0MjQwODQ4NTdaMBgxFjAUBgNV BAMTDTY5ZTFmM2Y5LWM4ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCT4kQDVy5Qx+OK/BAFN8aGDQZQsHVqSXVYSAxX9x/mq3Rw/HthIekrMHXj8qP wGTQJSk1aaR4fngUMcN2zHcVCvXB12VVW28yeYYUo31JauO9Dmw7g4yoMDXyTyWe S6aFgyVvowkD4oBBHtKZw4b7WAPHnfWfb+0gzuy5g9BBiepzlJEV00Ve3TF/qxF1 DAWfaSkc7lskjUkj6J4vsqppywK4jiD5ACZDkX7E6xU0FAMe0bZiiMh4kwhjz3X9 e2iS3/wrr+sR+wyjdGYnqLmhGBHVmaMa4R6YQmYGBv1EMFTFX6KqAh19sfnKbNvr Cn5aeWkpnerquvfqJXej3qTjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUwwfklbm/ qGYuane7uGluVH6ywPkwHwYDVR0jBBgwFoAUr1aOvCaxTBKB6BKDd4a1o4vHi4cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NzUwLzRDN0UwRkFBMjcy RjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJLQjZCS0RkNGExbzR2SGk0 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjFhT3ZDYXhUQktCNkJLRGQ0YTFvNHZIaTRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NzUwLzRDN0UwRkFBMjcyRjExRjE4NDMyNTJGRUFCODMzNzczL3IxYU92Q2F4VEJL QjZCS0RkNGExbzR2SGk0Yy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB0pejGq30MpAIXwj8QGv4Skg4+OlM3tS+7/YOMJ1kRDNIrDhMkJH78/M+cFe6+ KGxZY/N4mH+sA4POhy2fKcI3CYNdAkmUdmx936JUfFtiZ15fgwvkz64zugVv4X9B bCtDX1OZmDF9PvCiQ5p3Yy3LM903A9gNdHX6wrf/8ydmcAI+MT4uwZr/TgFHhUXK 101PqrRPtbrBkKmmc3qnOtm2wT930q8ua8rzO5ehRmrl6ddX5EJODiYeuOK40iWN qMzgNoZdxLEoIUrZnZ9IbgHRNZvbDT3HO7gS9vCb5MV28eC/OIQ1TmtpzDEWcUmN to7lSiYFWpqE4mKXAYuTCo/j -----END CERTIFICATE-----Generated at Fri Apr 17 17:42:12 2026 by rpki-client