$ rpki-client -vvf rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft File: rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft (raw, json) Hash identifier: nvAFwGYd4Wj3cT9rDchTIjlXqNOI6j/Ow7WbDl+DxQA= Subject key identifier: B7:47:9B:EB:54:FD:20:CB:09:6E:33:35:82:76:A2:DB:1D:A5:0B:8B Authority key identifier: AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 Certificate issuer: /CN=A9152C89/serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft Manifest number: 0522 Signing time: Thu 16 Apr 2026 23:29:16 +0000 Manifest this update: Thu 16 Apr 2026 23:29:15 +0000 Manifest next update: Thu 23 Apr 2026 23:29:15 +0000 Files and hashes: 1: rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl (hash: 9OW4xIIlotIKoumegN0ctm5QP0QV9VpUQSnFy4iQZcc=) 2: 1291593861AC11ED9EFE1B4DC4F9AE02.roa (hash: JfzH8J7I3Xe9UEf/VNBPygrk3zbv7cEsEtGZ7BOGvr8=) 3: 33DAC0AE640211EDA193F079C4F9AE02.roa (hash: ybViUyQ0AAqzvnSq9WOp3P59LX2uT96EcoWguD8yea0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152C89, serialNumber=ACD4F832F6D83978BE6959D6983FE358F3B7A925 Validity Not Before: Apr 16 23:29:15 2026 GMT Not After : Apr 23 23:29:15 2026 GMT Subject: CN=69e170cc-aeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:5d:41:df:39:8e:93:27:0f:b1:39:0a:e0: 8f:f8:e2:5b:e5:ec:7f:c1:58:11:46:f5:55:96:e3: 58:99:40:48:71:93:c0:a5:23:33:75:67:30:59:99: 26:48:9e:21:74:b0:72:e4:f5:8b:4f:7f:ed:b8:8f: 6c:ad:37:6b:68:50:eb:7c:50:78:4a:09:10:8c:6a: 98:4f:fe:3f:1d:6e:be:43:7a:b1:5c:fb:9f:9b:e1: 7b:d4:5a:ff:52:e7:72:f0:fb:dc:80:f9:12:b9:48: 35:60:f8:80:94:5f:af:ea:6f:59:e4:33:52:73:40: 69:f3:cc:2d:9c:f5:44:ee:f1:26:dd:01:55:c2:6a: 57:48:fc:b5:c1:73:91:fd:99:24:bd:1e:5f:70:01: b5:29:03:e1:19:a5:7a:8d:1e:63:db:1d:d3:5e:ab: 2b:9d:f4:3e:01:40:95:3c:e2:aa:02:3e:87:05:61: 3b:9e:f0:49:47:2e:a3:71:a7:3c:09:70:64:b9:98: 55:05:69:77:67:98:7b:f8:4f:20:f0:af:77:95:20: 26:13:08:30:49:1b:ef:d1:af:6d:91:72:61:a8:d4: fe:0e:79:14:92:48:ba:7b:83:50:9f:b0:b8:cf:48: 8d:54:1a:a3:63:c6:17:fe:a5:ef:75:4c:b9:3c:02: 07:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:47:9B:EB:54:FD:20:CB:09:6E:33:35:82:76:A2:DB:1D:A5:0B:8B X509v3 Authority Key Identifier: keyid:AC:D4:F8:32:F6:D8:39:78:BE:69:59:D6:98:3F:E3:58:F3:B7:A9:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNT4MvbYOXi-aVnWmD_jWPO3qSU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152C89/8FA97AFE451011EC8C86ED48C4F9AE02/rNT4MvbYOXi-aVnWmD_jWPO3qSU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8b:ed:18:b2:84:1f:d7:20:b7:63:e5:66:ce:ec:ab:de:d6: 7c:7c:65:22:fe:e6:56:c0:fb:32:86:0b:16:60:70:82:37:01: 36:09:60:16:72:58:13:a9:e6:06:71:1c:13:11:41:d1:ff:48: 15:e9:b7:df:bf:b6:3e:8d:02:ab:97:42:26:ee:7b:4f:da:9a: 21:4b:85:9d:11:a7:2b:72:3a:0c:7d:d6:ce:96:20:58:b4:6d: 1a:63:9f:e6:25:77:8d:97:e2:5b:43:bb:01:64:bf:f8:5b:4f: 18:ef:ad:a5:95:4c:a8:27:31:dc:48:6f:af:5a:4e:f4:49:2d: 13:c0:eb:9a:d2:41:88:86:5b:4a:2c:ac:60:44:5f:6a:a6:ef: 1d:e4:49:30:f9:da:f9:7d:74:ec:7f:72:b6:67:99:1d:11:81: e0:57:a4:5c:c2:8c:7c:b8:7e:52:b5:bc:b4:08:af:ec:8f:96: b4:ce:ab:85:f1:42:c3:b7:72:53:28:2a:c4:99:54:47:f6:a0: 53:3c:9d:95:4c:27:71:c1:0f:b6:3f:0d:68:2e:bf:07:62:17: 07:4b:ce:c1:d3:dd:00:f3:ce:08:12:b2:3b:a2:49:7c:5b:1e: 85:49:c1:60:94:35:f5:0c:c4:6b:a9:91:f1:b5:92:5a:42:77: 6e:c5:27:6e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJDODkxMTAvBgNVBAUTKEFDRDRGODMyRjZEODM5NzhCRTY5NTlENjk4M0ZFMzU4 RjNCN0E5MjUwHhcNMjYwNDE2MjMyOTE1WhcNMjYwNDIzMjMyOTE1WjAYMRYwFAYD VQQDEw02OWUxNzBjYy1hZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BBdQd85jpMnD7E5CuCP+OJb5ex/wVgRRvVVluNYmUBIcZPApSMzdWcwWZkm SJ4hdLBy5PWLT3/tuI9srTdraFDrfFB4SgkQjGqYT/4/HW6+Q3qxXPufm+F71Fr/ Uudy8PvcgPkSuUg1YPiAlF+v6m9Z5DNSc0Bp88wtnPVE7vEm3QFVwmpXSPy1wXOR /ZkkvR5fcAG1KQPhGaV6jR5j2x3TXqsrnfQ+AUCVPOKqAj6HBWE7nvBJRy6jcac8 CXBkuZhVBWl3Z5h7+E8g8K93lSAmEwgwSRvv0a9tkXJhqNT+DnkUkki6e4NQn7C4 z0iNVBqjY8YX/qXvdUy5PAIHQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLdHm+tU /SDLCW4zNYJ2otsdpQuLMB8GA1UdIwQYMBaAFKzU+DL22Dl4vmlZ1pg/41jzt6kl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkM4OS84RkE5N0FGRTQ1 MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9YaS1hVm5XbURfaldQTzNx U1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JOVDRNdmJZT1hpLWFWbldtRF9qV1BPM3FTVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkM4OS84RkE5N0FGRTQ1MTAxMUVDOEM4NkVENDhDNEY5QUUwMi9yTlQ0TXZiWU9Y aS1hVm5XbURfaldQTzNxU1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbIvtGLKEH9cgt2PlZs7sq97WfHxlIv7mVsD7MoYLFmBwgjcBNglgFnJYE6nm BnEcExFB0f9IFem337+2Po0Cq5dCJu57T9qaIUuFnRGnK3I6DH3WzpYgWLRtGmOf 5iV3jZfiW0O7AWS/+FtPGO+tpZVMqCcx3Ehvr1pO9EktE8DrmtJBiIZbSiysYERf aqbvHeRJMPna+X107H9ytmeZHRGB4FekXMKMfLh+UrW8tAiv7I+WtM6rhfFCw7dy UygqxJlUR/agUzydlUwnccEPtj8NaC6/B2IXB0vOwdPdAPPOCBKyO6JJfFsehUnB YJQ19QzEa6mR8bWSWkJ3bsUnbg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:34:00 2026 by rpki-client