$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json) Hash identifier: D4W0d3lvqDYddUY/VQ5iOPlFIw0qoLYIKUAMP8VSjaQ= Subject key identifier: 35:2D:8F:BC:A8:81:97:E1:1C:9C:49:63:8C:43:A2:77:83:6B:A9:D0 Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft Manifest number: 16 Signing time: Wed 15 Apr 2026 08:35:02 +0000 Manifest this update: Wed 15 Apr 2026 08:35:02 +0000 Manifest next update: Wed 22 Apr 2026 08:35:02 +0000 Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: DS5kaMf6/ySQFJtn58tudBfKSzKOS1RlS/1Tm0BMvN4=) 2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: SY4VqkxyGoejCFuLzZISWSny3WC42+Mi6EDjqr/Szpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:35:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: Apr 15 08:35:02 2026 GMT Not After : Apr 22 08:35:02 2026 GMT Subject: CN=69df4db6-3c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7d:ee:c5:3f:62:ed:8a:bd:09:1a:95:b3:93: 90:69:b2:b3:b1:67:a9:c2:e6:f6:27:b8:f3:2b:90: 89:b9:6a:7f:63:42:d0:fd:d9:fb:36:f5:ec:e6:77: 76:0a:3e:cd:7d:49:6f:4c:73:e3:40:b4:c3:77:37: 28:41:4b:6d:ed:b4:7c:4d:da:73:a4:95:56:49:aa: c0:2e:8c:38:90:4b:28:d9:a0:7e:74:60:0f:d2:b1: a6:5d:e4:b6:08:22:a2:0d:e5:a5:51:25:63:ef:99: 85:05:e1:97:b7:e4:cb:8d:d9:6e:13:38:e4:af:9a: e8:d9:2a:b3:cd:09:e7:31:e3:1f:15:91:e8:13:c7: bb:3e:46:2b:67:65:8b:12:e3:4e:79:72:71:b8:69: e2:84:91:81:6f:62:4c:77:ca:a5:88:fc:81:8e:60: af:74:be:b3:8d:b0:0e:ce:78:16:d3:70:89:67:47: 3f:d2:d7:da:f0:c7:64:1b:56:57:da:a1:4a:67:73: 9c:c5:66:c4:7d:07:07:3b:ce:91:4e:df:b7:1f:68: b3:b7:dd:f4:3c:36:ce:92:a2:ec:7a:98:59:6e:15: b5:98:0b:46:fd:83:fd:d6:ad:78:1c:a9:fa:ad:0f: 29:f7:a2:60:60:e7:01:fb:6e:79:f5:55:3e:fc:df: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2D:8F:BC:A8:81:97:E1:1C:9C:49:63:8C:43:A2:77:83:6B:A9:D0 X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:40:01:e4:f1:3f:e9:d0:7a:4d:fd:2c:5e:19:4b:93:c3: 88:cf:31:22:29:bf:5b:31:23:6f:0d:5c:a9:b0:06:39:3b:45: 97:54:6c:c4:1d:d9:59:d0:1f:d8:5c:7c:c1:7f:d4:a7:77:84: eb:e0:10:2e:61:c5:47:64:67:72:4a:7f:18:0d:30:e7:af:a2: 42:52:7f:a0:02:76:33:80:43:bb:93:f1:2b:a7:ae:8f:31:72: ba:8b:d0:e2:39:66:e6:7e:6f:6a:27:2c:13:02:26:f8:3a:64: dd:70:ac:aa:0c:98:4b:15:34:a3:30:6f:42:a4:11:72:28:79: 3e:ac:34:06:ba:23:d1:b8:99:5f:27:52:d4:e4:9e:bc:99:7b: 68:d7:9e:eb:80:7a:13:de:73:f7:8e:f0:45:dc:d3:4e:80:86: e9:47:ad:69:44:0f:7d:06:01:43:f7:4d:46:17:f1:2f:2c:60: e0:07:12:7a:49:af:45:10:e8:dd:11:35:a0:43:78:d6:7a:3e: 05:f0:66:df:d6:78:68:54:e3:84:6c:8f:76:76:d5:27:e8:fd: b2:22:b6:e2:c1:c6:46:3b:1d:2c:b0:f0:56:2e:d3:f8:8f:5d: 82:be:be:f0:ef:c4:d8:69:46:d3:63:40:d6:12:2f:9d:af:2b: 5d:58:83:f0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjA0MTUwODM1MDJaFw0yNjA0MjIwODM1MDJaMBgxFjAUBgNV BAMTDTY5ZGY0ZGI2LTNjMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCLfe7FP2Ltir0JGpWzk5BpsrOxZ6nC5vYnuPMrkIm5an9jQtD92fs29ezmd3YK Ps19SW9Mc+NAtMN3NyhBS23ttHxN2nOklVZJqsAujDiQSyjZoH50YA/SsaZd5LYI IqIN5aVRJWPvmYUF4Ze35MuN2W4TOOSvmujZKrPNCecx4x8VkegTx7s+RitnZYsS 4055cnG4aeKEkYFvYkx3yqWI/IGOYK90vrONsA7OeBbTcIlnRz/S19rwx2QbVlfa oUpnc5zFZsR9Bwc7zpFO37cfaLO33fQ8Ns6Soux6mFluFbWYC0b9g/3WrXgcqfqt Dyn3omBg5wH7bnn1VT783ztVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNS2PvKiB l+EcnEljjEOid4NrqdAwHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzakAB5PE/6dB6Tf0sXhlLk8OIzzEiKb9bMSNvDVypsAY5O0WXVGzEHdlZ0B/Y XHzBf9Snd4Tr4BAuYcVHZGdySn8YDTDnr6JCUn+gAnYzgEO7k/Erp66PMXK6i9Di OWbmfm9qJywTAib4OmTdcKyqDJhLFTSjMG9CpBFyKHk+rDQGuiPRuJlfJ1LU5J68 mXto157rgHoT3nP3jvBF3NNOgIbpR61pRA99BgFD901GF/EvLGDgBxJ6Sa9FEOjd ETWgQ3jWej4F8Gbf1nhoVOOEbI92dtUn6P2yIrbiwcZGOx0ssPBWLtP4j12Cvr7w 78TYaUbTY0DWEi+drytdWIPw -----END CERTIFICATE-----Generated at Fri Apr 17 04:00:23 2026 by rpki-client