$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: 1LMWbvQ4BibjP9ZIoKYvCzAVkS+K2d1oI1zmFG4a+2M= Subject key identifier: D8:BC:F5:70:C4:3D:1F:C3:F4:37:BA:A2:A0:EE:91:99:C0:12:10:30 Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A59 Signing time: Sat 18 Apr 2026 19:35:36 +0000 Manifest this update: Sat 18 Apr 2026 19:35:36 +0000 Manifest next update: Sat 25 Apr 2026 19:35:36 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 9/JvkZI14lFRVPz//jGOQBtVN33OoEpcBLfhiE/S8g8=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2680 (0xa78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Apr 18 19:35:36 2026 GMT Not After : Apr 25 19:35:36 2026 GMT Subject: CN=69e3dd08-61eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:68:7b:06:78:ee:91:58:d5:13:83:15:1f:71: a1:80:5b:a6:f9:6f:56:f2:a1:aa:64:d8:56:c4:0a: 63:67:20:ff:2c:c1:b3:ff:7f:86:2a:31:60:a6:fe: ac:f5:50:6a:aa:6c:e3:81:ad:40:79:e8:43:28:c8: b6:e1:02:b2:95:49:8e:ae:f8:b3:04:bf:0b:d8:21: 01:26:d2:7a:f9:bd:1a:64:34:9e:03:fb:65:8a:b0: be:fd:51:a9:49:21:3b:06:50:9b:13:a0:ff:81:b5: 78:4a:14:ed:74:35:72:78:81:a4:02:94:30:1e:f5: 45:38:5f:99:f4:ec:43:ed:97:cd:46:b7:14:e3:32: 35:fb:68:64:c1:2e:bc:5a:22:a5:d5:0c:01:a7:3a: 14:c2:fe:ed:c4:e9:55:e9:0f:de:b5:1f:cb:bb:37: 42:de:bf:e1:c0:87:67:24:ad:ce:08:fb:94:3d:80: a0:c2:2a:f8:2c:f2:e8:79:01:8c:fa:68:40:50:74: 0d:2c:cc:d9:8b:91:c5:19:ad:53:3e:7b:e9:5b:4e: 5c:36:fc:38:fb:f7:75:b9:64:67:3d:7a:b5:74:7a: 2b:be:0c:7f:63:9a:f5:dd:83:93:41:48:5c:52:05: 1a:71:cc:57:79:bd:bd:c1:17:64:e0:85:3e:86:a1: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BC:F5:70:C4:3D:1F:C3:F4:37:BA:A2:A0:EE:91:99:C0:12:10:30 X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:45:f3:6a:1c:51:cf:22:74:0f:71:c9:7a:72:3d:b4:c6:f0: 92:35:25:4e:bd:16:4c:8c:2b:57:4b:40:31:9f:2e:28:95:af: 12:3a:a5:b1:c6:cd:8e:d8:a3:25:29:7b:6e:8b:fb:21:fe:d2: e1:d5:68:48:03:b9:61:19:45:b0:a2:e6:20:25:94:db:73:95: 6b:c0:17:b0:cd:cc:7e:2e:e6:17:ad:8d:ec:48:a9:de:41:0e: ba:f8:22:5d:2d:56:af:1f:ea:05:3d:ac:d3:a4:17:a9:d2:78: 2c:ca:7e:ae:6b:5b:d6:57:61:a3:ae:18:6f:01:69:57:d9:25: f7:17:fa:2f:2c:c8:4d:63:a3:61:bc:b2:86:f4:7a:3d:df:c4: 8b:b7:f2:37:cb:bf:43:96:ac:9d:f8:2f:fc:2d:16:2f:b0:ec: 81:2b:b6:91:a2:c4:d1:5f:14:73:6e:a0:f0:44:60:34:a8:62: c6:6b:9e:a2:71:db:ab:59:cc:a2:23:24:17:0e:ef:1a:19:e0: 8c:bf:1f:3d:6d:0a:eb:5b:5d:37:86:67:c7:04:f8:f7:2a:6a: 67:7e:d3:f7:81:e1:d9:04:34:3a:6a:90:77:cd:fc:a5:ba:93: a6:55:8b:24:f2:d2:58:2f:0f:f4:e6:e8:b4:d0:f1:61:7d:4c: 7a:18:7c:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwNDE4MTkzNTM2WhcNMjYwNDI1MTkzNTM2WjAYMRYwFAYD VQQDEw02OWUzZGQwOC02MWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmGh7BnjukVjVE4MVH3GhgFum+W9W8qGqZNhWxApjZyD/LMGz/3+GKjFgpv6s 9VBqqmzjga1AeehDKMi24QKylUmOrvizBL8L2CEBJtJ6+b0aZDSeA/tlirC+/VGp SSE7BlCbE6D/gbV4ShTtdDVyeIGkApQwHvVFOF+Z9OxD7ZfNRrcU4zI1+2hkwS68 WiKl1QwBpzoUwv7txOlV6Q/etR/LuzdC3r/hwIdnJK3OCPuUPYCgwir4LPLoeQGM +mhAUHQNLMzZi5HFGa1TPnvpW05cNvw4+/d1uWRnPXq1dHorvgx/Y5r13YOTQUhc UgUaccxXeb29wRdk4IU+hqGPCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNi89XDE PR/D9De6oqDukZnAEhAwMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo0XzahxRzyJ0D3HJenI9tMbwkjUlTr0WTIwrV0tAMZ8uKJWvEjqlscbNjtij JSl7bov7If7S4dVoSAO5YRlFsKLmICWU23OVa8AXsM3Mfi7mF62N7Eip3kEOuvgi XS1Wrx/qBT2s06QXqdJ4LMp+rmtb1ldho64YbwFpV9kl9xf6LyzITWOjYbyyhvR6 Pd/Ei7fyN8u/Q5asnfgv/C0WL7DsgSu2kaLE0V8Uc26g8ERgNKhixmueonHbq1nM oiMkFw7vGhngjL8fPW0K61tdN4ZnxwT49ypqZ37T94Hh2QQ0OmqQd838pbqTplWL JPLSWC8P9ObotNDxYX1Mehh8Fw== -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:47 2026 by rpki-client