$ rpki-client -vvf rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft File: fONyLR7LAIObJGf9XDmmrUamImE.mft (raw, json) Hash identifier: k0mvTeKK55xHUjW9p7WvarGJVPOcLZDpR9DDWPREd0A= Subject key identifier: C9:74:40:F5:A1:2F:01:28:EE:15:F3:AE:7F:E4:CD:45:6B:96:E8:F0 Authority key identifier: 7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 Certificate issuer: /CN=A9156E6F/serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft Manifest number: 0CE7 Signing time: Thu 16 Apr 2026 18:13:48 +0000 Manifest this update: Thu 16 Apr 2026 18:13:47 +0000 Manifest next update: Thu 23 Apr 2026 18:13:47 +0000 Files and hashes: 1: fONyLR7LAIObJGf9XDmmrUamImE.crl (hash: SZE21KqcWJUvi3IYVbnvTwXhoxLYJsVjZgB+0ZOszWE=) 2: ABD61D2E06D611EA8EBBEA50C4F9AE02.roa (hash: taMg9ABZmz3UBA8VdUB5OiDUtv+I/OZVxR13yJafYfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156E6F, serialNumber=7CE3722D1ECB00839B2467FD5C39A6AD46A62261 Validity Not Before: Apr 16 18:13:47 2026 GMT Not After : Apr 23 18:13:47 2026 GMT Subject: CN=69e126db-8748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c3:a7:d5:22:26:1f:9b:58:ce:ba:f8:cb:62: 97:49:14:31:e8:bb:48:7b:a7:bc:cb:c7:cd:2d:dd: 96:9b:9f:61:3f:de:33:f9:c0:f0:f7:5f:69:6c:ff: 71:b1:8f:e6:e2:89:0b:7c:fa:74:70:6d:49:bb:86: 55:77:91:54:b6:c7:81:69:1d:22:d2:54:73:2c:00: 14:0e:e6:b5:35:3f:9f:50:a5:c7:02:50:88:2d:13: 6b:ae:39:8a:b6:30:42:4e:26:97:be:f1:d5:36:24: c1:f1:e5:91:2f:65:b1:9e:70:29:fa:80:09:6d:36: 2e:7f:1b:a6:41:8a:84:20:3f:c3:8f:1a:bf:38:62: 07:5c:21:85:7f:3d:33:b8:e8:3a:aa:95:f5:3d:5f: 39:40:0f:cf:b1:f8:82:06:2b:12:49:5a:68:7d:1b: 96:42:2d:60:80:54:88:4d:5a:28:4c:6d:6e:37:97: 66:68:db:7f:6e:27:3e:24:df:ac:16:df:2c:73:de: 52:35:35:9d:f6:50:d0:c1:54:74:50:ce:b4:24:6e: b8:f5:aa:5d:c1:71:17:46:de:9b:be:26:e4:df:a8: c7:fb:bc:d9:81:ad:6c:7f:30:c9:53:86:1d:9c:d1: 1a:01:e6:32:d4:ba:88:df:ca:9b:b5:c2:30:06:f7: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:74:40:F5:A1:2F:01:28:EE:15:F3:AE:7F:E4:CD:45:6B:96:E8:F0 X509v3 Authority Key Identifier: keyid:7C:E3:72:2D:1E:CB:00:83:9B:24:67:FD:5C:39:A6:AD:46:A6:22:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fONyLR7LAIObJGf9XDmmrUamImE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156E6F/B1B5B3D606D511EAA8BA3E4FC4F9AE02/fONyLR7LAIObJGf9XDmmrUamImE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:fe:a3:b1:ea:23:8f:e4:b0:0a:4f:4a:0a:62:52:c9:d7:9a: 9b:4b:23:d2:7a:b9:94:af:d2:35:ac:7c:0a:74:69:d3:e4:cb: f7:1f:17:23:b1:03:5c:f2:3f:c9:b8:d7:81:1e:68:d1:1d:72: 62:ee:73:71:72:af:a6:f5:b9:87:ec:85:13:9f:1c:04:ca:65: 43:59:db:10:10:a8:dd:5c:9d:09:a9:79:a0:51:d8:f1:f7:d8: 1f:2e:66:e1:ca:25:30:3a:cc:03:0e:90:30:31:76:4f:57:8d: 9b:85:6e:96:fa:81:ad:4d:99:d7:59:7c:b2:fa:1e:b5:6c:19: c0:79:19:c4:ae:6b:49:59:db:7e:c2:3e:84:d5:c1:5b:97:a0: b7:1d:2b:b5:a5:a8:22:cc:b2:53:f3:d5:7a:77:41:e0:6f:de: 2c:66:2b:dc:09:34:93:21:03:c6:48:a9:3d:20:c2:13:32:f0: 00:79:11:5f:bf:45:fc:22:52:fb:7b:f6:d9:c2:8a:b2:83:aa: c6:44:9c:36:c1:b3:6c:fa:69:f8:9b:af:4f:1b:0c:9d:a4:9e: 34:39:98:03:72:a8:a6:a9:3d:a4:e7:e5:90:20:1b:f8:d5:0b: df:a8:13:48:ad:68:58:65:f6:8a:6d:55:9e:3d:5c:5c:e6:c1: db:fb:11:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZFNkYxMTAvBgNVBAUTKDdDRTM3MjJEMUVDQjAwODM5QjI0NjdGRDVDMzlBNkFE NDZBNjIyNjEwHhcNMjYwNDE2MTgxMzQ3WhcNMjYwNDIzMTgxMzQ3WjAYMRYwFAYD VQQDEw02OWUxMjZkYi04NzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcOn1SImH5tYzrr4y2KXSRQx6LtIe6e8y8fNLd2Wm59hP94z+cDw919pbP9x sY/m4okLfPp0cG1Ju4ZVd5FUtseBaR0i0lRzLAAUDua1NT+fUKXHAlCILRNrrjmK tjBCTiaXvvHVNiTB8eWRL2WxnnAp+oAJbTYufxumQYqEID/Djxq/OGIHXCGFfz0z uOg6qpX1PV85QA/PsfiCBisSSVpofRuWQi1ggFSITVooTG1uN5dmaNt/bic+JN+s Ft8sc95SNTWd9lDQwVR0UM60JG649apdwXEXRt6bvibk36jH+7zZga1sfzDJU4Yd nNEaAeYy1LqI38qbtcIwBvdjPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMl0QPWh LwEo7hXzrn/kzUVrlujwMB8GA1UdIwQYMBaAFHzjci0eywCDmyRn/Vw5pq1GpiJh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkU2Ri9CMUI1QjNENjA2 RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJT2JKR2Y5WERtbXJVYW1J bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZPTnlMUjdMQUlPYkpHZjlYRG1tclVhbUltRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkU2Ri9CMUI1QjNENjA2RDUxMUVBQThCQTNFNEZDNEY5QUUwMi9mT055TFI3TEFJ T2JKR2Y5WERtbXJVYW1JbUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGP6jseojj+SwCk9KCmJSydeam0sj0nq5lK/SNax8CnRp0+TL9x8XI7EDXPI/ ybjXgR5o0R1yYu5zcXKvpvW5h+yFE58cBMplQ1nbEBCo3VydCal5oFHY8ffYHy5m 4colMDrMAw6QMDF2T1eNm4VulvqBrU2Z11l8svoetWwZwHkZxK5rSVnbfsI+hNXB W5egtx0rtaWoIsyyU/PVendB4G/eLGYr3Ak0kyEDxkipPSDCEzLwAHkRX79F/CJS +3v22cKKsoOqxkScNsGzbPpp+JuvTxsMnaSeNDmYA3Kopqk9pOflkCAb+NUL36gT SK1oWGX2im1Vnj1cXObB2/sRZA== -----END CERTIFICATE-----Generated at Fri Apr 17 08:05:37 2026 by rpki-client