$ rpki-client -vvf rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft File: sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft (raw, json) Hash identifier: 9pTOdc/QnByA9jrsr1V6eSfpLPj0cQQtrwcMiQJUNKw= Subject key identifier: 02:60:B1:3D:8B:99:41:C6:4F:EA:A8:57:DB:D3:12:B3:81:93:67:A5 Authority key identifier: B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 Certificate issuer: /CN=A9158F08/serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft Manifest number: 16A7 Signing time: Thu 16 Apr 2026 18:14:33 +0000 Manifest this update: Thu 16 Apr 2026 18:14:32 +0000 Manifest next update: Thu 23 Apr 2026 18:14:32 +0000 Files and hashes: 1: sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl (hash: 2nCTWLwufsEVUNV8vG+QW/koPot6O1zoiKyvXNrnwm0=) 2: DC4BD210A17B11EAB16F4954C4F9AE02.roa (hash: eIAHLPD+G1WHeALpmNDjCvEhWTMycfos5yNXip7qHSk=) 3: DD70B00CA17B11EAB16F4954C4F9AE02.roa (hash: r3oax/+V4q+jPioRQnTYAoCLL+EoLljtLzFVV7hSq0M=) 4: DCDFB82CA17B11EAB16F4954C4F9AE02.roa (hash: kTqCbZKUtBsFFXpPj9uO/YMS3jJEQ+u1QwW8st6ZqAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158F08, serialNumber=B2A784EE85F5538367297B51C0868F8F1C02F911 Validity Not Before: Apr 16 18:14:32 2026 GMT Not After : Apr 23 18:14:32 2026 GMT Subject: CN=69e12709-7507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c2:40:eb:2c:67:14:d4:37:42:c4:d3:ef:fc: 87:a6:1c:b2:fe:6d:2c:83:17:d2:2f:be:e2:d9:23: 3f:dd:39:aa:61:cf:64:1d:4d:70:69:fd:a6:56:b1: e8:b8:cd:5f:df:ac:52:8e:5e:78:22:ee:1b:e8:67: e6:a8:17:07:4e:1c:94:57:91:91:c4:4d:92:7d:fe: ce:8f:ef:12:f6:e7:bb:b3:16:b3:01:32:49:f4:29: 3a:c1:48:ec:e9:0e:fc:11:5a:52:7d:fa:13:da:7d: 96:14:6f:84:10:65:39:46:18:8c:dd:3e:be:df:d2: ab:a9:0b:c1:ee:dd:96:db:3e:ca:2c:9f:ab:01:88: 06:b3:9d:40:c9:02:04:57:13:cf:1f:d7:2d:e1:d3: 62:69:29:1b:f7:24:15:1d:f7:84:86:dd:d0:87:50: d9:d6:a1:5f:fa:09:ff:52:a0:f8:d1:df:90:8f:ce: 08:c3:37:f3:5a:b9:93:b5:ef:3b:8d:43:6a:e6:26: 85:e9:2e:11:07:fa:ab:fb:7f:2b:07:d8:19:14:ee: a4:7a:1f:c4:fc:92:00:d5:a2:7b:a6:26:13:3b:44: d6:a6:1d:80:68:30:33:1a:b9:4d:e1:bb:57:0b:b0: a6:37:e1:55:22:99:71:d5:22:02:fb:3d:43:85:4f: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:60:B1:3D:8B:99:41:C6:4F:EA:A8:57:DB:D3:12:B3:81:93:67:A5 X509v3 Authority Key Identifier: keyid:B2:A7:84:EE:85:F5:53:83:67:29:7B:51:C0:86:8F:8F:1C:02:F9:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sqeE7oX1U4NnKXtRwIaPjxwC-RE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158F08/5B17F6D207D011EAA4848644C4F9AE02/sqeE7oX1U4NnKXtRwIaPjxwC-RE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d5:0d:5a:c0:18:18:56:10:83:35:ca:60:a8:5b:14:92:04: 7a:3b:53:6c:77:8c:5a:fe:aa:c7:75:ef:74:ab:df:aa:76:a6: e0:e1:cf:29:62:e3:91:ed:3f:27:a9:39:84:df:a8:92:b5:26: f0:20:de:cb:ba:8b:57:71:01:1c:e7:7c:c7:43:e3:61:d2:4b: 34:af:c7:4b:9d:b7:70:23:f0:78:fe:c3:bb:9c:f1:3e:a1:4e: 06:f2:73:76:8d:43:40:e8:c8:ed:ae:37:6b:23:6f:6e:cb:ec: b7:ff:99:2a:9d:4c:47:57:d1:f2:aa:67:e6:d4:85:ec:9b:9a: c2:47:cf:e0:4b:82:1e:dc:08:3a:3a:df:83:4f:05:83:6b:9d: 3a:6c:8f:02:78:2b:b0:b7:5a:1c:5e:1e:7a:28:ed:3b:99:fc: 81:f9:8e:84:24:2e:96:4f:d1:30:64:8b:92:75:bc:f0:56:e4: 8f:11:94:84:f9:7d:81:62:dd:73:93:d0:a9:84:cd:5d:9b:a8: 03:ee:9a:23:47:b0:d9:ad:65:26:75:4c:7c:39:1f:dd:db:4b: c8:5b:36:9c:d6:7f:da:ec:57:dc:e9:8c:8f:5f:36:d3:7c:10: ed:be:91:07:d4:0f:65:2a:31:f8:0f:e8:fa:0f:24:c2:d7:d8: 89:45:91:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThGMDgxMTAvBgNVBAUTKEIyQTc4NEVFODVGNTUzODM2NzI5N0I1MUMwODY4RjhG MUMwMkY5MTEwHhcNMjYwNDE2MTgxNDMyWhcNMjYwNDIzMTgxNDMyWjAYMRYwFAYD VQQDEw02OWUxMjcwOS03NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcJA6yxnFNQ3QsTT7/yHphyy/m0sgxfSL77i2SM/3TmqYc9kHU1waf2mVrHo uM1f36xSjl54Iu4b6GfmqBcHThyUV5GRxE2Sff7Oj+8S9ue7sxazATJJ9Ck6wUjs 6Q78EVpSffoT2n2WFG+EEGU5RhiM3T6+39KrqQvB7t2W2z7KLJ+rAYgGs51AyQIE VxPPH9ct4dNiaSkb9yQVHfeEht3Qh1DZ1qFf+gn/UqD40d+Qj84IwzfzWrmTte87 jUNq5iaF6S4RB/qr+38rB9gZFO6keh/E/JIA1aJ7piYTO0TWph2AaDAzGrlN4btX C7CmN+FVIplx1SIC+z1DhU+4fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAJgsT2L mUHGT+qoV9vTErOBk2elMB8GA1UdIwQYMBaAFLKnhO6F9VODZyl7UcCGj48cAvkR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEYwOC81QjE3RjZEMjA3 RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0Tm5LWHRSd0lhUGp4d0Mt UkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NxZUU3b1gxVTRObktYdFJ3SWFQanh3Qy1SRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEYwOC81QjE3RjZEMjA3RDAxMUVBQTQ4NDg2NDRDNEY5QUUwMi9zcWVFN29YMVU0 Tm5LWHRSd0lhUGp4d0MtUkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMtUNWsAYGFYQgzXKYKhbFJIEejtTbHeMWv6qx3XvdKvfqnam4OHPKWLjke0/ J6k5hN+okrUm8CDey7qLV3EBHOd8x0PjYdJLNK/HS523cCPweP7Du5zxPqFOBvJz do1DQOjI7a43ayNvbsvst/+ZKp1MR1fR8qpn5tSF7JuawkfP4EuCHtwIOjrfg08F g2udOmyPAngrsLdaHF4eeijtO5n8gfmOhCQulk/RMGSLknW88FbkjxGUhPl9gWLd c5PQqYTNXZuoA+6aI0ew2a1lJnVMfDkf3dtLyFs2nNZ/2uxX3OmMj18203wQ7b6R B9QPZSox+A/o+g8kwtfYiUWR8A== -----END CERTIFICATE-----Generated at Fri Apr 17 20:03:19 2026 by rpki-client