$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: p2yedHO36nv+/Lw8cuto96fkcPDDu0oMXw4RckI8dlw= Subject key identifier: D0:48:25:36:D9:98:D2:B9:9F:23:77:B8:86:25:D8:D6:36:4D:69:C9 Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: 42 Signing time: Fri 17 Apr 2026 08:09:54 +0000 Manifest this update: Fri 17 Apr 2026 08:09:53 +0000 Manifest next update: Fri 24 Apr 2026 08:09:53 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: Vvbn5+y/drJsASt/8RyeG3jbQ95YZuLxt0BLPAf+xiI=) 2: 709A2E7CDB9A11F0BFEA763F67D3641D.roa (hash: /7uGSz2004/QvinO+aiI/2uroEEvFBnQnqFbErCydxo=) 3: 6A76054C222211F19C27099F3C3D8C67.roa (hash: MpiKoxYJnNsJjTtWTryJas1e5Scy/NyWv0hZW7Vx2Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Apr 17 08:09:53 2026 GMT Not After : Apr 24 08:09:53 2026 GMT Subject: CN=69e1ead2-0e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d7:7d:de:e0:b4:d2:65:85:06:cb:de:9c:26: d1:80:ae:a8:62:f9:9f:75:cf:b6:b3:c1:a4:24:46: 6a:a2:cb:3f:5c:78:74:d6:a5:f7:0d:49:08:5a:4f: fb:7a:55:0d:fa:65:fc:52:64:44:81:bd:c3:59:da: 8a:9a:ef:9b:5e:f0:d1:b9:0c:cf:ff:40:c3:00:93: a1:84:d9:8e:19:f9:2b:60:f8:7a:ed:8b:38:98:1f: e2:0a:f8:c2:4e:72:21:22:20:84:4b:85:45:34:d8: c2:9f:75:9c:46:66:e8:55:56:86:5d:53:57:bf:81: 66:5d:20:c9:ec:c5:17:41:91:5b:72:64:fa:e0:3d: a9:f6:b5:cb:53:5f:6d:b2:a1:7b:cf:cd:da:56:36: fc:2e:37:b4:88:9d:6c:0c:06:7a:86:44:d6:7e:3d: 8b:88:c2:ac:8c:10:3d:6b:4d:c6:0a:c7:91:bb:18: d6:a3:cc:57:f2:3d:a3:11:ea:c7:0e:26:48:b2:50: cb:a0:f1:04:20:81:d4:72:92:46:03:4c:02:73:44: b4:43:d8:32:a1:97:c5:d0:62:d1:84:e4:ff:3a:5c: b4:be:7c:ac:23:16:6e:6f:6d:1a:8f:81:24:3c:07: da:e3:46:73:23:bf:3c:af:4b:42:41:dc:22:9e:e9: e2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:48:25:36:D9:98:D2:B9:9F:23:77:B8:86:25:D8:D6:36:4D:69:C9 X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b8:e9:a2:58:e4:13:3d:f2:74:15:60:2a:3f:4e:3a:8a:4a: 06:55:37:de:3d:29:be:73:2d:f0:b3:7c:2d:66:f7:80:4d:30: 08:f6:13:1b:19:3b:ce:f7:c9:b8:da:c4:4c:8b:0a:4e:cc:47: 58:a2:96:8b:a9:56:bb:29:53:02:8c:59:00:ba:49:be:9f:71: d8:48:b4:6f:54:55:f7:69:6c:e9:24:1c:70:7c:80:13:5b:93: 13:34:89:bf:cd:5e:08:a9:8c:00:7c:57:bc:fd:5f:2b:f7:52: 20:a9:3e:3e:11:64:5b:a6:aa:16:77:b9:47:84:9b:79:b8:7e: 89:21:19:cd:da:65:40:97:de:f9:ad:72:53:e6:1b:e6:6d:d8: a0:0f:7e:4b:b1:43:d3:b4:26:87:c1:eb:e1:5e:39:f8:b6:10: d4:5d:36:2e:e3:5a:c4:36:07:fa:64:35:28:d8:d8:45:c2:2c: a6:fd:17:54:d9:20:3f:40:30:51:b1:f3:99:e6:54:b5:8c:8d: 08:78:4e:f0:b6:31:34:d7:f5:c7:05:bb:2c:fd:28:45:49:5e: 82:e4:be:38:84:ea:45:7a:43:d4:b4:5d:03:5a:b6:0e:84:13: 85:82:21:e0:3b:21:43:36:37:eb:45:94:0d:28:7b:6e:4e:cb: eb:62:50:5a -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDA2MjExMC8GA1UEBRMoNDdEN0RGRjZCNDFCRDQ2OEMxRjBDOUQwNEM1RTg1RTBD MzNGOUZBQjAeFw0yNjA0MTcwODA5NTNaFw0yNjA0MjQwODA5NTNaMBgxFjAUBgNV BAMTDTY5ZTFlYWQyLTBlMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDN133e4LTSZYUGy96cJtGArqhi+Z91z7azwaQkRmqiyz9ceHTWpfcNSQhaT/t6 VQ36ZfxSZESBvcNZ2oqa75te8NG5DM//QMMAk6GE2Y4Z+Stg+HrtiziYH+IK+MJO ciEiIIRLhUU02MKfdZxGZuhVVoZdU1e/gWZdIMnsxRdBkVtyZPrgPan2tctTX22y oXvPzdpWNvwuN7SInWwMBnqGRNZ+PYuIwqyMED1rTcYKx5G7GNajzFfyPaMR6scO JkiyUMug8QQggdRykkYDTAJzRLRD2DKhl8XQYtGE5P86XLS+fKwjFm5vbRqPgSQ8 B9rjRnMjvzyvS0JB3CKe6eLpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0EglNtmY 0rmfI3e4hiXY1jZNackwHwYDVR0jBBgwFoAUR9ff9rQb1GjB8MnQTF6F4MM/n6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEMDYyL0IxQjhCRUE2REI5 OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjlmZjlyUWIxR2pCOE1uUVRGNkY0TU1fbjZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE MDYyL0IxQjhCRUE2REI5OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdq QjhNblFURjZGNE1NX242cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCQuOmiWOQTPfJ0FWAqP046ikoGVTfePSm+cy3ws3wtZveATTAI9hMbGTvO98m4 2sRMiwpOzEdYopaLqVa7KVMCjFkAukm+n3HYSLRvVFX3aWzpJBxwfIATW5MTNIm/ zV4IqYwAfFe8/V8r91IgqT4+EWRbpqoWd7lHhJt5uH6JIRnN2mVAl975rXJT5hvm bdigD35LsUPTtCaHwevhXjn4thDUXTYu41rENgf6ZDUo2NhFwiym/RdU2SA/QDBR sfOZ5lS1jI0IeE7wtjE01/XHBbss/ShFSV6C5L44hOpFekPUtF0DWrYOhBOFgiHg OyFDNjfrRZQNKHtuTsvrYlBa -----END CERTIFICATE-----Generated at Fri Apr 17 13:23:48 2026 by rpki-client