$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: CXSu+DN0v5Nqg8PwUL+4thSXkQobJCHAQu2Nl/33pzw= Subject key identifier: EB:98:EB:15:D7:29:25:A7:88:A9:29:96:DB:53:92:68:EF:D6:E8:08 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0BBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0C3B Signing time: Thu 16 Apr 2026 18:58:45 +0000 Manifest this update: Thu 16 Apr 2026 18:58:45 +0000 Manifest next update: Thu 23 Apr 2026 18:58:45 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: A6/7B+IMvxPuxdwRPOxKNkNPTbShqOmik7ogcX68AjI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3003 (0xbbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Apr 16 18:58:45 2026 GMT Not After : Apr 23 18:58:45 2026 GMT Subject: CN=69e13165-7a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:1b:8a:1a:04:b2:2a:e5:1d:b5:6d:57:96: 1a:c1:ce:58:c7:a6:dd:f6:f6:c9:63:d5:15:0b:cc: 2a:97:99:68:16:55:70:51:76:8b:73:b1:90:ec:4c: c7:f9:d7:d7:3f:13:a4:e3:a3:d0:a8:42:d7:89:d2: 41:81:58:cc:6f:b5:21:6b:04:ca:6a:7d:cb:f7:5c: 6e:e8:2c:4e:83:7c:a0:fe:98:80:fe:22:03:90:a6: 6f:6b:07:b1:87:b5:15:95:91:e1:84:dd:82:a0:17: f7:6d:b3:25:68:2b:ab:7d:f7:56:23:c9:a4:10:83: 91:31:a6:94:cd:74:06:e8:b9:79:be:0b:d2:0c:04: 82:f5:7f:f5:d6:6e:55:d6:44:11:12:52:f6:0e:3a: e4:74:20:47:f9:bb:ec:b3:8a:b5:83:90:f3:a3:34: 23:30:a0:98:5f:f2:d6:ce:42:59:42:3b:6c:4f:75: ed:51:3b:fa:d2:ee:c2:b3:42:75:65:d9:eb:e3:ff: 16:23:2e:ae:08:24:3a:ad:55:66:fa:2c:5d:f6:8f: 41:e3:32:20:7c:e2:c1:fd:a3:b0:33:36:bc:65:9d: a7:42:93:81:20:c5:b0:dc:48:73:60:47:3e:33:1e: d2:1d:41:80:1e:3c:81:4c:c2:9f:ce:47:1e:b1:e0: 26:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:98:EB:15:D7:29:25:A7:88:A9:29:96:DB:53:92:68:EF:D6:E8:08 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ac:28:4c:dc:1b:09:fb:c7:80:4c:2b:f8:e9:9f:9a:18:85: 83:16:fc:59:f2:b8:5d:5f:f1:b4:a5:b2:cc:5a:98:13:37:05: f9:26:72:0d:d5:a9:1b:e7:ef:32:34:6e:e8:ae:b4:30:53:c6: 10:91:0e:1d:15:22:a6:8e:24:6d:c3:32:36:74:f9:c8:65:0c: c2:d5:a2:c5:e9:d0:93:b6:51:d7:51:cd:c5:db:cb:0f:51:1f: b2:f3:c6:a1:b5:90:96:24:7d:98:2a:6a:8a:0c:bb:29:ee:f2: b6:d8:20:24:53:45:26:b9:b8:89:98:f1:af:5f:04:b9:d8:bf: 09:3a:54:44:96:3d:50:b0:fc:48:34:c7:2b:a7:17:b4:db:09: 98:a7:60:55:af:f6:a4:8a:ab:45:52:f4:3f:77:ca:1d:81:03: 41:0d:06:a4:cd:64:25:0a:43:71:5c:d3:5e:e8:df:92:58:bd: 7b:c6:05:fe:78:c8:7a:be:a1:25:3d:1e:40:c3:dd:6a:2b:1f: 98:21:7a:30:7f:12:b9:a6:68:18:af:74:c4:90:d4:15:76:f6: cb:8d:32:4e:f6:f9:54:99:5c:28:5e:0b:43:5e:71:92:5e:6d: a0:62:24:93:6c:d5:d9:f3:fd:79:fa:4b:4f:d7:b9:af:3f:e5: 1e:ab:63:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjYwNDE2MTg1ODQ1WhcNMjYwNDIzMTg1ODQ1WjAYMRYwFAYD VQQDEw02OWUxMzE2NS03YTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQUbihoEsirlHbVtV5Yawc5Yx6bd9vbJY9UVC8wql5loFlVwUXaLc7GQ7EzH +dfXPxOk46PQqELXidJBgVjMb7UhawTKan3L91xu6CxOg3yg/piA/iIDkKZvawex h7UVlZHhhN2CoBf3bbMlaCurffdWI8mkEIORMaaUzXQG6Ll5vgvSDASC9X/11m5V 1kQRElL2DjrkdCBH+bvss4q1g5DzozQjMKCYX/LWzkJZQjtsT3XtUTv60u7Cs0J1 Zdnr4/8WIy6uCCQ6rVVm+ixd9o9B4zIgfOLB/aOwMza8ZZ2nQpOBIMWw3EhzYEc+ Mx7SHUGAHjyBTMKfzkceseAmOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOuY6xXX KSWniKkplttTkmjv1ugIMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALqwoTNwbCfvHgEwr+OmfmhiFgxb8WfK4XV/xtKWyzFqYEzcF+SZyDdWpG+fv MjRu6K60MFPGEJEOHRUipo4kbcMyNnT5yGUMwtWixenQk7ZR11HNxdvLD1EfsvPG obWQliR9mCpqigy7Ke7yttggJFNFJrm4iZjxr18Eudi/CTpURJY9ULD8SDTHK6cX tNsJmKdgVa/2pIqrRVL0P3fKHYEDQQ0GpM1kJQpDcVzTXujfkli9e8YF/njIer6h JT0eQMPdaisfmCF6MH8SuaZoGK90xJDUFXb2y40yTvb5VJlcKF4LQ15xkl5toGIk k2zV2fP9efpLT9e5rz/lHqtjVg== -----END CERTIFICATE-----Generated at Fri Apr 17 16:23:07 2026 by rpki-client