$ rpki-client -vvf rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft File: p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft (raw, json) Hash identifier: Ust73svpWvHdaBeNJ2URE2VFRAT9OvxIhEis2shr3gw= Subject key identifier: DF:9D:C4:E1:03:32:D7:AE:41:4D:74:96:F3:BE:79:2D:9B:DA:E7:AD Authority key identifier: A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 Certificate issuer: /CN=A9165297/serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Certificate serial: 0EAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft Manifest number: 0E9F Signing time: Fri 17 Apr 2026 01:40:53 +0000 Manifest this update: Fri 17 Apr 2026 01:40:52 +0000 Manifest next update: Fri 24 Apr 2026 01:40:52 +0000 Files and hashes: 1: p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl (hash: X0DSGObQXNP42mx8hQrNseSl/bApN6CiQPVxQXc/ggE=) 2: 457A00A8AF7A11E9AFF10782C4F9AE02.roa (hash: Arkrsyo5+ae+fzAV/8rJkRmaTl2oT1Ort1Y2T29kOdo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3756 (0xeac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165297, serialNumber=A7F882C0ACC8F0D8F1DB361CD40B12606B0C68C6 Validity Not Before: Apr 17 01:40:52 2026 GMT Not After : Apr 24 01:40:52 2026 GMT Subject: CN=69e18fa4-5e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:32:41:76:f7:26:bc:b7:51:24:0f:90:6b:5c: 10:c6:ce:0b:43:64:2b:95:cb:c4:08:53:74:f1:82: c8:c5:69:0a:32:62:6f:fa:e2:d8:e6:ed:3a:cf:52: 8b:fe:e0:58:e0:92:c3:3f:78:3e:c7:d2:54:ae:38: 4d:4f:15:29:34:15:9b:5e:4e:b1:e9:92:2a:6f:d4: 12:10:31:59:f8:b5:d9:55:5a:fe:14:df:6b:44:0a: e6:0e:40:69:9f:09:51:db:d9:9f:3a:f8:3d:93:c5: 30:82:94:de:eb:ce:a0:99:20:0b:c8:59:41:5b:ec: 6a:17:8a:fe:0b:c8:31:b0:12:11:55:a6:b4:2d:b3: 3e:92:b6:eb:60:a1:57:d4:99:93:bd:74:41:3c:c9: 34:d6:f1:2b:96:ca:e9:0d:e3:98:09:eb:05:1e:b7: 29:d6:bd:26:a4:14:88:25:68:a2:d2:25:23:64:cb: 69:08:58:c7:fe:0b:cc:93:82:bc:47:a9:66:67:ae: 86:1b:b5:b9:17:43:c0:69:15:3c:23:99:2a:20:6e: 08:c7:c8:ba:09:4b:8f:58:8a:98:1d:44:8b:d7:7a: 9e:23:8c:25:51:8b:59:44:24:55:00:46:9a:a6:d5: 1a:e6:7b:c9:98:78:9b:8c:69:40:80:dc:11:f6:82: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:9D:C4:E1:03:32:D7:AE:41:4D:74:96:F3:BE:79:2D:9B:DA:E7:AD X509v3 Authority Key Identifier: keyid:A7:F8:82:C0:AC:C8:F0:D8:F1:DB:36:1C:D4:0B:12:60:6B:0C:68:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p_iCwKzI8Njx2zYc1AsSYGsMaMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165297/4301FDBEAF6E11E9A9258067C4F9AE02/p_iCwKzI8Njx2zYc1AsSYGsMaMY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:4e:6c:7a:15:c7:89:0e:c2:84:67:f8:54:48:95:2c:9b:73: 91:f1:65:7e:7f:7f:08:6b:5f:d8:3f:3c:65:48:29:f8:62:d9: d9:37:8f:0b:24:e8:28:a9:57:12:28:f9:b0:41:a9:86:d3:0b: 2f:7c:15:de:c9:cc:b1:12:3b:d2:d3:06:59:60:be:ff:3f:f9: 11:08:df:1c:7c:ce:b6:c2:3b:19:af:f8:e4:2e:8b:85:b3:4d: da:26:8e:4c:e9:a3:06:82:e1:f6:2a:04:e7:bb:cc:6f:f4:c8: 32:ed:b6:93:ea:0d:16:ff:05:2d:7e:bd:78:fa:a7:56:76:bd: 43:06:d8:a1:25:60:7d:55:d6:a2:4b:05:f9:d1:bc:b4:b7:15: f7:ec:af:c4:c9:59:f3:f3:90:52:43:42:e0:0f:47:82:94:5d: 2f:ae:84:7c:03:30:54:f0:55:42:40:5b:94:c4:94:e6:82:0a: 8b:51:80:75:78:73:df:4d:f9:77:2b:a1:48:2e:d6:5f:1b:93: 2a:60:6a:ae:b1:4f:ce:bb:d3:c0:2f:3f:28:51:8c:57:78:77: c5:70:bb:1c:dc:95:19:28:ef:ee:ac:c6:6e:bb:07:6a:42:99: f7:64:81:c6:19:a8:0e:5a:d1:c0:f4:d9:c8:65:4f:4b:25:3d: 28:44:f9:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUyOTcxMTAvBgNVBAUTKEE3Rjg4MkMwQUNDOEYwRDhGMURCMzYxQ0Q0MEIxMjYw NkIwQzY4QzYwHhcNMjYwNDE3MDE0MDUyWhcNMjYwNDI0MDE0MDUyWjAYMRYwFAYD VQQDEw02OWUxOGZhNC01ZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzJBdvcmvLdRJA+Qa1wQxs4LQ2QrlcvECFN08YLIxWkKMmJv+uLY5u06z1KL /uBY4JLDP3g+x9JUrjhNTxUpNBWbXk6x6ZIqb9QSEDFZ+LXZVVr+FN9rRArmDkBp nwlR29mfOvg9k8UwgpTe686gmSALyFlBW+xqF4r+C8gxsBIRVaa0LbM+krbrYKFX 1JmTvXRBPMk01vErlsrpDeOYCesFHrcp1r0mpBSIJWii0iUjZMtpCFjH/gvMk4K8 R6lmZ66GG7W5F0PAaRU8I5kqIG4Ix8i6CUuPWIqYHUSL13qeI4wlUYtZRCRVAEaa ptUa5nvJmHibjGlAgNwR9oJtjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN+dxOED MteuQU10lvO+eS2b2uetMB8GA1UdIwQYMBaAFKf4gsCsyPDY8ds2HNQLEmBrDGjG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTI5Ny80MzAxRkRCRUFG NkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThOangyelljMUFzU1lHc01h TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BfaUN3S3pJOE5qeDJ6WWMxQXNTWUdzTWFNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTI5Ny80MzAxRkRCRUFGNkUxMUU5QTkyNTgwNjdDNEY5QUUwMi9wX2lDd0t6SThO angyelljMUFzU1lHc01hTVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiE5sehXHiQ7ChGf4VEiVLJtzkfFlfn9/CGtf2D88ZUgp+GLZ2TePCyToKKlX Eij5sEGphtMLL3wV3snMsRI70tMGWWC+/z/5EQjfHHzOtsI7Ga/45C6LhbNN2iaO TOmjBoLh9ioE57vMb/TIMu22k+oNFv8FLX69ePqnVna9QwbYoSVgfVXWoksF+dG8 tLcV9+yvxMlZ8/OQUkNC4A9HgpRdL66EfAMwVPBVQkBblMSU5oIKi1GAdXhz3035 dyuhSC7WXxuTKmBqrrFPzrvTwC8/KFGMV3h3xXC7HNyVGSjv7qzGbrsHakKZ92SB xhmoDlrRwPTZyGVPSyU9KET5Lw== -----END CERTIFICATE-----Generated at Fri Apr 17 19:07:00 2026 by rpki-client