$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: a5U72rG9b84OwZUQv4J+vZNdiYABdr/akFP3A9ivQSw= Subject key identifier: A5:04:50:C2:B2:E5:F3:B7:AF:03:38:4A:F2:00:B0:84:D1:35:CD:2F Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 0129 Signing time: Fri 17 Apr 2026 05:21:33 +0000 Manifest this update: Fri 17 Apr 2026 05:21:32 +0000 Manifest next update: Fri 24 Apr 2026 05:21:32 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: abCxJBlzdWE9xgWiWgR0l1Pe2YGUg+FDAdc13UTAfFE=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: RdQ8Kg8V0X5jAt/5w0/SSXdPPMNEPgNn/sfLhen4wYo=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: oAjj91kJNdl6x4fcpwdxCt9rZpIKF2EG4dXbvx2fHlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Apr 17 05:21:32 2026 GMT Not After : Apr 24 05:21:32 2026 GMT Subject: CN=69e1c35d-c390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:d2:b4:85:2b:df:6a:b2:03:e7:1e:99:21: 01:9d:40:42:62:70:6d:2c:7c:d0:84:ef:6a:d8:a2: 53:e4:42:68:02:bb:fc:ff:af:b5:44:9b:fd:2b:2b: b6:3d:72:bd:7a:98:5f:26:ad:20:fc:67:ea:89:3c: b1:b7:9e:07:47:8b:8f:6b:0a:7f:21:0c:92:7c:4b: 8a:04:54:d7:d8:ef:a8:38:bd:f7:3b:35:d8:6c:f7: b5:66:a1:9e:03:ae:0c:ed:04:e8:c6:b4:d8:64:5f: 8f:f9:70:75:df:74:bf:65:e0:e9:a3:fb:7e:b7:3b: 9a:ad:f4:ae:0a:fa:65:4d:7f:d6:b7:62:5d:fd:92: 05:c8:12:d3:fd:09:6e:7c:97:15:ee:78:a1:1d:44: eb:f5:bb:7e:30:e4:ca:60:aa:01:81:d1:3f:ca:1a: e3:95:19:d8:f8:a3:f5:bf:10:5f:1c:5e:84:3e:9e: 57:45:5a:7b:a8:f7:a5:eb:75:97:9d:43:32:2c:4e: 81:24:e5:87:d2:f6:3c:13:59:69:c5:51:f6:46:2c: b8:ad:e6:56:4f:d4:ed:27:50:92:4a:96:a7:87:7e: 8f:71:b4:81:e0:73:5a:85:72:f0:66:5b:61:90:87: e4:41:21:e7:92:e4:05:ee:e5:31:81:25:93:3a:7b: df:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:04:50:C2:B2:E5:F3:B7:AF:03:38:4A:F2:00:B0:84:D1:35:CD:2F X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9c:78:c1:8b:b1:ce:55:0c:92:42:b0:41:52:a3:e0:b7:20: fb:1e:da:f8:96:1a:79:2a:d6:98:5e:91:b6:b5:20:d2:43:21: 36:81:d6:ad:97:c6:17:67:6b:ec:4d:47:9e:93:bb:e4:0e:b9: 88:5b:0c:82:d5:9f:2d:a7:9c:c2:02:94:70:a5:ed:d0:d0:90: ae:3d:fe:98:1b:3f:f8:25:cf:89:18:b6:fe:22:3a:c1:18:0e: 1c:c2:77:f7:b0:04:19:88:5a:f6:e4:d9:df:17:56:ca:53:e8: 02:bf:79:6b:74:87:36:1f:e3:ea:5d:58:f5:2a:4d:32:87:67: ec:08:45:45:6b:62:9b:75:85:de:6f:f9:63:ec:7c:40:65:12: f6:77:f1:16:ff:2e:f0:8d:f6:e7:15:cb:33:bc:56:9f:2c:8c: e5:6b:88:d0:b7:fb:84:5c:7a:33:98:50:c8:ae:d3:a0:c6:47: cf:d6:64:97:56:9a:3c:03:45:d3:66:96:bf:e2:01:14:5d:43: 0d:d0:3d:5a:5b:2d:85:05:40:6f:73:8c:fd:24:c1:5a:f5:ec: 6b:2f:16:c8:ff:1d:c5:38:45:30:a2:1e:24:92:37:75:50:42: 3f:8d:e0:ce:46:eb:59:18:97:1e:b1:b2:af:4c:28:ea:17:9e: fb:1b:d4:b7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjYwNDE3MDUyMTMyWhcNMjYwNDI0MDUyMTMyWjAYMRYwFAYD VQQDEw02OWUxYzM1ZC1jMzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySLStIUr32qyA+cemSEBnUBCYnBtLHzQhO9q2KJT5EJoArv8/6+1RJv9Kyu2 PXK9ephfJq0g/GfqiTyxt54HR4uPawp/IQySfEuKBFTX2O+oOL33OzXYbPe1ZqGe A64M7QToxrTYZF+P+XB133S/ZeDpo/t+tzuarfSuCvplTX/Wt2Jd/ZIFyBLT/Qlu fJcV7nihHUTr9bt+MOTKYKoBgdE/yhrjlRnY+KP1vxBfHF6EPp5XRVp7qPel63WX nUMyLE6BJOWH0vY8E1lpxVH2Riy4reZWT9TtJ1CSSpanh36PcbSB4HNahXLwZlth kIfkQSHnkuQF7uUxgSWTOnvfPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKUEUMKy 5fO3rwM4SvIAsITRNc0vMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf5x4wYuxzlUMkkKwQVKj4Lcg+x7a+JYaeSrWmF6RtrUg0kMhNoHWrZfGF2dr 7E1HnpO75A65iFsMgtWfLaecwgKUcKXt0NCQrj3+mBs/+CXPiRi2/iI6wRgOHMJ3 97AEGYha9uTZ3xdWylPoAr95a3SHNh/j6l1Y9SpNModn7AhFRWtim3WF3m/5Y+x8 QGUS9nfxFv8u8I325xXLM7xWnyyM5WuI0Lf7hFx6M5hQyK7ToMZHz9Zkl1aaPANF 02aWv+IBFF1DDdA9WlsthQVAb3OM/STBWvXsay8WyP8dxThFMKIeJJI3dVBCP43g zkbrWRiXHrGyr0wo6hee+xvUtw== -----END CERTIFICATE-----Generated at Fri Apr 17 15:02:05 2026 by rpki-client