$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft File: fd08hfmnH2JfzMEMqDHld3CbTz8.mft (raw, json) Hash identifier: Oy6IbRspoN8lQD0YN4C1+urJsbrcuys13+WdGHTyLzU= Subject key identifier: 30:50:C5:8C:7D:FB:33:2A:AE:56:D3:C5:FC:5C:62:14:47:49:C9:9E Authority key identifier: 7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F Certificate issuer: /CN=A9167B41/serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Certificate serial: 0399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft Manifest number: 0394 Signing time: Fri 17 Apr 2026 00:40:07 +0000 Manifest this update: Fri 17 Apr 2026 00:40:06 +0000 Manifest next update: Fri 24 Apr 2026 00:40:06 +0000 Files and hashes: 1: fd08hfmnH2JfzMEMqDHld3CbTz8.crl (hash: 5sWPbS6NomaQpaKSuFJhxdecQgP8xViqaB+ug2GN+L4=) 2: D24B4D42DF3E11EC83CCFE1EC4F9AE02.roa (hash: JWhoa2NKg4RrDWpyShk965Wq7gv+qj3/iSfECHpocFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 921 (0x399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B41, serialNumber=7DDD3C85F9A71F625FCCC10CA831E577709B4F3F Validity Not Before: Apr 17 00:40:06 2026 GMT Not After : Apr 24 00:40:06 2026 GMT Subject: CN=69e18167-c997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:06:af:d1:a7:d0:6c:ab:55:93:86:03:a5:39: ea:30:d0:c6:9d:d8:06:5a:e2:8f:14:4d:d9:e7:5d: d4:75:d3:20:ff:6e:74:a7:a2:ae:26:c7:1e:a7:87: b8:7e:a0:b5:c1:c5:05:c2:93:d5:a3:68:9a:03:11: e6:22:87:3c:8d:59:a1:58:22:dc:8d:9f:04:56:40: ac:a9:ff:cc:48:b7:3d:63:38:b3:3d:11:ae:51:27: 57:b7:f1:7a:b1:e8:d2:90:04:a8:59:0f:d3:a5:86: 07:30:3d:80:f2:70:5c:59:2b:4f:1d:d8:b2:ac:f5: a0:eb:cd:7e:17:31:a6:82:93:7f:a1:c2:a0:a0:cc: 6c:aa:6b:d1:e2:c6:f1:85:30:6f:ef:3c:ca:bf:3a: 4b:56:f5:e9:38:46:5c:c8:af:a9:7e:97:88:b2:f7: de:e3:06:10:52:37:95:91:73:21:96:b2:49:93:6f: 03:12:9e:d1:04:e2:26:e3:33:78:d3:ba:75:d6:1f: ed:d2:0e:4f:45:a0:fb:52:92:45:28:86:35:0f:5a: 30:f9:48:cd:8d:8e:79:4a:4a:de:78:03:c2:e0:55: c8:7a:67:4a:3c:72:a6:42:08:48:c8:ca:8e:6a:9f: 2d:7c:9b:9d:99:84:c4:4c:d3:94:98:07:b9:91:c2: 19:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:50:C5:8C:7D:FB:33:2A:AE:56:D3:C5:FC:5C:62:14:47:49:C9:9E X509v3 Authority Key Identifier: keyid:7D:DD:3C:85:F9:A7:1F:62:5F:CC:C1:0C:A8:31:E5:77:70:9B:4F:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd08hfmnH2JfzMEMqDHld3CbTz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B41/E790F9AADF3811ECBC8C9A7FC4F9AE02/fd08hfmnH2JfzMEMqDHld3CbTz8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bc:77:3a:c1:c9:03:a2:ee:90:9c:36:67:5c:2d:36:df:5e: 4a:8d:76:8c:c2:e9:a1:a0:90:99:4b:5d:83:9d:dd:54:81:a9: 8c:b7:4c:9e:2c:13:7b:f4:f8:00:ae:47:25:af:80:b7:f6:39: 43:d5:b9:01:f4:72:6c:92:2a:df:38:f0:9a:1d:d9:f1:01:47: 90:83:d5:99:35:d6:ea:b4:a5:69:00:d4:79:14:09:43:9c:12: be:8d:e1:c1:16:cf:9f:cf:03:76:d3:92:70:ae:79:80:22:53: e7:2d:2e:73:85:64:a3:d7:be:14:5a:3d:af:a1:df:0a:73:a2: 87:ab:91:a1:bf:73:54:14:1c:77:1b:c8:95:42:f1:9d:96:3b: df:35:1f:d4:24:43:45:45:41:ec:df:ee:c3:1d:e0:a8:a0:58: 0e:8f:bf:d7:65:49:6e:46:21:79:95:80:05:79:46:bc:8d:bd: 54:9d:5e:97:54:d9:00:9f:20:5b:da:6d:f5:c8:53:e0:bf:c9: 28:a4:d1:4c:f2:7d:c0:d4:1d:7e:64:d7:e7:65:3f:4d:9e:36: 38:70:92:a0:3c:a9:bb:7c:fe:15:00:29:4e:fc:e4:f9:2b:21: 83:46:66:7b:36:04:67:78:22:f4:81:ee:17:48:6c:6d:c2:0f: c9:94:06:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCNDExMTAvBgNVBAUTKDdEREQzQzg1RjlBNzFGNjI1RkNDQzEwQ0E4MzFFNTc3 NzA5QjRGM0YwHhcNMjYwNDE3MDA0MDA2WhcNMjYwNDI0MDA0MDA2WjAYMRYwFAYD VQQDEw02OWUxODE2Ny1jOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtgav0afQbKtVk4YDpTnqMNDGndgGWuKPFE3Z513UddMg/250p6KuJscep4e4 fqC1wcUFwpPVo2iaAxHmIoc8jVmhWCLcjZ8EVkCsqf/MSLc9YzizPRGuUSdXt/F6 sejSkASoWQ/TpYYHMD2A8nBcWStPHdiyrPWg681+FzGmgpN/ocKgoMxsqmvR4sbx hTBv7zzKvzpLVvXpOEZcyK+pfpeIsvfe4wYQUjeVkXMhlrJJk28DEp7RBOIm4zN4 07p11h/t0g5PRaD7UpJFKIY1D1ow+UjNjY55SkreeAPC4FXIemdKPHKmQghIyMqO ap8tfJudmYTETNOUmAe5kcIZ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDBQxYx9 +zMqrlbTxfxcYhRHScmeMB8GA1UdIwQYMBaAFH3dPIX5px9iX8zBDKgx5Xdwm08/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I0MS9FNzkwRjlBQURG MzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgySmZ6TUVNcURIbGQzQ2JU ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMDhoZm1uSDJKZnpNRU1xREhsZDNDYlR6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I0MS9FNzkwRjlBQURGMzgxMUVDQkM4QzlBN0ZDNEY5QUUwMi9mZDA4aGZtbkgy SmZ6TUVNcURIbGQzQ2JUejgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATrx3OsHJA6LukJw2Z1wtNt9eSo12jMLpoaCQmUtdg53dVIGpjLdMniwTe/T4 AK5HJa+At/Y5Q9W5AfRybJIq3zjwmh3Z8QFHkIPVmTXW6rSlaQDUeRQJQ5wSvo3h wRbPn88DdtOScK55gCJT5y0uc4Vko9e+FFo9r6HfCnOih6uRob9zVBQcdxvIlULx nZY73zUf1CRDRUVB7N/uwx3gqKBYDo+/12VJbkYheZWABXlGvI29VJ1el1TZAJ8g W9pt9chT4L/JKKTRTPJ9wNQdfmTX52U/TZ42OHCSoDypu3z+FQApTvzk+Sshg0Zm ezYEZ3gi9IHuF0hsbcIPyZQGlg== -----END CERTIFICATE-----Generated at Fri Apr 17 09:27:03 2026 by rpki-client