$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: z67R11iqPnxt6rbrhk22rkoZz45NmhzdtLUxUGgEfNQ= Subject key identifier: 71:86:25:38:76:A9:13:46:6C:7D:CB:2E:92:63:76:22:C9:6E:9A:09 Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 053F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 0537 Signing time: Thu 16 Apr 2026 23:25:50 +0000 Manifest this update: Thu 16 Apr 2026 23:25:50 +0000 Manifest next update: Thu 23 Apr 2026 23:25:50 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: LcZUz796OlX/FwdiBSt9rIpDsPf5xbS9PcSHBLWSdcY=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: PEJr+Mm39qdGaPmAkNHpAbI5gf+Z7mrX4P7uIMXjoD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1343 (0x53f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Apr 16 23:25:50 2026 GMT Not After : Apr 23 23:25:50 2026 GMT Subject: CN=69e16ffe-946b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:5c:d3:7a:68:10:e5:85:13:98:89:f0:d2: 0c:01:d6:f9:25:42:b0:e4:0b:82:d3:e6:2b:15:a2: a5:4e:65:17:b2:18:23:d7:03:5e:ae:41:da:ef:f4: 6b:b1:23:ef:c9:4b:b3:3c:0f:78:9a:28:79:8d:30: 3e:5e:28:e0:4c:c8:27:c9:b7:35:40:ea:87:76:69: 0b:59:9e:78:b4:95:96:fa:e8:9a:3a:e6:ae:a7:66: 4d:2b:4d:b8:7a:cc:05:bf:68:a1:8a:4b:df:38:3e: a0:59:5a:3e:ca:87:fc:f0:c5:0d:4a:db:4f:49:0f: 37:c7:57:e0:03:f6:8e:5c:8d:3a:39:a8:ba:30:8b: a6:39:45:c9:8f:d1:4c:d6:f3:02:2b:1e:b8:ea:84: 6c:1c:06:88:c3:ff:5e:58:2c:18:9d:fe:37:cc:2c: c8:5a:fc:c9:7b:75:81:7f:15:6b:63:94:f3:30:16: e3:53:26:fd:4b:d7:ef:88:a5:31:61:4a:78:73:a3: bc:69:d3:56:d9:dc:2b:2c:aa:d7:e0:f4:fe:b9:27: ed:68:36:25:36:05:5c:fe:48:44:62:01:6a:c4:0a: 5d:62:00:e7:05:e3:43:76:34:79:cc:d4:ec:a0:5a: ca:fa:60:29:6f:e0:b4:61:ab:d0:50:4b:69:30:91: 83:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:86:25:38:76:A9:13:46:6C:7D:CB:2E:92:63:76:22:C9:6E:9A:09 X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:f7:ef:20:70:3e:9c:0d:68:29:84:b9:ad:f5:6c:91:43:60: 9f:f7:c1:fd:9b:0f:22:23:f2:27:73:12:95:14:1c:a7:1e:10: 7f:1d:2d:53:84:d4:cb:33:7c:b4:58:b6:c6:d0:c3:b7:01:bb: 1f:51:9f:c5:f1:e3:50:38:b8:89:77:d6:37:65:48:dc:87:04: c5:93:d3:44:cf:d2:a0:e7:0c:f5:94:3e:df:7f:82:d3:b1:2a: d8:3d:97:86:7b:53:c0:96:be:14:b2:59:ec:b4:b1:86:bc:3b: 36:13:03:ae:65:a9:3a:0a:12:43:42:be:e3:4b:cc:d5:f6:ec: aa:77:28:6c:92:56:92:30:20:57:05:b3:eb:98:b7:86:3d:a4: ae:9c:ff:66:06:d6:05:89:75:3f:33:3f:06:f7:35:2d:26:24: 00:75:22:df:d7:a5:19:d4:e9:a0:e5:49:88:35:c4:b7:56:3b: d0:72:65:46:98:9a:3c:af:8b:1d:9e:76:16:ef:21:50:e4:b9: 53:c1:74:f2:08:cc:d8:64:90:2d:00:06:0b:5f:d7:15:e4:a5: 07:5e:0a:5f:3c:bc:d0:29:85:f5:61:2f:d7:96:ba:25:fa:5c: b6:03:5a:d5:b1:07:df:84:67:79:a7:fb:e1:88:34:12:c8:0d: c9:ab:8d:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjYwNDE2MjMyNTUwWhcNMjYwNDIzMjMyNTUwWjAYMRYwFAYD VQQDEw02OWUxNmZmZS05NDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2pc03poEOWFE5iJ8NIMAdb5JUKw5AuC0+YrFaKlTmUXshgj1wNerkHa7/Rr sSPvyUuzPA94mih5jTA+XijgTMgnybc1QOqHdmkLWZ54tJWW+uiaOuaup2ZNK024 eswFv2ihikvfOD6gWVo+yof88MUNSttPSQ83x1fgA/aOXI06Oai6MIumOUXJj9FM 1vMCKx646oRsHAaIw/9eWCwYnf43zCzIWvzJe3WBfxVrY5TzMBbjUyb9S9fviKUx YUp4c6O8adNW2dwrLKrX4PT+uSftaDYlNgVc/khEYgFqxApdYgDnBeNDdjR5zNTs oFrK+mApb+C0YavQUEtpMJGDqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHGGJTh2 qRNGbH3LLpJjdiLJbpoJMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyPfvIHA+nA1oKYS5rfVskUNgn/fB/ZsPIiPyJ3MSlRQcpx4Qfx0tU4TUyzN8 tFi2xtDDtwG7H1GfxfHjUDi4iXfWN2VI3IcExZPTRM/SoOcM9ZQ+33+C07Eq2D2X hntTwJa+FLJZ7LSxhrw7NhMDrmWpOgoSQ0K+40vM1fbsqncobJJWkjAgVwWz65i3 hj2krpz/ZgbWBYl1PzM/Bvc1LSYkAHUi39elGdTpoOVJiDXEt1Y70HJlRpiaPK+L HZ52Fu8hUOS5U8F08gjM2GSQLQAGC1/XFeSlB14KXzy80CmF9WEv15a6JfpctgNa 1bEH34Rneaf74Yg0EsgNyauNfg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:11 2026 by rpki-client