$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: CDOSKlQ40S3XdIQ4dfRGIGIVi3Q88L4A1ADprGDaN/w= Subject key identifier: 2E:3A:9A:45:2B:35:34:2F:81:5D:6F:3E:D1:22:EA:1A:36:C3:2C:5B Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 020E Signing time: Fri 17 Apr 2026 02:57:41 +0000 Manifest this update: Fri 17 Apr 2026 02:57:40 +0000 Manifest next update: Fri 24 Apr 2026 02:57:40 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: rJXDs8b85IcT4dj9SLIC6sJeuUbjNqXXSoQHvZDpCJ4=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: GtB+540Na9gBA/mhZk/pwr8xgrOuS92j17VMFwnTNm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:57:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Apr 17 02:57:40 2026 GMT Not After : Apr 24 02:57:40 2026 GMT Subject: CN=69e1a1a4-ac8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:ca:d4:7f:51:b7:ea:5b:df:49:02:9f:ce: 11:2a:f4:fd:b0:28:65:7f:79:eb:a1:60:39:4e:d2: e9:ad:4e:0c:a6:02:6b:69:36:dc:c1:73:cc:88:28: b6:5c:9c:21:ff:a4:bc:f1:e5:0f:10:70:6e:df:27: 4b:63:c2:56:0b:55:ab:ac:a9:8e:84:29:2f:33:5d: 4b:34:bf:1a:da:f4:a8:f3:fb:ec:c3:c5:4d:6d:1b: b8:7e:b6:55:aa:4d:69:e7:67:b8:d4:07:52:e8:7a: 2a:ca:be:f7:13:74:35:ef:21:64:36:45:4e:64:9f: d2:23:55:ca:90:64:a7:02:b8:44:33:00:01:1b:f4: 8c:d3:7a:93:ca:aa:11:64:c1:a7:e0:07:fd:0e:fa: 34:9e:41:e9:76:5e:63:17:29:27:03:55:31:ac:a5: 1b:ea:8e:1c:e9:e0:9b:64:1a:b6:5e:81:65:42:37: 98:eb:94:a8:03:a7:9b:58:90:d5:62:cd:d0:22:2b: 14:5a:8f:9b:ec:94:a9:9c:9c:05:52:43:c5:8d:0d: bd:c2:e0:6e:b2:36:1b:42:ba:de:51:1f:ae:2d:8c: 51:77:48:c5:7c:ac:1a:f2:9a:d6:dc:34:c5:58:64: 52:c6:a7:5d:e2:57:c0:5c:87:b6:b5:bb:63:60:4e: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3A:9A:45:2B:35:34:2F:81:5D:6F:3E:D1:22:EA:1A:36:C3:2C:5B X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d8:95:8a:16:df:bf:0a:70:1d:b5:54:dc:b5:6f:ed:fe:a2: 3b:01:68:95:1f:76:4e:97:f2:fe:ae:c1:76:c5:6f:5b:78:96: 0b:df:55:4b:1b:8b:52:c8:ba:a5:0a:d5:5a:b7:03:57:46:fc: 61:64:dc:11:1a:45:3c:91:8d:a1:bb:2c:6c:4c:06:50:c5:46: 23:20:5f:d2:fa:97:9a:f1:9a:e4:55:10:82:7f:f7:17:86:d7: d0:d1:d4:22:00:01:73:e6:6c:e4:7f:bf:85:c5:0e:b4:93:8c: 09:bc:55:fc:dc:43:42:6f:bf:5c:0c:83:50:2d:1d:40:bf:4e: 83:5e:29:5c:7e:72:4b:8d:ae:49:b5:5a:a4:f8:4b:e8:85:cb: d7:52:46:47:e0:ce:3b:95:de:49:c0:90:9c:c2:61:91:17:e8: 41:49:68:04:ff:7c:ed:31:5d:63:c6:17:b9:f8:a2:c8:4b:bd: f7:e6:2a:20:13:3f:4b:95:56:92:18:c6:2a:3c:22:43:c5:c2: 52:6a:97:0e:d4:0f:39:c9:2e:78:f2:48:59:4c:ab:b6:a1:27: 1c:f9:ae:e6:90:4e:70:26:90:e8:73:82:b9:3a:6e:c0:fa:ed: 6e:a6:c7:01:94:7e:4d:4f:32:a9:8e:2f:3d:5d:25:3e:0b:f8: d5:df:a5:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjYwNDE3MDI1NzQwWhcNMjYwNDI0MDI1NzQwWjAYMRYwFAYD VQQDEw02OWUxYTFhNC1hYzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3bK1H9Rt+pb30kCn84RKvT9sChlf3nroWA5TtLprU4MpgJraTbcwXPMiCi2 XJwh/6S88eUPEHBu3ydLY8JWC1WrrKmOhCkvM11LNL8a2vSo8/vsw8VNbRu4frZV qk1p52e41AdS6Hoqyr73E3Q17yFkNkVOZJ/SI1XKkGSnArhEMwABG/SM03qTyqoR ZMGn4Af9Dvo0nkHpdl5jFyknA1UxrKUb6o4c6eCbZBq2XoFlQjeY65SoA6ebWJDV Ys3QIisUWo+b7JSpnJwFUkPFjQ29wuBusjYbQrreUR+uLYxRd0jFfKwa8prW3DTF WGRSxqdd4lfAXIe2tbtjYE4gPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC46mkUr NTQvgV1vPtEi6ho2wyxbMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHdiVihbfvwpwHbVU3LVv7f6iOwFolR92Tpfy/q7BdsVvW3iWC99VSxuLUsi6 pQrVWrcDV0b8YWTcERpFPJGNobssbEwGUMVGIyBf0vqXmvGa5FUQgn/3F4bX0NHU IgABc+Zs5H+/hcUOtJOMCbxV/NxDQm+/XAyDUC0dQL9Og14pXH5yS42uSbVapPhL 6IXL11JGR+DOO5XeScCQnMJhkRfoQUloBP987TFdY8YXufiiyEu99+YqIBM/S5VW khjGKjwiQ8XCUmqXDtQPOckuePJIWUyrtqEnHPmu5pBOcCaQ6HOCuTpuwPrtbqbH AZR+TU8yqY4vPV0lPgv41d+lpA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:43 2026 by rpki-client