$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: MxdzUF8iAp0Q1PCisEZCUWcClW99yfk/bOT/wwD5Fm4= Subject key identifier: F7:5C:45:FE:31:96:41:EC:84:8F:02:E4:47:CB:26:3A:41:EE:E4:F2 Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 35BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 3568 Signing time: Thu 16 Apr 2026 14:32:44 +0000 Manifest this update: Thu 16 Apr 2026 14:32:43 +0000 Manifest next update: Thu 23 Apr 2026 14:32:43 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: eD1khmut0hmwdGQYw/ZKJBTTS+W6osuFMFlLvj7Bpvk=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: jXl+86vCs3KiG7eJ3MpATQjLUSqhs8yk2VzZe0i6DIs=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: ATzhpEQ3sWsRctxwBO/oEigCG80DEQbCszCIkMpVBHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13757 (0x35bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Apr 16 14:32:43 2026 GMT Not After : Apr 23 14:32:43 2026 GMT Subject: CN=69e0f30b-3352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:7e:b4:2b:51:8d:9a:03:61:ac:89:fa:c7: c3:be:ec:03:02:db:97:10:9c:9a:2c:54:13:f1:ee: 62:78:d3:58:81:e1:7a:50:b5:21:c1:38:2b:dc:a8: 63:e6:9b:4a:8b:d3:17:ad:8b:fd:dd:19:31:95:16: 3e:f8:00:4b:87:94:d7:a0:bf:42:a5:f4:0c:35:a1: d5:e4:9f:9f:16:ad:a6:28:23:62:3f:a3:86:e4:a3: 59:15:6c:0f:80:fb:d2:ab:33:31:31:96:ce:1c:85: 2d:e6:6b:82:0b:2d:13:49:92:10:a5:dd:2d:6f:ee: f9:b6:10:0a:5f:93:3a:b4:91:6a:d4:ac:f0:e7:b7: a1:7f:11:7b:ab:04:f3:ec:91:a1:d7:43:83:26:6b: 37:06:0d:df:a4:0d:74:c3:7f:ec:75:50:54:fb:e0: 27:ad:c4:1e:bb:cc:31:de:b2:97:f6:6c:83:15:41: d1:4b:7e:64:bb:3a:4c:a2:7e:37:cf:9f:aa:05:13: ab:56:43:71:4a:ad:a2:97:a3:75:42:17:3d:2a:34: 04:4d:68:01:48:57:ee:7f:cc:7e:55:df:cf:9e:de: 89:a6:ac:6f:c2:e5:46:de:09:32:62:df:30:53:dc: c3:31:d8:08:3a:52:af:aa:cc:5d:8a:01:17:76:e4: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:45:FE:31:96:41:EC:84:8F:02:E4:47:CB:26:3A:41:EE:E4:F2 X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2e:66:dd:bb:26:84:52:ce:05:a8:88:32:c0:98:dc:69:18: d2:5c:fc:c9:87:d1:9e:7c:ea:f2:8b:79:1b:2b:c7:95:02:2a: 06:ce:26:52:82:b6:6b:a4:ce:02:af:53:23:0d:10:f1:0e:05: 79:4e:a7:32:e6:63:42:7f:d1:84:9f:96:2b:86:80:cf:94:5d: 08:d7:6c:75:33:b9:da:ba:73:62:e4:09:6e:ed:2e:04:5e:93: 34:a4:2b:68:8b:d4:e2:f6:cb:7b:73:35:48:2b:f2:f2:e8:3a: dd:dd:39:22:7c:a4:5f:e5:cc:46:de:f1:d5:4e:43:65:7f:69: 79:09:7f:7a:f7:ee:cf:9a:c7:8a:f3:27:e8:3a:00:ea:8a:36: 8f:c5:a9:60:96:6d:75:2a:31:86:5d:5d:c2:4d:e2:0e:2f:20: 3f:6e:f9:71:2e:a7:d2:91:aa:3e:07:0f:58:57:e5:02:2d:69: 4d:70:1c:82:95:44:88:93:6c:5f:a7:08:e1:41:17:18:0a:3c: 4f:1b:e6:8d:8a:f2:1b:95:8e:ea:6c:f7:8b:d5:08:fd:f8:75: f0:12:2f:a8:e9:3b:82:09:76:7a:17:bf:46:31:d0:4d:3b:91: 2a:a5:be:28:c1:02:71:7b:db:c4:64:4b:65:bd:f7:e9:c1:dd: b2:20:b5:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwNDE2MTQzMjQzWhcNMjYwNDIzMTQzMjQzWjAYMRYwFAYD VQQDEw02OWUwZjMwYi0zMzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlN9+tCtRjZoDYayJ+sfDvuwDAtuXEJyaLFQT8e5ieNNYgeF6ULUhwTgr3Khj 5ptKi9MXrYv93RkxlRY++ABLh5TXoL9CpfQMNaHV5J+fFq2mKCNiP6OG5KNZFWwP gPvSqzMxMZbOHIUt5muCCy0TSZIQpd0tb+75thAKX5M6tJFq1Kzw57ehfxF7qwTz 7JGh10ODJms3Bg3fpA10w3/sdVBU++AnrcQeu8wx3rKX9myDFUHRS35kuzpMon43 z5+qBROrVkNxSq2il6N1Qhc9KjQETWgBSFfuf8x+Vd/Pnt6JpqxvwuVG3gkyYt8w U9zDMdgIOlKvqsxdigEXduS1mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdcRf4x lkHshI8C5EfLJjpB7uTyMB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKi5m3bsmhFLOBaiIMsCY3GkY0lz8yYfRnnzq8ot5GyvHlQIqBs4mUoK2a6TO Aq9TIw0Q8Q4FeU6nMuZjQn/RhJ+WK4aAz5RdCNdsdTO52rpzYuQJbu0uBF6TNKQr aIvU4vbLe3M1SCvy8ug63d05InykX+XMRt7x1U5DZX9peQl/evfuz5rHivMn6DoA 6oo2j8WpYJZtdSoxhl1dwk3iDi8gP275cS6n0pGqPgcPWFflAi1pTXAcgpVEiJNs X6cI4UEXGAo8TxvmjYryG5WO6mz3i9UI/fh18BIvqOk7ggl2ehe/RjHQTTuRKqW+ KMECcXvbxGRLZb336cHdsiC1GQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:00 2026 by rpki-client