$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft File: FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft (raw, json) Hash identifier: 6xGtIbtJazFYGQTjRc3tr0mQQSkqwz8In7YR2vfhBZ8= Subject key identifier: 80:3F:13:41:E0:D0:E4:A7:23:A5:4D:D4:45:21:F1:43:A2:19:ED:FD Authority key identifier: 14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 Certificate issuer: /CN=A9173CF2/serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Certificate serial: 0711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft Manifest number: 0709 Signing time: Sat 18 Apr 2026 21:52:48 +0000 Manifest this update: Sat 18 Apr 2026 21:52:48 +0000 Manifest next update: Sat 25 Apr 2026 21:52:48 +0000 Files and hashes: 1: FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl (hash: w/+0P6zMMsKVE0BXqfs7BLsNfUp63nOiP/cPcD4JbDU=) 2: D9E7CFF681EF11EBAEE9D17AC4F9AE02.roa (hash: dTa5Sv3QyKZeyYh7kTFM/PjTqogHVEan9r70oy/WWU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 21:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CF2, serialNumber=1447D44B49F7906DC63731A5D98D852EC10B7745 Validity Not Before: Apr 18 21:52:48 2026 GMT Not After : Apr 25 21:52:48 2026 GMT Subject: CN=69e3fd30-8e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:38:ea:8b:b8:03:ff:79:14:60:23:07:9d:9b: e1:ff:87:40:28:9c:70:91:d4:60:d5:7f:0a:ce:66: 38:1f:0c:bf:66:a0:72:09:65:a1:99:d0:18:58:7c: 83:50:63:28:3e:8a:cc:b5:45:f0:57:d2:1e:94:0f: b7:04:5b:f8:4c:6e:13:3e:cd:91:ae:31:d8:ba:bf: 10:fe:b7:61:b6:82:89:7e:1e:7a:9a:83:2b:26:8f: 0a:59:43:ed:6a:6b:ab:72:e3:53:38:5a:ac:10:5c: 61:98:9d:c7:23:b3:dc:8e:2e:78:d3:71:45:16:f6: 9a:ba:bb:1a:5c:88:76:57:0b:3f:ba:17:b6:cf:75: c4:49:53:b8:6f:f3:9b:31:25:22:5f:3a:21:c2:8f: af:59:46:d7:dd:8a:7d:b0:b5:5e:cb:3e:23:38:f3: 27:23:19:4c:33:ab:9a:4e:62:e9:1f:2f:b6:89:be: a8:dd:e2:f3:37:f2:54:c6:1d:51:f5:01:3a:d7:34: f4:37:2e:54:3d:3e:8e:22:d8:70:97:17:a3:c7:47: 5a:61:99:01:a2:e9:df:3e:3f:3e:20:98:06:ab:ec: d5:c3:c8:9c:aa:5e:63:e9:fb:75:63:6c:f6:60:ed: a1:b1:2f:90:ac:c9:59:3e:80:5d:78:ef:21:13:d2: 8d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3F:13:41:E0:D0:E4:A7:23:A5:4D:D4:45:21:F1:43:A2:19:ED:FD X509v3 Authority Key Identifier: keyid:14:47:D4:4B:49:F7:90:6D:C6:37:31:A5:D9:8D:85:2E:C1:0B:77:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEfUS0n3kG3GNzGl2Y2FLsELd0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CF2/1AE9034681EE11EBBE35495FC4F9AE02/FEfUS0n3kG3GNzGl2Y2FLsELd0U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3c:5f:1d:23:8a:20:1f:f6:db:5c:94:ee:34:02:a4:0b:8d: ca:30:0b:4e:6c:28:92:f4:e3:49:7d:e3:f5:ad:92:41:d8:06: c3:1d:a7:cd:50:d0:7d:62:d7:4d:8e:42:16:ff:30:d8:07:ed: 7b:f0:18:f3:3f:bc:f4:c5:4c:e2:e2:c1:06:a4:d9:f3:ca:28: a9:2b:45:72:8b:69:8c:7d:d0:9c:67:50:c1:a2:f5:ea:01:99: e3:eb:4e:36:dc:c7:64:77:c4:b1:52:c7:dd:69:38:ae:51:4e: 45:05:27:4a:d3:1b:79:ad:ab:77:c8:7d:c1:e2:38:d8:a9:06: db:3b:4c:5e:8a:24:bb:b5:b3:83:b6:69:4f:e3:ce:3d:6a:e1: 3b:45:a5:25:8f:32:b9:7f:e7:62:a8:d8:1e:21:67:93:8f:2b: 17:93:c2:7b:e4:8b:11:e5:39:59:19:b0:49:45:31:41:f4:47: 7b:75:3b:fb:0d:37:85:60:d0:09:cb:a0:82:94:8e:88:1c:0d: 69:90:19:28:83:69:2d:46:98:29:64:8f:29:38:30:81:67:0a: 42:92:8f:de:71:63:9c:49:ed:c0:a1:cd:12:2a:9b:d8:6d:78: cf:86:d0:6c:22:f2:af:2c:3e:5b:fa:c0:e8:67:ca:82:1e:82: 78:bf:03:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRjIxMTAvBgNVBAUTKDE0NDdENDRCNDlGNzkwNkRDNjM3MzFBNUQ5OEQ4NTJF QzEwQjc3NDUwHhcNMjYwNDE4MjE1MjQ4WhcNMjYwNDI1MjE1MjQ4WjAYMRYwFAYD VQQDEw02OWUzZmQzMC04ZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zjqi7gD/3kUYCMHnZvh/4dAKJxwkdRg1X8KzmY4Hwy/ZqByCWWhmdAYWHyD UGMoPorMtUXwV9IelA+3BFv4TG4TPs2RrjHYur8Q/rdhtoKJfh56moMrJo8KWUPt amurcuNTOFqsEFxhmJ3HI7Pcji5403FFFvaaursaXIh2Vws/uhe2z3XESVO4b/Ob MSUiXzohwo+vWUbX3Yp9sLVeyz4jOPMnIxlMM6uaTmLpHy+2ib6o3eLzN/JUxh1R 9QE61zT0Ny5UPT6OIthwlxejx0daYZkBounfPj8+IJgGq+zVw8icql5j6ft1Y2z2 YO2hsS+QrMlZPoBdeO8hE9KNxwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIA/E0Hg 0OSnI6VN1EUh8UOiGe39MB8GA1UdIwQYMBaAFBRH1EtJ95BtxjcxpdmNhS7BC3dF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NGMi8xQUU5MDM0Njgx RUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tHM0dOekdsMlkyRkxzRUxk MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZFZlVTMG4za0czR056R2wyWTJGTHNFTGQwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NGMi8xQUU5MDM0NjgxRUUxMUVCQkUzNTQ5NUZDNEY5QUUwMi9GRWZVUzBuM2tH M0dOekdsMlkyRkxzRUxkMFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKjxfHSOKIB/221yU7jQCpAuNyjALTmwokvTjSX3j9a2SQdgGwx2nzVDQfWLX TY5CFv8w2Afte/AY8z+89MVM4uLBBqTZ88ooqStFcotpjH3QnGdQwaL16gGZ4+tO NtzHZHfEsVLH3Wk4rlFORQUnStMbea2rd8h9weI42KkG2ztMXooku7Wzg7ZpT+PO PWrhO0WlJY8yuX/nYqjYHiFnk48rF5PCe+SLEeU5WRmwSUUxQfRHe3U7+w03hWDQ CcuggpSOiBwNaZAZKINpLUaYKWSPKTgwgWcKQpKP3nFjnEntwKHNEiqb2G14z4bQ bCLyryw+W/rA6GfKgh6CeL8DUg== -----END CERTIFICATE-----Generated at Sun Apr 19 08:59:36 2026 by rpki-client