$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft File: k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json) Hash identifier: BOgW4wayHHq2I0KPXLtT0TiiXOwZtimSYst38hclbdU= Subject key identifier: 75:C5:A1:4C:54:5F:43:6D:7A:53:00:63:FC:E9:0D:57:AA:95:05:F8 Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 Certificate issuer: /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft Manifest number: 24 Signing time: Wed 15 Apr 2026 08:28:15 +0000 Manifest this update: Wed 15 Apr 2026 08:28:14 +0000 Manifest next update: Wed 22 Apr 2026 08:28:14 +0000 Files and hashes: 1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: /waWx+I9JvoHZOLAyrw/UyBFPmITVsHzZ8v2uTfa1bg=) 2: 28E7910A1FC911F19CD315063A3D8C67.roa (hash: nm/1/orNWXaGNERTaZE87TxHEbHq71JZlG9+7BghPAo=) 3: 550ED6C61FC911F1858982443A3D8C67.roa (hash: ddkpPiY6ryXn1AzWQqH/VaePq3ZMXolf09Ngi2USLQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 08:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Validity Not Before: Apr 15 08:28:14 2026 GMT Not After : Apr 22 08:28:14 2026 GMT Subject: CN=69df4c1f-c36b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:65:91:f6:f0:7a:50:22:ce:aa:40:9b:a5:37: df:83:0c:f2:e2:ec:ff:75:1f:81:f9:31:a8:58:ab: 25:1b:68:dc:da:98:cc:50:fa:a6:57:55:ca:97:61: aa:93:2d:60:e1:ce:d1:c0:25:90:07:37:18:9a:df: 93:22:9c:ed:09:39:43:b1:f3:89:1e:b6:9c:78:c7: 02:b4:d6:00:b9:94:c5:85:db:e1:97:d1:13:ba:51: cb:33:b6:ac:64:c1:0e:bf:0e:48:b2:43:4e:50:cc: 1c:46:6a:df:3d:85:25:5f:f6:fe:3b:01:52:a9:8e: b1:33:ea:ee:91:68:b4:49:a5:b1:5c:52:48:34:97: cc:4e:0c:94:76:82:c3:f7:fc:ed:16:a9:07:5a:3d: 0a:a6:6b:9d:a4:dd:84:44:d3:4d:c6:45:2b:6a:11: 74:bc:66:e4:22:f1:ac:81:0a:f7:c2:26:7e:cd:f7: 2f:cd:c3:d9:ca:a0:d7:fd:1b:e3:fc:2a:62:df:1a: 50:03:74:35:2a:3f:76:90:81:1b:ec:2e:0a:10:94: d9:83:db:c9:de:0a:01:aa:79:51:b5:d2:06:bf:d9: 38:27:5a:50:b8:e5:95:bd:fb:d0:c4:f6:af:e9:c5: 6c:70:e9:8a:d7:1e:62:ee:c5:0d:ac:2d:e3:70:9f: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:C5:A1:4C:54:5F:43:6D:7A:53:00:63:FC:E9:0D:57:AA:95:05:F8 X509v3 Authority Key Identifier: keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:14:c5:bb:be:60:9c:4d:2a:3b:22:23:e9:3f:eb:cf:a7:f4: cd:dc:60:a0:d4:53:81:e1:9f:6e:b6:b2:38:5a:51:93:87:16: e2:fd:0c:af:f3:0a:cc:f9:63:20:d5:27:1a:dc:3c:bf:e3:9b: 0a:09:d5:bf:3d:d9:56:1e:ef:e4:40:e5:d5:05:cc:1c:22:b1: d9:3e:da:63:90:f5:aa:49:06:c7:11:90:d9:08:15:73:44:8b: 74:6a:b5:e9:61:15:b3:4e:f9:ff:81:c7:78:01:70:4b:7e:fc: b9:a9:6a:ed:bd:15:53:47:20:19:17:7a:3b:2b:0f:b2:76:8c: 0f:09:7c:d9:29:d5:bc:1e:af:86:14:4c:fd:89:8c:71:1d:09: 47:a5:3b:46:c2:d6:83:f9:26:29:25:01:03:19:c6:a5:aa:0b: de:0e:58:f2:81:2f:2c:0e:30:48:22:d1:81:c9:3b:dc:51:ef: 30:b7:05:fc:f3:ce:3f:71:d4:c3:c8:50:fc:50:23:8d:9b:b6: 3f:03:8f:51:1d:b7:8e:ff:05:8b:14:2d:a2:44:4a:a5:1d:84: f9:ce:f9:7f:11:d6:28:28:35:c7:11:62:d4:9f:21:f6:2c:07: 2c:74:30:95:2d:4b:ee:50:69:19:e9:ed:ad:4b:85:c2:64:bc: 0f:c5:a3:27 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoOTNDMDE5QkZENjA3OTlENzM2MjJDMTE4NUY0QTM5QkE1 RjVGOTIxNzAeFw0yNjA0MTUwODI4MTRaFw0yNjA0MjIwODI4MTRaMBgxFjAUBgNV BAMTDTY5ZGY0YzFmLWMzNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSZZH28HpQIs6qQJulN9+DDPLi7P91H4H5MahYqyUbaNzamMxQ+qZXVcqXYaqT LWDhztHAJZAHNxia35MinO0JOUOx84ketpx4xwK01gC5lMWF2+GX0RO6Ucsztqxk wQ6/DkiyQ05QzBxGat89hSVf9v47AVKpjrEz6u6RaLRJpbFcUkg0l8xODJR2gsP3 /O0WqQdaPQqma52k3YRE003GRStqEXS8ZuQi8ayBCvfCJn7N9y/Nw9nKoNf9G+P8 KmLfGlADdDUqP3aQgRvsLgoQlNmD28neCgGqeVG10ga/2TgnWlC45ZW9+9DE9q/p xWxw6YrXHmLuxQ2sLeNwn3upAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdcWhTFRf Q216UwBj/OkNV6qVBfgwHwYDVR0jBBgwFoAUk8AZv9YHmdc2IsEYX0o5ul9fkhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzQxMEI2NTM0MTA0 NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRjMklzRVlYMG81dWw5Zmto Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvazhBWnY5WUhtZGMySXNFWVgwbzV1bDlma2hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzQxMEI2NTM0MTA0NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRj MklzRVlYMG81dWw5ZmtoYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCDFMW7vmCcTSo7IiPpP+vPp/TN3GCg1FOB4Z9utrI4WlGThxbi/Qyv8wrM+WMg 1Sca3Dy/45sKCdW/PdlWHu/kQOXVBcwcIrHZPtpjkPWqSQbHEZDZCBVzRIt0arXp YRWzTvn/gcd4AXBLfvy5qWrtvRVTRyAZF3o7Kw+ydowPCXzZKdW8Hq+GFEz9iYxx HQlHpTtGwtaD+SYpJQEDGcalqgveDljygS8sDjBIItGByTvcUe8wtwX8884/cdTD yFD8UCONm7Y/A49RHbeO/wWLFC2iREqlHYT5zvl/EdYoKDXHEWLUnyH2LAcsdDCV LUvuUGkZ6e2tS4XCZLwPxaMn -----END CERTIFICATE-----Generated at Fri Apr 17 07:17:05 2026 by rpki-client