$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: yw9v/ucr1gtfjLkO6Pbz/+lLCvtgblA0Cl/ZdSi5nc4= Subject key identifier: 72:D4:2E:B5:DD:F8:6D:DF:8A:2E:91:1C:03:8B:9B:97:B4:6A:D8:C3 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 0120 Signing time: Fri 17 Apr 2026 05:31:30 +0000 Manifest this update: Fri 17 Apr 2026 05:31:30 +0000 Manifest next update: Fri 24 Apr 2026 05:31:30 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: QZe4pms7pOGfDRVveLG/ng04eQupj19OQWnWSWjgWu0=) 2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=) 3: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Apr 17 05:31:30 2026 GMT Not After : Apr 24 05:31:30 2026 GMT Subject: CN=69e1c5b2-a0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:26:f8:c0:ce:53:c0:11:c5:d4:7f:51:c0: a4:a8:6a:8e:11:c6:da:0a:80:1f:1d:dc:c2:1b:96: fa:36:a3:67:81:6d:e6:b9:07:07:54:80:52:42:b3: c4:61:b6:3b:f2:f5:8f:65:d5:5e:64:81:95:0e:00: 55:5c:4a:85:c1:fe:59:0c:43:5f:19:e4:d8:64:f4: 65:e0:3a:c4:b5:ae:75:e1:b3:8a:47:22:27:e1:0a: f6:c5:06:89:04:d0:cc:27:4f:e9:64:c3:dd:bd:09: 60:9a:92:3d:ce:bb:ab:db:58:1f:f4:68:21:fa:b8: 17:c7:11:bd:e4:a9:91:10:31:57:1f:98:6f:13:81: 84:85:ad:2c:a1:75:05:d2:92:f6:b0:fa:80:f1:06: 70:90:92:ed:c9:86:68:e8:f8:e3:7a:8f:19:fe:cc: 42:9d:68:be:22:44:11:22:41:1f:8a:d0:78:ed:d0: 89:3d:ed:76:8f:b2:0c:54:cf:48:59:66:03:90:8c: 5f:f1:26:3a:ac:05:52:aa:41:88:44:fc:ca:70:aa: 37:e3:5d:98:44:b3:8a:44:d4:a2:2b:55:c5:8f:7f: 17:f7:9c:7d:97:36:9f:d7:fc:c6:ad:72:ea:3a:88: 68:b4:f0:5a:7d:c5:6f:ba:49:cc:7f:83:df:81:6b: 3c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D4:2E:B5:DD:F8:6D:DF:8A:2E:91:1C:03:8B:9B:97:B4:6A:D8:C3 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:d0:57:f3:28:cf:9a:e2:a5:7d:32:25:07:69:fe:6d:1f:d4: 4e:05:fd:5e:5d:e8:1c:2c:20:ba:23:72:53:8b:cb:94:db:cd: 11:22:ec:95:21:10:52:fb:3d:30:0e:f4:60:47:cd:f9:1e:e9: f7:cf:c4:f5:ab:f8:fb:ea:77:9e:ae:ad:f2:eb:ef:38:b7:a1: c0:a4:ea:01:26:d3:55:3f:f3:29:01:3d:39:93:45:18:11:48: 9b:d9:1f:fe:bb:bb:9c:ff:6c:e7:73:89:18:60:f1:d7:54:c5: 2b:cc:56:a5:5a:12:20:26:1c:4c:7b:19:b1:31:ef:2d:f3:36: 99:ad:f5:1c:ee:2c:02:a3:fb:a2:bc:11:49:a2:7b:9e:78:14: 61:0a:3b:f5:70:28:89:f6:f8:38:4c:a6:bf:74:74:9a:08:7a: 62:00:23:33:e0:2e:3b:9e:70:ca:9d:4e:2e:72:54:84:4b:ec: 3a:67:f0:8a:b1:8e:95:97:49:36:af:33:34:3f:47:43:f4:8b: 0f:7a:52:7d:3c:de:f5:8b:68:d5:8a:d0:c5:3a:10:24:4d:1d: 43:94:6f:a8:a7:a0:ab:1a:ca:96:b9:0a:6e:b1:c7:7f:8a:fd: 47:83:7a:aa:b5:0f:71:ce:73:b5:ae:79:31:80:f5:2d:67:3c: ce:3c:70:c4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjYwNDE3MDUzMTMwWhcNMjYwNDI0MDUzMTMwWjAYMRYwFAYD VQQDEw02OWUxYzViMi1hMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DEm+MDOU8ARxdR/UcCkqGqOEcbaCoAfHdzCG5b6NqNngW3muQcHVIBSQrPE YbY78vWPZdVeZIGVDgBVXEqFwf5ZDENfGeTYZPRl4DrEta514bOKRyIn4Qr2xQaJ BNDMJ0/pZMPdvQlgmpI9zrur21gf9Ggh+rgXxxG95KmREDFXH5hvE4GEha0soXUF 0pL2sPqA8QZwkJLtyYZo6Pjjeo8Z/sxCnWi+IkQRIkEfitB47dCJPe12j7IMVM9I WWYDkIxf8SY6rAVSqkGIRPzKcKo3412YRLOKRNSiK1XFj38X95x9lzaf1/zGrXLq OohotPBafcVvuknMf4PfgWs8bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLULrXd +G3fii6RHAOLm5e0atjDMB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA3NBX8yjPmuKlfTIlB2n+bR/UTgX9Xl3oHCwguiNyU4vLlNvNESLslSEQUvs9 MA70YEfN+R7p98/E9av4++p3nq6t8uvvOLehwKTqASbTVT/zKQE9OZNFGBFIm9kf /ru7nP9s53OJGGDx11TFK8xWpVoSICYcTHsZsTHvLfM2ma31HO4sAqP7orwRSaJ7 nngUYQo79XAoifb4OEymv3R0mgh6YgAjM+AuO55wyp1OLnJUhEvsOmfwirGOlZdJ Nq8zND9HQ/SLD3pSfTze9Yto1YrQxToQJE0dQ5RvqKegqxrKlrkKbrHHf4r9R4N6 qrUPcc5zta55MYD1LWc8zjxwxA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:49:39 2026 by rpki-client