$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: GEbXGofqHIG413EZb+4fMUMluj3soHrzFtEMx0c9c0w= Subject key identifier: 6A:88:7A:CF:EF:E0:79:71:45:66:3D:A5:F4:D2:32:3D:8F:73:2D:FB Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 08A2 Signing time: Thu 16 Apr 2026 20:27:17 +0000 Manifest this update: Thu 16 Apr 2026 20:27:17 +0000 Manifest next update: Thu 23 Apr 2026 20:27:17 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: 1ciTKA20zKbrP+/VKqVf7yu9Rqa15kPGU01evSN6DDA=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: MUOkb6HBrIcJHM8GhoD7uMpA/Mn234hOvyhOtrfNkiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Apr 16 20:27:17 2026 GMT Not After : Apr 23 20:27:17 2026 GMT Subject: CN=69e14625-aa31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:ae:e5:1f:d7:88:fe:e8:eb:9d:1c:df:5d: 40:a5:29:b2:9e:6b:a4:b4:37:e1:c4:21:93:9e:86: e4:c6:67:9d:18:b8:12:84:ae:c2:dc:8e:2a:1c:e0: 4d:ea:f2:9d:07:a8:60:bc:5b:08:24:e0:80:32:96: a6:c7:2e:ba:46:41:bd:a0:d1:58:c1:40:8b:de:94: 1e:e9:c7:da:93:c2:b5:0d:2c:2d:1b:98:3d:3f:f9: 45:3f:91:64:ef:1d:14:aa:9f:ca:9f:75:4e:f7:17: a1:f3:33:19:f1:12:74:5e:6d:fa:5f:60:ac:14:af: 3d:58:63:23:5f:ae:70:9a:db:0b:dc:f0:cf:7c:97: 50:bf:10:87:9b:7d:fb:40:b0:49:b1:70:e5:d6:12: 23:2c:a0:82:c8:d7:38:a7:fe:47:89:d8:d4:fe:ec: 06:c7:8c:6d:d4:d2:00:44:e8:49:62:aa:96:49:9b: 6a:ea:96:35:86:61:1d:41:98:ff:7b:0f:d4:5f:ee: 2a:5a:54:06:64:0e:8a:a5:c7:38:5d:40:a3:86:ab: 34:b8:2d:fa:89:32:c6:f9:b6:3b:fc:99:49:cb:39: 18:aa:8b:ab:4e:bd:af:00:c4:21:3e:a5:99:7f:08: 40:39:1b:bf:a0:6f:59:36:12:3c:cf:66:c8:71:20: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:88:7A:CF:EF:E0:79:71:45:66:3D:A5:F4:D2:32:3D:8F:73:2D:FB X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:75:b9:6b:13:88:c0:0d:e9:9a:f2:de:c8:07:ca:51:bd:69: b0:a1:ee:6d:69:33:f0:ac:a0:75:ab:5a:fc:50:72:99:22:3c: 8c:19:0d:02:d8:35:94:c5:7b:ae:72:8c:16:e4:ef:a8:a8:0a: 94:7e:f3:26:53:3f:3a:09:d1:d3:03:7d:f9:8c:d6:bc:6c:aa: ac:78:8d:61:f5:a3:0d:fe:47:bf:37:47:a9:88:24:6d:62:ac: 0e:5a:2f:fd:86:0a:bd:1d:d1:21:0a:af:5c:82:ce:45:8c:f5: fd:1c:c5:fd:e7:84:cf:e2:b5:fa:54:b4:31:49:1c:2d:2d:01: 1f:18:19:e5:ab:d9:1f:9e:6e:b1:77:78:fd:34:10:25:0b:bd: 22:70:6c:4a:83:91:ac:2a:11:52:2e:a0:86:57:fd:07:c5:2b: 61:47:dc:7c:66:f3:57:79:03:aa:da:50:bf:79:8a:53:08:d9: 2a:45:eb:61:6c:56:1f:2f:8f:8a:6d:6e:0e:31:2f:f6:2a:7f: cb:ce:f5:b0:10:f2:41:ac:75:83:cf:4d:34:1c:60:c2:97:02: bd:35:cd:b9:2e:0a:5e:b1:ab:5a:3f:83:b0:c2:60:3c:49:54: 9b:0c:d0:12:05:c0:2f:87:d0:3b:d2:90:d3:24:c8:d0:51:fd: b7:a8:b3:ba -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjYwNDE2MjAyNzE3WhcNMjYwNDIzMjAyNzE3WjAYMRYwFAYD VQQDEw02OWUxNDYyNS1hYTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtISu5R/XiP7o650c311ApSmynmuktDfhxCGTnobkxmedGLgShK7C3I4qHOBN 6vKdB6hgvFsIJOCAMpamxy66RkG9oNFYwUCL3pQe6cfak8K1DSwtG5g9P/lFP5Fk 7x0Uqp/Kn3VO9xeh8zMZ8RJ0Xm36X2CsFK89WGMjX65wmtsL3PDPfJdQvxCHm337 QLBJsXDl1hIjLKCCyNc4p/5HidjU/uwGx4xt1NIAROhJYqqWSZtq6pY1hmEdQZj/ ew/UX+4qWlQGZA6Kpcc4XUCjhqs0uC36iTLG+bY7/JlJyzkYqourTr2vAMQhPqWZ fwhAORu/oG9ZNhI8z2bIcSCW/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGqIes/v 4HlxRWY9pfTSMj2Pcy37MB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf3W5axOIwA3pmvLeyAfKUb1psKHubWkz8Kygdata/FBymSI8jBkNAtg1lMV7 rnKMFuTvqKgKlH7zJlM/OgnR0wN9+YzWvGyqrHiNYfWjDf5HvzdHqYgkbWKsDlov /YYKvR3RIQqvXILORYz1/RzF/eeEz+K1+lS0MUkcLS0BHxgZ5avZH55usXd4/TQQ JQu9InBsSoORrCoRUi6ghlf9B8UrYUfcfGbzV3kDqtpQv3mKUwjZKkXrYWxWHy+P im1uDjEv9ip/y871sBDyQax1g89NNBxgwpcCvTXNuS4KXrGrWj+DsMJgPElUmwzQ EgXAL4fQO9KQ0yTI0FH9t6izug== -----END CERTIFICATE-----Generated at Fri Apr 17 15:14:23 2026 by rpki-client