$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft File: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft (raw, json) Hash identifier: xEdzL5o8qvhKVeqZKX2mjQwOoC73jr50wWE2Ik4cynQ= Subject key identifier: D3:19:AF:37:21:94:FF:30:08:44:0E:22:85:F2:A3:48:7E:D7:6E:41 Authority key identifier: 70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED Certificate issuer: /CN=A9187347/serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft Manifest number: 23 Signing time: Sun 19 Apr 2026 08:27:13 +0000 Manifest this update: Sun 19 Apr 2026 08:27:13 +0000 Manifest next update: Sun 26 Apr 2026 08:27:13 +0000 Files and hashes: 1: cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl (hash: a4kTPQY2TG60NfURGwrqM2l9zs9FjI1RxsIC6AqaQKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187347, serialNumber=70DC10BD28004F633EBFEF66E7EC29818850EEED Validity Not Before: Apr 19 08:27:13 2026 GMT Not After : Apr 26 08:27:13 2026 GMT Subject: CN=69e491e1-7fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:a8:fd:08:22:d7:af:19:0a:34:9c:4f:2d: 61:fe:75:7d:61:a9:81:b4:80:f8:81:67:01:59:91: 66:ab:ea:31:98:71:80:fb:ca:97:29:b9:76:05:07: 21:28:8e:3c:56:ee:ea:fe:d7:c2:a6:fa:09:24:99: a3:0d:d3:0f:22:8c:53:4d:82:ed:27:1e:35:7d:21: d1:af:bb:fc:b7:8c:fa:17:04:af:28:06:50:87:94: c4:0e:79:53:53:94:58:22:9a:d5:24:9b:99:eb:2b: e3:4a:55:69:01:1a:96:8c:38:13:cb:b0:39:09:5b: 6e:d0:18:9f:9c:b7:94:e0:33:c6:87:e8:24:47:1c: 5b:5f:b0:45:7b:d3:23:36:02:fa:ff:4d:38:68:22: 37:1e:8b:5f:dc:1a:bf:4b:0a:28:4c:79:47:6d:37: bc:6b:63:3f:5b:13:9f:b0:4b:48:eb:e0:39:c6:cd: d4:01:f1:a0:2f:45:60:87:c3:0c:3c:9b:e6:38:02: 49:42:d8:ea:8b:9a:11:c8:a1:22:9d:dc:5b:0e:b2: 70:09:a3:0c:0a:5e:d4:a0:1b:9c:29:10:c6:55:99: 4d:bd:8e:8b:18:4e:a4:16:06:b1:bb:67:d1:41:cc: 86:75:e1:ef:b5:f1:cd:c9:72:db:69:62:3c:f9:8c: 63:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:19:AF:37:21:94:FF:30:08:44:0E:22:85:F2:A3:48:7E:D7:6E:41 X509v3 Authority Key Identifier: keyid:70:DC:10:BD:28:00:4F:63:3E:BF:EF:66:E7:EC:29:81:88:50:EE:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/308D9E2C0E3F11F190D5DB73183D8C67/cNwQvSgAT2M-v-9m5-wpgYhQ7u0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c8:71:67:35:b0:4b:db:bb:b9:be:77:6f:c0:4d:70:42:59: ce:3c:37:19:df:35:b7:3f:ce:ba:a6:b1:a1:da:ad:e7:59:a4: 06:40:99:ec:60:a0:04:aa:f7:12:f6:ac:1c:d6:b1:ce:ed:c5: 1c:68:4a:63:09:5f:65:fc:ba:b5:2a:be:78:13:88:8a:1c:f9: 50:44:0e:30:77:ea:c3:07:46:f3:a9:e9:02:1b:ad:98:01:b0: 14:be:20:c4:63:2c:12:ff:6a:28:a7:c8:e3:57:2f:17:26:3e: 51:d9:e4:c9:18:0c:c8:af:99:b1:2e:08:5f:8b:34:60:e3:40: 5b:f2:48:35:fa:80:36:4c:7e:09:94:c7:2e:ea:2b:91:2c:ba: 83:23:5e:8a:38:80:dc:2b:06:31:33:f7:d6:1c:8d:08:44:40: da:79:f1:da:8c:84:fd:47:ec:50:8a:7f:c4:2b:12:19:0c:70: 6e:57:ed:99:1d:b8:ba:1a:13:5d:63:09:aa:4e:18:59:e5:c5: 43:dc:60:84:28:60:82:f4:92:14:e0:17:42:d1:df:05:c9:14: 57:26:32:3c:d5:9b:cf:75:4c:50:6d:d5:b4:1c:53:f3:9c:4a: 65:43:d4:bd:d5:0e:33:19:2c:b3:77:f4:35:e9:86:f9:2e:e2: 67:cf:6c:ca -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzM0NzExMC8GA1UEBRMoNzBEQzEwQkQyODAwNEY2MzNFQkZFRjY2RTdFQzI5ODE4 ODUwRUVFRDAeFw0yNjA0MTkwODI3MTNaFw0yNjA0MjYwODI3MTNaMBgxFjAUBgNV BAMTDTY5ZTQ5MWUxLTdmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6qKj9CCLXrxkKNJxPLWH+dX1hqYG0gPiBZwFZkWar6jGYcYD7ypcpuXYFByEo jjxW7ur+18Km+gkkmaMN0w8ijFNNgu0nHjV9IdGvu/y3jPoXBK8oBlCHlMQOeVNT lFgimtUkm5nrK+NKVWkBGpaMOBPLsDkJW27QGJ+ct5TgM8aH6CRHHFtfsEV70yM2 Avr/TThoIjcei1/cGr9LCihMeUdtN7xrYz9bE5+wS0jr4DnGzdQB8aAvRWCHwww8 m+Y4AklC2OqLmhHIoSKd3FsOsnAJowwKXtSgG5wpEMZVmU29josYTqQWBrG7Z9FB zIZ14e+18c3JcttpYjz5jGNzAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU0xmvNyGU /zAIRA4ihfKjSH7XbkEwHwYDVR0jBBgwFoAUcNwQvSgAT2M+v+9m5+wpgYhQ7u0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzQ3LzMwOEQ5RTJDMEUz RjExRjE5MEQ1REI3MzE4M0Q4QzY3L2NOd1F2U2dBVDJNLXYtOW01LXdwZ1loUTd1 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY053UXZTZ0FUMk0tdi05bTUtd3BnWWhRN3UwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzQ3LzMwOEQ5RTJDMEUzRjExRjE5MEQ1REI3MzE4M0Q4QzY3L2NOd1F2U2dBVDJN LXYtOW01LXdwZ1loUTd1MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAoyHFnNbBL27u5vndvwE1wQlnOPDcZ3zW3P866prGh2q3nWaQGQJnsYKAEqvcS 9qwc1rHO7cUcaEpjCV9l/Lq1Kr54E4iKHPlQRA4wd+rDB0bzqekCG62YAbAUviDE YywS/2oop8jjVy8XJj5R2eTJGAzIr5mxLghfizRg40Bb8kg1+oA2TH4JlMcu6iuR LLqDI16KOIDcKwYxM/fWHI0IREDaefHajIT9R+xQin/EKxIZDHBuV+2ZHbi6GhNd YwmqThhZ5cVD3GCEKGCC9JIU4BdC0d8FyRRXJjI81ZvPdUxQbdW0HFPznEplQ9S9 1Q4zGSyzd/Q16Yb5LuJnz2zK -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:25 2026 by rpki-client