$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: rgtZZp05d+SCcWf/OZZd1mig536wF+vG1Npcu3awATE= Subject key identifier: CC:F5:EB:1E:61:92:97:B3:61:68:A8:F7:46:F8:E1:63:FD:67:86:DC Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D48 Signing time: Thu 16 Apr 2026 17:59:09 +0000 Manifest this update: Thu 16 Apr 2026 17:59:08 +0000 Manifest next update: Thu 23 Apr 2026 17:59:08 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: kbzEcor2v0VNI5P1cTkWfueRaky+frHEpMukL8K2Vq0=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: pMlh6GaUpQCHOF5jp4VeA1i4PMVxZyqL5Xz+a1jzwLQ=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: mpeuILXtK20evHO15vrz42Wl9KtS1A8R8Bhu34AGTf0=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: y1B49VYXe0SRw82YvaswxQk2lKZMwXfDS055uUW8x9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3439 (0xd6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Apr 16 17:59:08 2026 GMT Not After : Apr 23 17:59:08 2026 GMT Subject: CN=69e1236d-ae51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:2a:9f:fa:46:7d:e3:d5:82:96:01:82:07: 3c:56:d6:52:a3:93:33:7e:87:ac:0f:51:ac:b1:0f: b8:a5:af:49:a2:03:ab:b7:9c:6b:22:c7:fb:24:c7: a3:c0:44:4a:d0:c1:0d:26:71:e4:f8:b4:ce:23:14: 7e:ae:fd:3b:7e:ec:f8:45:40:9e:28:10:3d:56:31: b0:45:d6:48:a8:1b:7b:0a:e4:69:b7:8c:64:3e:d0: 4e:ba:55:eb:06:3f:69:fe:4f:db:fb:46:c6:a0:c6: 6a:07:93:bb:b3:4f:9a:b1:c9:1c:bd:19:61:3e:9c: ec:80:f7:ad:8c:68:f4:d9:17:64:76:fa:38:81:9f: e5:86:56:80:43:0c:4f:a7:30:66:f9:80:bd:cd:40: 3f:a4:d5:08:37:c8:ce:75:8f:aa:bd:e5:8f:83:6c: b2:37:84:92:8c:ac:c5:de:08:70:ea:94:97:91:05: a3:16:06:4e:19:79:fb:d2:c7:79:49:68:04:b6:fc: 66:c5:fa:14:63:f5:0f:7d:f6:22:f0:74:99:e2:03: 1d:30:20:38:7c:8f:fe:34:66:b1:95:eb:a7:cf:57: b1:19:9b:6c:8e:f8:fc:b7:06:16:d8:cd:2d:9b:67: f7:f5:ba:33:57:6f:dd:4c:a9:01:f2:f4:00:5d:86: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F5:EB:1E:61:92:97:B3:61:68:A8:F7:46:F8:E1:63:FD:67:86:DC X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:6c:b3:bb:bc:ca:d4:3d:a5:59:52:e3:4f:16:4a:7f:45:ef: 32:bc:10:0f:b2:70:b7:d3:4f:e1:a8:8d:76:21:13:83:97:77: cd:2b:ed:63:90:43:a5:08:01:0a:aa:ea:bd:e5:59:06:19:bf: f1:0d:63:24:11:84:79:7a:b8:93:aa:ac:5c:c8:56:29:a1:ed: 9e:49:49:d2:d7:7e:47:03:db:5e:cb:a6:28:da:25:39:72:70: 1b:94:5f:46:57:40:a0:0d:e3:1f:67:69:fc:82:77:a4:fc:77: 33:99:a5:96:16:85:7c:d9:62:d8:b7:01:8c:1a:2c:b9:d7:09: d1:36:b8:0c:b9:6c:be:99:e0:75:2c:d9:36:78:94:8a:9f:58: ce:02:1a:1a:76:54:b5:6c:6c:1f:d4:44:b5:96:25:d5:88:59: e2:bb:ad:e9:a5:02:9e:f2:c8:37:ad:e6:9f:57:e3:41:3d:e4: 76:3b:b0:82:a1:b3:73:d8:f1:c8:e9:81:28:ed:b5:17:61:ee: d5:f8:a7:40:40:c3:2b:09:31:0d:49:6e:e4:02:1f:e5:b4:b4: 3c:22:9a:43:53:f1:19:ab:3b:03:fc:11:90:4a:5a:cc:62:0b: ac:7d:09:a6:2e:b6:a8:e4:3b:8f:91:4d:b8:4f:03:5d:36:b6: 07:09:2e:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwNDE2MTc1OTA4WhcNMjYwNDIzMTc1OTA4WjAYMRYwFAYD VQQDEw02OWUxMjM2ZC1hZTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh4qn/pGfePVgpYBggc8VtZSo5MzfoesD1GssQ+4pa9JogOrt5xrIsf7JMej wERK0MENJnHk+LTOIxR+rv07fuz4RUCeKBA9VjGwRdZIqBt7CuRpt4xkPtBOulXr Bj9p/k/b+0bGoMZqB5O7s0+asckcvRlhPpzsgPetjGj02Rdkdvo4gZ/lhlaAQwxP pzBm+YC9zUA/pNUIN8jOdY+qveWPg2yyN4SSjKzF3ghw6pSXkQWjFgZOGXn70sd5 SWgEtvxmxfoUY/UPffYi8HSZ4gMdMCA4fI/+NGaxleunz1exGZtsjvj8twYW2M0t m2f39bozV2/dTKkB8vQAXYbh2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMz16x5h kpezYWio90b44WP9Z4bcMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAumyzu7zK1D2lWVLjTxZKf0XvMrwQD7Jwt9NP4aiNdiETg5d3zSvtY5BDpQgB CqrqveVZBhm/8Q1jJBGEeXq4k6qsXMhWKaHtnklJ0td+RwPbXsumKNolOXJwG5Rf RldAoA3jH2dp/IJ3pPx3M5mllhaFfNli2LcBjBosudcJ0Ta4DLlsvpngdSzZNniU ip9YzgIaGnZUtWxsH9REtZYl1YhZ4rut6aUCnvLIN63mn1fjQT3kdjuwgqGzc9jx yOmBKO21F2Hu1finQEDDKwkxDUlu5AIf5bS0PCKaQ1PxGas7A/wRkEpazGILrH0J pi62qOQ7j5FNuE8DXTa2BwkuhA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:01:57 2026 by rpki-client