$ rpki-client -vvf rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft File: SIcH43YxSt1UXMZgreziKYZME-A.mft (raw, json) Hash identifier: hIHQI9FBp5kFSK8Eg0RqR0p0onhAVciNhEkwZJola1A= Subject key identifier: 3C:54:02:B1:C3:24:EF:CD:81:38:9B:F6:7D:3A:A9:66:F8:97:56:89 Authority key identifier: 48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 Certificate issuer: /CN=A9193B7A/serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft Manifest number: 7D Signing time: Fri 17 Apr 2026 07:25:08 +0000 Manifest this update: Fri 17 Apr 2026 07:25:07 +0000 Manifest next update: Fri 24 Apr 2026 07:25:07 +0000 Files and hashes: 1: SIcH43YxSt1UXMZgreziKYZME-A.crl (hash: RDMrxW6iX+7HSVSjG6Zs77CFP8DUch0iE4y90DvyaZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193B7A, serialNumber=488707E376314ADD545CC660ADECE229864C13E0 Validity Not Before: Apr 17 07:25:07 2026 GMT Not After : Apr 24 07:25:07 2026 GMT Subject: CN=69e1e054-8342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:a5:45:e3:af:bb:b4:5e:08:8e:73:27:75: f2:80:b3:9a:85:3b:73:15:39:e2:61:38:bf:db:bc: 28:44:f7:c7:bb:3e:6d:bd:55:bf:e3:4b:36:30:e7: f4:75:9a:39:ab:d9:11:99:98:b2:58:ba:3c:fc:9c: e2:1e:bc:03:25:64:83:b2:3c:ae:98:c1:f7:a4:38: 2e:e0:3e:a4:66:c6:2e:35:27:70:58:11:b9:1e:b6: 9a:b3:8e:c3:32:b8:9c:90:0b:e3:bb:cc:aa:f8:2a: 5d:9f:b1:e2:e7:3a:46:32:f0:c4:cb:5e:5c:d3:b0: be:e3:55:ba:45:d3:fa:4c:dd:f4:b1:7b:80:2b:97: 27:42:29:80:d8:09:bd:fa:22:e8:64:3f:88:3e:ac: 56:69:5c:b9:01:6f:20:f9:72:6f:ad:f5:7b:57:e8: a2:51:73:92:7e:67:e2:b0:86:0f:e7:a2:a6:4c:f9: ea:9e:56:d1:95:19:14:24:87:7c:c7:97:82:87:47: 4e:96:4b:7b:ea:c4:81:e0:53:ec:e4:6c:10:e9:78: 6f:e6:fb:67:1a:99:ac:6d:db:e8:85:d9:bf:5a:e9: 75:a3:de:13:a5:15:5a:30:40:69:2b:d7:36:b6:b8: f8:38:3d:5a:e8:7e:e5:30:1f:9c:d7:94:45:9f:c3: 1c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:02:B1:C3:24:EF:CD:81:38:9B:F6:7D:3A:A9:66:F8:97:56:89 X509v3 Authority Key Identifier: keyid:48:87:07:E3:76:31:4A:DD:54:5C:C6:60:AD:EC:E2:29:86:4C:13:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIcH43YxSt1UXMZgreziKYZME-A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193B7A/C98D55FA7DBB11F0BC4D7761C4F9AE02/SIcH43YxSt1UXMZgreziKYZME-A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:09:de:d1:bb:85:2f:4c:62:89:5c:c1:d1:1d:3b:41:a6:49: 94:ac:dd:34:40:3b:fb:49:93:a9:82:10:30:16:c1:bd:c6:6b: f4:81:c3:10:7e:6f:91:38:a5:8d:88:97:cc:05:06:49:52:26: 97:d9:b9:9e:f8:a8:4b:80:eb:ea:72:39:bf:a9:99:be:95:ad: 0b:1f:37:3c:8f:b3:50:b0:62:88:d8:1b:3e:e4:a5:6c:09:da: da:99:da:34:68:3e:09:6c:c2:23:43:9f:2e:eb:0d:84:3d:f9: e8:86:3f:20:ca:e5:72:1d:23:70:79:c6:c0:5a:d7:df:90:33: 9e:26:0a:22:7d:32:01:77:f0:e3:e2:08:1e:ef:cf:2b:9e:82: 65:06:88:0c:76:7b:a7:20:e5:02:cf:75:3b:6a:58:48:00:b0: 80:8b:fb:3a:1a:29:5a:dc:99:29:19:0d:71:c4:29:77:97:6a: ce:f7:ed:53:0e:54:85:77:f6:87:67:6a:74:3d:50:f9:4b:93: 9b:11:82:06:78:79:0f:f3:a7:31:9b:dd:c8:8a:a0:0f:38:1a: 42:f7:75:20:15:f9:45:03:b8:9c:0a:88:c7:6e:ae:3d:c6:31: 9a:be:f1:70:1b:ee:20:48:30:0a:62:17:46:43:a2:51:75:02: 18:87:21:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 M0I3QTExMC8GA1UEBRMoNDg4NzA3RTM3NjMxNEFERDU0NUNDNjYwQURFQ0UyMjk4 NjRDMTNFMDAeFw0yNjA0MTcwNzI1MDdaFw0yNjA0MjQwNzI1MDdaMBgxFjAUBgNV BAMTDTY5ZTFlMDU0LTgzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoLKVF46+7tF4IjnMndfKAs5qFO3MVOeJhOL/bvChE98e7Pm29Vb/jSzYw5/R1 mjmr2RGZmLJYujz8nOIevAMlZIOyPK6YwfekOC7gPqRmxi41J3BYEbketpqzjsMy uJyQC+O7zKr4Kl2fseLnOkYy8MTLXlzTsL7jVbpF0/pM3fSxe4ArlydCKYDYCb36 IuhkP4g+rFZpXLkBbyD5cm+t9XtX6KJRc5J+Z+Kwhg/noqZM+eqeVtGVGRQkh3zH l4KHR06WS3vqxIHgU+zkbBDpeG/m+2camaxt2+iF2b9a6XWj3hOlFVowQGkr1za2 uPg4PVrofuUwH5zXlEWfwxxtAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPFQCscMk 782BOJv2fTqpZviXVokwHwYDVR0jBBgwFoAUSIcH43YxSt1UXMZgreziKYZME+Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzQjdBL0M5OEQ1NUZBN0RC QjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3QxVVhNWmdyZXppS1laTUUt QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0ljSDQzWXhTdDFVWE1aZ3JlemlLWVpNRS1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz QjdBL0M5OEQ1NUZBN0RCQjExRjBCQzRENzc2MUM0RjlBRTAyL1NJY0g0M1l4U3Qx VVhNWmdyZXppS1laTUUtQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqCd7Ru4UvTGKJXMHRHTtBpkmUrN00QDv7SZOpghAwFsG9xmv0gcMQfm+ROKWN iJfMBQZJUiaX2bme+KhLgOvqcjm/qZm+la0LHzc8j7NQsGKI2Bs+5KVsCdramdo0 aD4JbMIjQ58u6w2EPfnohj8gyuVyHSNwecbAWtffkDOeJgoifTIBd/Dj4gge788r noJlBogMdnunIOUCz3U7alhIALCAi/s6Gila3JkpGQ1xxCl3l2rO9+1TDlSFd/aH Z2p0PVD5S5ObEYIGeHkP86cxm93IiqAPOBpC93UgFflFA7icCojHbq49xjGavvFw G+4gSDAKYhdGQ6JRdQIYhyG5 -----END CERTIFICATE-----Generated at Fri Apr 17 12:19:14 2026 by rpki-client