$ rpki-client -vvf rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft File: tkKboemiWuSuEg8IEuf8LjYjLS8.mft (raw, json) Hash identifier: Q8cdypOBOkvHmnjWAx8aTPxsB9hJreluRvoNMbn8PPY= Subject key identifier: CE:1A:02:2E:21:FA:FB:3D:8F:78:C2:2E:DC:FE:0E:BB:4F:17:CB:04 Authority key identifier: B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F Certificate issuer: /CN=A9194156/serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Certificate serial: 0AC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft Manifest number: 0AB7 Signing time: Thu 16 Apr 2026 19:22:58 +0000 Manifest this update: Thu 16 Apr 2026 19:22:58 +0000 Manifest next update: Thu 23 Apr 2026 19:22:58 +0000 Files and hashes: 1: tkKboemiWuSuEg8IEuf8LjYjLS8.crl (hash: iqHV3tpQh4SPk/uC8/IUSbaojH2MnBsHIDlEiWAvkiQ=) 2: F6179D9E736011EA9EDED344C4F9AE02.roa (hash: he3UjPhAzljyPyijMVHrJVOO3ZJsIkaVva/wVZG1Ao0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:22:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2754 (0xac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194156, serialNumber=B6429BA1E9A25AE4AE120F0812E7FC2E36232D2F Validity Not Before: Apr 16 19:22:58 2026 GMT Not After : Apr 23 19:22:58 2026 GMT Subject: CN=69e13712-29df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7d:a1:68:97:0d:52:0a:3f:27:9f:52:bd:46: 3b:84:79:a3:96:71:f3:d3:c5:fb:a6:a9:9e:4a:5c: 83:b8:90:13:94:95:1a:cf:30:c6:5a:d0:1e:6a:66: 68:34:43:af:a3:3e:69:8e:2b:29:12:fd:1d:b3:78: 06:7a:6a:31:a7:19:cc:4b:3e:bd:6a:38:b9:aa:80: dd:eb:e0:46:7b:da:d9:8e:ec:8a:17:f6:07:c3:23: d5:27:30:28:67:41:66:93:de:af:18:05:b7:cd:4a: fd:f2:81:4b:d2:8e:56:72:b6:23:60:f1:19:75:04: fa:f0:fe:5a:0e:41:e7:3d:a0:90:84:50:ed:33:ee: 1e:d7:46:00:d6:de:a7:0a:63:02:ba:fb:cc:c4:fb: a9:20:c2:60:95:15:fc:f1:00:44:df:53:89:14:fd: bc:df:6b:9c:ab:ea:4a:27:07:b1:01:ac:0a:23:69: 79:e4:be:16:8c:87:69:d2:41:56:58:43:c3:74:ce: a7:c1:7e:de:24:b3:d7:f8:c8:47:4b:b5:e5:b3:84: e6:80:59:14:41:b1:cc:f0:dd:7e:70:55:8b:62:81: ac:8b:d8:33:25:c6:ba:8d:9e:50:4f:13:cf:ef:44: a4:cc:2d:ed:5c:ba:e6:a8:aa:00:2c:b3:12:58:2d: df:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1A:02:2E:21:FA:FB:3D:8F:78:C2:2E:DC:FE:0E:BB:4F:17:CB:04 X509v3 Authority Key Identifier: keyid:B6:42:9B:A1:E9:A2:5A:E4:AE:12:0F:08:12:E7:FC:2E:36:23:2D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tkKboemiWuSuEg8IEuf8LjYjLS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194156/36479384736011EAB6349544C4F9AE02/tkKboemiWuSuEg8IEuf8LjYjLS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d7:d2:93:f5:9c:09:12:a4:29:82:29:5c:5f:78:92:5d:30: a7:98:85:19:2a:cf:05:0c:07:80:58:96:09:1a:56:ea:b0:68: cc:b2:80:7a:09:b8:77:53:06:c0:01:d2:77:f9:bb:e8:46:0d: d8:fd:d6:9c:a6:45:91:99:02:d8:99:cc:f9:59:1e:e6:a0:8a: 32:9d:ae:05:07:a4:0f:8e:d2:be:e1:15:ca:01:63:45:fd:6a: 20:0f:64:a8:67:d8:7d:fc:58:28:10:f5:2c:66:1b:5d:90:a6: dd:59:e0:60:78:ac:e6:23:94:80:4f:30:bc:d6:bb:f0:bb:03: d8:62:93:a0:54:79:3b:40:cb:81:68:5b:ae:0c:32:e7:27:19: 67:d6:74:7b:f3:67:5a:4b:9a:75:86:50:d6:d2:b0:e8:99:95: 83:36:78:a2:88:5f:d5:13:15:ff:81:f4:34:ac:12:7c:d6:ce: f3:fa:47:32:84:b5:49:9b:f4:3d:4e:d0:5c:ff:f2:ed:26:6d: 6d:4a:7c:8f:0e:df:25:f7:45:fd:61:27:c7:47:75:d8:10:af: 10:06:c1:62:da:0f:48:3a:fc:a2:b9:5f:46:89:cb:c1:26:f5: 77:5f:21:54:b6:3c:2d:1e:af:82:46:21:66:20:9c:67:cf:52: a5:f7:c3:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxNTYxMTAvBgNVBAUTKEI2NDI5QkExRTlBMjVBRTRBRTEyMEYwODEyRTdGQzJF MzYyMzJEMkYwHhcNMjYwNDE2MTkyMjU4WhcNMjYwNDIzMTkyMjU4WjAYMRYwFAYD VQQDEw02OWUxMzcxMi0yOWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx32haJcNUgo/J59SvUY7hHmjlnHz08X7pqmeSlyDuJATlJUazzDGWtAeamZo NEOvoz5pjispEv0ds3gGemoxpxnMSz69aji5qoDd6+BGe9rZjuyKF/YHwyPVJzAo Z0Fmk96vGAW3zUr98oFL0o5WcrYjYPEZdQT68P5aDkHnPaCQhFDtM+4e10YA1t6n CmMCuvvMxPupIMJglRX88QBE31OJFP2832ucq+pKJwexAawKI2l55L4WjIdp0kFW WEPDdM6nwX7eJLPX+MhHS7Xls4TmgFkUQbHM8N1+cFWLYoGsi9gzJca6jZ5QTxPP 70SkzC3tXLrmqKoALLMSWC3fRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM4aAi4h +vs9j3jCLtz+DrtPF8sEMB8GA1UdIwQYMBaAFLZCm6HpolrkrhIPCBLn/C42Iy0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDE1Ni8zNjQ3OTM4NDcz NjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1U3VFZzhJRXVmOExqWWpM UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RrS2JvZW1pV3VTdUVnOElFdWY4TGpZakxTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDE1Ni8zNjQ3OTM4NDczNjAxMUVBQjYzNDk1NDRDNEY5QUUwMi90a0tib2VtaVd1 U3VFZzhJRXVmOExqWWpMUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg9fSk/WcCRKkKYIpXF94kl0wp5iFGSrPBQwHgFiWCRpW6rBozLKAegm4d1MG wAHSd/m76EYN2P3WnKZFkZkC2JnM+Vke5qCKMp2uBQekD47SvuEVygFjRf1qIA9k qGfYffxYKBD1LGYbXZCm3VngYHis5iOUgE8wvNa78LsD2GKToFR5O0DLgWhbrgwy 5ycZZ9Z0e/NnWkuadYZQ1tKw6JmVgzZ4oohf1RMV/4H0NKwSfNbO8/pHMoS1SZv0 PU7QXP/y7SZtbUp8jw7fJfdF/WEnx0d12BCvEAbBYtoPSDr8orlfRonLwSb1d18h VLY8LR6vgkYhZiCcZ89SpffDfg== -----END CERTIFICATE-----Generated at Fri Apr 17 13:42:38 2026 by rpki-client