$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: GvlH/aHDsmE+FCkMzEnmm07VI2ZwjmKouOeiZligy8U= Subject key identifier: EE:2E:9F:81:5A:EC:34:3E:7B:98:EB:D5:FA:DF:3C:49:9E:5D:DF:6C Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 0201 Signing time: Thu 16 Apr 2026 19:33:02 +0000 Manifest this update: Thu 16 Apr 2026 19:33:02 +0000 Manifest next update: Thu 23 Apr 2026 19:33:02 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: 1aLW+WxtHLNpFVSa25JOHD85zh2wiogdBuoYKKOeNfg=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Apr 16 19:33:02 2026 GMT Not After : Apr 23 19:33:02 2026 GMT Subject: CN=69e1396e-638c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:06:8a:6d:8a:b4:37:b4:c9:c7:c8:81:47:18: b3:f8:fe:b6:cf:49:f4:63:e5:b9:88:80:0e:37:4e: ad:0a:51:f7:a0:e7:11:2c:66:f4:93:4c:0c:41:19: 20:0f:f4:5f:af:fe:8b:cb:61:3d:b1:54:d9:ea:e8: 22:6a:5e:a2:53:2e:ca:26:42:07:38:e0:5d:74:0d: 00:30:0a:16:68:d0:ff:e7:f9:26:7c:79:2b:5d:d0: c0:c7:d7:af:3c:f3:34:7e:c9:d9:cb:6b:42:45:09: bc:6a:a0:40:23:31:b1:a2:f9:dd:6e:0e:77:d5:64: 3d:2a:af:75:02:18:8a:30:bb:d1:c3:a6:04:fb:c2: 14:1b:75:c0:dd:9d:3a:8d:9d:2b:f4:3d:29:80:73: 45:2c:20:2b:1f:ac:79:d0:39:69:6d:15:09:00:7a: 97:13:d7:a7:82:5c:76:97:56:23:43:9c:4a:e4:df: 36:06:80:3a:67:9d:2d:e2:2c:54:6f:e8:41:30:76: d1:03:ef:9c:16:35:52:2f:41:cc:b1:9e:45:cd:64: 0e:dc:e2:52:3c:eb:82:31:cc:4f:36:e1:76:d3:7c: 5d:82:54:cf:74:92:9f:2e:5f:40:78:c6:ec:59:7a: 94:2d:22:b2:dc:03:6b:3b:89:6e:fd:7a:91:11:2f: 4f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2E:9F:81:5A:EC:34:3E:7B:98:EB:D5:FA:DF:3C:49:9E:5D:DF:6C X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:2e:07:9f:1a:f9:51:1e:d7:af:6e:5c:12:1d:c5:91:00: ff:d4:48:8f:20:05:2b:36:3f:ab:95:56:ed:94:78:42:af:de: 7c:33:28:91:18:23:15:0a:13:6a:9f:f7:c9:6c:82:f5:1d:8c: 3f:ac:49:66:bf:3d:53:9f:46:d9:e0:b6:1d:8d:13:cb:2b:d2: ae:61:d6:eb:68:97:53:a2:72:05:0c:af:c9:96:04:f3:74:ff: 6c:27:1a:b8:26:a9:3a:8b:93:ab:3d:d6:20:86:9a:81:2a:7c: b5:c1:bc:fe:cc:3e:47:83:d7:45:2b:82:48:fe:95:e3:e4:78: 6c:97:f9:73:93:ed:f9:69:61:78:57:35:89:ba:d0:8e:5e:5a: 66:45:fd:61:5e:9d:f8:30:85:3f:e2:cc:d3:63:b1:39:2c:1d: cd:ac:84:30:0c:c5:36:8d:6a:b4:74:1a:57:61:4a:9b:9a:28: fc:e1:54:15:d1:36:66:53:2e:0a:f6:99:98:bd:f3:27:72:d5: 75:00:4b:dd:32:a0:c8:42:87:0e:1b:bb:71:12:89:cd:8e:c0: 2e:aa:84:7c:4c:6d:19:74:f7:d5:f5:85:45:90:5f:6f:e2:94: 9f:87:93:39:cc:5b:1a:19:73:d1:44:33:16:b3:60:82:67:f7: 87:67:ec:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjYwNDE2MTkzMzAyWhcNMjYwNDIzMTkzMzAyWjAYMRYwFAYD VQQDEw02OWUxMzk2ZS02MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmgaKbYq0N7TJx8iBRxiz+P62z0n0Y+W5iIAON06tClH3oOcRLGb0k0wMQRkg D/Rfr/6Ly2E9sVTZ6ugial6iUy7KJkIHOOBddA0AMAoWaND/5/kmfHkrXdDAx9ev PPM0fsnZy2tCRQm8aqBAIzGxovndbg531WQ9Kq91AhiKMLvRw6YE+8IUG3XA3Z06 jZ0r9D0pgHNFLCArH6x50DlpbRUJAHqXE9englx2l1YjQ5xK5N82BoA6Z50t4ixU b+hBMHbRA++cFjVSL0HMsZ5FzWQO3OJSPOuCMcxPNuF203xdglTPdJKfLl9AeMbs WXqULSKy3ANrO4lu/XqRES9P2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4un4Fa 7DQ+e5jr1frfPEmeXd9sMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAav0uB58a+VEe169uXBIdxZEA/9RIjyAFKzY/q5VW7ZR4Qq/efDMokRgjFQoT ap/3yWyC9R2MP6xJZr89U59G2eC2HY0TyyvSrmHW62iXU6JyBQyvyZYE83T/bCca uCapOouTqz3WIIaagSp8tcG8/sw+R4PXRSuCSP6V4+R4bJf5c5Pt+WlheFc1ibrQ jl5aZkX9YV6d+DCFP+LM02OxOSwdzayEMAzFNo1qtHQaV2FKm5oo/OFUFdE2ZlMu CvaZmL3zJ3LVdQBL3TKgyEKHDhu7cRKJzY7ALqqEfExtGXT31fWFRZBfb+KUn4eT OcxbGhlz0UQzFrNggmf3h2fsvw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:48 2026 by rpki-client