$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: vDrJ1uazw/GEIuDX2cH/gVYNx5e0wTCBB7eBnGVwDjo= Subject key identifier: 09:B1:6F:64:4F:6E:DF:DF:F2:89:3A:6C:02:ED:C7:84:4C:F0:07:AE Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 03C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 03B9 Signing time: Fri 17 Apr 2026 00:35:11 +0000 Manifest this update: Fri 17 Apr 2026 00:35:11 +0000 Manifest next update: Fri 24 Apr 2026 00:35:11 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: XZDNjjUF4IVKwUkp3KaUT/Og3LY2c615+e0eAmoC9lg=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: 4C5vaV8XTy4jKNN6jrtdqFgnURjoJYHwa1sm4fkGiqY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 960 (0x3c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Apr 17 00:35:11 2026 GMT Not After : Apr 24 00:35:11 2026 GMT Subject: CN=69e1803f-020e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c9:09:09:f9:98:85:f1:d5:e3:f9:b7:86:a4: a3:60:4c:f8:38:58:5f:8d:4d:bc:07:f5:39:70:6e: f7:9f:bb:7d:02:22:c4:95:59:72:e7:c6:b7:7f:73: b2:b3:c5:c5:03:32:43:0e:c5:a0:be:e4:eb:0c:db: 7b:3e:6f:97:01:bc:75:26:29:f0:8d:bc:fd:9f:88: ad:db:37:e7:95:64:a9:72:57:e9:75:88:cc:81:ce: ee:72:27:aa:6c:7d:15:c3:eb:e3:10:d7:f1:d9:b5: 6d:b7:61:8f:2c:80:48:29:2f:ce:e5:3d:79:2d:56: 66:cf:05:d4:f7:bc:27:e5:0a:6a:da:c1:8b:35:a1: 1a:98:c7:b6:e2:75:2d:c6:6b:64:14:db:75:17:81: 1e:77:9e:29:f0:d7:f3:07:05:b4:63:a1:3b:4a:78: 58:3f:6d:fd:bb:36:78:9e:e1:50:40:85:bf:24:dd: 99:ec:14:2a:66:a5:8c:71:47:ed:d6:36:88:4b:77: ce:9a:dc:40:2a:54:7f:5d:d2:8f:a7:e1:48:23:83: ee:69:58:fb:c9:97:e4:de:f7:6d:16:a1:18:56:f9: e1:02:21:8c:3d:53:6a:ec:a9:7f:f3:8e:6e:e0:0f: ea:e2:5d:8f:72:60:07:aa:31:20:77:e3:21:61:81: 4b:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B1:6F:64:4F:6E:DF:DF:F2:89:3A:6C:02:ED:C7:84:4C:F0:07:AE X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:fe:16:61:ce:b3:c5:33:bd:76:62:88:e3:3a:56:d4:a4:c2: 95:2d:43:f2:ca:31:13:46:a3:08:58:8d:bb:9e:3e:e0:46:9a: a4:14:85:5a:24:e0:a9:40:a3:c7:aa:e8:ed:9d:34:38:e3:ca: f2:34:6f:27:a3:3c:a7:2f:35:d7:52:3f:ec:f0:3c:27:03:b1: fc:a3:25:9b:dd:e9:e4:5d:1b:91:ec:88:54:9f:87:10:02:c8: f8:4b:8f:2d:30:e1:c4:21:aa:5d:8b:f1:9b:f9:2b:fd:fe:db: c1:5f:6d:2d:20:45:c7:e7:66:3d:ae:11:3f:00:6e:e7:e9:55: 7d:b4:6b:ab:ee:27:68:8b:d5:5f:d4:2d:f5:aa:25:77:59:c7: 83:a1:f6:1d:e8:36:84:6f:47:98:68:84:b7:58:bd:59:ce:2b: d9:ab:47:74:b8:f9:b6:74:44:bd:1d:84:5c:37:95:9d:af:ff: f1:58:7b:ea:58:bc:46:8a:11:6b:54:86:ff:b8:f2:f3:2d:9f: 61:33:66:74:20:21:13:0a:aa:b4:a3:68:75:e8:35:54:ce:c2: 00:e3:1a:ba:93:97:29:9a:98:db:b5:bf:f1:c0:57:91:d6:e2: ab:0b:b6:08:53:f8:81:d1:08:42:d7:a2:f4:e3:f9:52:85:dc: d5:fa:e4:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjYwNDE3MDAzNTExWhcNMjYwNDI0MDAzNTExWjAYMRYwFAYD VQQDEw02OWUxODAzZi0wMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ckJCfmYhfHV4/m3hqSjYEz4OFhfjU28B/U5cG73n7t9AiLElVly58a3f3Oy s8XFAzJDDsWgvuTrDNt7Pm+XAbx1Jinwjbz9n4it2zfnlWSpclfpdYjMgc7ucieq bH0Vw+vjENfx2bVtt2GPLIBIKS/O5T15LVZmzwXU97wn5Qpq2sGLNaEamMe24nUt xmtkFNt1F4Eed54p8NfzBwW0Y6E7SnhYP239uzZ4nuFQQIW/JN2Z7BQqZqWMcUft 1jaIS3fOmtxAKlR/XdKPp+FII4PuaVj7yZfk3vdtFqEYVvnhAiGMPVNq7Kl/845u 4A/q4l2PcmAHqjEgd+MhYYFLGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAmxb2RP bt/f8ok6bALtx4RM8AeuMB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgP4WYc6zxTO9dmKI4zpW1KTClS1D8soxE0ajCFiNu54+4EaapBSFWiTgqUCj x6ro7Z00OOPK8jRvJ6M8py8111I/7PA8JwOx/KMlm93p5F0bkeyIVJ+HEALI+EuP LTDhxCGqXYvxm/kr/f7bwV9tLSBFx+dmPa4RPwBu5+lVfbRrq+4naIvVX9Qt9aol d1nHg6H2Heg2hG9HmGiEt1i9Wc4r2atHdLj5tnREvR2EXDeVna//8Vh76li8RooR a1SG/7jy8y2fYTNmdCAhEwqqtKNodeg1VM7CAOMaupOXKZqY27W/8cBXkdbiqwu2 CFP4gdEIQtei9OP5UoXc1frkdg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:05:33 2026 by rpki-client