$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft File: ech9xZWwwn0jMpvJkoSiPIv9oOc.mft (raw, json) Hash identifier: Z9R9xdXG4H1cU6+Xdp3HyP1/K9SteK0y66m8jibtafo= Subject key identifier: E1:D6:80:76:9E:8B:09:CA:6E:7F:22:FA:10:50:9A:9F:C6:9D:A0:08 Authority key identifier: 79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 Certificate issuer: /CN=A91B2D4F/serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft Manifest number: 0201 Signing time: Fri 17 Apr 2026 02:51:18 +0000 Manifest this update: Fri 17 Apr 2026 02:51:17 +0000 Manifest next update: Fri 24 Apr 2026 02:51:17 +0000 Files and hashes: 1: ech9xZWwwn0jMpvJkoSiPIv9oOc.crl (hash: i3TsjzpEQP/gsbLpWBevbKFi6vxSiurxB9I7JXRsRvg=) 2: 416EB4022F6111EE8C156634C4F9AE02.roa (hash: fjGpC/tzzFWbeBBortAKHNrafmR/+XWGojeVFa7vFyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2D4F, serialNumber=79C87DC595B0C27D23329BC99284A23C8BFDA0E7 Validity Not Before: Apr 17 02:51:17 2026 GMT Not After : Apr 24 02:51:17 2026 GMT Subject: CN=69e1a025-5907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fc:e8:78:17:18:75:df:34:61:c3:dc:5f:36: 4f:bf:4b:f8:33:d9:94:41:77:47:0e:bc:1f:f4:44: 44:b3:cf:31:0c:b1:3a:05:bb:d9:27:c8:54:a8:c6: 02:ea:e2:4c:4f:dc:23:03:fa:1b:b4:16:ac:fa:7a: a4:ec:a7:f6:88:79:ce:a5:d4:af:2b:98:12:39:f6: 96:13:a7:ab:db:b0:de:be:af:62:84:96:71:2c:b0: 59:5f:d7:6b:90:67:71:e2:60:2f:fb:b1:3e:2f:99: fd:8e:99:4b:8e:24:34:06:86:c0:f6:0b:82:4a:9b: aa:72:09:f1:ad:a4:64:a1:f2:49:3e:92:d5:99:68: 8a:e5:7a:cb:da:6e:f9:ac:f3:4a:e8:cf:3e:0d:2f: db:20:35:ed:3a:da:f7:ed:09:4f:c1:90:a3:5d:fe: 6e:36:47:58:80:bd:e3:ba:a7:36:9c:2c:73:99:10: c3:36:a9:62:15:c8:32:eb:ec:bf:13:14:8e:e2:31: e8:bb:ff:b6:5a:56:39:0b:75:31:72:de:b6:9a:a9: e5:12:25:a3:b4:1d:bb:18:cb:55:9a:13:3f:f4:94: 44:18:e1:64:a1:0f:41:34:83:07:f7:0c:79:fd:40: 64:c1:79:4c:30:ad:a1:36:27:d4:1b:70:15:f7:27: 4e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:80:76:9E:8B:09:CA:6E:7F:22:FA:10:50:9A:9F:C6:9D:A0:08 X509v3 Authority Key Identifier: keyid:79:C8:7D:C5:95:B0:C2:7D:23:32:9B:C9:92:84:A2:3C:8B:FD:A0:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ech9xZWwwn0jMpvJkoSiPIv9oOc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D4F/EF8755182F6011EEBF7F7733C4F9AE02/ech9xZWwwn0jMpvJkoSiPIv9oOc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:07:63:ed:57:3d:ba:50:f9:d0:01:65:e3:ae:2e:0f:e2:3b: 1d:fe:a4:6f:73:a9:0d:db:8d:4a:12:fa:6b:01:ab:8b:b8:55: 89:d2:7c:a2:ae:99:ee:ee:67:b0:1c:1d:88:51:27:3a:a8:34: 45:22:7b:79:0d:a1:69:7d:89:25:28:41:2e:40:a6:2f:53:aa: e4:8a:51:bc:c0:e5:b1:5e:b6:e9:17:01:66:b5:ce:67:77:a4: 94:f9:e1:38:3f:cd:0e:00:37:f2:8d:91:18:ca:4e:33:f3:d6: 89:eb:14:b7:6b:e7:9f:30:21:d5:9d:88:4b:dc:90:d6:75:ca: 5b:a9:e2:49:de:3e:a8:be:6e:e8:17:af:f5:b4:f6:a1:71:e3: 1f:f2:c9:4e:3a:13:d8:a1:b1:89:39:0e:d9:d4:a5:c6:1f:b6: 6a:87:cd:ad:53:54:c8:dc:38:46:dc:88:64:af:07:31:57:61: 6b:4a:9b:d0:23:1d:5a:84:47:12:b1:d6:7b:7c:d0:7f:4c:30: eb:28:62:1a:f0:2e:20:90:90:8f:23:e3:de:e5:bf:ab:90:84: e0:68:7d:05:2c:71:57:ed:42:95:2a:21:38:58:ab:e8:e9:fb: 09:b1:44:5d:ee:ff:f1:f5:66:66:16:a8:ac:7b:2a:84:f8:83: b2:39:0e:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJENEYxMTAvBgNVBAUTKDc5Qzg3REM1OTVCMEMyN0QyMzMyOUJDOTkyODRBMjND OEJGREEwRTcwHhcNMjYwNDE3MDI1MTE3WhcNMjYwNDI0MDI1MTE3WjAYMRYwFAYD VQQDEw02OWUxYTAyNS01OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/zoeBcYdd80YcPcXzZPv0v4M9mUQXdHDrwf9EREs88xDLE6BbvZJ8hUqMYC 6uJMT9wjA/obtBas+nqk7Kf2iHnOpdSvK5gSOfaWE6er27Devq9ihJZxLLBZX9dr kGdx4mAv+7E+L5n9jplLjiQ0BobA9guCSpuqcgnxraRkofJJPpLVmWiK5XrL2m75 rPNK6M8+DS/bIDXtOtr37QlPwZCjXf5uNkdYgL3juqc2nCxzmRDDNqliFcgy6+y/ ExSO4jHou/+2WlY5C3Uxct62mqnlEiWjtB27GMtVmhM/9JREGOFkoQ9BNIMH9wx5 /UBkwXlMMK2hNifUG3AV9ydOjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOHWgHae iwnKbn8i+hBQmp/GnaAIMB8GA1UdIwQYMBaAFHnIfcWVsMJ9IzKbyZKEojyL/aDn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkQ0Ri9FRjg3NTUxODJG NjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3duMGpNcHZKa29TaVBJdjlv T2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VjaDl4Wld3d24wak1wdkprb1NpUEl2OW9PYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkQ0Ri9FRjg3NTUxODJGNjAxMUVFQkY3Rjc3MzNDNEY5QUUwMi9lY2g5eFpXd3du MGpNcHZKa29TaVBJdjlvT2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATgdj7Vc9ulD50AFl464uD+I7Hf6kb3OpDduNShL6awGri7hVidJ8oq6Z7u5n sBwdiFEnOqg0RSJ7eQ2haX2JJShBLkCmL1Oq5IpRvMDlsV626RcBZrXOZ3eklPnh OD/NDgA38o2RGMpOM/PWiesUt2vnnzAh1Z2IS9yQ1nXKW6niSd4+qL5u6Bev9bT2 oXHjH/LJTjoT2KGxiTkO2dSlxh+2aofNrVNUyNw4RtyIZK8HMVdha0qb0CMdWoRH ErHWe3zQf0ww6yhiGvAuIJCQjyPj3uW/q5CE4Gh9BSxxV+1ClSohOFir6On7CbFE Xe7/8fVmZhaorHsqhPiDsjkOIQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:48:58 2026 by rpki-client