$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft File: 09eD7kxpu1Bj-1z1smKLx77DdIo.mft (raw, json) Hash identifier: L9Snr9OEKjn5OGQumVgdArSg0Q5dw21IyK4TzNXd70I= Subject key identifier: A9:F1:8A:F7:43:A1:F1:2F:25:0E:F1:24:B4:24:CD:F7:0F:0E:0B:8D Authority key identifier: D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A Certificate issuer: /CN=A91B9A77/serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft Manifest number: 0126 Signing time: Fri 17 Apr 2026 00:58:53 +0000 Manifest this update: Fri 17 Apr 2026 00:58:52 +0000 Manifest next update: Fri 24 Apr 2026 00:58:52 +0000 Files and hashes: 1: 09eD7kxpu1Bj-1z1smKLx77DdIo.crl (hash: K54j1oPI+ZebQlmG+sJ/RAuCwu2NsMVhohYWiIfCrvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9A77, serialNumber=D3D783EE4C69BB5063FB5CF5B2628BC7BEC3748A Validity Not Before: Apr 17 00:58:52 2026 GMT Not After : Apr 24 00:58:52 2026 GMT Subject: CN=69e185cc-8ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:ef:b8:a5:90:0a:c0:ca:6d:5a:3b:9c:7f: 0d:ef:5a:12:79:ab:8d:f9:c0:25:fa:ef:ee:28:03: 78:4a:6a:bb:1e:a4:9f:8b:26:01:74:a3:8b:28:b3: dc:3d:3d:90:aa:47:9d:e0:1b:76:33:b9:f4:a6:f9: 2f:10:71:02:03:18:cc:ac:90:2d:26:ce:f7:af:e0: 12:11:f5:33:91:dc:63:d3:28:6b:72:70:bc:b7:3a: 21:f2:86:74:8a:5a:95:60:15:5e:a7:10:80:08:9f: 9b:49:0c:b7:38:a0:06:9e:ea:28:36:c4:48:77:e1: 5f:d6:7b:ce:81:59:ba:21:c0:0f:cc:88:08:8c:ae: ee:9a:94:df:37:d7:54:a8:c2:23:86:36:f3:89:68: a8:df:6e:63:60:0c:12:c4:9c:78:4c:1f:6e:19:6a: 61:97:88:c7:0d:97:20:05:10:73:17:aa:ff:d6:01: 38:12:20:4c:93:27:06:a6:29:5e:a7:ae:3b:93:95: 16:5f:97:34:49:13:50:e8:37:3f:54:d0:68:a9:2d: 07:d0:df:4a:f1:8b:c5:87:8b:ee:3f:69:50:51:97: 48:1a:a6:33:64:fc:f5:2d:4b:a6:9c:fa:5a:fa:c4: 36:30:78:6f:18:6b:49:a7:c7:6b:0a:26:64:b5:80: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F1:8A:F7:43:A1:F1:2F:25:0E:F1:24:B4:24:CD:F7:0F:0E:0B:8D X509v3 Authority Key Identifier: keyid:D3:D7:83:EE:4C:69:BB:50:63:FB:5C:F5:B2:62:8B:C7:BE:C3:74:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/09eD7kxpu1Bj-1z1smKLx77DdIo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9A77/AB8534407A3F11EFA1C0E016C4F9AE02/09eD7kxpu1Bj-1z1smKLx77DdIo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:13:b8:9f:a7:33:2e:25:24:08:07:6a:29:d3:5b:dc:28:a3: f7:cd:e7:9d:a6:54:ee:77:a1:a1:ad:78:c3:8f:11:61:e2:c1: ca:b8:33:82:61:d2:71:c6:42:14:fb:de:7c:f8:ce:22:c9:d1: 72:2e:5e:d9:c6:ed:e9:2a:8a:ba:4d:10:93:ce:5f:21:27:c5: a2:13:40:a1:8e:55:ac:2d:f6:79:9f:0a:0d:69:35:29:3f:76: e0:f6:f4:42:0f:1f:93:28:9a:03:35:d1:4a:8a:b0:11:a6:6e: a0:79:cf:0e:0c:fa:fa:2d:1f:b0:83:33:74:49:05:7c:1d:fe: c6:17:ba:5b:e7:a4:f1:72:71:2f:90:03:94:a6:59:78:18:36: 9c:e9:c9:65:62:7c:7c:81:c8:36:92:c7:72:02:f3:a3:60:9e: f2:5a:07:bb:89:11:03:4c:b4:60:44:c3:a5:ad:8f:48:d6:38: d4:36:5a:bf:07:bc:40:6f:15:b8:ea:c8:81:6d:14:85:84:b0: e4:97:3e:5a:04:10:7f:04:a1:af:67:30:38:89:8b:1d:6d:bd: 7c:56:47:6b:6e:7f:a6:b8:15:16:96:65:af:bf:d6:30:38:2f: cf:32:da:f4:04:5c:46:67:91:f0:6b:8e:cc:b3:9b:c7:d5:4c: b1:8d:fd:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBNzcxMTAvBgNVBAUTKEQzRDc4M0VFNEM2OUJCNTA2M0ZCNUNGNUIyNjI4QkM3 QkVDMzc0OEEwHhcNMjYwNDE3MDA1ODUyWhcNMjYwNDI0MDA1ODUyWjAYMRYwFAYD VQQDEw02OWUxODVjYy04ZWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUPvuKWQCsDKbVo7nH8N71oSeauN+cAl+u/uKAN4Smq7HqSfiyYBdKOLKLPc PT2Qqked4Bt2M7n0pvkvEHECAxjMrJAtJs73r+ASEfUzkdxj0yhrcnC8tzoh8oZ0 ilqVYBVepxCACJ+bSQy3OKAGnuooNsRId+Ff1nvOgVm6IcAPzIgIjK7umpTfN9dU qMIjhjbziWio325jYAwSxJx4TB9uGWphl4jHDZcgBRBzF6r/1gE4EiBMkycGpile p647k5UWX5c0SRNQ6Dc/VNBoqS0H0N9K8YvFh4vuP2lQUZdIGqYzZPz1LUumnPpa +sQ2MHhvGGtJp8drCiZktYAT2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKnxivdD ofEvJQ7xJLQkzfcPDguNMB8GA1UdIwQYMBaAFNPXg+5MabtQY/tc9bJii8e+w3SK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUE3Ny9BQjg1MzQ0MDdB M0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUxQmotMXoxc21LTHg3N0Rk SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA5ZUQ3a3hwdTFCai0xejFzbUtMeDc3RGRJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUE3Ny9BQjg1MzQ0MDdBM0YxMUVGQTFDMEUwMTZDNEY5QUUwMi8wOWVEN2t4cHUx QmotMXoxc21LTHg3N0RkSW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvRO4n6czLiUkCAdqKdNb3Cij983nnaZU7nehoa14w48RYeLByrgzgmHSccZC FPvefPjOIsnRci5e2cbt6SqKuk0Qk85fISfFohNAoY5VrC32eZ8KDWk1KT924Pb0 Qg8fkyiaAzXRSoqwEaZuoHnPDgz6+i0fsIMzdEkFfB3+xhe6W+ek8XJxL5ADlKZZ eBg2nOnJZWJ8fIHINpLHcgLzo2Ce8loHu4kRA0y0YETDpa2PSNY41DZavwe8QG8V uOrIgW0UhYSw5Jc+WgQQfwShr2cwOImLHW29fFZHa25/prgVFpZlr7/WMDgvzzLa 9ARcRmeR8GuOzLObx9VMsY397A== -----END CERTIFICATE-----Generated at Fri Apr 17 07:34:40 2026 by rpki-client