$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft File: 9MT8daUGjJJYmWQTrre3ORUC8J4.mft (raw, json) Hash identifier: dTMS1TMA6kz1njZXxW8GmwlaBl/vSJ5293CwBxsJcaM= Subject key identifier: E1:1D:97:76:5A:C5:51:E9:5B:88:EC:2C:60:3F:C7:DD:E0:82:B5:38 Authority key identifier: F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E Certificate issuer: /CN=A91BD8C2/serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft Manifest number: 0281 Signing time: Fri 17 Apr 2026 01:35:54 +0000 Manifest this update: Fri 17 Apr 2026 01:35:53 +0000 Manifest next update: Fri 24 Apr 2026 01:35:53 +0000 Files and hashes: 1: 9MT8daUGjJJYmWQTrre3ORUC8J4.crl (hash: xOYbzdPnwJLUM7fZ2wUOsGFFAdUsC21lDFYiANr+LLY=) 2: 5026F90264B211ED88A2A380C4F9AE02.roa (hash: TY+42nSG6nPIUiuSiCcpnQzJo+Ss4QVY3rFCGRIL9ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD8C2, serialNumber=F4C4FC75A5068C9258996413AEB7B7391502F09E Validity Not Before: Apr 17 01:35:53 2026 GMT Not After : Apr 24 01:35:53 2026 GMT Subject: CN=69e18e7a-7947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1b:39:13:aa:70:ee:49:6e:02:49:47:bf:9a: 4a:5c:1e:66:d4:f0:e5:f6:96:00:8a:ed:47:43:5a: 74:95:bd:4c:53:34:49:07:61:46:46:f0:59:3e:40: 19:81:fd:dd:bd:0a:57:07:b9:66:15:4a:09:d1:fc: b0:43:9a:d6:45:c6:ab:16:ec:4e:8e:13:06:b0:31: b4:14:2c:53:4b:42:da:ad:a8:8a:7c:7e:9e:c5:22: c5:b1:d6:70:12:20:4d:e0:78:5d:b8:a3:fd:c5:02: 38:dd:4f:2c:32:b4:0d:19:49:50:27:09:53:2e:24: ba:4f:46:ab:d2:d2:c5:91:98:47:0e:ec:41:b7:42: 53:d9:30:88:3d:d6:26:cb:25:8d:93:59:1e:09:32: 34:34:e3:9d:67:51:1e:41:14:ac:a8:cd:60:85:4f: 2a:5d:76:60:96:bb:42:37:4e:04:b2:4c:db:22:60: 4a:a9:84:c7:e5:1b:81:2e:65:f1:c4:51:54:2a:d8: f1:2b:ce:82:3a:f4:28:0b:d6:38:14:32:67:5f:2a: 82:ab:f2:25:26:ba:d2:07:bb:9b:14:8f:e6:72:eb: 5a:6d:b3:9e:a2:92:bd:fd:a7:c5:5f:1a:ca:65:81: c7:a1:ea:79:53:79:90:88:ef:a2:95:9c:54:10:8b: 19:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1D:97:76:5A:C5:51:E9:5B:88:EC:2C:60:3F:C7:DD:E0:82:B5:38 X509v3 Authority Key Identifier: keyid:F4:C4:FC:75:A5:06:8C:92:58:99:64:13:AE:B7:B7:39:15:02:F0:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MT8daUGjJJYmWQTrre3ORUC8J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD8C2/CED7D3A664AE11ED94100A69C4F9AE02/9MT8daUGjJJYmWQTrre3ORUC8J4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:26:b0:8e:6a:34:46:06:42:c1:c5:a5:63:1e:26:b0:ff:61: 4a:4c:89:2a:e5:b5:3e:ea:91:82:48:68:86:b7:96:65:31:b0: 07:09:fb:33:ef:b0:8b:f0:20:5a:24:22:f6:ed:98:6c:a3:9f: 48:3e:56:96:eb:a5:5b:5c:45:42:2f:ba:bd:f6:ed:fa:9f:2a: 80:56:0a:c4:90:aa:ce:5f:ea:c1:a4:96:27:2b:87:93:47:37: df:db:88:c3:9d:8f:98:81:ea:bf:66:ac:92:78:c6:86:dc:02: 43:0d:5f:27:5f:08:c2:9f:01:1d:2a:55:40:12:a6:94:96:49: 17:ba:7a:27:4c:5f:40:05:00:23:05:ec:65:d0:d0:30:ce:ac: 6b:b6:11:08:aa:cc:eb:d8:87:52:7f:67:e8:e3:96:68:db:03: d1:64:bf:e0:fc:59:00:42:00:fb:92:b6:7b:0b:f4:58:4c:14: 45:71:38:77:b9:8c:cd:e8:1e:a1:d7:35:2c:0d:6f:32:05:be: ec:c1:b2:f3:8f:f9:3f:ca:45:40:68:10:20:d6:da:15:fa:1d: 0a:4a:13:63:7c:bb:3f:a3:07:51:0a:fa:f4:b3:2c:09:b4:f9: f8:47:31:48:9c:46:0c:52:3c:9e:ba:40:16:98:5b:e5:f9:82: ee:b3:ef:3f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ4QzIxMTAvBgNVBAUTKEY0QzRGQzc1QTUwNjhDOTI1ODk5NjQxM0FFQjdCNzM5 MTUwMkYwOUUwHhcNMjYwNDE3MDEzNTUzWhcNMjYwNDI0MDEzNTUzWjAYMRYwFAYD VQQDEw02OWUxOGU3YS03OTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRs5E6pw7kluAklHv5pKXB5m1PDl9pYAiu1HQ1p0lb1MUzRJB2FGRvBZPkAZ gf3dvQpXB7lmFUoJ0fywQ5rWRcarFuxOjhMGsDG0FCxTS0LaraiKfH6exSLFsdZw EiBN4HhduKP9xQI43U8sMrQNGUlQJwlTLiS6T0ar0tLFkZhHDuxBt0JT2TCIPdYm yyWNk1keCTI0NOOdZ1EeQRSsqM1ghU8qXXZglrtCN04EskzbImBKqYTH5RuBLmXx xFFUKtjxK86COvQoC9Y4FDJnXyqCq/IlJrrSB7ubFI/mcutabbOeopK9/afFXxrK ZYHHoep5U3mQiO+ilZxUEIsZpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOEdl3Za xVHpW4jsLGA/x93ggrU4MB8GA1UdIwQYMBaAFPTE/HWlBoySWJlkE663tzkVAvCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDhDMi9DRUQ3RDNBNjY0 QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pKSlltV1FUcnJlM09SVUM4 SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNVDhkYVVHakpKWW1XUVRycmUzT1JVQzhKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDhDMi9DRUQ3RDNBNjY0QUUxMUVEOTQxMDBBNjlDNEY5QUUwMi85TVQ4ZGFVR2pK SlltV1FUcnJlM09SVUM4SjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASyawjmo0RgZCwcWlYx4msP9hSkyJKuW1PuqRgkhohreWZTGwBwn7M++wi/Ag WiQi9u2YbKOfSD5WluulW1xFQi+6vfbt+p8qgFYKxJCqzl/qwaSWJyuHk0c339uI w52PmIHqv2asknjGhtwCQw1fJ18Iwp8BHSpVQBKmlJZJF7p6J0xfQAUAIwXsZdDQ MM6sa7YRCKrM69iHUn9n6OOWaNsD0WS/4PxZAEIA+5K2ewv0WEwURXE4d7mMzege odc1LA1vMgW+7MGy84/5P8pFQGgQINbaFfodCkoTY3y7P6MHUQr69LMsCbT5+Ecx SJxGDFI8nrpAFphb5fmC7rPvPw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:34 2026 by rpki-client