$ rpki-client -vvf rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft File: i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft (raw, json) Hash identifier: rUM1WhHtKpFNqhbnQKWNrEwXe9yY/TpIs+X5jc7C3H0= Subject key identifier: AD:34:CE:EE:56:7D:DC:F4:4B:DB:8C:3D:BB:A0:6D:96:96:93:55:57 Authority key identifier: 8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D Certificate issuer: /CN=A91D37E4/serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft Manifest number: 0809 Signing time: Thu 16 Apr 2026 21:03:23 +0000 Manifest this update: Thu 16 Apr 2026 21:03:22 +0000 Manifest next update: Thu 23 Apr 2026 21:03:22 +0000 Files and hashes: 1: i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl (hash: 1i9vZW+8A8tRHAz20NocQ6NRkqUOwgU9tFB44nrJ94o=) 2: D933655E23B511EBA7BDD50FC4F9AE02.roa (hash: D8eauO5Ji5HlCRuIfjUIlmK4L86PjKaAnDzrks9sonQ=) 3: BD764EAE1D5B11EBAB008D19C4F9AE02.roa (hash: JZqHXQRGfZxF3NgJ2VE0gwCg4J3Ofdou+/uDHMJJLwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D37E4, serialNumber=8BDA8A1FE07B46C33063046A725EAB85642B9C2D Validity Not Before: Apr 16 21:03:22 2026 GMT Not After : Apr 23 21:03:22 2026 GMT Subject: CN=69e14e9b-a401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:4f:b9:ba:50:2f:f2:44:ba:86:91:4d:63: f4:1a:f7:99:ed:eb:f3:94:c0:78:41:c4:00:25:1a: 6c:ae:09:e6:8b:47:33:ff:f8:c9:22:a8:2b:48:8b: 01:1b:84:4b:50:2a:fe:70:0c:7c:47:4c:88:93:b2: ae:b3:9f:64:d0:68:e5:27:d1:04:e7:23:e3:c3:17: 8a:33:82:1c:b3:aa:90:3c:43:5b:bc:bd:f9:b8:f6: 7a:c1:92:7b:0b:c3:b8:bd:66:f6:1e:77:ec:5c:cf: bb:24:71:19:8a:d6:43:ce:54:62:87:4f:27:b2:30: 1f:24:30:fc:c9:07:10:39:e3:d6:5c:59:44:5e:c7: 64:0f:0a:5b:65:4f:e4:fb:ac:74:af:47:49:b6:a4: c6:7b:33:19:10:33:f6:6e:30:3c:01:e4:3a:3c:0b: 59:69:68:49:68:0f:04:05:ae:22:96:2e:f8:dc:0a: 77:7c:0e:07:e7:1c:c5:3b:4b:d3:17:1c:6d:97:8e: 3e:b8:72:07:61:ef:82:ce:d9:f7:b4:7e:95:13:53: 81:71:66:db:f7:e7:15:d4:54:43:d0:85:c9:c9:15: 60:e0:cf:16:7e:d6:e3:f1:5f:9a:77:ea:31:fc:bb: c8:3f:72:28:1d:53:7d:82:ca:31:1a:38:68:57:64: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:CE:EE:56:7D:DC:F4:4B:DB:8C:3D:BB:A0:6D:96:96:93:55:57 X509v3 Authority Key Identifier: keyid:8B:DA:8A:1F:E0:7B:46:C3:30:63:04:6A:72:5E:AB:85:64:2B:9C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i9qKH-B7RsMwYwRqcl6rhWQrnC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D37E4/36FB11441D5A11EBB7988D17C4F9AE02/i9qKH-B7RsMwYwRqcl6rhWQrnC0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:89:fa:73:ff:7c:f0:91:e3:58:8f:4a:e0:5b:99:19:fd:82: 80:b0:03:2f:ae:a2:d6:db:70:e2:c1:cc:9c:97:3a:da:a7:4d: 68:24:eb:1c:7a:52:d7:ba:b3:ac:83:43:3e:02:6a:95:0c:42: e1:27:42:1a:5f:2b:79:e3:1a:25:1d:27:e8:ac:1b:f6:9b:40: 07:d3:42:e7:28:aa:69:bd:f0:e4:ca:fd:16:9f:c3:fd:6b:31: 5a:5c:f0:31:11:d4:5a:8e:7d:a9:ac:4b:81:52:53:3a:9f:94: a6:09:71:d8:06:44:03:71:a1:4c:8e:eb:7a:63:7f:ba:e0:c9: 09:b2:19:64:13:9f:fd:ed:bf:9b:76:79:55:d5:ca:e2:57:b4: cf:9c:20:2f:e5:d9:90:52:da:dc:6e:2e:2f:c3:36:db:65:32: 6f:1d:d5:cf:94:d8:87:6f:7b:cf:1a:1c:75:42:dc:cd:71:fb: 41:4f:9f:e5:72:b7:06:53:a8:5d:d7:14:19:2d:94:59:f9:d1: 91:e2:3e:71:54:87:2f:10:95:ed:0a:55:9c:4e:5f:9e:c0:22: a8:08:c0:90:30:33:09:21:80:28:d9:6f:49:8f:5e:4b:b9:1b: f7:d7:e5:3d:af:aa:47:05:d5:cc:25:f3:3f:8a:20:13:02:a1: c5:0a:8c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM3RTQxMTAvBgNVBAUTKDhCREE4QTFGRTA3QjQ2QzMzMDYzMDQ2QTcyNUVBQjg1 NjQyQjlDMkQwHhcNMjYwNDE2MjEwMzIyWhcNMjYwNDIzMjEwMzIyWjAYMRYwFAYD VQQDEw02OWUxNGU5Yi1hNDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8JPubpQL/JEuoaRTWP0GveZ7evzlMB4QcQAJRpsrgnmi0cz//jJIqgrSIsB G4RLUCr+cAx8R0yIk7Kus59k0GjlJ9EE5yPjwxeKM4Ics6qQPENbvL35uPZ6wZJ7 C8O4vWb2HnfsXM+7JHEZitZDzlRih08nsjAfJDD8yQcQOePWXFlEXsdkDwpbZU/k +6x0r0dJtqTGezMZEDP2bjA8AeQ6PAtZaWhJaA8EBa4ili743Ap3fA4H5xzFO0vT Fxxtl44+uHIHYe+Cztn3tH6VE1OBcWbb9+cV1FRD0IXJyRVg4M8Wftbj8V+ad+ox /LvIP3IoHVN9gsoxGjhoV2To9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK00zu5W fdz0S9uMPbugbZaWk1VXMB8GA1UdIwQYMBaAFIvaih/ge0bDMGMEanJeq4VkK5wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzdFNC8zNkZCMTE0NDFE NUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1JzTXdZd1JxY2w2cmhXUXJu QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k5cUtILUI3UnNNd1l3UnFjbDZyaFdRcm5DMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzdFNC8zNkZCMTE0NDFENUExMUVCQjc5ODhEMTdDNEY5QUUwMi9pOXFLSC1CN1Jz TXdZd1JxY2w2cmhXUXJuQzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEon6c/988JHjWI9K4FuZGf2CgLADL66i1ttw4sHMnJc62qdNaCTrHHpS17qz rINDPgJqlQxC4SdCGl8reeMaJR0n6Kwb9ptAB9NC5yiqab3w5Mr9Fp/D/WsxWlzw MRHUWo59qaxLgVJTOp+Upglx2AZEA3GhTI7remN/uuDJCbIZZBOf/e2/m3Z5VdXK 4le0z5wgL+XZkFLa3G4uL8M222Uybx3Vz5TYh297zxocdULczXH7QU+f5XK3BlOo XdcUGS2UWfnRkeI+cVSHLxCV7QpVnE5fnsAiqAjAkDAzCSGAKNlvSY9eS7kb99fl Pa+qRwXVzCXzP4ogEwKhxQqMIg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:41:34 2026 by rpki-client