$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: S8igaUb+A8liUpFqy/Cvo4zCSA/AoMHOlF9Mi0GvaqA= Subject key identifier: D4:A7:6F:EE:D6:E0:CC:AE:DC:8D:C9:EB:14:13:79:49:0E:3B:43:75 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0D0F Signing time: Thu 16 Apr 2026 18:01:27 +0000 Manifest this update: Thu 16 Apr 2026 18:01:27 +0000 Manifest next update: Thu 23 Apr 2026 18:01:27 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: 2NNIxg9jpIrcKBq4hhm8xela03tM8Wm1YRc8B/fDbBA=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: JwOjYA/Jw9dwtNja6OhiUESlnckDLqCGhIODnzf58NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Apr 16 18:01:27 2026 GMT Not After : Apr 23 18:01:27 2026 GMT Subject: CN=69e123f7-8265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:1a:7c:bd:04:25:ba:02:98:24:44:98:24: 59:3a:89:4c:02:0b:bb:a9:8b:1f:be:08:b4:3c:28: d2:88:20:13:68:7d:7c:29:71:4f:24:a5:83:72:7d: 83:65:b2:11:b6:9f:2c:8a:20:69:68:6f:c9:fe:22: e0:2f:e4:35:c3:19:74:c2:95:ac:c0:d1:fb:7c:0f: a2:5b:b2:09:8e:a8:82:f0:cd:99:2b:30:5c:05:86: 07:0d:57:d6:6b:cb:79:c2:a3:97:f3:6a:dd:b0:f1: be:fe:f6:a5:4b:68:33:fe:f5:da:a1:6c:19:26:6d: be:98:a7:16:38:a5:b5:4c:2f:a2:66:21:4b:fa:56: a4:e1:c0:e0:6d:4d:4a:f5:e9:4b:87:77:85:dd:dd: 2c:5c:45:d3:58:fa:fe:e9:d7:cd:5b:7d:e1:91:32: 94:e1:57:9b:85:25:6b:ef:94:01:25:9d:ca:17:52: fa:5a:98:3b:be:60:0a:58:51:29:f9:33:66:7c:06: b6:32:13:0e:cd:95:b2:99:c0:e1:80:c4:e4:be:41: 38:17:9a:69:66:5c:60:23:8a:ce:bd:3d:0c:a8:78: 6d:7c:ef:15:9a:2d:22:60:ce:4c:39:08:65:8d:98: 6a:d7:77:c9:eb:b2:16:f9:ce:cc:5e:6e:43:f5:d2: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A7:6F:EE:D6:E0:CC:AE:DC:8D:C9:EB:14:13:79:49:0E:3B:43:75 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8b:6a:74:76:aa:1b:43:7e:0e:e9:7c:98:d1:29:c3:a1:a4: 76:ff:04:82:a6:a7:cf:bd:3b:78:f6:4b:b8:6e:d2:c2:a2:46: 59:30:64:a1:da:ad:e0:d8:b0:bb:92:5d:05:bf:e9:b8:01:26: ba:10:01:51:c8:ab:43:86:37:57:72:22:4b:fa:2a:1e:28:a4: 94:26:ef:12:03:d0:06:f7:51:37:6b:20:af:cd:ac:6b:39:ad: 8c:2c:49:de:51:5a:d2:79:95:f1:69:48:89:98:ac:e9:c7:6b: cd:ea:d9:6e:c9:42:98:01:0e:8c:af:44:e0:69:18:30:c2:3b: a2:f9:4e:4b:ba:a0:8b:31:5c:1e:78:5f:ef:3a:89:5a:82:4b: aa:d7:d3:72:8f:42:86:35:e1:f5:2d:71:36:4b:ce:7f:a4:b1: fb:2d:64:d4:84:25:de:95:12:93:61:e8:45:b0:3d:5c:2d:b6: 12:85:6c:f1:b4:8a:56:ce:dd:45:09:74:f1:c0:09:84:d8:b9: 20:e6:f1:35:9d:53:5a:45:fe:b3:ec:71:7d:ac:44:6c:2c:7e: cd:00:18:5b:33:58:bf:c8:7b:5a:89:2e:52:8c:6b:71:9e:7e: 6a:77:19:6b:f6:17:97:f1:b8:27:33:e1:e3:ca:a6:80:69:da: bd:eb:22:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjYwNDE2MTgwMTI3WhcNMjYwNDIzMTgwMTI3WjAYMRYwFAYD VQQDEw02OWUxMjNmNy04MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06safL0EJboCmCREmCRZOolMAgu7qYsfvgi0PCjSiCATaH18KXFPJKWDcn2D ZbIRtp8siiBpaG/J/iLgL+Q1wxl0wpWswNH7fA+iW7IJjqiC8M2ZKzBcBYYHDVfW a8t5wqOX82rdsPG+/valS2gz/vXaoWwZJm2+mKcWOKW1TC+iZiFL+lak4cDgbU1K 9elLh3eF3d0sXEXTWPr+6dfNW33hkTKU4VebhSVr75QBJZ3KF1L6Wpg7vmAKWFEp +TNmfAa2MhMOzZWymcDhgMTkvkE4F5ppZlxgI4rOvT0MqHhtfO8Vmi0iYM5MOQhl jZhq13fJ67IW+c7MXm5D9dJ2AwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSnb+7W 4Myu3I3J6xQTeUkOO0N1MB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFItqdHaqG0N+Dul8mNEpw6Gkdv8Egqanz707ePZLuG7SwqJGWTBkodqt4Niw u5JdBb/puAEmuhABUcirQ4Y3V3IiS/oqHiiklCbvEgPQBvdRN2sgr82sazmtjCxJ 3lFa0nmV8WlIiZis6cdrzerZbslCmAEOjK9E4GkYMMI7ovlOS7qgizFcHnhf7zqJ WoJLqtfTco9ChjXh9S1xNkvOf6Sx+y1k1IQl3pUSk2HoRbA9XC22EoVs8bSKVs7d RQl08cAJhNi5IObxNZ1TWkX+s+xxfaxEbCx+zQAYWzNYv8h7WokuUoxrcZ5+ancZ a/YXl/G4JzPh48qmgGnavesi3w== -----END CERTIFICATE-----Generated at Fri Apr 17 06:47:04 2026 by rpki-client