$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft File: p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json) Hash identifier: NpuGQH0h8ZEBPxT+YQ3TYWJpZyqxrlnrmZEwic0DAEM= Subject key identifier: C2:F6:2C:16:C9:F8:4C:7B:AD:4A:B1:25:1B:A2:8D:1C:80:89:8C:BA Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 Certificate issuer: /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft Manifest number: 0406 Signing time: Fri 17 Apr 2026 00:20:23 +0000 Manifest this update: Fri 17 Apr 2026 00:20:23 +0000 Manifest next update: Fri 24 Apr 2026 00:20:23 +0000 Files and hashes: 1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: JaBhYj+VtP5bZLlcXwOSHyCZbuOaCf9JkyH2Stss0Yg=) 2: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=) 3: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=) 4: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: cDFKFHhC5GlJqNQ2HDJvUzee5BZxbAM3dWkd8XKUt+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5 Validity Not Before: Apr 17 00:20:23 2026 GMT Not After : Apr 24 00:20:23 2026 GMT Subject: CN=69e17cc7-0ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:af:b5:8d:09:f6:c2:20:c9:af:99:8d:5d: 92:c2:41:4c:9b:45:a2:63:79:9b:09:7e:32:41:6a: 9d:f6:09:fb:eb:38:08:72:65:fd:0e:33:a0:d2:9e: 1a:34:d3:62:ae:6f:e9:bd:81:8b:9c:be:1a:35:cd: 09:95:68:47:17:d9:cd:56:71:01:28:2e:3f:85:74: 4d:05:16:f6:f7:84:64:46:b0:7e:51:ce:13:6f:01: 53:9b:ce:ab:b3:0c:4a:8c:36:bd:a1:dc:2b:25:89: ba:85:56:9d:43:af:85:ce:5b:2d:58:d1:85:43:f5: 63:19:ce:60:58:d7:e3:a6:bd:9c:16:d7:8f:0c:b5: 32:30:6c:b0:b5:fc:ad:dc:58:02:00:24:d6:1d:e0: 3d:88:ee:5a:58:37:43:91:5b:5e:dc:e6:ec:6e:21: 86:8c:b5:67:72:0c:b3:e6:18:23:d1:e2:e8:0b:54: aa:35:05:b7:b3:7f:11:f6:a4:37:15:0d:02:a2:8d: c8:fe:89:99:3d:4d:4f:a1:5d:a6:2a:3e:94:f2:88: 2f:cf:b4:8d:24:45:58:f2:10:94:ba:21:c7:e6:d6: be:c7:e1:b8:75:90:37:9a:4c:64:df:6c:76:54:ba: f1:a0:dc:63:78:a5:aa:ad:d3:38:98:91:62:9c:7f: 34:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F6:2C:16:C9:F8:4C:7B:AD:4A:B1:25:1B:A2:8D:1C:80:89:8C:BA X509v3 Authority Key Identifier: keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:d8:ec:9d:04:ba:42:e7:48:aa:45:22:b9:ca:36:0c:2d:35: 7c:11:cc:4a:34:fa:d0:12:62:f2:68:70:2e:cb:e4:b4:99:31: 3c:fe:41:99:c2:a7:31:23:49:11:09:14:4e:30:87:20:9c:d0: 11:d8:7d:25:45:9a:f6:2b:42:63:7d:ac:25:ea:fe:37:37:c6: 85:60:27:06:18:18:03:22:57:07:d7:5e:0a:eb:b1:4c:f9:db: 63:a2:77:e2:0a:29:2d:69:bf:e1:e2:b9:71:65:cc:99:49:6f: c5:8b:33:3d:96:b7:ff:c8:4a:ec:ae:b9:33:44:be:3d:c5:ba: e0:7b:bf:2f:0f:f3:32:52:f0:c9:84:da:9e:0a:5a:9d:ba:1c: 32:cf:a5:f0:f1:e7:f7:08:0d:3b:c1:e4:f2:8c:ea:33:7a:fd: 49:20:95:73:c2:15:a1:cc:61:63:38:98:b9:f6:a8:e4:58:00: 96:26:7e:24:82:9b:76:ef:53:92:53:ed:79:c1:76:c2:9a:b9: 98:fb:ba:e3:08:f5:c2:b5:47:06:9d:b5:1e:63:71:2f:d8:e6: 31:71:34:22:5e:eb:84:39:6d:27:d6:ae:9a:7d:9f:d1:a6:da: cf:62:47:cc:b6:df:cb:09:be:13:cc:81:00:0b:18:5d:a4:59: 43:f0:5f:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE NzA1OEZERDUwHhcNMjYwNDE3MDAyMDIzWhcNMjYwNDI0MDAyMDIzWjAYMRYwFAYD VQQDEw02OWUxN2NjNy0wZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTGvtY0J9sIgya+ZjV2SwkFMm0WiY3mbCX4yQWqd9gn76zgIcmX9DjOg0p4a NNNirm/pvYGLnL4aNc0JlWhHF9nNVnEBKC4/hXRNBRb294RkRrB+Uc4TbwFTm86r swxKjDa9odwrJYm6hVadQ6+FzlstWNGFQ/VjGc5gWNfjpr2cFtePDLUyMGywtfyt 3FgCACTWHeA9iO5aWDdDkVte3ObsbiGGjLVncgyz5hgj0eLoC1SqNQW3s38R9qQ3 FQ0Coo3I/omZPU1PoV2mKj6U8ogvz7SNJEVY8hCUuiHH5ta+x+G4dZA3mkxk32x2 VLrxoNxjeKWqrdM4mJFinH80lQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFML2LBbJ +Ex7rUqxJRuijRyAiYy6MB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS NUJ6eWJiR0NJZEhYQllfZFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGdjsnQS6QudIqkUiuco2DC01fBHMSjT60BJi8mhwLsvktJkxPP5BmcKnMSNJ EQkUTjCHIJzQEdh9JUWa9itCY32sJer+NzfGhWAnBhgYAyJXB9deCuuxTPnbY6J3 4gopLWm/4eK5cWXMmUlvxYszPZa3/8hK7K65M0S+PcW64Hu/Lw/zMlLwyYTangpa nbocMs+l8PHn9wgNO8Hk8ozqM3r9SSCVc8IVocxhYziYufao5FgAliZ+JIKbdu9T klPtecF2wpq5mPu64wj1wrVHBp21HmNxL9jmMXE0Il7rhDltJ9aumn2f0abaz2JH zLbfywm+E8yBAAsYXaRZQ/BfpA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:05:23 2026 by rpki-client