$ rpki-client -vvf rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft File: i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft (raw, json) Hash identifier: NICh76eri+eoeQiAd/h3hJmjtlyoo5Sz8uqEQWXttb4= Subject key identifier: 77:1A:8C:A9:9D:E5:E5:A0:FC:1D:88:22:27:D7:BA:B8:54:C0:4E:15 Authority key identifier: 8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C Certificate issuer: /CN=A9116E68/serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft Manifest number: 01AE Signing time: Fri 17 Apr 2026 03:45:37 +0000 Manifest this update: Fri 17 Apr 2026 03:45:36 +0000 Manifest next update: Fri 24 Apr 2026 03:45:36 +0000 Files and hashes: 1: i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl (hash: rY6IiNWrx6vk/euiRZxMmYEBuAiXoKT2T7KJFqZAH1g=) 2: 2601A296AE1011EE92B7161BC4F9AE02.roa (hash: Z4k1tL/4zFATtE9AQcjfK7ZixWQnEaZv3mA1fR+6Nf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 03:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116E68, serialNumber=8BA94E244C8703E2E212456B9871B3C82D50709C Validity Not Before: Apr 17 03:45:36 2026 GMT Not After : Apr 24 03:45:36 2026 GMT Subject: CN=69e1ace1-40cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9d:6b:06:fe:e4:fb:b0:a7:1f:f1:03:73:89: 59:54:37:68:45:d2:26:4e:69:35:ae:78:34:c1:2a: 00:ec:22:67:cd:1b:d1:46:b6:51:98:56:19:a4:07: a5:23:b9:a9:d2:aa:00:68:24:42:e2:53:59:02:b1: 8b:5b:1c:d9:71:c3:fa:9a:95:38:b4:96:da:06:ce: ae:02:c8:ba:68:fe:1d:1b:19:f8:4a:41:0a:52:0a: 8f:e3:f2:94:ef:4f:61:9a:a7:6c:56:23:67:f6:fa: 39:25:cc:bf:6b:97:22:ef:6f:f6:cb:c7:6a:b0:8a: 6c:ca:b7:46:0d:c7:03:71:8f:3d:e8:71:9a:05:1f: 37:8f:a5:c2:07:b7:72:c5:99:57:7a:86:c3:d7:9a: 9b:9c:e8:84:54:82:6d:50:9b:cd:a5:74:40:0e:9b: 55:47:98:73:61:27:22:bb:d9:d0:8e:41:4e:07:f2: 55:10:54:e2:22:2e:3b:82:64:1c:bf:f9:a2:a1:06: 2f:2a:1a:60:50:75:6d:ad:17:e8:ce:77:eb:b1:70: 52:c1:2c:d7:17:f0:99:20:21:fa:00:03:2e:e1:95: d6:01:7e:9b:9f:fb:54:5e:0b:7b:36:4d:14:1d:af: bf:ab:44:09:ed:29:9f:24:e9:bf:90:d6:65:31:bd: 9b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1A:8C:A9:9D:E5:E5:A0:FC:1D:88:22:27:D7:BA:B8:54:C0:4E:15 X509v3 Authority Key Identifier: keyid:8B:A9:4E:24:4C:87:03:E2:E2:12:45:6B:98:71:B3:C8:2D:50:70:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6lOJEyHA-LiEkVrmHGzyC1QcJw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116E68/D2BAAC4AAE0F11EEA7AC941AC4F9AE02/i6lOJEyHA-LiEkVrmHGzyC1QcJw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:de:23:97:34:25:2c:91:bb:c4:b0:2c:53:66:18:8c:df:76: 8d:56:b6:f2:3c:a7:68:0f:9f:2d:79:7b:4c:1c:ec:2b:ef:b8: 53:50:b1:d7:71:0c:70:16:eb:67:f3:24:ec:c9:c7:4c:39:5b: 96:f0:e8:48:c4:8b:56:f3:33:11:83:05:56:bc:ab:f4:2a:d3: e6:7f:f9:51:c1:72:b3:55:a1:1b:47:a6:06:d5:d3:86:3d:6b: c3:7c:ff:fb:66:3e:0f:d2:18:be:7b:4e:62:1b:df:b7:35:6f: 27:7b:04:8a:e0:7a:a6:4e:1e:3a:4d:57:8f:44:ba:05:c4:aa: f0:64:04:d3:28:da:6c:30:cc:d3:79:42:20:5b:da:81:e1:25: 80:f9:df:dd:70:4b:05:29:b4:63:d3:1e:7a:af:ca:c4:69:b8: d3:56:76:81:8f:26:e4:9a:3c:bd:64:44:56:76:dd:cb:89:64: 4a:34:ce:54:3e:90:64:31:70:11:ec:9f:c1:bf:86:c8:51:c5: ae:33:56:d7:39:b4:a3:68:6b:99:dc:52:da:cd:41:08:e7:bc: 28:e8:f4:87:39:7e:04:c1:d7:1f:fb:2a:54:54:97:de:af:ce: 56:d6:ec:4a:bc:4e:ce:e9:b4:57:fc:d0:bf:ad:ed:36:25:a4: d3:ed:af:7a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZFNjgxMTAvBgNVBAUTKDhCQTk0RTI0NEM4NzAzRTJFMjEyNDU2Qjk4NzFCM0M4 MkQ1MDcwOUMwHhcNMjYwNDE3MDM0NTM2WhcNMjYwNDI0MDM0NTM2WjAYMRYwFAYD VQQDEw02OWUxYWNlMS00MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt51rBv7k+7CnH/EDc4lZVDdoRdImTmk1rng0wSoA7CJnzRvRRrZRmFYZpAel I7mp0qoAaCRC4lNZArGLWxzZccP6mpU4tJbaBs6uAsi6aP4dGxn4SkEKUgqP4/KU 709hmqdsViNn9vo5Jcy/a5ci72/2y8dqsIpsyrdGDccDcY896HGaBR83j6XCB7dy xZlXeobD15qbnOiEVIJtUJvNpXRADptVR5hzYSciu9nQjkFOB/JVEFTiIi47gmQc v/mioQYvKhpgUHVtrRfoznfrsXBSwSzXF/CZICH6AAMu4ZXWAX6bn/tUXgt7Nk0U Ha+/q0QJ7SmfJOm/kNZlMb2b8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcajKmd 5eWg/B2IIifXurhUwE4VMB8GA1UdIwQYMBaAFIupTiRMhwPi4hJFa5hxs8gtUHCc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkU2OC9EMkJBQUM0QUFF MEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEtTGlFa1ZybUhHenlDMVFj SncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2bE9KRXlIQS1MaUVrVnJtSEd6eUMxUWNKdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkU2OC9EMkJBQUM0QUFFMEYxMUVFQTdBQzk0MUFDNEY5QUUwMi9pNmxPSkV5SEEt TGlFa1ZybUhHenlDMVFjSncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL94jlzQlLJG7xLAsU2YYjN92jVa28jynaA+fLXl7TBzsK++4U1Cx13EMcBbr Z/Mk7MnHTDlblvDoSMSLVvMzEYMFVryr9CrT5n/5UcFys1WhG0emBtXThj1rw3z/ +2Y+D9IYvntOYhvftzVvJ3sEiuB6pk4eOk1Xj0S6BcSq8GQE0yjabDDM03lCIFva geElgPnf3XBLBSm0Y9Meeq/KxGm401Z2gY8m5Jo8vWREVnbdy4lkSjTOVD6QZDFw Eeyfwb+GyFHFrjNW1zm0o2hrmdxS2s1BCOe8KOj0hzl+BMHXH/sqVFSX3q/OVtbs SrxOzum0V/zQv63tNiWk0+2veg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:24 2026 by rpki-client