$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json) Hash identifier: qMfjinnLqSyCnIvkyBByAlSreqUkFIq54hsAb+X/G68= Subject key identifier: F6:27:A1:7B:68:DE:1C:DF:74:20:17:0C:C7:98:99:C9:F0:95:BF:BC Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft Manifest number: 15 Signing time: Fri 17 Apr 2026 08:42:24 +0000 Manifest this update: Fri 17 Apr 2026 08:42:24 +0000 Manifest next update: Fri 24 Apr 2026 08:42:24 +0000 Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: 1sr8Sx4vRf6Jus3X2M70JFEmvP8w3Ri70UAjsSHAbv8=) 2: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=) 3: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Validity Not Before: Apr 17 08:42:24 2026 GMT Not After : Apr 24 08:42:24 2026 GMT Subject: CN=69e1f270-57d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:c6:ac:6f:6e:95:b2:01:56:29:6c:9c:38: dc:f0:ac:f2:b4:03:76:eb:6d:79:62:2c:3d:5e:0a: 5f:74:c5:b0:ef:8e:54:71:0f:11:f9:2a:ec:94:db: 66:83:78:09:ab:17:f9:0c:60:f6:f3:ad:f3:3f:7f: f6:67:c5:71:7b:08:a9:aa:e2:be:cf:b7:84:f3:ef: 3d:57:94:82:f0:57:5e:1a:97:13:15:2c:64:bf:a6: 17:e5:6d:e7:f3:5d:98:ce:20:09:d2:f3:97:5b:ab: 02:97:69:8c:cc:4a:24:1f:e1:dc:1b:cb:2c:f8:ea: d5:89:5b:31:12:ec:2c:d8:15:ec:2a:53:7d:ea:3a: b3:45:6d:c0:7f:33:a3:89:db:57:2e:ee:2a:7c:9b: 75:d0:2f:0e:32:21:73:f5:82:d8:28:34:5c:b9:58: 6c:31:f0:84:fb:45:eb:12:af:c4:11:23:13:b6:08: 60:ac:e6:ee:f4:fe:3c:c8:2e:b9:6d:76:63:f2:04: 80:16:50:dd:7a:f9:c5:19:60:0e:1b:d2:32:00:eb: ae:eb:3a:54:e7:8f:c4:76:61:44:2e:40:1f:cc:57: d4:62:94:d0:0d:65:2d:e4:57:20:87:69:75:30:bb: e3:4c:45:1b:89:07:89:cd:20:c0:ba:83:53:ed:86: 33:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:27:A1:7B:68:DE:1C:DF:74:20:17:0C:C7:98:99:C9:F0:95:BF:BC X509v3 Authority Key Identifier: keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c1:e2:41:71:22:f6:49:e3:fb:62:cc:66:dd:21:30:19:50: f8:ca:9e:79:dd:76:36:d0:9e:ba:90:ee:52:ad:5c:f7:6d:95: cc:93:93:6e:04:a1:95:eb:2a:96:36:ea:46:bd:df:e5:60:e2: a4:54:1f:c0:44:99:a4:87:df:64:da:7c:e4:72:16:4c:9b:2f: 1f:41:51:fc:f0:b7:75:b1:99:59:6d:88:75:e7:d0:2b:60:72: cd:96:93:81:f7:1e:bd:b6:28:2e:03:0f:6a:b4:4b:1a:ff:47: 47:3f:85:03:00:e9:6c:29:93:10:30:4c:a3:e4:24:5f:8d:8e: 75:a9:41:7c:64:7c:ea:a6:91:e2:36:9b:26:92:92:a1:10:6d: 90:37:05:dc:ce:39:b3:68:63:70:5c:3a:58:eb:71:f9:73:17: 3e:11:e0:34:1a:15:d2:da:5f:91:12:e7:d7:ba:be:ff:c6:1e: 0b:6e:7d:ea:be:45:92:ea:9f:db:33:50:44:b7:24:5d:2c:17: b9:c3:76:f0:3e:70:c2:21:2d:64:68:c7:4d:09:e1:c1:27:87: 73:98:d2:2f:02:23:cd:01:ba:15:7c:85:ed:5d:ea:86:12:1c: b0:fc:3b:8d:19:8a:16:71:50:ba:2f:18:be:9e:e8:10:28:c5: 94:75:5a:c9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUMwNTExMC8GA1UEBRMoMDA4RDRGOUY1ODY4RUMyMkE3QTkxRUNBQURDRDdFMEQz QjMxMTE3RjAeFw0yNjA0MTcwODQyMjRaFw0yNjA0MjQwODQyMjRaMBgxFjAUBgNV BAMTDTY5ZTFmMjcwLTU3ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ4sasb26VsgFWKWycONzwrPK0A3brbXliLD1eCl90xbDvjlRxDxH5KuyU22aD eAmrF/kMYPbzrfM/f/ZnxXF7CKmq4r7Pt4Tz7z1XlILwV14alxMVLGS/phflbefz XZjOIAnS85dbqwKXaYzMSiQf4dwbyyz46tWJWzES7CzYFewqU33qOrNFbcB/M6OJ 21cu7ip8m3XQLw4yIXP1gtgoNFy5WGwx8IT7ResSr8QRIxO2CGCs5u70/jzILrlt dmPyBIAWUN16+cUZYA4b0jIA667rOlTnj8R2YUQuQB/MV9RilNANZS3kVyCHaXUw u+NMRRuJB4nNIMC6g1PthjNdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU9iehe2je HN90IBcMx5iZyfCVv7wwHwYDVR0jBBgwFoAUAI1Pn1ho7CKnqR7Krc1+DTsxEX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzA1Lzc3QkFDNDMwMUQw MDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NLbnFSN0tyYzEtRFRzeEVY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUkxUG4xaG83Q0tucVI3S3JjMS1EVHN4RVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzA1Lzc3QkFDNDMwMUQwMDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NL bnFSN0tyYzEtRFRzeEVYOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAnweJBcSL2SeP7Ysxm3SEwGVD4yp553XY20J66kO5SrVz3bZXMk5NuBKGV6yqW NupGvd/lYOKkVB/ARJmkh99k2nzkchZMmy8fQVH88Ld1sZlZbYh159ArYHLNlpOB 9x69tiguAw9qtEsa/0dHP4UDAOlsKZMQMEyj5CRfjY51qUF8ZHzqppHiNpsmkpKh EG2QNwXczjmzaGNwXDpY63H5cxc+EeA0GhXS2l+REufXur7/xh4Lbn3qvkWS6p/b M1BEtyRdLBe5w3bwPnDCIS1kaMdNCeHBJ4dzmNIvAiPNAboVfIXtXeqGEhyw/DuN GYoWcVC6Lxi+nugQKMWUdVrJ -----END CERTIFICATE-----Generated at Fri Apr 17 20:44:59 2026 by rpki-client