$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft File: 1hg6YWfsLkpyRwcPHws5trnJU-E.mft (raw, json) Hash identifier: 4PXf8Z0kNJOk4NPa+JdPc5fQf4VpBseaMw7Tw/u4NAw= Subject key identifier: AF:0D:9C:8A:D0:EF:82:DF:BB:BA:DF:0E:3B:05:3E:9E:81:63:51:DB Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1 Certificate issuer: /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1 Certificate serial: 0BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft Manifest number: 0BB6 Signing time: Thu 16 Apr 2026 18:53:21 +0000 Manifest this update: Thu 16 Apr 2026 18:53:20 +0000 Manifest next update: Thu 23 Apr 2026 18:53:20 +0000 Files and hashes: 1: 1hg6YWfsLkpyRwcPHws5trnJU-E.crl (hash: KIMkSgvuRKejfArJCpPwvmBkGvIUSl4+aAehaU7ic8U=) 2: E82A7D8840CE11EABBE63B6BC4F9AE02.roa (hash: zLtKv7KdakETMk2s3XQHHR2CRFWRdDk6mJ+jm4StCoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:53:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1 Validity Not Before: Apr 16 18:53:20 2026 GMT Not After : Apr 23 18:53:20 2026 GMT Subject: CN=69e13021-1515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4f:e3:a4:8a:4a:a4:dc:ed:ca:a1:e5:28:53: d9:d8:2b:1e:37:d1:9f:89:26:0e:10:18:99:b0:8d: 1b:89:01:11:25:13:7f:a8:df:9b:6a:d0:79:5e:d4: d0:59:50:54:6a:6d:fb:d0:10:23:fe:17:ec:80:3b: 18:21:50:0f:ff:82:bc:32:e6:0c:96:35:90:45:19: eb:f6:ec:5a:c3:a0:e1:d8:c1:c3:6f:59:67:49:da: 58:c1:12:d3:55:5e:dd:89:8d:f6:f6:ca:a7:59:57: 80:55:20:5d:c0:91:c7:6a:c7:8c:29:41:2f:74:83: 79:5e:ef:04:06:d1:fc:69:38:d6:07:4a:b0:78:b1: 46:1a:9b:aa:eb:c5:ef:4b:aa:43:36:df:5f:f3:41: 3c:60:d7:d0:1d:9e:d4:ef:4a:79:9a:ff:26:c2:a1: 16:f7:36:75:38:fc:6a:08:c5:29:81:c4:e8:41:f9: ec:80:ed:32:48:f2:b3:38:42:e7:6d:cf:bf:e1:13: 83:2f:c8:a2:42:b0:24:ec:2f:3d:f4:7e:fa:6a:cf: a2:8f:50:7b:05:40:92:d0:6d:1e:78:00:33:21:63: a8:cb:85:dc:1d:31:3c:58:ed:cf:b4:3a:32:1d:57: 2c:71:44:97:96:e2:dc:b4:4b:55:0c:f5:79:95:99: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0D:9C:8A:D0:EF:82:DF:BB:BA:DF:0E:3B:05:3E:9E:81:63:51:DB X509v3 Authority Key Identifier: keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d6:77:3d:5f:0f:77:0d:90:92:8f:2e:5e:56:d3:3d:39:02: 20:b8:fd:2a:0a:c0:49:69:91:b0:6c:3f:ff:eb:b3:5c:c0:89: c6:dd:62:fa:1f:c6:8e:df:b2:51:55:57:78:9f:aa:58:93:a4: 16:c0:a0:0b:1f:37:64:a0:f4:0a:e8:9b:fe:fd:72:6a:14:a3: 40:fb:b9:05:79:b6:88:ce:79:a9:61:cb:45:d7:10:a7:88:47: 6d:90:00:92:ae:ff:63:ba:77:bc:df:d0:9f:60:5b:ef:7c:08: ad:a4:34:1a:1f:f6:24:7d:a4:c7:52:bc:66:89:ca:f2:85:f8: 40:6a:e0:cf:6b:58:8c:c8:0c:17:24:2c:fb:6a:a3:4d:34:ce: 1e:12:15:af:9e:93:a1:ad:52:cc:d2:43:24:cc:7f:d6:cd:e4: 85:ed:59:17:5d:3f:80:b0:d7:9d:d6:f9:16:96:a6:61:86:b2: b8:6d:09:35:70:3a:fb:b9:e9:7a:c5:09:81:aa:fc:ae:73:d0: 25:25:71:a5:0c:f2:8a:3a:52:3c:64:72:b2:2c:64:51:cc:9e: b5:9e:a1:58:ff:ab:f6:75:7e:eb:81:88:ed:c2:83:ac:07:bd: b0:be:b6:79:63:f8:85:90:63:54:dd:8e:47:87:11:be:19:f8: 5d:9f:71:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3MDUxMTAvBgNVBAUTKEQ2MTgzQTYxNjdFQzJFNEE3MjQ3MDcwRjFGMEIzOUI2 QjlDOTUzRTEwHhcNMjYwNDE2MTg1MzIwWhcNMjYwNDIzMTg1MzIwWjAYMRYwFAYD VQQDEw02OWUxMzAyMS0xNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsk/jpIpKpNztyqHlKFPZ2CseN9GfiSYOEBiZsI0biQERJRN/qN+batB5XtTQ WVBUam370BAj/hfsgDsYIVAP/4K8MuYMljWQRRnr9uxaw6Dh2MHDb1lnSdpYwRLT VV7diY329sqnWVeAVSBdwJHHaseMKUEvdIN5Xu8EBtH8aTjWB0qweLFGGpuq68Xv S6pDNt9f80E8YNfQHZ7U70p5mv8mwqEW9zZ1OPxqCMUpgcToQfnsgO0ySPKzOELn bc+/4RODL8iiQrAk7C899H76as+ij1B7BUCS0G0eeAAzIWOoy4XcHTE8WO3PtDoy HVcscUSXluLctEtVDPV5lZmzHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK8NnIrQ 74Lfu7rfDjsFPp6BY1HbMB8GA1UdIwQYMBaAFNYYOmFn7C5KckcHDx8LOba5yVPh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcwNS8zM0ZBRTZGNDQw Q0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xrcHlSd2NQSHdzNXRybkpV LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFoZzZZV2ZzTGtweVJ3Y1BId3M1dHJuSlUtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzcwNS8zM0ZBRTZGNDQwQ0UxMUVBQkVDRDY3NkFDNEY5QUUwMi8xaGc2WVdmc0xr cHlSd2NQSHdzNXRybkpVLUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi9Z3PV8Pdw2Qko8uXlbTPTkCILj9KgrASWmRsGw//+uzXMCJxt1i+h/Gjt+y UVVXeJ+qWJOkFsCgCx83ZKD0Cuib/v1yahSjQPu5BXm2iM55qWHLRdcQp4hHbZAA kq7/Y7p3vN/Qn2Bb73wIraQ0Gh/2JH2kx1K8ZonK8oX4QGrgz2tYjMgMFyQs+2qj TTTOHhIVr56Toa1SzNJDJMx/1s3khe1ZF10/gLDXndb5FpamYYayuG0JNXA6+7np esUJgar8rnPQJSVxpQzyijpSPGRysixkUcyetZ6hWP+r9nV+64GI7cKDrAe9sL62 eWP4hZBjVN2OR4cRvhn4XZ9x0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:35:36 2026 by rpki-client