$ rpki-client -vvf rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft File: aHvrJ3oFne_qK-3WevsbgjiOXrE.mft (raw, json) Hash identifier: EPJrsM2s9BVlXgEEvn1dwnkVsrRvDtCMycz+03vKN6A= Subject key identifier: CE:73:C0:0B:9F:94:DB:81:87:9F:57:DC:33:83:CC:D7:B6:37:91:A1 Authority key identifier: 68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 Certificate issuer: /CN=A9165FAD/serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Certificate serial: 087C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft Manifest number: 085F Signing time: Thu 16 Apr 2026 20:48:18 +0000 Manifest this update: Thu 16 Apr 2026 20:48:18 +0000 Manifest next update: Thu 23 Apr 2026 20:48:18 +0000 Files and hashes: 1: aHvrJ3oFne_qK-3WevsbgjiOXrE.crl (hash: 1Tk3If5+gevF47x6qt8JWgPM8X9eq/bHV83U2PkpQLk=) 2: 0ED6FD58E4AC11F09CFF02084D6F56BC.roa (hash: c00S8PMH6seb894IcBTA4+jGD8At/7O3wWr5RItqF8c=) 3: D5775FF4E54F11F0875E48B9366F56BC.roa (hash: dBaY0JbbVzl8W6CAtYQ8b8Su4AnGzP3sLeHSsKnDsdA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2172 (0x87c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165FAD, serialNumber=687BEB277A059DEFEA2BEDD67AFB1B82388E5EB1 Validity Not Before: Apr 16 20:48:18 2026 GMT Not After : Apr 23 20:48:18 2026 GMT Subject: CN=69e14b12-37ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:90:e7:29:60:46:52:c2:5a:74:33:cf:eb: 35:55:c2:b7:ab:24:44:0b:ef:9d:8a:d3:dd:1c:34: 58:de:d7:7c:6c:99:c3:8e:9b:89:ac:d6:7b:f1:be: e2:8b:15:0b:4e:f0:65:38:72:60:71:bd:14:f8:ff: 10:6b:1a:55:dc:0e:d4:66:ad:38:1d:22:fd:d6:5c: b3:40:07:3d:32:74:0c:0e:b1:99:bd:03:dd:b2:71: e6:1e:56:9a:5d:c6:b3:4e:5b:4e:a7:f8:ed:f3:65: cb:7e:f5:21:84:a0:16:ec:69:c4:1c:3a:f0:7c:3f: b1:a1:ca:6f:bf:b2:4c:62:3f:85:9f:4e:c2:32:b1: ac:10:31:fe:3c:fd:87:ba:6d:e1:df:3b:06:f6:bc: dd:2f:e4:9c:77:bc:a8:50:82:56:0a:64:65:8f:6a: e1:18:55:c1:69:2a:9f:4a:a6:39:63:60:de:f3:cc: 07:fa:f4:5a:79:b3:3f:b1:c9:74:48:1e:1e:de:4f: 5a:01:7d:c2:97:06:49:b5:5b:48:4c:d5:93:11:d9: d2:13:f4:91:25:b8:2d:c1:df:fd:7f:a1:a8:05:d4: 1d:0d:39:c3:85:cf:7d:1c:2f:f8:95:e4:df:f3:16: fa:da:9c:ef:07:17:f7:39:58:2a:5d:c0:33:c4:b0: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:73:C0:0B:9F:94:DB:81:87:9F:57:DC:33:83:CC:D7:B6:37:91:A1 X509v3 Authority Key Identifier: keyid:68:7B:EB:27:7A:05:9D:EF:EA:2B:ED:D6:7A:FB:1B:82:38:8E:5E:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aHvrJ3oFne_qK-3WevsbgjiOXrE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165FAD/A4D7899E086611EB8A2D1535C4F9AE02/aHvrJ3oFne_qK-3WevsbgjiOXrE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:2f:96:44:6f:c9:76:be:69:fa:39:59:9a:60:5a:6b:2b:43: 17:af:9e:db:16:d6:23:2f:20:5e:b0:2c:92:8a:cf:90:99:96: b1:37:01:75:0e:b4:89:05:1a:fa:86:24:99:e9:d9:e3:1a:cf: c9:ad:18:a0:7b:47:ab:a4:0c:d9:a7:44:38:15:d4:3d:04:e7: 83:5c:dc:cb:7a:d2:37:c0:32:08:7a:cb:30:b7:a9:ad:39:32: 91:2b:b0:00:4b:23:82:9b:87:c1:1a:df:de:30:60:fc:a1:35: 6f:b9:cf:ee:7a:0e:f3:2c:a4:16:f2:e6:18:be:80:ce:ea:d0: 0d:40:55:a1:d3:b3:ce:2c:0e:4e:5c:f2:a3:67:44:e3:3d:ee: 35:f1:4f:09:cd:39:0a:1f:01:ce:cf:87:bc:6a:45:a9:32:d7: 76:90:71:9d:6a:66:5d:96:4e:b6:47:d7:fa:11:20:4f:3c:c9: 81:cf:40:e7:16:55:66:0c:68:1c:7a:47:e6:a9:29:6e:ef:d3: 5d:3f:aa:08:6a:45:2b:04:99:be:77:cb:84:48:35:12:d9:3a: 5c:f5:01:fb:ce:73:67:18:26:95:07:2b:97:18:57:f9:12:a5: cb:78:14:2e:bd:e4:50:88:b0:d1:4f:09:04:64:39:b7:01:a1: 8c:91:43:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVGQUQxMTAvBgNVBAUTKDY4N0JFQjI3N0EwNTlERUZFQTJCRURENjdBRkIxQjgy Mzg4RTVFQjEwHhcNMjYwNDE2MjA0ODE4WhcNMjYwNDIzMjA0ODE4WjAYMRYwFAYD VQQDEw02OWUxNGIxMi0zN2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqruQ5ylgRlLCWnQzz+s1VcK3qyREC++ditPdHDRY3td8bJnDjpuJrNZ78b7i ixULTvBlOHJgcb0U+P8QaxpV3A7UZq04HSL91lyzQAc9MnQMDrGZvQPdsnHmHlaa XcazTltOp/jt82XLfvUhhKAW7GnEHDrwfD+xocpvv7JMYj+Fn07CMrGsEDH+PP2H um3h3zsG9rzdL+Scd7yoUIJWCmRlj2rhGFXBaSqfSqY5Y2De88wH+vRaebM/scl0 SB4e3k9aAX3ClwZJtVtITNWTEdnSE/SRJbgtwd/9f6GoBdQdDTnDhc99HC/4leTf 8xb62pzvBxf3OVgqXcAzxLALhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM5zwAuf lNuBh59X3DODzNe2N5GhMB8GA1UdIwQYMBaAFGh76yd6BZ3v6ivt1nr7G4I4jl6x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUZBRC9BNEQ3ODk5RTA4 NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5lX3FLLTNXZXZzYmdqaU9Y ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FIdnJKM29GbmVfcUstM1dldnNiZ2ppT1hyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUZBRC9BNEQ3ODk5RTA4NjYxMUVCOEEyRDE1MzVDNEY5QUUwMi9hSHZySjNvRm5l X3FLLTNXZXZzYmdqaU9YckUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAey+WRG/Jdr5p+jlZmmBaaytDF6+e2xbWIy8gXrAskorPkJmWsTcBdQ60iQUa +oYkmenZ4xrPya0YoHtHq6QM2adEOBXUPQTng1zcy3rSN8AyCHrLMLeprTkykSuw AEsjgpuHwRrf3jBg/KE1b7nP7noO8yykFvLmGL6AzurQDUBVodOzziwOTlzyo2dE 4z3uNfFPCc05Ch8Bzs+HvGpFqTLXdpBxnWpmXZZOtkfX+hEgTzzJgc9A5xZVZgxo HHpH5qkpbu/TXT+qCGpFKwSZvnfLhEg1Etk6XPUB+85zZxgmlQcrlxhX+RKly3gU Lr3kUIiw0U8JBGQ5twGhjJFDbQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:05:23 2026 by rpki-client