$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: dm+vL5vle5s6SOJ48EZlUD+PrgLl0jPbvyUww4aohRg= Subject key identifier: 1B:33:82:14:6A:1E:DC:7D:E1:6D:8E:ED:A1:47:41:35:73:80:A4:67 Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 0247 Signing time: Fri 17 Apr 2026 02:10:31 +0000 Manifest this update: Fri 17 Apr 2026 02:10:31 +0000 Manifest next update: Fri 24 Apr 2026 02:10:31 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: HT3H1I5ydJFvdikWrb3qlhzIg1TCAEjLdZQ0WfejIjA=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 589 (0x24d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Apr 17 02:10:31 2026 GMT Not After : Apr 24 02:10:31 2026 GMT Subject: CN=69e19697-87f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:45:9b:1e:89:bf:f6:07:0d:87:8e:f3:72: 2d:c1:a5:b6:97:19:9d:f7:1e:1a:29:67:98:45:08: 47:1f:5a:f3:f5:9f:b5:ff:80:fa:ba:5c:fc:47:82: b0:9d:c2:45:50:c4:49:0d:99:f4:8c:1a:3c:ac:a1: 8f:ae:88:70:b6:06:95:1c:cb:37:50:42:19:f9:fe: df:2b:97:5f:0a:2b:93:f4:90:94:50:ba:f0:a0:3e: a6:ac:93:78:94:fc:09:d0:28:28:f6:74:24:bc:51: ef:44:83:e4:e0:c2:b9:38:ea:fa:9f:ca:39:45:13: 47:66:5a:00:33:c1:89:1a:d1:f4:f3:e3:b9:f3:43: 58:e2:ba:02:6b:ca:e7:34:20:47:b2:fe:48:33:b6: f3:4b:32:3b:e9:49:e3:18:f6:12:94:19:23:9d:0f: 8f:0e:12:f6:0a:3f:66:59:86:56:c4:4b:b9:ce:9d: f8:70:6d:8c:4d:0e:db:df:03:9a:39:ac:2c:6f:71: 75:b7:af:7f:a0:3d:c6:4e:78:44:23:00:dc:28:55: 78:34:af:26:f0:b3:0b:81:2d:27:93:6a:fe:4f:c8: ca:88:9b:32:49:09:54:0f:82:6a:5c:d0:e4:b7:df: b3:60:73:65:96:23:89:de:d7:0a:ea:18:aa:1d:f2: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:33:82:14:6A:1E:DC:7D:E1:6D:8E:ED:A1:47:41:35:73:80:A4:67 X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e9:c2:0d:3d:4c:06:34:78:e9:68:41:6e:1e:a6:3f:a2:b2: 01:0e:96:9f:82:ae:9d:67:e0:e7:64:46:1b:a9:84:4d:70:2b: fa:88:b2:06:46:6e:1e:df:24:3e:52:a0:62:32:9b:7e:10:b7: 6f:94:6d:35:f6:06:29:12:5f:08:c2:89:e6:24:16:89:22:a2: 52:fb:62:ba:34:61:df:e9:aa:40:21:fa:82:e4:31:e1:07:86: af:93:49:fe:d9:2f:6f:b5:51:e2:53:45:1a:3d:04:26:73:6d: 9f:05:e9:94:17:61:f7:d5:e1:bf:01:2d:17:2c:aa:7f:c3:54: 10:8c:df:0d:19:fc:90:df:f8:d8:85:3f:8f:4b:f8:ab:ee:15: a3:d1:00:db:8d:c8:3b:17:0c:d4:1a:99:ba:3a:ea:48:54:eb: 79:c1:09:57:a9:76:48:c6:09:ca:6c:36:39:8b:46:08:13:41: 6d:ff:78:c8:45:01:13:5b:6a:bf:c8:83:a0:24:6a:89:dc:6f: 7d:4b:64:cb:29:30:f2:1b:61:c0:64:05:bd:25:c5:b1:15:9d: 6b:8d:03:42:b5:61:4c:61:6e:c8:c9:cd:87:64:af:ee:68:8b: eb:2c:bb:4f:11:ca:16:b8:e6:ea:5f:1a:3c:06:89:51:fd:ee: 03:53:44:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjYwNDE3MDIxMDMxWhcNMjYwNDI0MDIxMDMxWjAYMRYwFAYD VQQDEw02OWUxOTY5Ny04N2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXFFmx6Jv/YHDYeO83ItwaW2lxmd9x4aKWeYRQhHH1rz9Z+1/4D6ulz8R4Kw ncJFUMRJDZn0jBo8rKGProhwtgaVHMs3UEIZ+f7fK5dfCiuT9JCUULrwoD6mrJN4 lPwJ0Cgo9nQkvFHvRIPk4MK5OOr6n8o5RRNHZloAM8GJGtH08+O580NY4roCa8rn NCBHsv5IM7bzSzI76UnjGPYSlBkjnQ+PDhL2Cj9mWYZWxEu5zp34cG2MTQ7b3wOa Oawsb3F1t69/oD3GTnhEIwDcKFV4NK8m8LMLgS0nk2r+T8jKiJsySQlUD4JqXNDk t9+zYHNlliOJ3tcK6hiqHfLFKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBszghRq Htx94W2O7aFHQTVzgKRnMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl+nCDT1MBjR46WhBbh6mP6KyAQ6Wn4KunWfg52RGG6mETXAr+oiyBkZuHt8k PlKgYjKbfhC3b5RtNfYGKRJfCMKJ5iQWiSKiUvtiujRh3+mqQCH6guQx4QeGr5NJ /tkvb7VR4lNFGj0EJnNtnwXplBdh99XhvwEtFyyqf8NUEIzfDRn8kN/42IU/j0v4 q+4Vo9EA243IOxcM1BqZujrqSFTrecEJV6l2SMYJymw2OYtGCBNBbf94yEUBE1tq v8iDoCRqidxvfUtkyykw8hthwGQFvSXFsRWda40DQrVhTGFuyMnNh2Sv7miL6yy7 TxHKFrjm6l8aPAaJUf3uA1NEOQ== -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:50 2026 by rpki-client