$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: wPV1vXK1/EOi0IS2tqkb/885AB9D5mZcYvmjCRiiy4g= Subject key identifier: 51:E3:9C:C5:6A:EF:13:9F:B2:6D:6B:39:5D:4E:A0:5A:8B:6B:AF:0E Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 14E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 14BC Signing time: Thu 16 Apr 2026 16:48:02 +0000 Manifest this update: Thu 16 Apr 2026 16:48:01 +0000 Manifest next update: Thu 23 Apr 2026 16:48:01 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: WciIlT9tzY2kHfUOskRS6nq+TTtB/KO11EgZa+u2q+A=) 2: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E=) 3: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=) 4: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: UX+Z+m5y60d6ZGNGCzFSXggUSxqmAM8xUHETNR0GgzI=) 5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: Lqak49Os9Ya4UTOEGKBzKyCOhe/2umYec1RSzQZJSpk=) 6: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0=) 7: 983A5536450611F093EC3A65C4F9AE02.roa (hash: ijwzgpsaKu/9677qc+bwpPEiLD74pnpjkFQugVrQBxM=) 8: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: /dfSFFokCqZHKPcfVIUa5saL4zfwsMCEJvMbseXpy4U=) 9: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 16:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5353 (0x14e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Apr 16 16:48:01 2026 GMT Not After : Apr 23 16:48:01 2026 GMT Subject: CN=69e112c2-6016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5a:ff:bc:a5:57:e9:a1:92:b0:96:ed:93:fa: 8f:ef:9b:a1:fb:a1:8f:cb:e6:f5:18:aa:bc:10:7c: 3b:35:6b:7d:c6:9e:33:84:75:aa:1f:42:1f:ad:5c: f3:2a:02:68:85:6e:c5:04:e2:fe:05:c6:e9:c0:57: e0:3f:b2:51:93:7b:3c:f4:76:6f:c1:05:b7:96:70: 2d:72:13:aa:58:fb:bb:ef:20:55:70:af:70:5a:51: 23:01:41:70:1b:12:b6:4e:c6:52:4f:2a:06:fa:be: 14:3c:56:d8:27:98:7b:81:ee:3a:a5:dd:1f:c7:4b: 45:6b:c9:19:91:2f:e6:53:2b:c2:ad:ab:fc:da:df: 26:7a:80:3e:d6:9b:91:a4:85:b7:a9:a3:f2:49:c7: 7d:80:c7:c1:60:6c:77:c0:eb:44:20:a7:36:d9:2c: e7:4f:3c:35:83:8c:a7:17:fa:1f:d9:aa:ea:f0:8a: 0b:a7:9c:93:68:47:5a:a2:d0:95:db:19:af:55:13: ee:e2:bc:ba:2f:19:3c:1c:7f:09:1d:d7:94:2e:99: 77:56:8c:61:2b:39:78:37:7a:1c:dd:c6:63:d8:a5: e2:46:4e:7b:3e:ae:c0:b4:07:70:0a:5f:07:c0:32: be:a5:18:ed:ec:15:10:ff:b3:7a:cf:d5:96:6e:13: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E3:9C:C5:6A:EF:13:9F:B2:6D:6B:39:5D:4E:A0:5A:8B:6B:AF:0E X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:73:fe:87:98:1e:d8:f5:25:e8:d7:47:dc:1a:8f:28:80: 2f:66:e3:f3:f3:57:3b:86:50:ad:ad:ca:bf:a1:2f:a6:7c:97: a8:99:d6:f2:58:c1:d7:8b:69:70:38:7c:c5:f9:71:b7:1f:63: 26:cf:ac:07:9a:c5:68:ee:23:46:48:06:8f:ad:89:60:5b:bb: 33:28:c5:c6:5c:6b:7f:3d:66:a2:81:a8:0c:cd:58:08:93:a1: b1:ab:fb:c3:f1:4f:9e:cd:2d:8f:17:d8:6c:23:e4:a2:49:90: df:38:b3:77:3f:54:51:1d:21:05:11:a4:55:96:3e:b4:c0:a8: 6b:1f:bf:19:ad:e7:96:2b:ee:e8:0c:53:e3:0b:3c:56:4d:1c: ab:ce:c2:ef:6b:0a:14:27:9e:c8:31:ca:97:4c:42:fa:4f:7d: 53:03:1f:a1:45:5d:34:a6:de:58:fc:5e:11:53:68:51:2f:75: f1:48:3a:88:21:0a:d3:09:d4:cb:16:df:c1:c5:48:17:4d:11: fe:8f:f1:13:9f:26:0c:7f:57:9c:00:a9:e8:d6:93:d2:b2:71: 4d:fd:37:ae:e1:41:af:87:c4:41:ea:83:5a:6c:2e:73:a4:41: 43:61:c9:f8:4d:db:6c:e3:54:3c:0f:39:bf:de:5f:8f:b2:96: 0b:bf:67:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYwNDE2MTY0ODAxWhcNMjYwNDIzMTY0ODAxWjAYMRYwFAYD VQQDEw02OWUxMTJjMi02MDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmVr/vKVX6aGSsJbtk/qP75uh+6GPy+b1GKq8EHw7NWt9xp4zhHWqH0IfrVzz KgJohW7FBOL+BcbpwFfgP7JRk3s89HZvwQW3lnAtchOqWPu77yBVcK9wWlEjAUFw GxK2TsZSTyoG+r4UPFbYJ5h7ge46pd0fx0tFa8kZkS/mUyvCrav82t8meoA+1puR pIW3qaPyScd9gMfBYGx3wOtEIKc22SznTzw1g4ynF/of2arq8IoLp5yTaEdaotCV 2xmvVRPu4ry6Lxk8HH8JHdeULpl3VoxhKzl4N3oc3cZj2KXiRk57Pq7AtAdwCl8H wDK+pRjt7BUQ/7N6z9WWbhMtiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHjnMVq 7xOfsm1rOV1OoFqLa68OMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACF5z/oeYHtj1JejXR9wajyiAL2bj8/NXO4ZQra3Kv6EvpnyXqJnW8ljB14tp cDh8xflxtx9jJs+sB5rFaO4jRkgGj62JYFu7MyjFxlxrfz1mooGoDM1YCJOhsav7 w/FPns0tjxfYbCPkokmQ3zizdz9UUR0hBRGkVZY+tMCoax+/Ga3nlivu6AxT4ws8 Vk0cq87C72sKFCeeyDHKl0xC+k99UwMfoUVdNKbeWPxeEVNoUS918Ug6iCEK0wnU yxbfwcVIF00R/o/xE58mDH9XnACp6NaT0rJxTf03ruFBr4fEQeqDWmwuc6RBQ2HJ +E3bbONUPA85v95fj7KWC79nXg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:10:00 2026 by rpki-client