$ rpki-client -vvf rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft File: CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft (raw, json) Hash identifier: 436GH0XN1VhvZtGviQ79ZMdskFeBNstzBM/4yn6HzD8= Subject key identifier: 53:63:1D:63:95:D8:CF:E5:AD:6C:13:9C:99:7A:58:DE:F2:D2:F6:34 Authority key identifier: 0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89 Certificate issuer: /CN=A9168C73/serialNumber=0A6152834E1299C11CF6E07865F765B238656389 Certificate serial: 024A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft Manifest number: 0246 Signing time: Fri 17 Apr 2026 02:11:20 +0000 Manifest this update: Fri 17 Apr 2026 02:11:19 +0000 Manifest next update: Fri 24 Apr 2026 02:11:19 +0000 Files and hashes: 1: CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl (hash: TL+kqRqfLLuGyJsr8plKAcjsiLNLmEWqL4fLZz4T7QA=) 2: D8EC2D84C6FF11EDA93A1D43C4F9AE02.roa (hash: hj+uCG3BczK6y02o1/8ZHFisCvHEGnt+l8aKiIPe2aA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:11:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 586 (0x24a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168C73, serialNumber=0A6152834E1299C11CF6E07865F765B238656389 Validity Not Before: Apr 17 02:11:19 2026 GMT Not After : Apr 24 02:11:19 2026 GMT Subject: CN=69e196c8-3eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:37:a4:99:5a:c5:5f:f1:cd:95:1d:ef:49: d3:e1:03:c0:b6:98:0e:17:6b:5a:a9:67:53:58:fd: 1f:f6:8d:ac:ec:1f:ea:59:ae:29:d7:27:5a:9c:62: 44:71:51:a5:ee:cb:99:c9:6e:04:06:65:d4:ef:0a: 91:5b:a6:19:fd:ac:cb:28:08:fe:eb:8b:c1:3b:47: d9:8c:a2:1c:be:93:f3:ff:cf:db:3c:26:2e:99:60: d3:3a:88:de:50:f5:a2:e5:37:39:df:9e:77:68:23: 35:91:b4:7f:89:d5:74:93:e0:5c:3d:d2:94:91:95: e2:74:e0:c6:13:5a:b4:b4:2a:ca:e8:16:5e:f1:60: fc:b9:76:7f:37:b7:e3:6c:28:01:57:0e:3a:0d:fa: 5d:6f:ac:b9:90:3a:97:e6:08:d7:0c:a0:0a:30:ca: c4:3a:45:15:63:a6:62:45:e9:ba:6a:0a:65:92:a5: 99:90:58:e7:97:8a:e7:c7:3c:96:2f:b2:3d:39:ef: 5b:88:d6:3d:b9:47:2e:cd:74:04:8d:c7:21:39:31: 09:11:79:66:9b:f6:c8:0d:f3:dd:ae:b2:92:98:5c: 62:0d:f0:fa:f6:ae:e8:5b:e0:42:c7:54:2e:c4:da: 9f:85:c5:0b:6d:b5:d6:2a:5a:a9:4f:07:c9:df:ce: 45:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:63:1D:63:95:D8:CF:E5:AD:6C:13:9C:99:7A:58:DE:F2:D2:F6:34 X509v3 Authority Key Identifier: keyid:0A:61:52:83:4E:12:99:C1:1C:F6:E0:78:65:F7:65:B2:38:65:63:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmFSg04SmcEc9uB4ZfdlsjhlY4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168C73/8E5C9CC0C31411ED97A0A37FC4F9AE02/CmFSg04SmcEc9uB4ZfdlsjhlY4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:5d:1a:fa:8e:55:df:90:69:11:07:bf:a1:6f:1f:d4:70:c1: 81:eb:b0:e0:22:ca:d3:29:7e:d0:50:d8:47:3d:ae:2e:16:6c: 71:a0:78:8a:34:2b:14:7f:5f:94:a6:ec:f7:8f:95:18:a7:19: e5:d2:20:95:9a:54:80:d9:3b:31:ea:e9:0f:e5:16:00:16:40: 3d:d8:49:2d:9b:76:45:89:da:c2:c3:ba:ef:1f:f8:00:ba:65: a6:4d:83:ce:7f:37:7a:7b:eb:75:3c:51:5c:de:9b:03:21:09: b4:b7:ec:2e:8d:52:6e:7b:0e:94:1b:0a:f3:e3:c7:6a:42:57: 1a:80:25:be:9d:55:0c:f5:42:7e:17:9f:dc:0a:a6:c1:64:46: 11:bf:50:fc:69:df:e6:d8:53:ae:0d:4d:01:fe:d7:51:f0:31: 37:16:32:51:25:5a:bc:f6:cb:29:65:74:fb:91:37:ad:31:f4: 7b:2a:5e:c0:bd:ea:70:0d:cb:c4:70:07:08:cd:f5:a4:ab:3f: 83:2e:dc:31:5d:5f:53:1c:fb:97:19:94:c4:58:65:46:33:4d: 88:4a:13:e3:56:be:a5:86:f4:69:fd:ae:da:df:e7:75:23:92: 18:b1:b4:b1:37:f0:cc:3a:b5:1d:22:5c:60:7d:f1:e5:81:7a: 19:31:a9:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhDNzMxMTAvBgNVBAUTKDBBNjE1MjgzNEUxMjk5QzExQ0Y2RTA3ODY1Rjc2NUIy Mzg2NTYzODkwHhcNMjYwNDE3MDIxMTE5WhcNMjYwNDI0MDIxMTE5WjAYMRYwFAYD VQQDEw02OWUxOTZjOC0zZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQA3pJlaxV/xzZUd70nT4QPAtpgOF2taqWdTWP0f9o2s7B/qWa4p1ydanGJE cVGl7suZyW4EBmXU7wqRW6YZ/azLKAj+64vBO0fZjKIcvpPz/8/bPCYumWDTOoje UPWi5Tc53553aCM1kbR/idV0k+BcPdKUkZXidODGE1q0tCrK6BZe8WD8uXZ/N7fj bCgBVw46Dfpdb6y5kDqX5gjXDKAKMMrEOkUVY6ZiRem6agplkqWZkFjnl4rnxzyW L7I9Oe9biNY9uUcuzXQEjcchOTEJEXlmm/bIDfPdrrKSmFxiDfD69q7oW+BCx1Qu xNqfhcULbbXWKlqpTwfJ385FxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNjHWOV 2M/lrWwTnJl6WN7y0vY0MB8GA1UdIwQYMBaAFAphUoNOEpnBHPbgeGX3ZbI4ZWOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEM3My84RTVDOUNDMEMz MTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21jRWM5dUI0WmZkbHNqaGxZ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtRlNnMDRTbWNFYzl1QjRaZmRsc2pobFk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEM3My84RTVDOUNDMEMzMTQxMUVEOTdBMEEzN0ZDNEY5QUUwMi9DbUZTZzA0U21j RWM5dUI0WmZkbHNqaGxZNGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtF0a+o5V35BpEQe/oW8f1HDBgeuw4CLK0yl+0FDYRz2uLhZscaB4ijQrFH9f lKbs94+VGKcZ5dIglZpUgNk7MerpD+UWABZAPdhJLZt2RYnawsO67x/4ALplpk2D zn83envrdTxRXN6bAyEJtLfsLo1SbnsOlBsK8+PHakJXGoAlvp1VDPVCfhef3Aqm wWRGEb9Q/Gnf5thTrg1NAf7XUfAxNxYyUSVavPbLKWV0+5E3rTH0eypewL3qcA3L xHAHCM31pKs/gy7cMV1fUxz7lxmUxFhlRjNNiEoT41a+pYb0af2u2t/ndSOSGLG0 sTfwzDq1HSJcYH3x5YF6GTGphw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:42 2026 by rpki-client