$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: 4qSo3Zfgj6TGcnE8NWOwntp+F8kBsmwTyROeYRiPPTE= Subject key identifier: 4E:3E:98:9D:76:AB:9F:6E:CE:D8:F4:D8:1B:0B:34:37:97:FB:A1:F0 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 06E7 Signing time: Thu 16 Apr 2026 22:07:15 +0000 Manifest this update: Thu 16 Apr 2026 22:07:14 +0000 Manifest next update: Thu 23 Apr 2026 22:07:14 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: mOtzRw+1GuEO/ZyCWF2XW5yrCvgA3WsznQIIWCGUB3o=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Apr 16 22:07:14 2026 GMT Not After : Apr 23 22:07:14 2026 GMT Subject: CN=69e15d93-892a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:88:40:8d:f0:86:5d:03:28:2f:ad:70:0e: 77:d0:aa:76:dc:4e:97:d0:86:37:3b:27:09:a7:63: d8:c8:a5:2c:f3:06:96:ca:d6:55:f2:12:37:1e:a3: 36:0a:fd:ff:68:56:05:08:2e:38:0f:b2:03:f4:54: 02:e3:6b:47:b2:5c:44:71:f7:ba:17:73:fb:7e:14: ab:dc:7e:f1:f6:c9:ba:99:1b:0b:f2:b6:f8:ae:c2: bd:c6:dc:53:18:d9:41:58:2d:36:05:1e:4e:b8:86: 64:b9:b2:ac:96:fe:15:13:0b:b7:f9:a3:7b:a0:99: 9b:1b:37:e9:fb:81:2c:27:36:d1:ef:e5:73:40:ae: f6:20:17:f0:d7:b8:d2:88:7d:64:5c:7f:f2:3b:b2: 0d:f1:e1:e0:5a:0e:52:95:2c:42:9f:b3:09:9d:dd: b3:64:a2:de:7e:a5:79:af:92:7a:9c:40:cb:7b:ef: 01:59:95:63:04:00:5d:cb:62:be:c3:23:1c:4a:ff: 76:2e:1b:fe:f2:9a:eb:66:30:9f:48:14:b3:7a:20: 75:a9:98:57:87:48:d9:f8:b7:fa:64:1d:13:1c:76: 12:df:26:57:44:16:4b:52:18:95:dd:9c:8f:45:c1: 41:3c:cf:81:3a:4b:19:ab:57:b5:6f:a5:30:19:55: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3E:98:9D:76:AB:9F:6E:CE:D8:F4:D8:1B:0B:34:37:97:FB:A1:F0 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:26:a3:de:18:21:01:98:6f:5f:bd:1c:05:d7:c9:d3:72:c8: 3c:7f:d3:e4:dc:07:4e:d7:b6:57:c7:b5:17:3b:60:32:26:5a: a2:bc:89:7e:65:a5:57:0c:d4:87:18:15:00:b5:dc:d4:19:01: 13:6f:00:d4:63:6c:d9:64:ed:48:ea:59:43:7c:6d:9f:9a:46: ab:61:f8:30:c6:8c:fd:0e:52:a8:31:5b:20:a5:3a:7b:ab:ca: 0a:00:f6:5d:2c:6c:3a:52:bc:f5:ec:9b:d8:6d:54:e7:c3:7a: ce:2f:77:4a:a3:a6:98:4a:fc:03:7f:56:8d:44:b5:11:84:dc: 85:76:26:6f:84:b5:f9:7d:9f:b0:b0:90:0b:af:4e:07:cf:95: fa:a7:c5:0c:20:88:6c:55:23:79:d2:de:a9:53:8a:03:e1:08: f8:89:8c:6b:46:53:50:e2:8f:10:86:9b:6c:14:31:f3:c0:34: 99:fd:fd:10:c8:b9:40:a6:29:cb:65:f0:aa:ef:16:dd:4c:d2: 9c:60:fc:8d:57:a7:df:84:cf:43:bf:5f:9b:73:29:23:97:00: 40:2b:9d:d8:54:b2:fa:db:d7:65:61:4e:ca:33:1a:26:bf:ee: 84:fb:30:c5:f3:65:dd:c4:0b:bd:a9:6d:1c:3b:91:da:a6:5b: 75:e9:00:83 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjYwNDE2MjIwNzE0WhcNMjYwNDIzMjIwNzE0WjAYMRYwFAYD VQQDEw02OWUxNWQ5My04OTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw26IQI3whl0DKC+tcA530Kp23E6X0IY3OycJp2PYyKUs8waWytZV8hI3HqM2 Cv3/aFYFCC44D7ID9FQC42tHslxEcfe6F3P7fhSr3H7x9sm6mRsL8rb4rsK9xtxT GNlBWC02BR5OuIZkubKslv4VEwu3+aN7oJmbGzfp+4EsJzbR7+VzQK72IBfw17jS iH1kXH/yO7IN8eHgWg5SlSxCn7MJnd2zZKLefqV5r5J6nEDLe+8BWZVjBABdy2K+ wyMcSv92Lhv+8prrZjCfSBSzeiB1qZhXh0jZ+Lf6ZB0THHYS3yZXRBZLUhiV3ZyP RcFBPM+BOksZq1e1b6UwGVXyewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4+mJ12 q59uztj02BsLNDeX+6HwMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfiaj3hghAZhvX70cBdfJ03LIPH/T5NwHTte2V8e1FztgMiZaoryJfmWlVwzU hxgVALXc1BkBE28A1GNs2WTtSOpZQ3xtn5pGq2H4MMaM/Q5SqDFbIKU6e6vKCgD2 XSxsOlK89eyb2G1U58N6zi93SqOmmEr8A39WjUS1EYTchXYmb4S1+X2fsLCQC69O B8+V+qfFDCCIbFUjedLeqVOKA+EI+ImMa0ZTUOKPEIabbBQx88A0mf39EMi5QKYp y2Xwqu8W3UzSnGD8jVen34TPQ79fm3MpI5cAQCud2FSy+tvXZWFOyjMaJr/uhPsw xfNl3cQLvaltHDuR2qZbdekAgw== -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:19 2026 by rpki-client