$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json) Hash identifier: KYoTOBArx2esMeieawChxmfn+Cg27ImlrpxsnoLyz5s= Subject key identifier: 9F:4C:88:24:32:58:D3:0F:3C:3B:D4:32:AE:7B:1C:60:FE:1A:B2:74 Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft Manifest number: 0690 Signing time: Tue 14 Apr 2026 22:44:11 +0000 Manifest this update: Tue 14 Apr 2026 22:44:11 +0000 Manifest next update: Tue 21 Apr 2026 22:44:11 +0000 Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: DxV9szs+WfSNO7MaOdWQla6Ss5Y6LULY129Fz5Z9VZo=) 2: 8F3586B40DF511F18DE23E02043D8C67.roa (hash: BDMfjMKJmoPKXCf6wF6zp+LdHvOUVMSlt3LPtRBabEg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 22:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: Apr 14 22:44:11 2026 GMT Not After : Apr 21 22:44:11 2026 GMT Subject: CN=69dec33b-d54e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:07:62:fe:ed:7e:fd:85:d7:78:03:93:9e:c8: c0:3d:72:ed:0c:b5:99:28:9d:80:e8:4b:bb:b9:c5: 1d:87:83:7f:26:49:e4:d8:09:02:31:b2:de:a7:96: 9d:a6:2b:b2:09:d7:b3:9e:1e:a2:e5:a0:9a:e9:d0: 35:8e:67:43:ba:2d:fb:82:5b:03:c2:d3:99:6e:dd: 09:17:cf:f4:ff:c5:4d:c5:c0:71:48:4e:21:00:68: af:7b:4c:84:c1:63:8f:7d:97:1a:2d:58:59:4e:2a: 9a:ab:14:88:e0:a4:5a:03:03:b9:30:29:77:e8:27: c3:37:a1:5a:5f:4a:dc:b6:92:c0:50:49:32:6b:57: f0:08:60:84:0f:5d:bc:c6:15:78:b4:db:33:ee:f0: 49:27:e7:69:50:b7:e5:c2:bd:df:91:9d:00:55:27: 88:53:47:49:4b:59:8d:80:67:cd:5f:cc:1b:5d:82: ae:ba:fc:df:a6:9e:39:0c:8c:9f:d7:ec:a3:47:73: bd:fb:05:dc:2a:8f:fa:89:56:f0:b7:6b:8f:65:66: 09:03:24:2f:9c:a6:8b:e3:61:7c:01:28:69:8a:ad: b3:16:37:43:06:58:56:10:a5:74:dc:40:a6:ce:cb: 96:73:69:f5:a2:8e:c9:ea:a3:fb:ed:b7:9f:4b:e4: 65:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:4C:88:24:32:58:D3:0F:3C:3B:D4:32:AE:7B:1C:60:FE:1A:B2:74 X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:df:45:b7:c5:31:af:13:f0:c1:93:05:c5:5b:99:04:1a: b7:c4:f2:05:32:e4:c2:aa:cb:60:7b:f2:65:77:01:e9:94:d1: 7a:49:36:e6:b7:49:38:6f:c9:bb:d9:38:c1:c9:82:67:82:55: d0:27:20:b6:22:c9:15:2e:9c:98:29:ca:ba:73:f4:96:e5:d5: 41:e1:d6:ce:61:ad:9c:81:13:28:8e:1a:8e:4f:79:66:ff:5c: 82:09:5f:be:4d:80:a0:d3:1b:c2:7a:e7:dd:64:e9:70:d4:7d: 80:b9:2b:53:c1:76:f0:d4:26:59:d4:83:bd:94:43:92:4c:0e: 50:42:3f:cf:ae:a2:72:1d:2e:70:4b:b8:85:aa:bb:d3:0b:4a: 7f:e2:3b:b8:4b:cc:35:d4:8e:f2:50:e9:e9:7b:48:3e:b0:e0: 86:6c:0b:83:01:6f:f2:54:38:5f:6f:53:d7:02:5f:28:8b:b7: 72:f5:da:79:a6:8f:b2:46:5c:36:10:8f:a3:0e:a9:1d:0c:11: 40:b6:b6:50:e9:1d:d5:8c:a8:9f:04:ec:de:ed:7f:38:4f:3b: 92:b9:a3:99:6a:52:cd:0c:d4:04:f3:2e:48:45:48:bf:74:5b: ee:43:1e:9a:0f:7c:ca:fb:85:be:22:59:ac:7a:62:c9:c6:db: 19:40:e6:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKDY4RUU4NUY0QzI3RDRCQTkzRTBENkI2QTNFOTI2NTlF MTBENjg5NUUwHhcNMjYwNDE0MjI0NDExWhcNMjYwNDIxMjI0NDExWjAYMRYwFAYD VQQDEw02OWRlYzMzYi1kNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQdi/u1+/YXXeAOTnsjAPXLtDLWZKJ2A6Eu7ucUdh4N/Jknk2AkCMbLep5ad piuyCdeznh6i5aCa6dA1jmdDui37glsDwtOZbt0JF8/0/8VNxcBxSE4hAGive0yE wWOPfZcaLVhZTiqaqxSI4KRaAwO5MCl36CfDN6FaX0rctpLAUEkya1fwCGCED128 xhV4tNsz7vBJJ+dpULflwr3fkZ0AVSeIU0dJS1mNgGfNX8wbXYKuuvzfpp45DIyf 1+yjR3O9+wXcKo/6iVbwt2uPZWYJAyQvnKaL42F8AShpiq2zFjdDBlhWEKV03ECm zsuWc2n1oo7J6qP77befS+RllQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ9MiCQy WNMPPDvUMq57HGD+GrJ0MB8GA1UdIwQYMBaAFGjuhfTCfUupPg1raj6SZZ4Q1ole MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi9hTzZGOU1KOVM2ay1EV3RxUHBKbG5oRFdp VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi9hTzZGOU1KOVM2 ay1EV3RxUHBKbG5oRFdpVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYHnfRbfFMa8T8MGTBcVbmQQat8TyBTLkwqrLYHvyZXcB6ZTRekk25rdJOG/J u9k4wcmCZ4JV0CcgtiLJFS6cmCnKunP0luXVQeHWzmGtnIETKI4ajk95Zv9cgglf vk2AoNMbwnrn3WTpcNR9gLkrU8F28NQmWdSDvZRDkkwOUEI/z66ich0ucEu4haq7 0wtKf+I7uEvMNdSO8lDp6XtIPrDghmwLgwFv8lQ4X29T1wJfKIu3cvXaeaaPskZc NhCPow6pHQwRQLa2UOkd1YyonwTs3u1/OE87krmjmWpSzQzUBPMuSEVIv3Rb7kMe mg98yvuFviJZrHpiycbbGUDmsw== -----END CERTIFICATE-----Generated at Fri Apr 17 00:03:29 2026 by rpki-client