$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft File: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft (raw, json) Hash identifier: 70tik/YTfci67uK96TtosvzRScg+z3FoHMTkLmbi5T4= Subject key identifier: 1E:85:17:64:B0:81:4A:32:BC:24:06:1E:77:01:B7:99:08:6C:CB:C1 Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 Certificate issuer: /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Certificate serial: 1A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft Manifest number: 174C Signing time: Thu 16 Apr 2026 22:17:23 +0000 Manifest this update: Thu 16 Apr 2026 22:17:23 +0000 Manifest next update: Thu 23 Apr 2026 22:17:22 +0000 Files and hashes: 1: BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl (hash: yPDFWZANmITO9zq3XcLaOJhoDbY7NSKLZb0qzgSbtpM=) 2: 32BF2AD8F36E11E883FFB865C4F9AE02.roa (hash: JRMt5syEhbsraqmogl+r4Cn6WjqteDPA68BCYDsj7VY=) 3: D26DDCB6F36C11E88E372D61C4F9AE02.roa (hash: udH7VqFuj24SImPiW/5wQH4EZuTGeAeHle7Uqa/NLtg=) 4: 289E0AA2119711F1BED17E8E383D8C67.roa (hash: pABbGjHtaKP6tZTG3QcQAr/YxTfLfMM0bBkFMuoVnf0=) 5: 164F6E2079BF11EAB3ADD60FC4F9AE02.roa (hash: Ww0TTboh4t7XJh5yPzaTmih1SxJhA11Efd1I0MEuPiw=) 6: 876FDB56D90211EFB7CAB32BC4F9AE02.roa (hash: Ydk85l5U8M8zCXtcxK7anuVLP+fOcQzU+o3pzQwZyuE=) 7: E3F7B966E5A811ECBE11DA6DC4F9AE02.roa (hash: sogBCjppD56h+GcWQ3rByWlelY4eKvIMYEluAiQ+/rw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6697 (0x1a29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444 Validity Not Before: Apr 16 22:17:23 2026 GMT Not After : Apr 23 22:17:22 2026 GMT Subject: CN=69e15ff3-8034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:1a:5f:96:6f:66:7b:6e:d4:24:53:3c:27: 10:2f:a2:9f:cc:da:df:e4:4c:05:a3:4d:c0:13:e3: 23:bd:74:eb:cf:fc:06:1c:cf:e7:b8:3d:f9:82:f5: 66:17:1d:63:97:1d:fd:6f:b8:ba:fa:ed:dd:67:70: 27:d7:74:48:c4:21:ba:6a:02:f2:82:94:61:25:19: 45:bf:67:1e:32:9c:66:86:0a:4a:8c:16:d3:d3:79: 14:db:8b:5c:f1:84:2d:b4:01:2f:3a:c9:28:b9:c3: 5a:7b:89:ec:d5:a7:5a:93:ea:31:6b:ac:04:0c:f3: 4c:e7:9c:8a:63:cc:8b:f9:5c:c4:8a:65:ea:c0:87: b5:2c:b0:63:28:b8:d0:03:82:bd:9a:b8:19:e8:00: 4b:f0:a5:14:5a:36:19:94:7b:e3:0f:b8:a8:a9:c0: 22:45:d2:3e:53:9c:19:7d:ae:35:f1:db:63:4c:8c: bc:fe:45:ba:96:f9:26:1f:30:fc:2e:c5:73:ca:a6: 82:75:ab:3a:67:d5:fd:46:99:82:4e:74:cc:84:ed: f7:ca:50:9c:ad:c1:7e:e2:28:32:89:c7:19:61:b0: 57:d0:c4:4c:98:21:3f:6a:45:b0:db:56:33:5f:66: e2:86:c4:cf:f5:94:b6:7e:7c:ae:20:16:86:43:9d: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:85:17:64:B0:81:4A:32:BC:24:06:1E:77:01:B7:99:08:6C:CB:C1 X509v3 Authority Key Identifier: keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:c5:bd:53:90:04:86:77:1a:dd:89:1e:c4:55:e0:03:f6:91: 33:8b:4f:1e:4c:26:cc:ed:6a:eb:b3:1b:94:ef:f2:46:9b:ec: 27:c1:cd:31:2f:f5:74:d0:b5:d5:d1:41:f1:e2:e9:c5:b7:6e: 57:72:26:03:65:86:6e:7f:da:8d:8c:05:b1:0d:b8:a4:66:ce: 8c:35:9e:a2:f1:89:1e:40:75:6e:73:86:49:f8:09:0d:f9:c7: 8b:f7:a8:14:ee:d0:a1:3e:93:78:4b:5b:71:ba:65:20:1f:7e: 2f:d9:b5:b2:5a:be:ed:63:81:d3:73:70:71:d4:d1:34:c2:e4: 54:13:bb:ff:c1:d1:a2:f5:26:14:38:fa:5f:6e:ff:65:0b:78: c4:98:28:a1:bc:7a:10:13:9b:5f:2f:93:ea:a7:34:b4:20:b4: d5:b5:49:67:16:74:ee:e9:48:6e:54:6c:74:ba:3d:8b:2c:96: 26:69:19:e6:ef:e5:e6:1b:5f:c4:c2:36:30:df:d8:5d:d3:a6: 01:c1:9c:11:96:58:27:ee:68:7d:82:d3:a4:49:5a:d5:90:a5: 90:df:45:16:e0:cf:12:d1:bf:80:dc:b2:84:42:c3:07:8f:e5: b4:a9:20:42:f8:31:f9:20:f4:d2:ee:3a:63:15:11:45:bb:27: ca:f2:26:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJEQTQxMTAvBgNVBAUTKDA0RTZDOTI0OUVFMzQ4RENGNzY0REYwQjlBNDBEM0U4 NTQwNjY0NDQwHhcNMjYwNDE2MjIxNzIzWhcNMjYwNDIzMjIxNzIyWjAYMRYwFAYD VQQDEw02OWUxNWZmMy04MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFkaX5ZvZntu1CRTPCcQL6KfzNrf5EwFo03AE+MjvXTrz/wGHM/nuD35gvVm Fx1jlx39b7i6+u3dZ3An13RIxCG6agLygpRhJRlFv2ceMpxmhgpKjBbT03kU24tc 8YQttAEvOskoucNae4ns1adak+oxa6wEDPNM55yKY8yL+VzEimXqwIe1LLBjKLjQ A4K9mrgZ6ABL8KUUWjYZlHvjD7ioqcAiRdI+U5wZfa418dtjTIy8/kW6lvkmHzD8 LsVzyqaCdas6Z9X9RpmCTnTMhO33ylCcrcF+4igyiccZYbBX0MRMmCE/akWw21Yz X2bihsTP9ZS2fnyuIBaGQ50o0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB6FF2Sw gUoyvCQGHncBt5kIbMvBMB8GA1UdIwQYMBaAFATmySSe40jc92TfC5pA0+hUBmRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkRBNC8xRUM3MDJCQ0Yx QTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNOejNaTjhMbWtEVDZGUUda RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JPYkpKSjdqU056M1pOOExta0RUNkZRR1pFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkRBNC8xRUM3MDJCQ0YxQTcxMUU4OTBGMDY2NTBDNEY5QUUwMi9CT2JKSko3alNO ejNaTjhMbWtEVDZGUUdaRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMMW9U5AEhnca3YkexFXgA/aRM4tPHkwmzO1q67MblO/yRpvsJ8HNMS/1dNC1 1dFB8eLpxbduV3ImA2WGbn/ajYwFsQ24pGbOjDWeovGJHkB1bnOGSfgJDfnHi/eo FO7QoT6TeEtbcbplIB9+L9m1slq+7WOB03NwcdTRNMLkVBO7/8HRovUmFDj6X27/ ZQt4xJgoobx6EBObXy+T6qc0tCC01bVJZxZ07ulIblRsdLo9iyyWJmkZ5u/l5htf xMI2MN/YXdOmAcGcEZZYJ+5ofYLTpEla1ZClkN9FFuDPEtG/gNyyhELDB4/ltKkg Qvgx+SD00u46YxURRbsnyvImHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:19:09 2026 by rpki-client