$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: w7gJ/6x6SpwSGTxlme3hVaVx0lkS2vwSIUhJKyFQ0mk= Subject key identifier: 53:08:10:22:F8:A4:30:A3:97:CB:61:44:B6:05:55:FD:5A:36:57:A1 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 03E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 03DC Signing time: Fri 17 Apr 2026 00:26:07 +0000 Manifest this update: Fri 17 Apr 2026 00:26:06 +0000 Manifest next update: Fri 24 Apr 2026 00:26:06 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: 6Y0ltkO2EmioxG8lZpWS9MD2zCzFLrCkpCcmr8qBue0=) 2: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: Yt0TqJaTmIJd27cHaCbpte8qJaUobmzMaQoo+mme+Sg=) 3: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: d2IO53QQHp9HhXVDc1CoUGPFf1YUTdGHgG7B3UV4InA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 998 (0x3e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Apr 17 00:26:06 2026 GMT Not After : Apr 24 00:26:06 2026 GMT Subject: CN=69e17e1f-2cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:32:a6:83:7d:98:12:4c:fb:db:4d:cd:c5:a1: b7:4a:08:4c:1f:ed:41:48:ad:8f:00:b5:fc:31:31: 88:05:25:6a:cb:a7:d6:79:72:e9:24:5c:c2:16:c2: b3:94:05:18:7b:4e:0a:1d:b7:4e:7b:a7:f6:82:e4: 3b:96:08:16:e0:e5:39:53:f6:b1:30:0a:9f:01:c2: 3d:13:c4:2f:ca:d1:45:41:4c:ac:c7:c8:6a:b1:3b: f4:97:e7:ad:7c:f5:45:56:c8:13:af:10:89:e6:14: a9:8c:f5:0e:65:f0:5f:1a:2a:9b:36:5d:a6:dc:e8: 0d:c4:9b:35:d9:63:f9:eb:33:7f:75:f4:de:62:7b: 49:0a:5d:a8:39:c6:7e:45:43:a1:27:90:d8:5c:b3: a8:41:50:fc:38:e1:e0:30:42:b2:be:54:4b:ba:10: 54:bd:ea:3a:c8:ed:7b:ad:56:73:f9:7a:2c:59:16: 60:2e:f0:7f:1f:c3:c8:ee:92:f3:98:b0:a4:5d:08: 66:d0:92:40:b9:07:9a:f7:be:7d:b0:71:9c:70:1f: 0a:71:05:91:71:7d:2c:b4:a0:a8:b1:81:84:43:23: dc:be:d8:b9:78:dd:fa:fa:5e:12:50:67:3d:08:6b: 7a:31:89:b2:9a:e0:cc:e4:d5:16:0a:fd:2c:f3:15: 9b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:08:10:22:F8:A4:30:A3:97:CB:61:44:B6:05:55:FD:5A:36:57:A1 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:53:dc:b1:e7:08:f6:56:a1:a1:db:66:73:13:af:34:db:ae: b9:83:45:64:34:60:75:c8:1b:e0:3d:06:24:55:3a:a5:61:19: 2d:d3:4a:2a:cf:95:4c:a5:65:d4:50:fc:6f:81:d2:5d:bb:38: 99:60:a6:81:1a:05:12:2a:d3:80:f5:48:86:09:96:f9:4b:25: 97:ce:0a:73:a8:5e:51:fb:0b:18:63:62:76:e1:8e:9e:9c:a7: 94:bc:aa:09:5a:73:5a:5c:44:a7:8c:16:88:a3:cf:73:2b:01: c8:14:fd:9c:b2:d2:63:e1:46:21:b3:1c:5d:a1:96:aa:40:18: 69:3f:e2:f8:aa:ff:7b:c3:e2:1d:6d:44:da:68:8e:00:57:11: f2:3b:b1:93:32:02:ad:e9:e8:a7:81:0a:24:8b:6a:6a:db:06: 51:d1:46:75:ad:6e:72:d0:7e:d7:1f:7a:04:40:9f:46:64:46: 93:2f:8a:ad:41:72:c8:77:c4:60:bf:a6:9b:82:08:fa:05:61: 8e:7f:8e:73:14:1a:c2:18:b0:9c:55:41:16:4e:39:fc:f2:3d: 85:e7:21:48:5b:3c:1b:87:a0:61:ab:99:5a:aa:3a:51:a1:4a: a8:41:44:36:8a:5b:b1:78:51:94:70:b7:96:5f:65:2c:d6:a4: 62:6b:fd:2f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjYwNDE3MDAyNjA2WhcNMjYwNDI0MDAyNjA2WjAYMRYwFAYD VQQDEw02OWUxN2UxZi0yY2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApDKmg32YEkz7203NxaG3SghMH+1BSK2PALX8MTGIBSVqy6fWeXLpJFzCFsKz lAUYe04KHbdOe6f2guQ7lggW4OU5U/axMAqfAcI9E8QvytFFQUysx8hqsTv0l+et fPVFVsgTrxCJ5hSpjPUOZfBfGiqbNl2m3OgNxJs12WP56zN/dfTeYntJCl2oOcZ+ RUOhJ5DYXLOoQVD8OOHgMEKyvlRLuhBUveo6yO17rVZz+XosWRZgLvB/H8PI7pLz mLCkXQhm0JJAuQea9759sHGccB8KcQWRcX0stKCosYGEQyPcvti5eN36+l4SUGc9 CGt6MYmymuDM5NUWCv0s8xWbNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMIECL4 pDCjl8thRLYFVf1aNlehMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASVPcsecI9lahodtmcxOvNNuuuYNFZDRgdcgb4D0GJFU6pWEZLdNKKs+VTKVl 1FD8b4HSXbs4mWCmgRoFEirTgPVIhgmW+Usll84Kc6heUfsLGGNiduGOnpynlLyq CVpzWlxEp4wWiKPPcysByBT9nLLSY+FGIbMcXaGWqkAYaT/i+Kr/e8PiHW1E2miO AFcR8juxkzICrenop4EKJItqatsGUdFGda1uctB+1x96BECfRmRGky+KrUFyyHfE YL+mm4II+gVhjn+OcxQawhiwnFVBFk45/PI9hechSFs8G4egYauZWqo6UaFKqEFE NopbsXhRlHC3ll9lLNakYmv9Lw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:39:12 2026 by rpki-client