$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: bB7sQlq6eevQ/VFkvEwHX6wiDvElgwMEu4LRAUSTE8Y= Subject key identifier: BB:03:23:4E:74:31:4A:7F:A3:1F:51:6D:18:39:F4:7F:DC:63:25:0D Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 06C2 Signing time: Thu 16 Apr 2026 23:46:11 +0000 Manifest this update: Thu 16 Apr 2026 23:46:11 +0000 Manifest next update: Thu 23 Apr 2026 23:46:11 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: sRIcUtEZOgaHgVMjNKIyhPp4TGHrwxhLBjZTpHXp96A=) 2: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: Df3ID6kB/M7JFh6AAV2Z24ovoongS5kXo66yU3B/CNw=) 3: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: ueTxaPk78zjdZo1qLabhrCKtO42F+1HdGQgNXdtwiaQ=) 4: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1RGEPGDWabAXSvxah2bqU7tFm/fhcCPZyMNrSv04Ww4=) 5: C55784DE584111EE85E40820C4F9AE02.roa (hash: dtbPC1LWkATZlWdm2gMIZVIAO5KQs+qcNNvbOqGnkko=) 6: C5C77866584111EE85E40820C4F9AE02.roa (hash: gZq4hO6KlqIzQ0dht+JPwOzELy4HWyKu7Y+1DMZFb3o=) 7: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: K10RKm2RSVVX5jRTjbz83WeVsyTCfxe5LfA+X5JE7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Apr 16 23:46:11 2026 GMT Not After : Apr 23 23:46:11 2026 GMT Subject: CN=69e174c3-2f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4b:08:aa:f4:ff:40:3f:be:4f:50:17:a3:c4: 99:a0:12:ae:61:b4:c9:87:d2:04:f1:7d:3b:17:02: 31:69:e1:28:fb:13:38:be:57:52:9c:bf:60:71:b8: 49:13:4a:0b:a7:be:f5:66:77:b8:0f:9e:56:3e:f5: cb:68:d8:75:22:b4:98:ef:b1:d5:7b:d0:82:ec:b4: 1a:1e:b3:9d:c4:e6:aa:f9:cc:85:9d:33:76:30:a3: ff:a6:95:bb:79:e5:88:34:08:ee:be:2a:77:76:96: 5f:5e:46:5d:32:85:03:c0:64:a0:15:3e:a8:50:8d: a7:47:bb:41:f9:c2:b8:7d:cd:91:c0:98:50:41:12: b1:75:61:35:d7:3c:0b:34:7e:b3:e1:83:c1:e8:1c: 00:c7:ed:d1:ba:66:f7:39:4a:5b:0c:f5:fd:44:fd: 6b:56:e3:1c:fc:17:f2:8c:d2:73:a9:35:6b:6a:12: 2d:d9:5a:e7:32:28:94:2f:bf:6f:1c:a2:a8:71:c2: 72:09:50:50:78:be:f3:0b:5a:63:07:64:5e:b0:cc: 24:fb:bb:00:07:7c:c9:bf:f2:19:f8:da:5d:13:89: 35:32:b9:4a:63:3c:02:5f:b7:42:b1:c4:78:4b:48: 82:a5:4f:3d:c8:7f:f6:b6:60:36:60:96:eb:f3:b9: 26:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:03:23:4E:74:31:4A:7F:A3:1F:51:6D:18:39:F4:7F:DC:63:25:0D X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:4a:3c:56:59:f6:33:ca:d8:37:24:75:17:91:e9:3e:50:2b: 1c:04:0a:20:24:ab:53:db:d8:20:9c:76:da:a3:60:bd:57:9a: 00:ca:66:c3:f9:d8:f9:59:62:c2:72:24:57:92:b4:ac:a4:6c: 3a:6d:56:34:22:c8:50:9b:ea:9e:41:2b:12:5d:d9:0b:ce:77: a1:50:b4:0b:7c:5e:34:a6:fb:75:c8:7b:dc:81:49:b0:a4:84: 0c:44:69:e1:0b:27:cd:2c:f6:a2:a4:33:49:0b:7d:d2:57:3f: 6e:0e:4a:ca:95:c2:62:d3:30:e9:dc:a6:64:ed:b2:d2:35:fb: 63:16:45:05:b2:28:e6:a5:cd:b5:88:aa:96:95:0d:45:c7:73: 32:4e:49:22:ce:87:45:69:40:f1:99:65:3c:da:be:a4:8a:ec: f9:1c:9f:05:e3:d9:2c:77:08:b3:e1:71:ca:dc:61:71:18:a0: 36:ae:5c:b0:c2:2b:c9:34:59:67:ca:a3:8b:6a:e4:21:f5:ff: ba:29:5e:47:5f:f8:41:2e:69:a9:8d:56:0b:36:c6:9e:af:68: 61:63:a0:00:45:e8:b4:88:18:e7:d6:62:ac:d9:67:4a:f7:b5: ec:49:de:68:17:ae:ee:71:0c:14:16:9f:f8:3b:4c:5d:07:cb: b3:5c:74:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjYwNDE2MjM0NjExWhcNMjYwNDIzMjM0NjExWjAYMRYwFAYD VQQDEw02OWUxNzRjMy0yZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvksIqvT/QD++T1AXo8SZoBKuYbTJh9IE8X07FwIxaeEo+xM4vldSnL9gcbhJ E0oLp771Zne4D55WPvXLaNh1IrSY77HVe9CC7LQaHrOdxOaq+cyFnTN2MKP/ppW7 eeWINAjuvip3dpZfXkZdMoUDwGSgFT6oUI2nR7tB+cK4fc2RwJhQQRKxdWE11zwL NH6z4YPB6BwAx+3Rumb3OUpbDPX9RP1rVuMc/BfyjNJzqTVrahIt2VrnMiiUL79v HKKoccJyCVBQeL7zC1pjB2ResMwk+7sAB3zJv/IZ+NpdE4k1MrlKYzwCX7dCscR4 S0iCpU89yH/2tmA2YJbr87kmQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLsDI050 MUp/ox9RbRg59H/cYyUNMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr0o8Vln2M8rYNyR1F5HpPlArHAQKICSrU9vYIJx22qNgvVeaAMpmw/nY+Vli wnIkV5K0rKRsOm1WNCLIUJvqnkErEl3ZC853oVC0C3xeNKb7dch73IFJsKSEDERp 4QsnzSz2oqQzSQt90lc/bg5KypXCYtMw6dymZO2y0jX7YxZFBbIo5qXNtYiqlpUN RcdzMk5JIs6HRWlA8ZllPNq+pIrs+RyfBePZLHcIs+FxytxhcRigNq5csMIryTRZ Z8qji2rkIfX/uileR1/4QS5pqY1WCzbGnq9oYWOgAEXotIgY59ZirNlnSve17Ene aBeu7nEMFBaf+DtMXQfLs1x07A== -----END CERTIFICATE-----Generated at Fri Apr 17 08:11:53 2026 by rpki-client