$ rpki-client -vvf rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft File: 5iFGnNWlePlHq0frDs6Ik5uH6_s.mft (raw, json) Hash identifier: CjJQAntfFb82/O0IIqKk1NqadeVfulfWDZh1q90rpNE= Subject key identifier: 12:6D:37:6A:BE:BF:CA:82:3A:A0:9A:9B:B3:C4:F6:C2:30:C3:F6:7E Authority key identifier: E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB Certificate issuer: /CN=A9170982/serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Certificate serial: 045F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft Manifest number: 0433 Signing time: Fri 17 Apr 2026 00:17:35 +0000 Manifest this update: Fri 17 Apr 2026 00:17:35 +0000 Manifest next update: Fri 24 Apr 2026 00:17:35 +0000 Files and hashes: 1: 5iFGnNWlePlHq0frDs6Ik5uH6_s.crl (hash: If1xNTuyQNJdcBnukpQDYY5uk7B1HZRy4hpWp2S9pO8=) 2: C8165660822F11EEABA7D533C4F9AE02.roa (hash: h/A2ekMJ720Ho+otYfeYLNAk/zsB1s3sx7Qk4yapaYo=) 3: 2B2CF35A35A411ED89F95974C4F9AE02.roa (hash: 8jF/NpHwWErBgGhdC58vIaXRoe97OZ3zIJ5DPfjZVz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1119 (0x45f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170982, serialNumber=E621469CD5A578F947AB47EB0ECE88939B87EBFB Validity Not Before: Apr 17 00:17:35 2026 GMT Not After : Apr 24 00:17:35 2026 GMT Subject: CN=69e17c1f-c569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:c7:9d:41:af:9a:0d:cd:7e:59:d4:3d:2c: 85:df:ca:18:0b:34:9d:5b:98:d0:cc:44:c2:60:41: 26:6f:5d:a4:61:f1:51:b6:e4:3a:cd:5f:45:53:77: c5:51:a2:3b:ac:c1:59:6a:6f:1c:69:41:0f:ab:25: 9f:2a:35:bc:a1:5c:3a:94:03:db:27:b9:1d:01:40: fb:29:4b:cf:76:aa:ee:f4:75:a9:b5:5f:ea:84:02: 14:a3:be:32:09:01:96:e7:1d:0d:24:32:96:ab:ca: 4b:0f:d9:7e:09:a4:bb:61:6a:01:09:7a:bc:ef:f9: 49:f1:c8:cb:48:3d:ee:ec:97:b1:d8:b2:c4:cd:ab: 83:64:da:88:12:02:b2:ed:8a:d7:8c:b5:ba:c6:43: 4d:24:7d:8b:a5:db:9b:dd:c1:84:94:d1:1b:08:6c: 61:32:b5:6d:8a:8f:e3:5b:82:6d:35:25:45:dd:a5: 24:c8:20:86:d2:02:96:ad:85:fa:f5:7e:2b:32:52: 09:9b:05:15:00:68:9f:c4:ea:af:54:40:25:af:8a: 20:fa:d4:69:f5:0a:1d:66:fb:b0:27:48:be:13:8d: fe:d5:73:6c:3a:50:f8:0e:cc:b4:d4:13:d7:8d:75: a8:d3:0a:6a:db:73:c3:48:3b:e4:ec:2a:1c:d5:50: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6D:37:6A:BE:BF:CA:82:3A:A0:9A:9B:B3:C4:F6:C2:30:C3:F6:7E X509v3 Authority Key Identifier: keyid:E6:21:46:9C:D5:A5:78:F9:47:AB:47:EB:0E:CE:88:93:9B:87:EB:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5iFGnNWlePlHq0frDs6Ik5uH6_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170982/D8B68696AC1311ECB776B209C4F9AE02/5iFGnNWlePlHq0frDs6Ik5uH6_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:c5:c6:e3:58:3e:ec:86:2e:91:5f:6a:94:d4:2b:08:26:0e: ff:92:20:1c:51:b9:48:c0:88:89:9c:91:b1:0a:15:f6:8e:64: f0:a3:69:fb:2b:ae:e0:53:32:64:21:8f:51:61:8a:fb:44:3e: 1a:ad:bc:64:a1:92:dc:53:fe:02:43:3c:62:fa:8c:44:ac:0b: 2a:04:47:6e:d9:08:84:e5:b2:23:8c:43:ad:95:d4:0e:b9:2a: 99:20:a1:ce:e5:2f:8d:fe:f3:ad:e0:fb:a1:45:25:0f:2e:fa: 32:a8:00:a1:7c:f7:0d:1a:3b:5d:4d:b1:72:a0:27:b5:77:c7: 9f:e1:25:99:58:62:78:65:01:77:eb:0a:35:5a:36:53:2c:97: 3c:35:d2:c4:f5:64:cf:2f:07:64:ae:82:53:ab:a3:06:47:22: 47:c4:87:9e:7d:c3:f9:36:48:86:3c:6a:ce:79:48:55:84:7d: 23:ac:6e:20:5f:9c:76:f8:60:25:b1:bc:12:fd:3f:23:f3:30: 0d:b1:dd:1f:b9:63:3c:2b:72:5d:63:76:46:b8:dd:59:23:c6: 80:fa:d9:c7:5d:b8:50:79:0e:77:92:57:12:ef:5f:82:b1:6c: 42:9a:c5:b1:e3:f0:b2:fa:6e:9a:21:ba:64:ee:d0:90:5e:75: 54:22:62:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5ODIxMTAvBgNVBAUTKEU2MjE0NjlDRDVBNTc4Rjk0N0FCNDdFQjBFQ0U4ODkz OUI4N0VCRkIwHhcNMjYwNDE3MDAxNzM1WhcNMjYwNDI0MDAxNzM1WjAYMRYwFAYD VQQDEw02OWUxN2MxZi1jNTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2nrHnUGvmg3NflnUPSyF38oYCzSdW5jQzETCYEEmb12kYfFRtuQ6zV9FU3fF UaI7rMFZam8caUEPqyWfKjW8oVw6lAPbJ7kdAUD7KUvPdqru9HWptV/qhAIUo74y CQGW5x0NJDKWq8pLD9l+CaS7YWoBCXq87/lJ8cjLSD3u7Jex2LLEzauDZNqIEgKy 7YrXjLW6xkNNJH2Lpdub3cGElNEbCGxhMrVtio/jW4JtNSVF3aUkyCCG0gKWrYX6 9X4rMlIJmwUVAGifxOqvVEAlr4og+tRp9QodZvuwJ0i+E43+1XNsOlD4Dsy01BPX jXWo0wpq23PDSDvk7Coc1VBeHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBJtN2q+ v8qCOqCam7PE9sIww/Z+MB8GA1UdIwQYMBaAFOYhRpzVpXj5R6tH6w7OiJObh+v7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDk4Mi9EOEI2ODY5NkFD MTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQbEhxMGZyRHM2SWs1dUg2 X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVpRkduTldsZVBsSHEwZnJEczZJazV1SDZfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDk4Mi9EOEI2ODY5NkFDMTMxMUVDQjc3NkIyMDlDNEY5QUUwMi81aUZHbk5XbGVQ bEhxMGZyRHM2SWs1dUg2X3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAcXG41g+7IYukV9qlNQrCCYO/5IgHFG5SMCIiZyRsQoV9o5k8KNp+yuu4FMy ZCGPUWGK+0Q+Gq28ZKGS3FP+AkM8YvqMRKwLKgRHbtkIhOWyI4xDrZXUDrkqmSCh zuUvjf7zreD7oUUlDy76MqgAoXz3DRo7XU2xcqAntXfHn+ElmVhieGUBd+sKNVo2 UyyXPDXSxPVkzy8HZK6CU6ujBkciR8SHnn3D+TZIhjxqznlIVYR9I6xuIF+cdvhg JbG8Ev0/I/MwDbHdH7ljPCtyXWN2RrjdWSPGgPrZx124UHkOd5JXEu9fgrFsQprF sePwsvpumiG6ZO7QkF51VCJiDQ== -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:17 2026 by rpki-client