$ rpki-client -vvf rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft File: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft (raw, json) Hash identifier: yDOgcre4X860pqTCtlkhP/dl4ZoMADkdOoV4R//L6Hc= Subject key identifier: 5C:6D:5C:01:38:F1:9A:5F:B8:D1:5D:C4:FA:2C:D7:36:BE:2B:82:E1 Authority key identifier: E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 Certificate issuer: /CN=A9170DD8/serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft Manifest number: 0139 Signing time: Fri 17 Apr 2026 05:11:06 +0000 Manifest this update: Fri 17 Apr 2026 05:11:06 +0000 Manifest next update: Fri 24 Apr 2026 05:11:06 +0000 Files and hashes: 1: 5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl (hash: WsRdgoMfgeiwSTlJ3Lz3xEMKZd+IEYJKhZmiewNnxzk=) 2: 4D06CD2C667411EF8E723587C4F9AE02.roa (hash: zXaiTn1OPuqTOi1DnfJ2nxhGdbrJsBTMVyTGh2dj7aY=) 3: 4CA4BE8E667411EF8E723587C4F9AE02.roa (hash: Je69DOenUud2l/CtIOyINuqm56Y7r+pSuPgQPd3u0+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170DD8, serialNumber=E6B54D027CE3498BF35E4D065BC478A936C16169 Validity Not Before: Apr 17 05:11:06 2026 GMT Not After : Apr 24 05:11:06 2026 GMT Subject: CN=69e1c0ea-c98a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:14:8d:a3:6e:46:a1:b4:b4:09:d4:5b:83:28: 8c:c8:17:0a:80:df:0e:b2:68:72:53:b4:ef:b3:f9: 5d:b4:dc:48:18:d4:2f:24:4d:c6:fd:cd:8f:03:36: 77:63:4d:90:50:21:5d:9f:95:7f:e1:c3:77:1b:08: 13:b0:eb:71:85:18:9c:b5:cb:5c:52:38:b7:8b:ac: 88:f5:35:76:60:6e:c0:e1:c8:ef:cb:6b:ba:17:1d: ef:73:47:80:b3:38:8b:8d:ef:40:db:86:2d:de:a7: 9f:03:e4:11:b7:d5:a8:02:7b:ae:1d:9d:f1:ea:9c: 3c:60:9a:98:69:01:24:f3:cf:ac:36:e8:4a:ca:8a: 37:8e:43:dd:f7:3d:ff:d7:ca:b0:43:54:1a:07:36: 30:39:62:ca:df:8f:da:96:bc:04:19:3d:83:5c:da: cd:8e:df:72:c6:ca:56:a1:d2:34:7d:5b:43:73:6c: a9:f6:48:0f:af:02:c4:a7:5b:7d:db:93:65:61:21: fe:a0:17:8b:6f:1b:88:d3:3c:e5:d6:7f:d2:0e:fc: 81:30:21:43:f8:c9:a1:2c:1f:4a:65:a0:d3:7f:03: ec:94:7e:83:db:c9:e2:bd:4a:03:11:01:4e:a4:49: 14:79:bf:63:03:67:13:cb:ad:c8:2b:2f:3c:4f:9c: ed:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:6D:5C:01:38:F1:9A:5F:B8:D1:5D:C4:FA:2C:D7:36:BE:2B:82:E1 X509v3 Authority Key Identifier: keyid:E6:B5:4D:02:7C:E3:49:8B:F3:5E:4D:06:5B:C4:78:A9:36:C1:61:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5rVNAnzjSYvzXk0GW8R4qTbBYWk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170DD8/A66A75EE65BB11EFAFA32F82C4F9AE02/5rVNAnzjSYvzXk0GW8R4qTbBYWk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:11:d5:b4:1f:89:db:cd:4c:b0:2f:33:4b:83:54:7e:c5:52: 8b:77:0c:0c:ad:c0:e1:b2:5c:ba:ac:65:89:aa:46:a2:bf:3f: 43:7b:eb:f1:dd:10:7d:30:02:f7:1e:70:94:83:01:54:8e:ad: f5:d4:c1:78:7e:45:95:5e:f0:f8:3f:a7:d9:a2:40:bf:c0:2e: 5d:b2:0b:44:f8:ee:fa:e3:70:10:62:1e:ce:61:33:04:52:ef: 88:2e:88:7f:a6:83:84:aa:23:35:2f:9c:98:fc:ca:1e:8c:96: 6f:71:4d:88:a4:0b:e3:e0:cf:37:48:bb:04:aa:e7:bd:c8:1b: 2a:03:47:f0:1e:b3:4f:0d:43:18:96:db:1e:b0:72:66:d2:cf: a2:a1:78:b2:31:e5:fc:19:e3:91:7e:4b:dc:6e:42:f8:ec:b6: 13:44:f2:00:a3:89:cc:6a:af:a5:21:cb:e8:19:60:0e:44:f7: 8d:f3:9e:8a:f1:6e:a8:fa:ff:44:cf:93:cb:fd:88:39:eb:7d: 5f:31:0a:be:c1:52:e2:18:64:87:88:0a:1e:c8:5c:c0:a9:89: e8:3b:4a:78:ce:8a:0a:57:c5:c6:c5:0d:6b:a3:64:ed:9a:c2: e0:1a:26:dc:c5:b1:7a:eb:7d:0f:8f:90:a4:05:bf:9c:e9:c3: 1a:af:a9:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBERDgxMTAvBgNVBAUTKEU2QjU0RDAyN0NFMzQ5OEJGMzVFNEQwNjVCQzQ3OEE5 MzZDMTYxNjkwHhcNMjYwNDE3MDUxMTA2WhcNMjYwNDI0MDUxMTA2WjAYMRYwFAYD VQQDEw02OWUxYzBlYS1jOThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRSNo25GobS0CdRbgyiMyBcKgN8OsmhyU7Tvs/ldtNxIGNQvJE3G/c2PAzZ3 Y02QUCFdn5V/4cN3GwgTsOtxhRictctcUji3i6yI9TV2YG7A4cjvy2u6Fx3vc0eA sziLje9A24Yt3qefA+QRt9WoAnuuHZ3x6pw8YJqYaQEk88+sNuhKyoo3jkPd9z3/ 18qwQ1QaBzYwOWLK34/alrwEGT2DXNrNjt9yxspWodI0fVtDc2yp9kgPrwLEp1t9 25NlYSH+oBeLbxuI0zzl1n/SDvyBMCFD+MmhLB9KZaDTfwPslH6D28nivUoDEQFO pEkUeb9jA2cTy63IKy88T5ztuQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFxtXAE4 8ZpfuNFdxPos1za+K4LhMB8GA1UdIwQYMBaAFOa1TQJ840mL815NBlvEeKk2wWFp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEREOC9BNjZBNzVFRTY1 QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZdnpYazBHVzhSNHFUYkJZ V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVyVk5BbnpqU1l2elhrMEdXOFI0cVRiQllXay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEREOC9BNjZBNzVFRTY1QkIxMUVGQUZBMzJGODJDNEY5QUUwMi81clZOQW56alNZ dnpYazBHVzhSNHFUYkJZV2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdxHVtB+J281MsC8zS4NUfsVSi3cMDK3A4bJcuqxliapGor8/Q3vr8d0QfTAC 9x5wlIMBVI6t9dTBeH5FlV7w+D+n2aJAv8AuXbILRPju+uNwEGIezmEzBFLviC6I f6aDhKojNS+cmPzKHoyWb3FNiKQL4+DPN0i7BKrnvcgbKgNH8B6zTw1DGJbbHrBy ZtLPoqF4sjHl/BnjkX5L3G5C+Oy2E0TyAKOJzGqvpSHL6BlgDkT3jfOeivFuqPr/ RM+Ty/2IOet9XzEKvsFS4hhkh4gKHshcwKmJ6DtKeM6KClfFxsUNa6Nk7ZrC4Bom 3MWxeut9D4+QpAW/nOnDGq+pSQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:45:14 2026 by rpki-client