$ rpki-client -vvf rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft File: nQdEbvmfPFfCnFgta3rKRzX05HA.mft (raw, json) Hash identifier: mwIKxlWlbXQTlf2fgSJCEdY3lqQkrmZdJHzDCAvZ9i4= Subject key identifier: F1:DF:A4:FF:6F:BE:56:D1:DA:32:E7:E6:AD:D0:BE:73:27:0E:7B:04 Authority key identifier: 9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 Certificate issuer: /CN=A917190F/serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Certificate serial: 08E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft Manifest number: 08A8 Signing time: Thu 16 Apr 2026 20:38:02 +0000 Manifest this update: Thu 16 Apr 2026 20:38:02 +0000 Manifest next update: Thu 23 Apr 2026 20:38:02 +0000 Files and hashes: 1: nQdEbvmfPFfCnFgta3rKRzX05HA.crl (hash: ycOZGJMMdpud8UnDQlEw6ex8RgiceSZd5Yrx2YTL/uM=) 2: F9EA1194F66911F08646E7846F6F56BC.roa (hash: XiFg8CRVXZ7Hfw1WZ0eB03m9lp00Ie9mxyzeg5VPA8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2276 (0x8e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917190F, serialNumber=9D07446EF99F3C57C29C582D6B7ACA4735F4E470 Validity Not Before: Apr 16 20:38:02 2026 GMT Not After : Apr 23 20:38:02 2026 GMT Subject: CN=69e148aa-bbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c8:2b:1d:36:b9:8f:c6:eb:f0:be:ac:6d:77: e2:86:c6:d8:4b:04:a6:ff:8c:a4:59:7f:00:04:90: 54:98:f0:7e:cb:9a:41:65:00:c7:d4:41:58:b3:46: 6d:6e:76:72:81:08:7b:e4:64:b3:6c:f7:78:cf:9c: 8b:97:c4:9c:f4:08:59:af:9e:ef:f8:1e:19:7d:3f: c4:22:7a:fe:a8:ce:d4:e2:e6:b9:71:be:f1:87:cc: 41:df:ce:c9:12:ed:ab:68:36:97:14:76:1e:5b:d1: 79:b2:71:30:78:8d:d4:02:67:bd:a8:1a:64:b2:46: ed:11:55:da:1f:0e:2b:51:97:53:3e:03:46:63:97: 85:6b:d2:ce:c0:84:fc:12:1b:5f:a3:79:99:0e:46: 79:8e:ab:02:f0:41:f3:13:5d:44:25:62:ef:e4:eb: e4:e3:90:16:0d:ed:68:49:d8:39:64:a2:ae:1c:fa: 94:30:f7:27:82:63:c5:0e:ae:0e:4a:6a:d8:1b:2e: f2:d2:fe:63:b8:e7:fe:f9:34:3c:d8:b5:fc:a0:97: 30:cd:c5:b7:e0:b9:db:a3:28:ff:74:2d:74:1e:6d: 22:54:b1:83:53:ea:b9:c7:9e:bf:28:76:86:7e:0c: 7d:39:4e:f2:52:a9:1b:b0:18:cd:f5:3f:e2:96:83: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DF:A4:FF:6F:BE:56:D1:DA:32:E7:E6:AD:D0:BE:73:27:0E:7B:04 X509v3 Authority Key Identifier: keyid:9D:07:44:6E:F9:9F:3C:57:C2:9C:58:2D:6B:7A:CA:47:35:F4:E4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nQdEbvmfPFfCnFgta3rKRzX05HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917190F/B3CA76C0FA3111EABD249E7AC4F9AE02/nQdEbvmfPFfCnFgta3rKRzX05HA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:6d:03:4b:bc:e7:99:d7:9c:c2:a8:ca:95:5e:0b:5b:fd:de: bb:7d:38:33:65:79:86:89:a0:66:a8:a4:e2:61:d3:32:9b:cb: 51:1a:80:b7:c6:05:9b:c8:c1:b7:2e:94:6e:ba:d1:5f:6f:89: 55:1d:11:88:e9:83:d4:97:ea:e8:58:0a:c0:e1:db:22:4e:c1: 5c:18:12:07:cf:4b:f1:f0:50:56:34:b4:ea:23:b3:28:7c:69: 9f:12:ea:9f:49:b3:5e:39:69:2c:a5:f6:6b:1c:44:f2:a6:e6: 31:6f:2a:08:fd:ef:16:41:13:bd:fd:93:c3:74:85:9f:d2:18: 46:e3:45:36:5a:1d:10:3c:12:62:38:ac:97:3e:8d:a6:84:74: 1c:6a:4d:79:8e:0c:ab:d9:7e:56:01:7a:21:93:4f:77:c7:ac: 64:db:c5:ff:1f:68:f5:70:86:8c:8b:3e:25:1a:e5:35:bb:ca: b8:81:a8:4b:ab:4d:00:0f:ef:87:43:eb:01:61:cf:39:4b:47: 22:ba:ba:9f:60:cb:01:16:68:cb:8a:17:52:26:b3:7a:90:f6: c9:a6:3d:52:35:dd:f0:cf:c9:7e:28:09:58:8c:48:a5:52:51: 9c:c2:5f:f8:62:6b:52:9f:fd:81:87:26:00:4b:fd:59:1c:54: 8b:d0:05:6c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5MEYxMTAvBgNVBAUTKDlEMDc0NDZFRjk5RjNDNTdDMjlDNTgyRDZCN0FDQTQ3 MzVGNEU0NzAwHhcNMjYwNDE2MjAzODAyWhcNMjYwNDIzMjAzODAyWjAYMRYwFAYD VQQDEw02OWUxNDhhYS1iYmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAncgrHTa5j8br8L6sbXfihsbYSwSm/4ykWX8ABJBUmPB+y5pBZQDH1EFYs0Zt bnZygQh75GSzbPd4z5yLl8Sc9AhZr57v+B4ZfT/EInr+qM7U4ua5cb7xh8xB387J Eu2raDaXFHYeW9F5snEweI3UAme9qBpkskbtEVXaHw4rUZdTPgNGY5eFa9LOwIT8 Ehtfo3mZDkZ5jqsC8EHzE11EJWLv5Ovk45AWDe1oSdg5ZKKuHPqUMPcngmPFDq4O SmrYGy7y0v5juOf++TQ82LX8oJcwzcW34Lnboyj/dC10Hm0iVLGDU+q5x56/KHaG fgx9OU7yUqkbsBjN9T/iloNO9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPHfpP9v vlbR2jLn5q3QvnMnDnsEMB8GA1UdIwQYMBaAFJ0HRG75nzxXwpxYLWt6ykc19ORw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTkwRi9CM0NBNzZDMEZB MzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBGZkNuRmd0YTNyS1J6WDA1 SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25RZEVidm1mUEZmQ25GZ3RhM3JLUnpYMDVIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTkwRi9CM0NBNzZDMEZBMzExMUVBQkQyNDlFN0FDNEY5QUUwMi9uUWRFYnZtZlBG ZkNuRmd0YTNyS1J6WDA1SEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOm0DS7znmdecwqjKlV4LW/3eu304M2V5homgZqik4mHTMpvLURqAt8YFm8jB ty6UbrrRX2+JVR0RiOmD1Jfq6FgKwOHbIk7BXBgSB89L8fBQVjS06iOzKHxpnxLq n0mzXjlpLKX2axxE8qbmMW8qCP3vFkETvf2Tw3SFn9IYRuNFNlodEDwSYjislz6N poR0HGpNeY4Mq9l+VgF6IZNPd8esZNvF/x9o9XCGjIs+JRrlNbvKuIGoS6tNAA/v h0PrAWHPOUtHIrq6n2DLARZoy4oXUiazepD2yaY9UjXd8M/JfigJWIxIpVJRnMJf +GJrUp/9gYcmAEv9WRxUi9AFbA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:07:10 2026 by rpki-client