$ rpki-client -vvf rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft File: kY5yieKMGkkiojy1Zb2CG34gphE.mft (raw, json) Hash identifier: Fe+RjyjKAjr2KC1gt1NKGeetG6HwI3dTC+OfcZ4EdQ8= Subject key identifier: A6:3B:62:12:45:CF:63:D1:28:77:BE:B1:D3:17:47:20:54:FB:AF:54 Authority key identifier: 91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 Certificate issuer: /CN=A9171B1A/serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Certificate serial: 0D52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft Manifest number: 0D40 Signing time: Thu 16 Apr 2026 17:55:45 +0000 Manifest this update: Thu 16 Apr 2026 17:55:44 +0000 Manifest next update: Thu 23 Apr 2026 17:55:44 +0000 Files and hashes: 1: kY5yieKMGkkiojy1Zb2CG34gphE.crl (hash: W4Isu46VPylKaq5xHzd26AKc/D4u2FwjzzUrnHLesQ0=) 2: 6E3B1338F41211E9AAF5924EC4F9AE02.roa (hash: X8sSkThLSb4fvyIS1pC23KDUjsj3Bu29OZPUHsBaV1A=) 3: 6D9433B0F41211E9AAF5924EC4F9AE02.roa (hash: Aw64/YmY/GSEcpV9lRNLIVB3nggqqcAVaMWqQLrAoig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3410 (0xd52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171B1A, serialNumber=918E7289E28C1A4922A23CB565BD821B7E20A611 Validity Not Before: Apr 16 17:55:44 2026 GMT Not After : Apr 23 17:55:44 2026 GMT Subject: CN=69e122a1-86ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:66:22:cb:f6:55:14:79:58:01:3c:b7:24: 33:fa:a6:8a:84:dc:25:76:76:d6:d5:08:fe:0f:df: 20:e0:aa:00:66:1d:06:59:ea:bf:40:b9:56:17:a9: 03:3c:a3:76:31:de:29:9b:e4:cf:62:40:b3:7b:21: f6:97:24:bf:7a:78:79:fc:15:67:78:76:d7:1e:e0: b3:78:16:0b:60:85:6d:80:43:e1:d6:81:c1:a1:04: c3:5e:37:93:40:fc:ee:23:47:93:d8:8c:6a:b9:83: 97:ba:ad:f4:3b:b5:a2:7a:d1:4e:62:25:04:7c:a9: 4f:28:e3:26:d0:6d:09:07:a8:dd:4e:eb:0a:66:3b: bf:99:46:10:bf:9d:4a:95:03:a1:f4:73:35:00:7e: a6:3e:f4:05:4d:83:9f:62:a9:cb:c4:8a:b7:10:9b: b4:44:5d:78:b9:a9:79:b0:76:e7:08:ae:aa:0e:b3: 06:cb:75:70:eb:cd:32:4f:00:22:65:b5:d1:6f:23: ce:4a:a8:85:d8:11:69:dc:2b:0a:1a:3b:64:7a:b2: d0:09:fc:f8:10:19:6a:57:c1:7a:1e:d6:80:26:6d: f0:74:88:67:39:f2:d7:d6:18:fa:43:bc:47:a0:14: 40:58:18:31:31:35:8f:fa:54:b2:de:2c:1f:97:b6: f0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:62:12:45:CF:63:D1:28:77:BE:B1:D3:17:47:20:54:FB:AF:54 X509v3 Authority Key Identifier: keyid:91:8E:72:89:E2:8C:1A:49:22:A2:3C:B5:65:BD:82:1B:7E:20:A6:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kY5yieKMGkkiojy1Zb2CG34gphE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171B1A/51FFC4E4F41111E9A435B04CC4F9AE02/kY5yieKMGkkiojy1Zb2CG34gphE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:9e:11:47:2c:af:d1:1d:9a:55:55:76:23:7b:1a:da:30:8d: 8e:b8:6a:5a:2d:02:3b:4e:4f:d9:89:95:46:6a:72:16:ed:01: 74:4d:32:1a:95:40:f8:8d:0f:51:fd:a0:c0:aa:07:8f:40:97: f5:61:83:7e:d4:83:9a:53:02:f3:18:3e:66:0c:dd:95:d2:c3: 87:21:43:4a:25:7b:98:df:1a:28:97:80:72:e1:df:e9:24:93: eb:ec:cb:d7:28:4e:65:98:b9:7e:ad:9b:90:6e:ee:4d:44:e7: 3b:80:59:30:8c:6d:da:20:4c:4e:31:96:3c:94:ab:5f:8b:58: 61:35:d3:15:94:e7:4b:4d:fc:bf:e2:1a:51:29:54:b7:37:38: f4:b7:f5:5c:76:5b:cf:75:50:f8:3d:1a:c4:58:79:5b:52:61: 85:f1:7f:8a:1d:e3:87:f6:f3:90:72:3c:6d:e1:01:16:89:5f: d2:ff:07:0d:21:3f:83:95:46:46:75:c0:5d:a7:d2:38:c4:b3: 4e:03:98:fd:4c:4e:8e:ab:c1:ca:33:48:37:bc:cf:b5:95:19: 12:5d:e8:71:f3:0a:b4:8d:e5:5a:4b:ff:30:4a:35:7c:98:de: ab:ad:05:45:c3:c1:c3:26:b0:d4:c3:23:7f:34:d0:73:13:ff: 69:17:ea:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCMUExMTAvBgNVBAUTKDkxOEU3Mjg5RTI4QzFBNDkyMkEyM0NCNTY1QkQ4MjFC N0UyMEE2MTEwHhcNMjYwNDE2MTc1NTQ0WhcNMjYwNDIzMTc1NTQ0WjAYMRYwFAYD VQQDEw02OWUxMjJhMS04NmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRNmIsv2VRR5WAE8tyQz+qaKhNwldnbW1Qj+D98g4KoAZh0GWeq/QLlWF6kD PKN2Md4pm+TPYkCzeyH2lyS/enh5/BVneHbXHuCzeBYLYIVtgEPh1oHBoQTDXjeT QPzuI0eT2IxquYOXuq30O7WietFOYiUEfKlPKOMm0G0JB6jdTusKZju/mUYQv51K lQOh9HM1AH6mPvQFTYOfYqnLxIq3EJu0RF14ual5sHbnCK6qDrMGy3Vw680yTwAi ZbXRbyPOSqiF2BFp3CsKGjtkerLQCfz4EBlqV8F6HtaAJm3wdIhnOfLX1hj6Q7xH oBRAWBgxMTWP+lSy3iwfl7bw0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKY7YhJF z2PRKHe+sdMXRyBU+69UMB8GA1UdIwQYMBaAFJGOconijBpJIqI8tWW9ght+IKYR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUIxQS81MUZGQzRFNEY0 MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdra2lvankxWmIyQ0czNGdw aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tZNXlpZUtNR2traW9qeTFaYjJDRzM0Z3BoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUIxQS81MUZGQzRFNEY0MTExMUU5QTQzNUIwNENDNEY5QUUwMi9rWTV5aWVLTUdr a2lvankxWmIyQ0czNGdwaEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnp4RRyyv0R2aVVV2I3sa2jCNjrhqWi0CO05P2YmVRmpyFu0BdE0yGpVA+I0P Uf2gwKoHj0CX9WGDftSDmlMC8xg+ZgzdldLDhyFDSiV7mN8aKJeAcuHf6SST6+zL 1yhOZZi5fq2bkG7uTUTnO4BZMIxt2iBMTjGWPJSrX4tYYTXTFZTnS038v+IaUSlU tzc49Lf1XHZbz3VQ+D0axFh5W1JhhfF/ih3jh/bzkHI8beEBFolf0v8HDSE/g5VG RnXAXafSOMSzTgOY/UxOjqvByjNIN7zPtZUZEl3ocfMKtI3lWkv/MEo1fJjeq60F RcPBwyaw1MMjfzTQcxP/aRfqLA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:30:48 2026 by rpki-client