$ rpki-client -vvf rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft File: 5xSoFJfIF3hoy7TNszjD72zp6VM.mft (raw, json) Hash identifier: wY6EiMuGfFjIsqA+hP//w4SbUchBpM2btr7ne+XYtJE= Subject key identifier: 4C:7D:23:D6:D0:75:17:5D:4B:63:06:C3:D4:8E:67:9E:55:5D:9E:2C Authority key identifier: E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 Certificate issuer: /CN=A9172C8D/serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Certificate serial: 0AF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft Manifest number: 0AEA Signing time: Thu 16 Apr 2026 19:19:17 +0000 Manifest this update: Thu 16 Apr 2026 19:19:16 +0000 Manifest next update: Thu 23 Apr 2026 19:19:16 +0000 Files and hashes: 1: 5xSoFJfIF3hoy7TNszjD72zp6VM.crl (hash: 35vrzSKKqURIlp8dyRBdcj5aSSuWP8pEC9ncya97HSw=) 2: 9085F6C0B78911EFB9994180C4F9AE02.roa (hash: u8WkqF58twBf7V4x+gVZYpgUq+L7j/Jz1XNkEqJ+tfM=) 3: CDD96B60B78911EF9BD3EF80C4F9AE02.roa (hash: +vuV01yjXB1+RoW7WbOmTfoAon5Ua6XhR4wfKoKtImw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2809 (0xaf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172C8D, serialNumber=E714A81497C8177868CBB4CDB338C3EF6CE9E953 Validity Not Before: Apr 16 19:19:16 2026 GMT Not After : Apr 23 19:19:16 2026 GMT Subject: CN=69e13635-b308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:28:10:09:9a:83:f9:f9:fe:7a:49:de:9e: dd:c0:35:26:b1:e5:14:ab:81:6f:12:a2:88:bf:84: 77:4d:83:f5:52:bd:13:6c:e2:66:90:49:e5:52:57: 2e:a2:ef:73:f3:6f:0e:c5:cb:ce:09:5e:0e:32:a6: 87:3d:2a:5f:84:7f:f9:6e:23:d7:67:9b:77:03:b2: 4d:1c:d1:e3:fd:15:bb:fc:4e:14:f2:3d:2b:99:b2: a3:10:49:a6:89:93:27:f5:c4:7e:c1:47:de:a0:42: 93:1b:fd:ae:13:05:ae:28:41:5b:d0:3c:9b:99:4c: b0:54:03:f9:da:c5:43:46:36:10:c3:12:f6:92:df: 7d:45:28:09:fd:ff:97:20:24:fe:f5:7c:db:77:a6: 1b:48:dc:17:d8:34:f0:a5:5e:f4:b6:2c:77:ab:68: 9e:47:e9:fd:50:95:d3:52:b6:69:f2:14:42:c9:9b: 92:ce:7f:05:5d:5b:2f:df:17:9e:3b:55:63:08:fd: 40:8b:20:fa:98:3e:8e:1f:e1:22:d8:b3:87:36:fe: 25:06:b6:14:7f:93:ef:2c:ff:51:3e:7d:e6:75:7a: d6:e9:bd:af:cc:8c:fc:7d:64:61:a7:84:9f:48:1d: 40:86:96:b7:fc:d1:5e:57:b6:7a:7d:e8:33:c1:be: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7D:23:D6:D0:75:17:5D:4B:63:06:C3:D4:8E:67:9E:55:5D:9E:2C X509v3 Authority Key Identifier: keyid:E7:14:A8:14:97:C8:17:78:68:CB:B4:CD:B3:38:C3:EF:6C:E9:E9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5xSoFJfIF3hoy7TNszjD72zp6VM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172C8D/9A11086469BA11EABC0BD863C4F9AE02/5xSoFJfIF3hoy7TNszjD72zp6VM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:93:ff:53:51:5f:14:69:4a:53:2e:50:07:fb:96:d7:87:44: 03:19:e7:ee:3b:7c:53:4f:7a:cd:d8:21:64:4b:4e:3f:2f:47: 26:dd:4f:24:91:83:f7:68:03:7f:5f:08:63:fd:e9:dd:72:36: 74:78:e5:0c:6d:02:00:e0:a0:2b:2b:76:5e:59:8a:a8:4c:09: 96:2f:c9:1a:42:53:63:17:5f:02:f9:7c:14:a8:f2:9c:6f:6a: eb:c5:47:43:8d:e3:42:75:b3:db:fa:bd:a7:99:28:50:95:2a: 3f:b5:b5:ac:c2:9c:a1:a3:66:48:2b:57:4a:29:61:4d:6d:f9: 40:45:95:a9:72:ea:4b:8c:51:2a:c2:9e:c3:5e:da:11:d5:13: 9d:9f:f7:e5:9c:2a:96:0d:6a:b4:71:25:0e:2e:85:70:76:f3: e1:f0:a1:5f:43:14:af:e2:ba:a4:59:6a:5f:1e:14:9a:8a:e4: 0b:0e:15:09:f8:29:7c:60:ab:d7:18:c9:a4:1b:6e:2b:45:a2: bf:c3:47:a1:5a:29:a3:1d:21:a1:7b:f1:c1:db:2d:b3:65:df: 6d:9c:26:63:68:2e:1d:df:0b:44:27:f8:b9:21:23:b5:c5:e2: 46:06:50:5a:73:39:9d:3b:3c:48:ad:f7:e6:a8:30:ec:33:20: 13:17:66:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDOEQxMTAvBgNVBAUTKEU3MTRBODE0OTdDODE3Nzg2OENCQjRDREIzMzhDM0VG NkNFOUU5NTMwHhcNMjYwNDE2MTkxOTE2WhcNMjYwNDIzMTkxOTE2WjAYMRYwFAYD VQQDEw02OWUxMzYzNS1iMzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHEoEAmag/n5/npJ3p7dwDUmseUUq4FvEqKIv4R3TYP1Ur0TbOJmkEnlUlcu ou9z828OxcvOCV4OMqaHPSpfhH/5biPXZ5t3A7JNHNHj/RW7/E4U8j0rmbKjEEmm iZMn9cR+wUfeoEKTG/2uEwWuKEFb0DybmUywVAP52sVDRjYQwxL2kt99RSgJ/f+X ICT+9Xzbd6YbSNwX2DTwpV70tix3q2ieR+n9UJXTUrZp8hRCyZuSzn8FXVsv3xee O1VjCP1AiyD6mD6OH+Ei2LOHNv4lBrYUf5PvLP9RPn3mdXrW6b2vzIz8fWRhp4Sf SB1Ahpa3/NFeV7Z6fegzwb5MRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx9I9bQ dRddS2MGw9SOZ55VXZ4sMB8GA1UdIwQYMBaAFOcUqBSXyBd4aMu0zbM4w+9s6elT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkM4RC85QTExMDg2NDY5 QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYzaG95N1ROc3pqRDcyenA2 Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzV4U29GSmZJRjNob3k3VE5zempENzJ6cDZWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkM4RC85QTExMDg2NDY5QkExMUVBQkMwQkQ4NjNDNEY5QUUwMi81eFNvRkpmSUYz aG95N1ROc3pqRDcyenA2Vk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ5P/U1FfFGlKUy5QB/uW14dEAxnn7jt8U096zdghZEtOPy9HJt1PJJGD92gD f18IY/3p3XI2dHjlDG0CAOCgKyt2XlmKqEwJli/JGkJTYxdfAvl8FKjynG9q68VH Q43jQnWz2/q9p5koUJUqP7W1rMKcoaNmSCtXSilhTW35QEWVqXLqS4xRKsKew17a EdUTnZ/35Zwqlg1qtHElDi6FcHbz4fChX0MUr+K6pFlqXx4UmorkCw4VCfgpfGCr 1xjJpBtuK0Wiv8NHoVopox0hoXvxwdsts2XfbZwmY2guHd8LRCf4uSEjtcXiRgZQ WnM5nTs8SK335qgw7DMgExdmPg== -----END CERTIFICATE-----Generated at Fri Apr 17 20:35:55 2026 by rpki-client