$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft File: aeHOy4gdpslouq4HMjfCZglaRc0.mft (raw, json) Hash identifier: C7r3EfuKQaKm1zJXnK2ZD3NPqjL7kLy3v/Ux2Rd7kSM= Subject key identifier: 55:33:E5:3E:B9:3E:7A:41:CA:EF:25:26:D2:56:0B:2E:D5:5C:DB:82 Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD Certificate issuer: /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Certificate serial: 044E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft Manifest number: 0441 Signing time: Fri 17 Apr 2026 00:09:27 +0000 Manifest this update: Fri 17 Apr 2026 00:09:26 +0000 Manifest next update: Fri 24 Apr 2026 00:09:26 +0000 Files and hashes: 1: aeHOy4gdpslouq4HMjfCZglaRc0.crl (hash: w62NDN6/ylim25AAKMZAPrqWv6xgfnWsEop6uMjxojo=) 2: 9F2E362C9B6E11ECA489542DC4F9AE02.roa (hash: FAyF1EHDkfSrZaB9JsF96pk4KSSTdNSXhRevgQNdj7Q=) 3: DD2DD3489F9111ECB958FF25C4F9AE02.roa (hash: EU7Pv67dHPUPsN4Pf/6t9QQbrokUpqyuX1Cdd8unPqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:09:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1102 (0x44e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD Validity Not Before: Apr 17 00:09:26 2026 GMT Not After : Apr 24 00:09:26 2026 GMT Subject: CN=69e17a36-904e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:16:f7:5d:0f:6e:6a:cd:5e:c2:5f:f7:ff:ec: 83:7d:64:26:2f:8d:ed:11:67:97:fc:d5:a1:a7:37: 01:5d:fa:e7:1b:44:c6:b9:da:25:43:a1:eb:35:02: bb:70:fb:56:c1:37:aa:c3:aa:d2:0f:12:a5:20:04: 28:15:be:8f:6f:52:28:7c:50:63:0b:5f:3f:3c:45: 50:01:03:51:c5:b0:55:33:67:ae:9f:a0:71:d7:d5: 34:73:bd:1d:f4:ae:67:c3:48:be:2b:69:c9:c0:94: 4c:66:86:a9:ae:b9:cc:1c:06:ff:d7:bd:a0:02:86: 54:5c:99:07:4c:37:65:87:99:05:c8:26:38:df:b9: 16:c1:05:31:a0:13:7a:f0:1f:bd:71:0b:7d:ef:2d: 30:83:b3:8c:6e:38:85:77:78:b4:5c:4b:65:bf:b9: 72:40:2a:ea:93:ac:c6:01:40:bf:4b:b6:16:eb:1d: b1:8e:90:09:67:5b:61:e7:68:b5:dd:24:dc:e9:31: 07:f2:d6:7d:5d:4b:3e:1c:b5:a6:7d:01:69:ef:68: 3d:2f:ae:74:f8:3a:6c:59:08:4f:e2:8b:37:52:78: bf:6d:a4:5d:be:d7:79:8f:24:63:62:92:29:e5:57: 21:2d:ed:17:2c:d7:28:05:f6:da:cd:29:09:ff:44: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:33:E5:3E:B9:3E:7A:41:CA:EF:25:26:D2:56:0B:2E:D5:5C:DB:82 X509v3 Authority Key Identifier: keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:a4:aa:23:05:c9:9d:e5:3d:c5:78:b1:04:47:39:e0:55:1e: b1:13:b7:6c:b9:d6:e2:52:cc:55:d8:7b:c4:93:19:a8:b2:d0: ce:de:c8:98:55:2d:e1:0f:0e:f7:86:e1:ec:a4:d5:55:3c:ee: f3:2a:0c:8e:ae:ba:32:cc:15:e3:9b:40:52:9f:49:43:d2:86: 41:80:f9:76:97:9b:15:1e:74:4c:6a:a4:69:7a:31:45:f3:ff: 4f:f9:93:ee:70:b6:f7:82:26:ff:a0:aa:9e:21:ed:38:71:c1: 14:9a:39:86:e8:3d:ca:58:a8:15:21:80:57:48:58:2a:6e:07: 9d:80:63:8f:91:97:ce:2d:5e:87:3e:7c:0c:b1:b4:ea:ca:a9: 92:1b:08:1c:d6:3d:81:4e:af:d7:b5:cd:59:07:d6:9a:42:b5: e4:a7:e4:97:f9:f2:80:6c:83:29:8a:7c:83:5c:b9:28:6f:29: 15:da:93:7f:19:dc:ea:ae:79:0d:a6:ba:55:8c:b6:a4:82:b8: 69:cb:b0:62:fe:57:9d:9d:e4:86:3d:6b:b7:12:a4:a4:b4:85: 3c:74:2e:61:c7:3c:0a:36:d1:c8:c6:82:e2:31:0e:fe:93:11: fc:63:d1:64:c6:e5:f0:a2:15:51:64:a0:3e:9b:91:55:4f:18: a9:16:d7:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJDQjUxMTAvBgNVBAUTKDY5RTFDRUNCODgxREE2Qzk2OEJBQUUwNzMyMzdDMjY2 MDk1QTQ1Q0QwHhcNMjYwNDE3MDAwOTI2WhcNMjYwNDI0MDAwOTI2WjAYMRYwFAYD VQQDEw02OWUxN2EzNi05MDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjBb3XQ9uas1ewl/3/+yDfWQmL43tEWeX/NWhpzcBXfrnG0TGudolQ6HrNQK7 cPtWwTeqw6rSDxKlIAQoFb6Pb1IofFBjC18/PEVQAQNRxbBVM2eun6Bx19U0c70d 9K5nw0i+K2nJwJRMZoaprrnMHAb/172gAoZUXJkHTDdlh5kFyCY437kWwQUxoBN6 8B+9cQt97y0wg7OMbjiFd3i0XEtlv7lyQCrqk6zGAUC/S7YW6x2xjpAJZ1th52i1 3STc6TEH8tZ9XUs+HLWmfQFp72g9L650+DpsWQhP4os3Uni/baRdvtd5jyRjYpIp 5VchLe0XLNcoBfbazSkJ/0TtmwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFUz5T65 PnpByu8lJtJWCy7VXNuCMB8GA1UdIwQYMBaAFGnhzsuIHabJaLquBzI3wmYJWkXN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkNCNS8zOUQ3NjcyMDlC NkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBzbG91cTRITWpmQ1pnbGFS YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FlSE95NGdkcHNsb3VxNEhNamZDWmdsYVJjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkNCNS8zOUQ3NjcyMDlCNkExMUVDQTY4MjM1MjJDNEY5QUUwMi9hZUhPeTRnZHBz bG91cTRITWpmQ1pnbGFSYzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgqSqIwXJneU9xXixBEc54FUesRO3bLnW4lLMVdh7xJMZqLLQzt7ImFUt4Q8O 94bh7KTVVTzu8yoMjq66MswV45tAUp9JQ9KGQYD5dpebFR50TGqkaXoxRfP/T/mT 7nC294Im/6CqniHtOHHBFJo5hug9ylioFSGAV0hYKm4HnYBjj5GXzi1ehz58DLG0 6sqpkhsIHNY9gU6v17XNWQfWmkK15Kfkl/nygGyDKYp8g1y5KG8pFdqTfxnc6q55 Daa6VYy2pIK4acuwYv5XnZ3khj1rtxKkpLSFPHQuYcc8CjbRyMaC4jEO/pMR/GPR ZMbl8KIVUWSgPpuRVU8YqRbXNQ== -----END CERTIFICATE-----Generated at Fri Apr 17 11:08:35 2026 by rpki-client