$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft File: Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft (raw, json) Hash identifier: Saicr3MODIqds7qAOH8UfRWYmFydEKnlONsPDZqzBWg= Subject key identifier: 75:87:8A:B1:50:98:2C:BF:7D:9D:3F:DE:43:D8:AE:18:F4:62:53:FA Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A Certificate issuer: /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft Manifest number: 0C Signing time: Fri 17 Apr 2026 08:50:07 +0000 Manifest this update: Fri 17 Apr 2026 08:50:06 +0000 Manifest next update: Fri 24 Apr 2026 08:50:06 +0000 Files and hashes: 1: Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl (hash: PXavFEW+N4k4Eku9QfaQiUrT9Kvp+LtA4ah+ensmp5g=) 2: 4E3439122B4111F19D37C4AC90833773.roa (hash: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:50:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A Validity Not Before: Apr 17 08:50:06 2026 GMT Not After : Apr 24 08:50:06 2026 GMT Subject: CN=69e1f43f-0753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fa:dc:60:e9:f0:65:da:51:35:72:6a:a3:c5: ed:52:e2:cf:f3:fe:1c:b1:bb:50:bf:da:fd:e5:81: 03:de:42:70:c8:94:07:21:53:f6:ae:91:8c:e9:8e: 01:4f:fd:27:a7:a8:4b:09:6d:6d:eb:14:d8:6a:1b: 16:31:2b:74:6e:9a:55:d7:e8:25:1b:f3:66:7a:2f: 23:93:b7:12:ff:7b:14:69:53:01:3d:45:58:1a:50: 5a:8e:c3:8e:2b:cd:1b:34:7d:12:1e:b0:9b:48:85: 68:ef:a4:a7:e6:ed:40:d0:35:d3:47:3e:7e:88:f5: b1:a3:1d:5a:91:47:25:41:c5:45:29:bd:b3:20:b8: a0:e0:08:8c:cb:9b:c4:a9:cf:97:5b:1a:1d:ca:f3: ae:30:1f:99:21:66:a2:b3:06:a3:f4:3d:68:a8:59: a8:1f:d7:10:67:9a:4a:33:17:0f:54:f6:eb:4d:3f: 67:fd:23:e4:2f:04:18:2c:82:55:29:24:82:ef:bc: 85:e6:2f:a0:7e:a2:cc:66:6c:ce:fd:da:d7:51:37: c0:a5:ab:1c:72:91:39:c9:a6:ca:12:2f:fe:c2:62: f2:8b:a7:b7:64:69:b9:75:29:9e:2a:77:6e:65:6b: 29:57:a9:77:d4:de:d8:2b:b9:67:68:ad:bf:53:7e: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:87:8A:B1:50:98:2C:BF:7D:9D:3F:DE:43:D8:AE:18:F4:62:53:FA X509v3 Authority Key Identifier: keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:8d:5c:d6:eb:30:3f:00:02:af:f6:dc:8e:5f:fb:6b:2e:6e: b0:7b:b5:94:fd:5a:3a:0e:2e:b0:1e:3e:34:0c:f5:ac:21:c4: ea:a4:6a:eb:71:31:fb:3a:28:58:8e:8a:54:0e:5f:a9:21:d8: 06:76:3c:ee:7e:40:ae:34:09:99:7f:45:8f:c7:9b:6a:7d:52: fd:de:26:65:f2:16:cd:2f:4a:d8:54:d0:5c:9a:4e:24:3d:a3: 78:be:cc:9f:9a:40:3a:0b:76:5d:99:21:d3:bb:3f:c9:c1:5e: 7d:21:53:b5:11:36:73:ed:6c:a3:53:8b:69:81:fe:e9:e5:01: 35:0d:28:c5:b1:d5:cb:c8:c3:80:f1:a0:89:b2:92:92:b3:79: e1:41:95:42:e6:21:3a:e5:67:6b:d8:13:62:b5:16:95:46:0c: 29:c8:be:7f:80:cf:44:7e:92:94:da:f9:e4:24:0a:02:02:48: 3f:78:09:c7:2b:22:a5:f3:15:77:76:a3:1b:01:a9:73:c7:80: f1:68:04:49:a2:9d:6d:d1:c1:c8:15:18:30:ba:9f:41:d6:76: 9e:52:d8:3b:95:d0:32:e6:35:ad:a5:c7:b4:2d:2e:a2:c5:cd: ef:47:50:04:6b:19:50:e7:c1:c9:04:71:1c:0f:62:8d:c4:f2: 85:3a:73:d2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzIwNDExMC8GA1UEBRMoMEFEREM1MDRGQjc0MzAxNDJCQjYxNTE0NzJBRDE3RkNG MTcyMzE1QTAeFw0yNjA0MTcwODUwMDZaFw0yNjA0MjQwODUwMDZaMBgxFjAUBgNV BAMTDTY5ZTFmNDNmLTA3NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDC+txg6fBl2lE1cmqjxe1S4s/z/hyxu1C/2v3lgQPeQnDIlAchU/aukYzpjgFP /SenqEsJbW3rFNhqGxYxK3RumlXX6CUb82Z6LyOTtxL/exRpUwE9RVgaUFqOw44r zRs0fRIesJtIhWjvpKfm7UDQNdNHPn6I9bGjHVqRRyVBxUUpvbMguKDgCIzLm8Sp z5dbGh3K864wH5khZqKzBqP0PWioWagf1xBnmkozFw9U9utNP2f9I+QvBBgsglUp JILvvIXmL6B+osxmbM792tdRN8ClqxxykTnJpsoSL/7CYvKLp7dkabl1KZ4qd25l aylXqXfU3tgruWdorb9TfvT/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUdYeKsVCY LL99nT/eQ9iuGPRiU/owHwYDVR0jBBgwFoAUCt3FBPt0MBQrthUUcq0X/PFyMVow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMjA0L0M2RUI2NTY2MkI0 MDExRjFCQUVEOUE2MzkwODMzNzczL0N0M0ZCUHQwTUJRcnRoVVVjcTBYX1BGeU1W by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3QzRkJQdDBNQlFydGhVVWNxMFhfUEZ5TVZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz MjA0L0M2RUI2NTY2MkI0MDExRjFCQUVEOUE2MzkwODMzNzczL0N0M0ZCUHQwTUJR cnRoVVVjcTBYX1BGeU1Wby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByjVzW6zA/AAKv9tyOX/trLm6we7WU/Vo6Di6wHj40DPWsIcTqpGrrcTH7OihY jopUDl+pIdgGdjzufkCuNAmZf0WPx5tqfVL93iZl8hbNL0rYVNBcmk4kPaN4vsyf mkA6C3ZdmSHTuz/JwV59IVO1ETZz7WyjU4tpgf7p5QE1DSjFsdXLyMOA8aCJspKS s3nhQZVC5iE65Wdr2BNitRaVRgwpyL5/gM9EfpKU2vnkJAoCAkg/eAnHKyKl8xV3 dqMbAalzx4DxaARJop1t0cHIFRgwup9B1naeUtg7ldAy5jWtpce0LS6ixc3vR1AE axlQ58HJBHEcD2KNxPKFOnPS -----END CERTIFICATE-----Generated at Fri Apr 17 18:13:10 2026 by rpki-client