$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft File: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft (raw, json) Hash identifier: RV1ZgUon7TiKVfWh0tEhQarYEvj7tPNwOk8usFCa6h8= Subject key identifier: B7:92:9F:71:D0:83:9A:2F:2C:8B:F1:83:6E:F6:FB:9D:63:8B:B3:9A Authority key identifier: 32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D Certificate issuer: /CN=A9173C08/serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft Manifest number: C8 Signing time: Fri 17 Apr 2026 06:37:46 +0000 Manifest this update: Fri 17 Apr 2026 06:37:45 +0000 Manifest next update: Fri 24 Apr 2026 06:37:45 +0000 Files and hashes: 1: Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl (hash: X9LOMm+q2t6SdFv3R/vp6DLO15cd+QOTMur/hzeUyDc=) 2: ED917A58117D11F08E2E217CC4F9AE02.roa (hash: JgW7r5pk1FderMLKPrb4Cb/ibJCCVddw7kZ9flhSsCQ=) 3: 7D6BCA6429D111F09DF2F66EC4F9AE02.roa (hash: 9AYfRR1mUHtIyonHrj2E53FFwt+sSRdMykaqwYBUAaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C08, serialNumber=321EEFB80851FF82FEB7CB6C08A94F5DD2D9270D Validity Not Before: Apr 17 06:37:45 2026 GMT Not After : Apr 24 06:37:45 2026 GMT Subject: CN=69e1d539-3441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:e7:3a:0d:50:94:30:82:df:a1:47:7b:38: a1:df:11:e1:5a:5b:da:c0:de:97:b3:3f:dd:0f:d9: e8:69:bd:20:0f:c8:c6:01:0e:8e:59:61:60:77:a2: ff:bf:e7:74:29:25:ea:fc:f4:ae:34:a4:50:f2:71: 11:4f:0e:69:ae:e6:7a:f5:5a:f4:e1:ad:72:39:5a: e6:8f:97:1d:c9:bf:4d:4f:37:f0:3a:2e:7b:e4:a0: a3:92:8e:1b:25:85:ca:9c:60:a3:6b:7f:dc:61:b9: 39:99:ed:70:80:29:bb:d2:0a:95:c8:66:62:e1:73: 24:1c:7f:39:cb:03:78:e1:d0:68:e1:3f:1b:3b:de: 5f:c1:97:65:73:6c:68:48:0b:1c:e0:a2:aa:1f:9a: a3:64:93:65:4c:55:0c:3c:68:06:97:1f:5b:f6:57: 95:8d:0e:ac:8e:82:45:4a:0e:b2:31:77:ac:18:ad: 31:67:dc:4f:74:83:82:d9:92:c3:c7:ef:64:c9:ce: a5:f9:1c:a0:f0:1f:c4:62:ba:57:30:a0:0f:f7:cc: a0:e8:c0:78:26:92:c5:50:92:cf:c8:71:e1:77:94: 80:4f:d2:09:0a:82:55:bf:9b:bb:24:59:dd:5f:43: 84:f8:c7:21:ee:cc:a0:32:2c:e9:44:5c:4b:99:af: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:9F:71:D0:83:9A:2F:2C:8B:F1:83:6E:F6:FB:9D:63:8B:B3:9A X509v3 Authority Key Identifier: keyid:32:1E:EF:B8:08:51:FF:82:FE:B7:CB:6C:08:A9:4F:5D:D2:D9:27:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C08/AFFC0DE4117C11F0B234CD78C4F9AE02/Mh7vuAhR_4L-t8tsCKlPXdLZJw0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:ec:77:74:be:a2:f8:8e:97:dd:4f:de:ad:74:ff:f0:f4:f0: 5f:ab:86:3b:60:f8:6f:dd:58:88:97:66:9f:32:77:85:e0:9d: 49:e4:b6:f2:ae:3e:66:7f:1e:49:ad:81:cd:34:52:33:1e:6f: 2c:bc:71:49:4d:e8:80:13:83:dd:df:64:70:35:ce:71:4d:03: d9:81:d9:ed:50:81:79:de:58:02:8e:04:ce:35:34:00:cb:43: 11:2d:51:1b:0c:48:f2:5c:c3:8f:82:91:ca:47:30:26:71:96: fb:18:d0:ea:bb:25:26:f4:4f:0e:3f:74:8c:ca:d0:92:88:42: b5:00:f5:d5:5c:80:c2:c5:74:d9:49:16:bb:04:08:4d:85:ba: 9b:a9:1d:4c:0d:b7:5c:0f:aa:71:ce:54:b2:2f:3f:1b:ac:4a: f6:5c:57:32:43:da:1a:4f:93:c7:87:13:80:f0:d0:77:5b:d0: 0d:e5:fb:f0:21:68:42:65:38:fe:a6:c9:9d:2a:fe:e6:c2:05: 58:a8:b2:aa:53:6e:48:bc:12:15:74:93:70:02:bb:29:c8:35: cb:a4:cc:f8:72:41:a2:b1:c1:bc:f3:96:ec:f4:1c:f0:09:fb: 41:45:a3:bf:df:b5:1b:e8:b8:e1:ae:45:b5:d8:cc:6f:be:c2: 99:ac:e9:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDMDgxMTAvBgNVBAUTKDMyMUVFRkI4MDg1MUZGODJGRUI3Q0I2QzA4QTk0RjVE RDJEOTI3MEQwHhcNMjYwNDE3MDYzNzQ1WhcNMjYwNDI0MDYzNzQ1WjAYMRYwFAYD VQQDEw02OWUxZDUzOS0zNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9LnOg1QlDCC36FHezih3xHhWlvawN6Xsz/dD9noab0gD8jGAQ6OWWFgd6L/ v+d0KSXq/PSuNKRQ8nERTw5pruZ69Vr04a1yOVrmj5cdyb9NTzfwOi575KCjko4b JYXKnGCja3/cYbk5me1wgCm70gqVyGZi4XMkHH85ywN44dBo4T8bO95fwZdlc2xo SAsc4KKqH5qjZJNlTFUMPGgGlx9b9leVjQ6sjoJFSg6yMXesGK0xZ9xPdIOC2ZLD x+9kyc6l+Ryg8B/EYrpXMKAP98yg6MB4JpLFUJLPyHHhd5SAT9IJCoJVv5u7JFnd X0OE+Mch7sygMizpRFxLma/ivQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLeSn3HQ g5ovLIvxg272+51ji7OaMB8GA1UdIwQYMBaAFDIe77gIUf+C/rfLbAipT13S2ScN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0MwOC9BRkZDMERFNDEx N0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80TC10OHRzQ0tsUFhkTFpK dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01oN3Z1QWhSXzRMLXQ4dHNDS2xQWGRMWkp3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0MwOC9BRkZDMERFNDExN0MxMUYwQjIzNENENzhDNEY5QUUwMi9NaDd2dUFoUl80 TC10OHRzQ0tsUFhkTFpKdzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc+x3dL6i+I6X3U/erXT/8PTwX6uGO2D4b91YiJdmnzJ3heCdSeS28q4+Zn8e Sa2BzTRSMx5vLLxxSU3ogBOD3d9kcDXOcU0D2YHZ7VCBed5YAo4EzjU0AMtDES1R GwxI8lzDj4KRykcwJnGW+xjQ6rslJvRPDj90jMrQkohCtQD11VyAwsV02UkWuwQI TYW6m6kdTA23XA+qcc5Usi8/G6xK9lxXMkPaGk+Tx4cTgPDQd1vQDeX78CFoQmU4 /qbJnSr+5sIFWKiyqlNuSLwSFXSTcAK7Kcg1y6TM+HJBorHBvPOW7PQc8An7QUWj v9+1G+i44a5FtdjMb77CmazpBw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:28:21 2026 by rpki-client