$ rpki-client -vvf rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft File: kIoYD5SUlgetwBExSb6IKuqo6I8.mft (raw, json) Hash identifier: emUXgnou1DEQK0RUBtgHD9nsTjlirTy7avLNXktYRqE= Subject key identifier: 91:F7:86:32:F5:8B:5F:7B:BB:0A:8D:78:2B:33:14:12:6C:E2:28:99 Authority key identifier: 90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F Certificate issuer: /CN=A9173C63/serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft Manifest number: 0241 Signing time: Fri 17 Apr 2026 02:20:02 +0000 Manifest this update: Fri 17 Apr 2026 02:20:02 +0000 Manifest next update: Fri 24 Apr 2026 02:20:02 +0000 Files and hashes: 1: kIoYD5SUlgetwBExSb6IKuqo6I8.crl (hash: lEXKbhPEn+5aRS3VZPHt84oebJDNNxVuqT/aK7wCCJE=) 2: E8B2BE5ADBCE11EFA9FC2C0EC4F9AE02.roa (hash: +Q8so6nPeyC4+0wToagHFxd2QuGw1JN2hZ9q0eoOoGI=) 3: 9BE6554CB72411EF98F7D577C4F9AE02.roa (hash: TpOlOMkvGiREuIISjlFyTVVAuVCoOvxydJx/Up02XYA=) 4: CC0BA4E0E17F11EFA4CE224CC4F9AE02.roa (hash: QT/TXvlvue3wQ8fY3ahassV2Ju9ScJLofOE2xUpi/GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173C63, serialNumber=908A180F94949607ADC0113149BE882AEAA8E88F Validity Not Before: Apr 17 02:20:02 2026 GMT Not After : Apr 24 02:20:02 2026 GMT Subject: CN=69e198d2-460b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:13:d5:17:eb:3b:7b:0a:06:53:d0:a1:47: fe:f1:d5:29:3e:e8:53:05:bd:1c:f4:31:f6:65:d7: 86:39:77:fc:06:93:5f:d6:bb:23:df:43:8a:29:28: bf:74:e8:6e:5b:9e:40:82:35:99:9c:77:6a:1f:61: 5d:8a:64:a4:73:ca:c1:f1:a5:23:e3:7f:96:ff:29: 72:35:f7:c9:a1:ab:c9:0b:47:a6:32:54:9f:7c:3a: ea:9b:42:9b:53:7c:0b:11:b6:f8:9f:ea:f9:16:6e: 87:b6:8f:2c:28:53:16:6e:0e:f0:81:ca:36:06:f5: 4b:6d:1d:b8:f4:fa:08:83:13:7c:5a:98:1b:7d:e4: 8a:2a:19:ee:55:4a:39:c6:05:ee:54:08:8f:31:10: 5b:29:63:e1:4a:27:4b:8d:58:b9:02:bc:21:f5:2c: 29:70:cb:6c:f9:90:ed:b9:11:f1:c3:ea:50:11:b5: 9b:78:b0:a6:1b:b0:a2:10:bb:92:e4:31:02:da:e2: e2:3e:ce:8e:6f:41:5d:f8:7b:fd:d6:24:bf:d5:59: 7f:17:45:23:95:35:22:3e:46:1f:2b:87:21:38:72: 5f:b7:1a:bf:8f:62:59:44:70:7a:ac:c7:27:07:3a: 6c:ef:e4:37:4e:70:cd:18:ff:8d:66:8f:d4:ce:40: a4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F7:86:32:F5:8B:5F:7B:BB:0A:8D:78:2B:33:14:12:6C:E2:28:99 X509v3 Authority Key Identifier: keyid:90:8A:18:0F:94:94:96:07:AD:C0:11:31:49:BE:88:2A:EA:A8:E8:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIoYD5SUlgetwBExSb6IKuqo6I8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173C63/4D11319CD85C11ED8181A22FC4F9AE02/kIoYD5SUlgetwBExSb6IKuqo6I8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4c:eb:e8:02:36:75:63:b0:45:87:84:9a:2d:f5:51:03:f4: 14:eb:6a:9e:21:7a:7e:5a:a3:8c:71:f2:5f:fb:c4:6f:ac:2a: 2e:5d:eb:36:63:cb:36:15:fc:59:bb:57:c9:67:fc:fd:46:28: 6a:57:63:2e:67:62:b2:e3:a2:f8:61:ce:cb:5d:bd:18:55:19: ee:3b:f5:dc:2a:76:6a:df:81:0f:8f:fb:58:9c:81:11:b5:d2: 7d:17:07:0a:3f:86:3d:74:36:83:13:a9:34:eb:dd:62:48:93: db:c5:c8:29:3a:9a:ce:46:d1:ab:89:20:98:ac:bb:73:53:ed: bd:1c:01:03:49:7f:7f:a4:35:ff:e7:62:e6:5a:92:45:bd:cf: 1c:44:18:9d:cd:5b:ce:df:c5:a0:5d:52:76:32:cf:ee:dc:51: 2b:d0:f3:96:f4:b5:f5:02:f6:c6:45:ba:3e:c0:da:5c:41:79: 75:2f:8f:be:6e:19:67:53:71:70:6c:6e:ec:45:6d:e8:35:c9: b7:46:32:48:81:b8:db:5a:d8:33:f5:0e:00:29:96:74:d4:7a: b2:b3:16:ec:3b:e4:96:cd:0c:4c:64:a5:fc:56:11:ac:e7:3c: f4:85:92:c8:a4:aa:b8:1a:d0:b0:a7:93:77:e9:3e:bb:95:f9: 48:4e:4c:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDNjMxMTAvBgNVBAUTKDkwOEExODBGOTQ5NDk2MDdBREMwMTEzMTQ5QkU4ODJB RUFBOEU4OEYwHhcNMjYwNDE3MDIyMDAyWhcNMjYwNDI0MDIyMDAyWjAYMRYwFAYD VQQDEw02OWUxOThkMi00NjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAirsT1RfrO3sKBlPQoUf+8dUpPuhTBb0c9DH2ZdeGOXf8BpNf1rsj30OKKSi/ dOhuW55AgjWZnHdqH2FdimSkc8rB8aUj43+W/ylyNffJoavJC0emMlSffDrqm0Kb U3wLEbb4n+r5Fm6Hto8sKFMWbg7wgco2BvVLbR249PoIgxN8WpgbfeSKKhnuVUo5 xgXuVAiPMRBbKWPhSidLjVi5Arwh9SwpcMts+ZDtuRHxw+pQEbWbeLCmG7CiELuS 5DEC2uLiPs6Ob0Fd+Hv91iS/1Vl/F0UjlTUiPkYfK4chOHJftxq/j2JZRHB6rMcn Bzps7+Q3TnDNGP+NZo/UzkCkXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJH3hjL1 i197uwqNeCszFBJs4iiZMB8GA1UdIwQYMBaAFJCKGA+UlJYHrcARMUm+iCrqqOiP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0M2My80RDExMzE5Q0Q4 NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxnZXR3QkV4U2I2SUt1cW82 STguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tJb1lENVNVbGdldHdCRXhTYjZJS3VxbzZJOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0M2My80RDExMzE5Q0Q4NUMxMUVEODE4MUEyMkZDNEY5QUUwMi9rSW9ZRDVTVWxn ZXR3QkV4U2I2SUt1cW82STgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQkzr6AI2dWOwRYeEmi31UQP0FOtqniF6flqjjHHyX/vEb6wqLl3rNmPLNhX8 WbtXyWf8/UYoaldjLmdisuOi+GHOy129GFUZ7jv13Cp2at+BD4/7WJyBEbXSfRcH Cj+GPXQ2gxOpNOvdYkiT28XIKTqazkbRq4kgmKy7c1PtvRwBA0l/f6Q1/+di5lqS Rb3PHEQYnc1bzt/FoF1SdjLP7txRK9DzlvS19QL2xkW6PsDaXEF5dS+Pvm4ZZ1Nx cGxu7EVt6DXJt0YySIG421rYM/UOACmWdNR6srMW7Dvkls0MTGSl/FYRrOc89IWS yKSquBrQsKeTd+k+u5X5SE5MIg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:38:02 2026 by rpki-client