$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft File: Wr4zfmXAC-qEfODSWciH5P2zuSE.mft (raw, json) Hash identifier: Om+aO8BV32BzW/ECqwNKXJ0bJMxMr6fqsQvbmLQWbEE= Subject key identifier: CF:2A:B4:52:C3:20:22:62:F4:9F:B7:E3:D4:90:D4:8D:B5:44:EC:10 Authority key identifier: 5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 Certificate issuer: /CN=A9173CDD/serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft Manifest number: D1 Signing time: Wed 15 Apr 2026 06:21:25 +0000 Manifest this update: Wed 15 Apr 2026 06:21:24 +0000 Manifest next update: Wed 22 Apr 2026 06:21:24 +0000 Files and hashes: 1: Wr4zfmXAC-qEfODSWciH5P2zuSE.crl (hash: r41olTQvUtRXmBAnR1fd+aIHXqUCtrr5ZL7NsdZXFxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 06:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CDD, serialNumber=5ABE337E65C00BEA847CE0D259C887E4FDB3B921 Validity Not Before: Apr 15 06:21:24 2026 GMT Not After : Apr 22 06:21:24 2026 GMT Subject: CN=69df2e65-927f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:9d:98:14:29:1c:69:3e:18:83:89:53:4d: 9c:e1:d5:d8:3e:1f:fc:72:35:10:e9:8d:7f:d5:05: ed:61:11:aa:ae:15:45:d3:a7:91:dd:37:2b:fc:49: 06:f5:e7:d9:47:8e:7c:3d:e4:fa:e4:f5:8c:74:65: 0c:75:e5:6e:b0:90:44:fe:c7:61:48:fe:3b:14:db: 5f:d2:2b:34:89:ce:6f:65:b5:77:ff:0c:94:d4:6f: c3:b7:53:c0:91:36:55:20:d1:0d:3c:93:7e:e6:66: d7:d7:09:da:00:9c:fe:6a:1e:85:10:20:c4:c6:e0: 6c:ee:e3:b0:c2:79:3f:75:e0:e1:93:ca:1b:f2:b4: 6b:a6:67:60:78:8b:75:3f:59:ae:e7:74:0c:33:c1: 6b:8e:c3:34:42:bf:71:97:02:d7:66:78:9a:0a:0f: 5d:3f:44:fe:2c:3e:1e:63:a1:d3:21:31:92:94:84: cc:58:0f:88:fa:6a:b1:8a:fe:36:ec:cd:bc:5d:93: 52:3e:ba:36:fc:32:f3:cf:d3:f5:bc:17:09:f8:23: c4:36:b5:f2:d8:88:8c:00:f8:e3:37:83:54:83:70: b6:bf:60:9c:2e:00:c4:49:91:23:cb:bf:5d:89:69: 8d:98:d4:d4:8f:5e:ca:4a:5d:8d:c7:db:de:10:4d: 38:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2A:B4:52:C3:20:22:62:F4:9F:B7:E3:D4:90:D4:8D:B5:44:EC:10 X509v3 Authority Key Identifier: keyid:5A:BE:33:7E:65:C0:0B:EA:84:7C:E0:D2:59:C8:87:E4:FD:B3:B9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wr4zfmXAC-qEfODSWciH5P2zuSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CDD/39B1B362FDD811EFB525B674C4F9AE02/Wr4zfmXAC-qEfODSWciH5P2zuSE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:02:a9:3d:ff:3b:9c:f5:a7:d0:14:cc:9e:b4:c8:46:80:3c: 7a:8c:a0:15:ac:90:b0:ff:3e:dd:2a:da:72:bd:3b:51:a9:dc: 8b:15:10:06:a0:1e:b5:b2:b1:b0:8f:54:8e:e4:cc:c0:a9:79: 94:f3:3c:ca:14:a2:aa:0a:12:c3:e6:23:b9:f7:3e:34:b2:7e: cd:c9:ef:83:35:2e:25:04:4b:97:3a:a4:d3:71:b3:fc:9d:c4: bc:f3:d0:53:10:c8:4b:9e:9b:6f:23:2f:f8:50:73:85:7f:99: 90:c0:84:e0:3a:eb:a8:e3:c6:fb:90:12:23:ce:fd:72:c6:7c: d7:5a:10:00:09:21:4b:d7:74:f2:00:f0:7f:94:50:5a:0f:cb: 15:55:d5:eb:53:1c:da:a9:d3:36:70:3a:68:0b:fd:ba:56:66: b6:dd:5e:a6:f2:68:f6:18:de:40:82:4b:70:19:df:0a:e0:62: 2d:1b:bd:97:a1:8d:ae:c1:c1:a0:9b:31:63:67:3b:49:08:e0: 2c:6b:3d:ac:f9:35:69:97:56:b1:57:9d:d7:9c:31:6c:9c:e3: 35:1e:94:99:eb:cb:a4:94:3d:65:79:45:e0:52:b4:42:87:a1: 31:3e:5b:fa:04:6a:74:17:b7:48:ff:3d:a9:e9:39:28:ca:07: 23:05:e0:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDREQxMTAvBgNVBAUTKDVBQkUzMzdFNjVDMDBCRUE4NDdDRTBEMjU5Qzg4N0U0 RkRCM0I5MjEwHhcNMjYwNDE1MDYyMTI0WhcNMjYwNDIyMDYyMTI0WjAYMRYwFAYD VQQDEw02OWRmMmU2NS05MjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnqdmBQpHGk+GIOJU02c4dXYPh/8cjUQ6Y1/1QXtYRGqrhVF06eR3Tcr/EkG 9efZR458PeT65PWMdGUMdeVusJBE/sdhSP47FNtf0is0ic5vZbV3/wyU1G/Dt1PA kTZVINENPJN+5mbX1wnaAJz+ah6FECDExuBs7uOwwnk/deDhk8ob8rRrpmdgeIt1 P1mu53QMM8FrjsM0Qr9xlwLXZniaCg9dP0T+LD4eY6HTITGSlITMWA+I+mqxiv42 7M28XZNSPro2/DLzz9P1vBcJ+CPENrXy2IiMAPjjN4NUg3C2v2CcLgDESZEjy79d iWmNmNTUj17KSl2Nx9veEE04OwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8qtFLD ICJi9J+349SQ1I21ROwQMB8GA1UdIwQYMBaAFFq+M35lwAvqhHzg0lnIh+T9s7kh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NERC8zOUIxQjM2MkZE RDgxMUVGQjUyNUI2NzRDNEY5QUUwMi9XcjR6Zm1YQUMtcUVmT0RTV2NpSDVQMnp1 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dyNHpmbVhBQy1xRWZPRFNXY2lINVAyenVTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NERC8zOUIxQjM2MkZERDgxMUVGQjUyNUI2NzRDNEY5QUUwMi9XcjR6Zm1YQUMt cUVmT0RTV2NpSDVQMnp1U0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUgKpPf87nPWn0BTMnrTIRoA8eoygFayQsP8+3Sracr07UancixUQBqAetbKx sI9UjuTMwKl5lPM8yhSiqgoSw+Yjufc+NLJ+zcnvgzUuJQRLlzqk03Gz/J3EvPPQ UxDIS56bbyMv+FBzhX+ZkMCE4DrrqOPG+5ASI879csZ811oQAAkhS9d08gDwf5RQ Wg/LFVXV61Mc2qnTNnA6aAv9ulZmtt1epvJo9hjeQIJLcBnfCuBiLRu9l6GNrsHB oJsxY2c7SQjgLGs9rPk1aZdWsVed15wxbJzjNR6UmevLpJQ9ZXlF4FK0QoehMT5b +gRqdBe3SP89qek5KMoHIwXgAw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:37:14 2026 by rpki-client