$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft File: Ty_T8AtY8TSpqOPn3ajY0grANSc.mft (raw, json) Hash identifier: cWpOKYybFhg3DAgo0bqU/eMlBWpKE7waTMAQpfXHzjw= Subject key identifier: 0B:37:D7:1A:B5:87:E0:A2:C5:DE:C8:F5:19:28:15:EE:FA:DF:BB:AF Authority key identifier: 4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 Certificate issuer: /CN=A9174880/serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Certificate serial: 35E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft Manifest number: 3573 Signing time: Thu 16 Apr 2026 14:16:51 +0000 Manifest this update: Thu 16 Apr 2026 14:16:50 +0000 Manifest next update: Thu 23 Apr 2026 14:16:50 +0000 Files and hashes: 1: Ty_T8AtY8TSpqOPn3ajY0grANSc.crl (hash: 4R2Lqppz0EG/8VMRapqm49j2dnLjJ0QlPW9ywqYxOPY=) 2: B5885EF852D411EC8C8CE26CC4F9AE02.roa (hash: K0D7rg55G2Vxgg4st1LsCOaUPeB0t55XfIkLwQZOLfU=) 3: 3869DF8A1C6011EEAF58FB61C4F9AE02.roa (hash: DmeP00Tglg1B2vHEmL9YYBPAmu6yzXlrGlk/VI9+C3Y=) 4: 5D81654A561E11E7A4FFF329C4F9AE02.roa (hash: /gJ9ZwtzzOTKqCZBrZuocfhT4XIIICVgFwfqJxZhD14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13792 (0x35e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=4F2FD3F00B58F134A9A8E3E7DDA8D8D20AC03527 Validity Not Before: Apr 16 14:16:50 2026 GMT Not After : Apr 23 14:16:50 2026 GMT Subject: CN=69e0ef53-18e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ce:37:2a:53:f9:21:4e:ec:93:74:36:90:7b: 47:c8:d0:49:8b:db:80:0b:71:61:9b:50:81:f9:8c: 85:f4:fb:79:b9:af:82:6c:8a:d1:b7:4b:ec:f4:2c: de:d6:0a:af:86:b0:85:ce:9f:67:ed:5b:6f:2c:0a: cc:65:88:bb:05:3f:de:49:a6:97:18:b8:c3:0d:f1: a7:b7:06:3a:03:55:4c:94:7f:11:8c:6d:42:36:6b: f5:69:a8:c5:f7:92:79:d4:02:43:d3:af:4e:dc:41: 16:58:b8:6f:57:df:5d:2f:4c:e3:13:55:39:4c:41: 8f:11:59:8a:e1:41:34:c0:6d:79:f6:52:ab:55:df: d5:e1:32:fa:8c:54:a7:27:5e:3b:36:51:e9:36:ed: 71:dd:2c:10:cf:a8:44:4b:3c:e8:fb:56:f2:70:ed: ad:10:16:71:f8:52:be:64:05:77:fb:f4:dd:7e:6c: 01:4b:ef:ed:a6:05:96:53:8a:74:54:fb:59:d9:89: a7:5b:b4:75:36:28:90:95:0b:7e:20:2f:6a:49:e0: 67:19:4a:bb:8d:5e:20:47:b8:db:de:d9:a0:c5:a8: 44:83:d8:1f:59:e3:7f:b4:2e:f3:3c:12:17:0a:10: 45:d7:32:69:6b:1c:ce:11:df:20:65:15:f7:38:06: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:D7:1A:B5:87:E0:A2:C5:DE:C8:F5:19:28:15:EE:FA:DF:BB:AF X509v3 Authority Key Identifier: keyid:4F:2F:D3:F0:0B:58:F1:34:A9:A8:E3:E7:DD:A8:D8:D2:0A:C0:35:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ty_T8AtY8TSpqOPn3ajY0grANSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/69F04BA81D6A11E2BB7014A808B02CD2/Ty_T8AtY8TSpqOPn3ajY0grANSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:2d:b5:00:c7:9e:7f:83:33:b4:fc:d0:98:97:2b:3c:72:3b: 20:49:10:ca:f6:f1:23:39:4f:77:11:74:6a:d0:36:d4:a2:d8: 97:ab:e2:38:3a:e9:fd:c4:d2:61:ed:bb:6c:95:2e:46:7a:b9: c1:e1:49:4d:02:29:6d:a9:34:89:ac:f2:ea:fe:27:de:94:38: cc:ce:a0:dd:e0:52:97:37:54:b1:17:e2:70:4a:2c:7c:d3:85: c7:33:ac:f6:ad:e9:4a:ee:ec:27:0a:80:86:4f:69:cb:a9:22: 22:97:10:a7:e7:ff:6b:e4:f1:c2:c1:d4:a6:58:60:f1:1a:75: 63:81:84:fe:0a:b0:02:d8:c7:7a:f8:5e:23:f7:92:bc:01:8f: 18:85:1e:4d:17:22:ba:a3:8e:58:00:bd:77:dc:6e:01:88:08: ae:8d:f6:9c:a8:c8:df:79:ae:a5:8c:4a:07:c5:42:f2:68:54: d9:21:45:49:d8:e7:a3:c5:71:76:d3:29:a5:d5:5b:39:69:a4: 82:d6:a2:11:da:43:c2:6c:50:1a:bc:6a:41:40:fa:93:4f:1c: 37:72:05:6f:13:a5:c5:0b:34:a7:c5:6f:98:78:18:15:27:60: c2:10:87:d2:e4:77:79:55:77:87:fd:02:13:af:06:48:f5:15: dd:7e:18:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKDRGMkZEM0YwMEI1OEYxMzRBOUE4RTNFN0REQThEOEQy MEFDMDM1MjcwHhcNMjYwNDE2MTQxNjUwWhcNMjYwNDIzMTQxNjUwWjAYMRYwFAYD VQQDEw02OWUwZWY1My0xOGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoM43KlP5IU7sk3Q2kHtHyNBJi9uAC3Fhm1CB+YyF9Pt5ua+CbIrRt0vs9Cze 1gqvhrCFzp9n7VtvLArMZYi7BT/eSaaXGLjDDfGntwY6A1VMlH8RjG1CNmv1aajF 95J51AJD069O3EEWWLhvV99dL0zjE1U5TEGPEVmK4UE0wG159lKrVd/V4TL6jFSn J147NlHpNu1x3SwQz6hESzzo+1bycO2tEBZx+FK+ZAV3+/TdfmwBS+/tpgWWU4p0 VPtZ2YmnW7R1NiiQlQt+IC9qSeBnGUq7jV4gR7jb3tmgxahEg9gfWeN/tC7zPBIX ChBF1zJpaxzOEd8gZRX3OAavqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAs31xq1 h+Cixd7I9RkoFe7637uvMB8GA1UdIwQYMBaAFE8v0/ALWPE0qajj592o2NIKwDUn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC82OUYwNEJBODFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThUU3BxT1BuM2FqWTBnckFO U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R5X1Q4QXRZOFRTcHFPUG4zYWpZMGdyQU5TYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC82OUYwNEJBODFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi9UeV9UOEF0WThU U3BxT1BuM2FqWTBnckFOU2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFy21AMeef4MztPzQmJcrPHI7IEkQyvbxIzlPdxF0atA21KLYl6viODrp/cTS Ye27bJUuRnq5weFJTQIpbak0iazy6v4n3pQ4zM6g3eBSlzdUsRficEosfNOFxzOs 9q3pSu7sJwqAhk9py6kiIpcQp+f/a+TxwsHUplhg8Rp1Y4GE/gqwAtjHevheI/eS vAGPGIUeTRciuqOOWAC9d9xuAYgIro32nKjI33mupYxKB8VC8mhU2SFFSdjno8Vx dtMppdVbOWmkgtaiEdpDwmxQGrxqQUD6k08cN3IFbxOlxQs0p8VvmHgYFSdgwhCH 0uR3eVV3h/0CE68GSPUV3X4Yhg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:20:28 2026 by rpki-client