$ rpki-client -vvf rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft File: pYrazvnSRVOlVka1puvM6rGfL7w.mft (raw, json) Hash identifier: GP1ammbjkTCcxUomCGFUwTnz/wD6HivNmUKN6AgtW1U= Subject key identifier: 29:35:EA:5E:C1:8F:7F:7E:A1:F4:96:35:AE:C4:56:B9:2B:7C:D8:8B Authority key identifier: A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC Certificate issuer: /CN=A9174C7A/serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft Manifest number: A5 Signing time: Fri 17 Apr 2026 06:58:18 +0000 Manifest this update: Fri 17 Apr 2026 06:58:18 +0000 Manifest next update: Fri 24 Apr 2026 06:58:18 +0000 Files and hashes: 1: pYrazvnSRVOlVka1puvM6rGfL7w.crl (hash: xXYVd08PpFGn7JBqs1rcvKvaZqGAWUTqnB2qnCP48lY=) 2: 5B118C12986011F0A5423187C4F9AE02.roa (hash: Nv3VGs0s4nLweSbJ3JGcdt+LncTqoSFHEUO8LJ8JE2k=) 3: 8D052914404911F0A4BD357BC4F9AE02.roa (hash: HDAJrdViuU7kZQtbBcD9tgS1zcOCf1eCW5LDFit/g6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174C7A, serialNumber=A58ADACEF9D24553A55646B5A6EBCCEAB19F2FBC Validity Not Before: Apr 17 06:58:18 2026 GMT Not After : Apr 24 06:58:18 2026 GMT Subject: CN=69e1da0a-0872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:df:56:d2:b6:26:fd:8b:a3:b4:0b:ae:92: 86:11:76:98:8f:8b:e3:89:12:6c:2c:c9:48:f1:21: f1:5e:c5:0d:76:35:3c:5d:b2:9a:16:5d:a4:19:58: 7a:71:68:fb:cf:cf:52:b5:d3:86:30:78:8d:21:bd: c3:80:24:da:39:6e:dc:e5:b7:20:6b:ce:d5:a4:ba: 4c:ff:9c:f8:63:b8:79:d9:6f:44:2b:dd:93:76:de: b1:d9:93:d1:b8:34:27:68:e5:53:4d:99:86:d3:54: 33:1d:1e:36:7b:58:2d:5e:f6:41:bb:41:15:0e:63: d5:9f:9a:b2:40:cc:d0:26:24:03:b2:f5:4c:b0:6b: 1d:c5:c0:0a:ac:c5:47:03:46:4f:cd:90:75:63:23: 36:97:66:63:f3:76:63:91:1f:ec:96:92:65:7f:24: 14:7a:25:76:e3:4f:76:fa:08:ce:3c:6a:5e:c4:25: c4:df:d5:57:7b:b8:81:9a:4b:b5:1c:46:10:bf:9d: d5:de:6b:23:8c:ad:47:e4:6d:4b:f4:73:14:09:0b: f2:70:1a:36:a6:d5:ea:d2:62:9c:36:8e:1a:2b:48: 2a:7f:94:be:0e:cc:80:60:4d:e4:46:e4:9c:2d:22: d1:37:dd:c8:bd:0b:dc:b1:e4:1d:b8:64:41:ff:10: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:35:EA:5E:C1:8F:7F:7E:A1:F4:96:35:AE:C4:56:B9:2B:7C:D8:8B X509v3 Authority Key Identifier: keyid:A5:8A:DA:CE:F9:D2:45:53:A5:56:46:B5:A6:EB:CC:EA:B1:9F:2F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pYrazvnSRVOlVka1puvM6rGfL7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174C7A/44F14AFC404611F09BF0D84FC4F9AE02/pYrazvnSRVOlVka1puvM6rGfL7w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6b:5b:44:02:5e:04:7f:92:1c:da:42:4e:64:81:cd:e3:c5: 2c:2c:60:93:c6:a8:1a:54:dd:a1:04:f6:3c:11:b8:17:8c:b4: fe:67:be:cf:3b:d0:c4:6f:b7:3a:31:ee:e0:8e:dd:25:43:7c: 24:5b:02:02:16:05:3c:14:3d:40:28:59:5a:c7:e7:1b:6e:fe: 4b:f6:17:ac:00:09:94:6f:5b:9d:fe:06:13:9a:4b:13:31:04: 03:d7:e4:5b:c2:32:c4:03:ca:69:20:2b:e0:f8:fc:10:d2:4f: 14:2e:13:2e:5a:22:47:5f:df:a5:be:1f:b5:48:01:96:8a:ae: 28:4c:3b:e3:e8:6f:9c:1f:53:df:89:79:23:18:a2:57:54:64: df:ee:3c:5e:29:25:b0:a3:4f:b9:4f:38:89:45:e6:3e:e9:c5: 07:3d:97:94:ff:82:97:d6:a7:64:28:c5:30:4b:c9:c4:ed:d4: 58:93:4b:16:de:70:dc:d7:c3:5e:fa:d4:03:ca:44:67:39:74: bd:01:b2:3b:0e:bc:ec:80:22:e5:e2:89:59:85:e4:2d:f9:03: e3:f3:e6:97:bc:55:c0:76:2d:eb:63:45:a4:f0:30:61:f3:74: f2:d7:4d:4d:ac:23:70:aa:90:ea:0e:f3:af:a2:4e:4d:10:c7: b5:4a:26:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDN0ExMTAvBgNVBAUTKEE1OEFEQUNFRjlEMjQ1NTNBNTU2NDZCNUE2RUJDQ0VB QjE5RjJGQkMwHhcNMjYwNDE3MDY1ODE4WhcNMjYwNDI0MDY1ODE4WjAYMRYwFAYD VQQDEw02OWUxZGEwYS0wODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uzfVtK2Jv2Lo7QLrpKGEXaYj4vjiRJsLMlI8SHxXsUNdjU8XbKaFl2kGVh6 cWj7z89StdOGMHiNIb3DgCTaOW7c5bcga87VpLpM/5z4Y7h52W9EK92Tdt6x2ZPR uDQnaOVTTZmG01QzHR42e1gtXvZBu0EVDmPVn5qyQMzQJiQDsvVMsGsdxcAKrMVH A0ZPzZB1YyM2l2Zj83ZjkR/slpJlfyQUeiV24092+gjOPGpexCXE39VXe7iBmku1 HEYQv53V3msjjK1H5G1L9HMUCQvycBo2ptXq0mKcNo4aK0gqf5S+DsyAYE3kRuSc LSLRN93IvQvcseQduGRB/xA4fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCk16l7B j39+ofSWNa7EVrkrfNiLMB8GA1UdIwQYMBaAFKWK2s750kVTpVZGtabrzOqxny+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NEM3QS80NEYxNEFGQzQw NDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JWT2xWa2ExcHV2TTZyR2ZM N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BZcmF6dm5TUlZPbFZrYTFwdXZNNnJHZkw3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NEM3QS80NEYxNEFGQzQwNDYxMUYwOUJGMEQ4NEZDNEY5QUUwMi9wWXJhenZuU1JW T2xWa2ExcHV2TTZyR2ZMN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAR2tbRAJeBH+SHNpCTmSBzePFLCxgk8aoGlTdoQT2PBG4F4y0/me+zzvQxG+3 OjHu4I7dJUN8JFsCAhYFPBQ9QChZWsfnG27+S/YXrAAJlG9bnf4GE5pLEzEEA9fk W8IyxAPKaSAr4Pj8ENJPFC4TLloiR1/fpb4ftUgBloquKEw74+hvnB9T34l5Ixii V1Rk3+48XiklsKNPuU84iUXmPunFBz2XlP+Cl9anZCjFMEvJxO3UWJNLFt5w3NfD XvrUA8pEZzl0vQGyOw687IAi5eKJWYXkLfkD4/Pml7xVwHYt62NFpPAwYfN08tdN TawjcKqQ6g7zr6JOTRDHtUomQA== -----END CERTIFICATE-----Generated at Fri Apr 17 10:29:37 2026 by rpki-client