$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: GogUwiEjcMuzwN124XzOCYZa7K7C1Qg+UriW/0218iM= Subject key identifier: A3:68:8C:7D:A4:CA:36:E8:C1:69:1A:05:A4:C6:2B:F6:B6:EE:7A:6F Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 11D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 11CD Signing time: Thu 16 Apr 2026 17:06:13 +0000 Manifest this update: Thu 16 Apr 2026 17:06:13 +0000 Manifest next update: Thu 23 Apr 2026 17:06:13 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: ZvVamsKfKFqOGzYSJ3ajpHPwmooq0CsdnLC1GbslKYc=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: RlrWnPy3I+hL88VTB83v1hpmck9uNtm5upq6PTxUzuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4568 (0x11d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Apr 16 17:06:13 2026 GMT Not After : Apr 23 17:06:13 2026 GMT Subject: CN=69e11705-411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:59:f3:d7:a8:3f:76:48:4a:43:77:99:e8: 5e:a8:42:9f:52:81:0b:54:83:45:c7:6b:12:0a:bb: 3a:4f:6e:81:dc:94:0c:fe:f8:03:7e:e0:63:58:bb: d6:14:a1:0f:59:c7:73:d6:a0:06:0a:d8:d3:2b:13: da:15:a7:03:0e:67:8a:74:1b:72:c0:23:8b:63:a2: 09:a6:40:96:07:aa:a5:d0:2d:8c:e1:f9:bd:ac:d8: 75:14:c4:4f:ab:09:6d:6d:95:93:c6:74:b5:60:c4: 5e:43:43:4a:88:29:97:7f:50:75:12:9d:6b:06:d7: 8f:4b:f4:da:e3:e5:bb:e5:52:48:ac:71:f2:c5:25: 41:94:c9:36:05:8a:a1:2a:46:75:e8:5e:26:49:b1: ac:f8:21:6f:54:16:c5:bc:79:b2:51:f3:fc:7c:0d: 7a:2e:f3:0b:76:36:77:dc:c8:af:33:b4:ca:5d:c0: 45:89:ed:e3:68:52:02:2a:ef:4c:f8:ec:7f:77:06: 37:51:f6:c6:1d:17:9f:12:ef:27:9f:44:d8:3b:b7: e8:aa:d8:66:e7:ce:7e:8d:c2:1d:70:3c:76:51:a3: a6:48:6a:e8:74:13:27:af:10:9d:3b:18:5f:5e:04: ee:96:3d:50:9e:63:b6:61:7d:27:fe:66:f8:57:53: 25:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:68:8C:7D:A4:CA:36:E8:C1:69:1A:05:A4:C6:2B:F6:B6:EE:7A:6F X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:7f:65:00:2d:9b:b0:80:24:cb:47:7e:01:41:d7:2b:d3:01: 03:4b:74:2b:9b:a3:9c:31:ef:79:a6:54:f1:a9:fc:bb:70:d5: 13:61:c2:05:25:d1:06:57:4a:df:0b:f2:78:ec:dc:fb:16:ab: 7d:ef:d0:04:7d:c9:3a:83:78:ca:22:2b:87:75:0d:29:9f:95: 71:fd:9a:e1:71:25:3b:2a:ed:7b:b4:40:ec:cd:8b:6e:b9:23: 30:0d:6e:f5:92:29:af:f5:ed:b5:04:b2:80:fd:f6:06:d3:df: 75:e4:ee:36:2c:80:a2:c1:a5:10:03:a5:f7:0b:c8:26:06:b6: 7f:ba:39:10:e5:a0:c0:93:b9:a5:a9:e5:50:b9:08:76:7d:98: 93:df:42:57:d4:69:c9:0a:99:fb:3b:97:54:13:71:e5:a5:e4: 0f:0f:9d:cc:37:0c:9c:a2:31:de:81:e3:27:2a:3a:62:fe:0d: 71:58:69:a5:7b:7a:52:9c:c7:b6:24:7e:fc:f9:72:4c:5f:2f: eb:60:28:43:23:79:ef:92:2a:a0:36:8e:1a:f1:06:34:de:bc: 52:69:7a:42:11:6a:d9:1b:24:c8:47:0d:0f:5d:0c:78:0f:bc: a3:92:b5:a9:42:6a:96:ea:35:61:53:84:22:2a:3b:2b:98:da: 0c:0e:64:3b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjYwNDE2MTcwNjEzWhcNMjYwNDIzMTcwNjEzWjAYMRYwFAYD VQQDEw02OWUxMTcwNS00MTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfBZ89eoP3ZISkN3meheqEKfUoELVINFx2sSCrs6T26B3JQM/vgDfuBjWLvW FKEPWcdz1qAGCtjTKxPaFacDDmeKdBtywCOLY6IJpkCWB6ql0C2M4fm9rNh1FMRP qwltbZWTxnS1YMReQ0NKiCmXf1B1Ep1rBtePS/Ta4+W75VJIrHHyxSVBlMk2BYqh KkZ16F4mSbGs+CFvVBbFvHmyUfP8fA16LvMLdjZ33MivM7TKXcBFie3jaFICKu9M +Ox/dwY3UfbGHRefEu8nn0TYO7foqthm585+jcIdcDx2UaOmSGrodBMnrxCdOxhf XgTulj1QnmO2YX0n/mb4V1MlUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKNojH2k yjbowWkaBaTGK/a27npvMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABX9lAC2bsIAky0d+AUHXK9MBA0t0K5ujnDHveaZU8an8u3DVE2HCBSXRBldK 3wvyeOzc+xarfe/QBH3JOoN4yiIrh3UNKZ+Vcf2a4XElOyrte7RA7M2LbrkjMA1u 9ZIpr/XttQSygP32BtPfdeTuNiyAosGlEAOl9wvIJga2f7o5EOWgwJO5panlULkI dn2Yk99CV9RpyQqZ+zuXVBNx5aXkDw+dzDcMnKIx3oHjJyo6Yv4NcVhppXt6UpzH tiR+/PlyTF8v62AoQyN575IqoDaOGvEGNN68Uml6QhFq2RskyEcND10MeA+8o5K1 qUJqluo1YVOEIio7K5jaDA5kOw== -----END CERTIFICATE-----Generated at Fri Apr 17 07:57:57 2026 by rpki-client