$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: jn0o8CF04RqbJQsT2Jd+M/vLfJLMqGUw17tr3LtmWls= Subject key identifier: 0F:15:09:F4:ED:F2:63:B8:7A:E9:EA:AF:10:FE:5C:59:0E:13:17:AD Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0D51 Signing time: Thu 16 Apr 2026 17:54:23 +0000 Manifest this update: Thu 16 Apr 2026 17:54:23 +0000 Manifest next update: Thu 23 Apr 2026 17:54:23 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: XINhJTdGc2Tu0vjI6XEigOA7Q1ZFWFzmpPcz3fLGpf4=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: UDW+dsOCznAjSoGbOEEbQ9JmE9TBtIe+eSGscHflZ+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Apr 16 17:54:23 2026 GMT Not After : Apr 23 17:54:23 2026 GMT Subject: CN=69e1224f-67ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9c:44:c5:02:d0:01:fe:9f:76:86:8f:81:30: a5:57:c3:67:f9:b2:11:71:a0:d3:f2:27:37:30:4e: cc:aa:1b:87:47:2a:94:c4:d1:d5:79:7c:05:91:0e: be:df:31:25:a1:65:16:87:7e:4d:1f:5c:e4:99:76: 74:db:b9:86:b5:d4:0c:a4:42:dd:ad:f4:6b:11:7f: a5:25:c3:21:0c:d6:e9:84:d1:8d:4a:d8:e6:36:d9: 43:bf:9e:70:1b:c4:b2:92:9f:2b:1e:33:e2:3e:9c: 8e:d0:13:83:ab:74:a3:58:86:4e:ac:e8:34:e0:75: 3a:06:0c:e6:33:3e:d6:4b:df:8d:0e:9e:58:5c:7a: a2:9c:3b:48:6f:f2:e2:9a:c8:1a:e1:38:8d:43:6d: a5:ff:99:e8:be:42:3a:c7:4b:76:23:ff:86:3b:f4: 90:90:a4:4d:d4:fa:3b:e6:6b:5e:b0:66:f0:ed:ac: b0:19:fa:74:6c:7d:fc:5c:22:60:c5:9c:21:bb:7d: 6b:a9:9d:69:18:2a:ce:46:49:79:60:f4:88:bd:82: 9d:2b:07:6c:4d:29:f1:51:88:da:3d:97:72:62:9f: 7a:f4:fb:de:3f:7e:98:c7:82:65:5a:b2:e8:cc:94: c9:09:9a:46:50:b1:94:42:89:cd:1b:48:d2:97:47: b9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:15:09:F4:ED:F2:63:B8:7A:E9:EA:AF:10:FE:5C:59:0E:13:17:AD X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:fa:9d:9f:ff:46:82:ad:d8:70:65:c9:b9:55:a0:0f:1b:8a: 2d:dc:0f:7b:71:a1:10:1b:4e:8e:9b:ff:60:c7:f7:b1:b6:42: 26:06:5e:7c:ec:42:d8:5f:83:43:82:37:62:d0:e8:94:64:0d: db:ea:a5:df:68:30:cd:48:62:d7:8c:a8:62:d4:76:8a:fd:18: 67:35:90:f1:df:4c:92:66:94:01:60:63:d3:c5:c6:3b:0c:37: ea:26:a5:6d:ca:68:0f:ae:c6:75:fc:82:84:ad:40:78:c3:f3: ce:ad:5f:b9:77:17:e1:a2:3d:ea:ed:aa:68:0c:4d:9f:a8:27: 8d:3d:49:0b:3b:67:a9:8f:28:20:4e:6d:52:03:93:35:b7:db: e5:8e:c6:bf:3d:e4:b1:b9:5e:60:42:25:6d:65:ec:b2:a9:31: d6:ea:73:2d:d2:3d:7a:f2:2c:21:71:91:98:0d:c4:d6:3c:22: 1f:7f:b2:f4:64:32:27:c3:94:bc:4a:78:2e:d5:02:0a:2d:3e: 18:94:86:96:fb:fd:fb:56:ba:ce:04:db:53:e0:b1:b5:96:b1: e0:45:d0:b9:59:35:63:28:ac:9f:6c:73:c1:84:5e:61:97:11: 91:cd:32:07:6f:1f:34:f7:c6:fd:94:88:2b:dd:2b:f0:28:fd: c2:a0:db:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjYwNDE2MTc1NDIzWhcNMjYwNDIzMTc1NDIzWjAYMRYwFAYD VQQDEw02OWUxMjI0Zi02N2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JxExQLQAf6fdoaPgTClV8Nn+bIRcaDT8ic3ME7MqhuHRyqUxNHVeXwFkQ6+ 3zEloWUWh35NH1zkmXZ027mGtdQMpELdrfRrEX+lJcMhDNbphNGNStjmNtlDv55w G8Sykp8rHjPiPpyO0BODq3SjWIZOrOg04HU6BgzmMz7WS9+NDp5YXHqinDtIb/Li msga4TiNQ22l/5novkI6x0t2I/+GO/SQkKRN1Po75mtesGbw7aywGfp0bH38XCJg xZwhu31rqZ1pGCrORkl5YPSIvYKdKwdsTSnxUYjaPZdyYp969PveP36Yx4JlWrLo zJTJCZpGULGUQonNG0jSl0e5DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA8VCfTt 8mO4eunqrxD+XFkOExetMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtPqdn/9Ggq3YcGXJuVWgDxuKLdwPe3GhEBtOjpv/YMf3sbZCJgZefOxC2F+D Q4I3YtDolGQN2+ql32gwzUhi14yoYtR2iv0YZzWQ8d9MkmaUAWBj08XGOww36ial bcpoD67GdfyChK1AeMPzzq1fuXcX4aI96u2qaAxNn6gnjT1JCztnqY8oIE5tUgOT Nbfb5Y7Gvz3ksbleYEIlbWXssqkx1upzLdI9evIsIXGRmA3E1jwiH3+y9GQyJ8OU vEp4LtUCCi0+GJSGlvv9+1a6zgTbU+CxtZax4EXQuVk1Yyisn2xzwYReYZcRkc0y B28fNPfG/ZSIK90r8Cj9wqDbuw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:36:54 2026 by rpki-client