$ rpki-client -vvf rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft File: s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft (raw, json) Hash identifier: Jlr0F7Xsfo5RdxrkVBU6l8jCiQZBX2equlPapwPaDak= Subject key identifier: C8:6B:B2:F0:E6:2E:E2:BE:71:DE:64:67:A9:C2:29:E9:44:24:20:62 Authority key identifier: B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 Certificate issuer: /CN=A917530D/serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft Manifest number: 01B7 Signing time: Fri 17 Apr 2026 03:51:01 +0000 Manifest this update: Fri 17 Apr 2026 03:51:00 +0000 Manifest next update: Fri 24 Apr 2026 03:51:00 +0000 Files and hashes: 1: s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl (hash: 8j9fsawJPnYwWoKCIov4ZqdVDmcaMx7LVJA0gknfezs=) 2: 762CACD0B04311EF95390327C4F9AE02.roa (hash: cvBldBadb8nJSATgwrsmCmmppZB2HYAM+GSD2SpFaCg=) 3: A97CBD42A06611EFA888B57DC4F9AE02.roa (hash: 4V1R4yBz9L+Ygkp9Jd1O9idd1/44LPhkeQiPf1Qbp1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917530D, serialNumber=B3992F0D49BAF6A36FDA658E5B459469521E5B44 Validity Not Before: Apr 17 03:51:00 2026 GMT Not After : Apr 24 03:51:00 2026 GMT Subject: CN=69e1ae25-2b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:8d:85:f1:ff:7e:1b:4e:13:e6:9f:c9:d1:23: 6d:31:8e:d2:7a:80:f3:5d:33:5b:a0:da:de:5b:47: 59:2b:f8:6e:0d:e1:41:51:08:af:dd:e8:7b:44:61: 15:7c:a8:bc:8f:da:9a:7f:ed:8f:7d:bd:2d:b4:b0: ea:6d:a5:63:a2:22:8c:2f:13:6e:3e:9c:d0:1a:6f: 07:d1:2e:d7:d8:63:af:9e:43:20:5c:57:8d:59:80: 41:32:0f:1f:70:05:04:46:d0:60:17:ed:29:11:86: a5:49:06:3e:49:15:7d:d3:a5:8e:93:cd:ad:1c:e0: 97:e7:79:d8:c4:07:82:bb:01:bf:ae:6a:91:d5:49: f0:21:0c:e2:33:a0:9a:56:93:90:d1:06:2f:78:c8: 57:4b:5b:3e:ea:7f:fa:4a:09:fb:15:71:09:75:07: c3:20:cc:28:db:3e:ab:d0:2d:0f:6c:ae:c7:38:64: 7f:a6:65:ae:e2:f6:b0:d7:93:a5:b4:ba:51:12:30: eb:61:b6:fc:8b:a7:7e:c7:60:e6:86:9a:0a:76:78: 72:81:41:c0:e4:77:f1:af:14:f9:e4:4f:07:0c:ab: 1d:0f:5b:6f:0d:9f:7c:c6:dd:3d:a4:e1:49:82:25: 49:d9:12:9c:b5:49:c2:2a:76:09:3b:c8:83:90:75: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6B:B2:F0:E6:2E:E2:BE:71:DE:64:67:A9:C2:29:E9:44:24:20:62 X509v3 Authority Key Identifier: keyid:B3:99:2F:0D:49:BA:F6:A3:6F:DA:65:8E:5B:45:94:69:52:1E:5B:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s5kvDUm69qNv2mWOW0WUaVIeW0Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917530D/DD7E091CB64B11EE91463760C4F9AE02/s5kvDUm69qNv2mWOW0WUaVIeW0Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:31:47:0c:a8:0b:e2:80:b3:c6:20:55:f8:d6:a2:1c:78:8f: 2e:23:b9:7a:67:60:a0:17:3c:b1:c1:c1:4d:88:d0:3f:3b:64: 1a:de:9a:6e:e3:49:0b:05:1b:e2:e8:e8:3e:b3:2d:83:93:e9: 27:5f:c4:99:00:69:de:7a:a0:ae:5d:cd:14:cf:25:02:6a:87: 76:72:d2:24:3e:7b:a6:d4:f2:42:c7:f1:17:87:22:67:e3:cc: 71:46:3f:92:9d:1e:af:ea:a0:d7:21:5f:57:87:5e:06:1d:f4: e3:12:d9:b9:58:d8:77:b5:11:97:3b:14:7f:af:01:bc:22:45: a3:f6:cf:74:41:e9:45:d5:82:4d:84:2a:ce:28:2b:53:56:dd: 16:d4:4e:e6:4a:6e:55:7e:dd:33:25:92:85:33:fd:2e:e1:e0: fa:f8:66:0d:e6:63:38:f6:57:f1:37:53:0c:34:99:81:27:64: 3a:c3:24:ae:ea:a3:01:3a:e4:8e:e2:c7:fe:52:33:ab:9e:f2: ad:19:f9:ab:3c:08:56:76:5a:9b:46:d2:a0:1a:32:c1:78:9c: 2b:84:63:d5:e5:38:11:88:d5:8c:af:08:5b:c0:fe:7b:12:43: 47:6a:6b:26:e1:aa:0c:c3:f7:fa:3f:7d:c8:cf:e8:97:a7:f5: 9c:e0:a7:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMEQxMTAvBgNVBAUTKEIzOTkyRjBENDlCQUY2QTM2RkRBNjU4RTVCNDU5NDY5 NTIxRTVCNDQwHhcNMjYwNDE3MDM1MTAwWhcNMjYwNDI0MDM1MTAwWjAYMRYwFAYD VQQDEw02OWUxYWUyNS0yYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Y2F8f9+G04T5p/J0SNtMY7SeoDzXTNboNreW0dZK/huDeFBUQiv3eh7RGEV fKi8j9qaf+2Pfb0ttLDqbaVjoiKMLxNuPpzQGm8H0S7X2GOvnkMgXFeNWYBBMg8f cAUERtBgF+0pEYalSQY+SRV906WOk82tHOCX53nYxAeCuwG/rmqR1UnwIQziM6Ca VpOQ0QYveMhXS1s+6n/6Sgn7FXEJdQfDIMwo2z6r0C0PbK7HOGR/pmWu4vaw15Ol tLpREjDrYbb8i6d+x2DmhpoKdnhygUHA5HfxrxT55E8HDKsdD1tvDZ98xt09pOFJ giVJ2RKctUnCKnYJO8iDkHWOzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhrsvDm LuK+cd5kZ6nCKelEJCBiMB8GA1UdIwQYMBaAFLOZLw1Juvajb9pljltFlGlSHltE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwRC9ERDdFMDkxQ0I2 NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlxTnYybVdPVzBXVWFWSWVX MFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3M1a3ZEVW02OXFOdjJtV09XMFdVYVZJZVcwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwRC9ERDdFMDkxQ0I2NEIxMUVFOTE0NjM3NjBDNEY5QUUwMi9zNWt2RFVtNjlx TnYybVdPVzBXVWFWSWVXMFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJTFHDKgL4oCzxiBV+NaiHHiPLiO5emdgoBc8scHBTYjQPztkGt6abuNJCwUb 4ujoPrMtg5PpJ1/EmQBp3nqgrl3NFM8lAmqHdnLSJD57ptTyQsfxF4ciZ+PMcUY/ kp0er+qg1yFfV4deBh304xLZuVjYd7URlzsUf68BvCJFo/bPdEHpRdWCTYQqzigr U1bdFtRO5kpuVX7dMyWShTP9LuHg+vhmDeZjOPZX8TdTDDSZgSdkOsMkruqjATrk juLH/lIzq57yrRn5qzwIVnZam0bSoBoywXicK4Rj1eU4EYjVjK8IW8D+exJDR2pr JuGqDMP3+j99yM/ol6f1nOCn/g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:32:47 2026 by rpki-client