$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft File: wK73B39SYiVnF5rOVq1e6M1kYE4.mft (raw, json) Hash identifier: 7cQpkYE3dTbONvscWLKw0dBMqlB7l1LgkDO03Aai8XI= Subject key identifier: AE:51:45:ED:52:30:AE:24:88:9D:F9:F0:DD:5D:B9:F2:94:17:96:7C Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E Certificate issuer: /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft Manifest number: 01D3 Signing time: Sun 19 Apr 2026 03:23:10 +0000 Manifest this update: Sun 19 Apr 2026 03:23:10 +0000 Manifest next update: Sun 26 Apr 2026 03:23:10 +0000 Files and hashes: 1: wK73B39SYiVnF5rOVq1e6M1kYE4.crl (hash: SvX3aaP5JJCKjqIBETAdmOAKOU0GY9v40uOMbQu4tA0=) 2: 6307B34A7CAD11EE9E7B9434C4F9AE02.roa (hash: 6WkzCxquW5lDfA6lzmSq2tT3dgU9Pqrs3T41zMdhl0M=) 3: 3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (hash: HisRiW5EWGfUY7tpMgN5Z0zrlCM3EcURz9NoUEQR3wA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 03:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E Validity Not Before: Apr 19 03:23:10 2026 GMT Not After : Apr 26 03:23:10 2026 GMT Subject: CN=69e44a9e-4ba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:fa:e5:df:ed:0a:09:e7:e0:07:59:d7:11: 14:8f:51:95:4c:ba:53:2d:0e:22:f0:26:f5:7d:0c: ba:66:79:e3:ea:16:b3:36:6f:fb:2a:a5:00:b4:29: 1b:c1:18:a7:a4:bb:0d:db:bf:2e:05:e6:5c:37:0a: 2d:7a:a8:dd:92:c4:58:1b:6f:56:a0:59:5b:18:ed: 24:e3:e6:83:65:06:3e:79:36:57:49:6b:d6:d1:71: 26:34:d5:0c:cb:fa:33:97:8d:0e:90:3e:93:7a:ba: b7:20:5c:ee:4f:98:7d:48:76:c9:d1:57:0e:c7:b9: fa:f1:1c:34:9e:49:df:57:b7:66:6d:7f:61:fa:3d: 71:74:e0:c4:8e:c9:f9:88:a5:47:cb:61:2f:b2:2c: c9:f2:05:df:ce:c0:ea:d3:8f:5b:69:46:0e:00:b8: dd:7f:a4:ef:b5:ba:db:95:74:12:71:e4:83:c0:9b: 3a:60:82:61:44:91:55:86:f2:65:e6:c1:57:56:ce: e7:22:ae:25:02:3a:ef:e5:74:69:5a:b5:46:a1:e2: cd:3f:1d:ca:5f:a2:42:df:e0:26:ea:9e:0c:59:31: 4c:2a:d5:de:84:58:a7:23:3b:41:11:cb:a2:8d:c2: 51:a9:3a:7c:8b:0a:c6:f3:d7:ea:4e:86:1c:f9:82: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:51:45:ED:52:30:AE:24:88:9D:F9:F0:DD:5D:B9:F2:94:17:96:7C X509v3 Authority Key Identifier: keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6a:03:21:66:e1:8a:d9:19:2c:cd:af:8b:9a:0d:ed:ed:1a: 90:26:33:03:ce:e5:85:a1:57:fe:70:a8:b7:b9:da:5b:a6:64: b7:97:77:24:ac:e8:a4:5b:74:20:30:8e:e9:0d:a9:bd:55:e1: dd:3b:91:a0:d4:af:82:e7:9a:db:3e:5f:d4:f3:91:72:f4:71: 42:27:42:1a:da:77:82:c0:16:34:b3:ec:5e:4f:c4:78:64:47: 5e:51:f0:3e:55:3d:19:c4:2e:6b:df:51:ca:43:d7:ca:97:e6: f8:90:66:cd:4e:c1:4f:7c:fe:c9:e9:4c:9b:9a:60:44:10:55: de:d6:1d:46:95:bd:e8:74:70:e1:39:c8:a4:ce:34:1d:cd:bd: 9a:59:37:8f:9f:be:59:fa:e0:8c:6f:04:5e:08:5d:99:de:70: 4d:2a:be:90:af:1a:a2:2f:00:99:73:89:56:ba:e4:d7:52:63: e0:38:b8:51:ec:1a:01:3a:e4:c4:97:78:1b:50:23:f5:1a:ba: 46:67:a6:68:78:66:58:6d:59:44:f0:31:5d:a9:45:c3:df:6b: 61:12:b2:96:69:27:c1:b8:9c:ad:1f:79:65:25:b9:7d:4b:a5: 55:c3:7f:5c:3d:a5:1a:8c:d2:e2:3f:52:05:92:16:87:af:c7: 56:a5:b1:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwRjYxMTAvBgNVBAUTKEMwQUVGNzA3N0Y1MjYyMjU2NzE3OUFDRTU2QUQ1RUU4 Q0Q2NDYwNEUwHhcNMjYwNDE5MDMyMzEwWhcNMjYwNDI2MDMyMzEwWjAYMRYwFAYD VQQDEw02OWU0NGE5ZS00YmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHr65d/tCgnn4AdZ1xEUj1GVTLpTLQ4i8Cb1fQy6Znnj6hazNm/7KqUAtCkb wRinpLsN278uBeZcNwoteqjdksRYG29WoFlbGO0k4+aDZQY+eTZXSWvW0XEmNNUM y/ozl40OkD6Terq3IFzuT5h9SHbJ0VcOx7n68Rw0nknfV7dmbX9h+j1xdODEjsn5 iKVHy2EvsizJ8gXfzsDq049baUYOALjdf6TvtbrblXQSceSDwJs6YIJhRJFVhvJl 5sFXVs7nIq4lAjrv5XRpWrVGoeLNPx3KX6JC3+Am6p4MWTFMKtXehFinIztBEcui jcJRqTp8iwrG89fqToYc+YIPKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5RRe1S MK4kiJ358N1dufKUF5Z8MB8GA1UdIwQYMBaAFMCu9wd/UmIlZxeazlatXujNZGBO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjBGNi9GRUUwNUJFQzdD QUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lpVm5GNXJPVnExZTZNMWtZ RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dLNzNCMzlTWWlWbkY1ck9WcTFlNk0xa1lFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjBGNi9GRUUwNUJFQzdDQUMxMUVFOEEyODg0NkZDNEY5QUUwMi93SzczQjM5U1lp Vm5GNXJPVnExZTZNMWtZRTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZmoDIWbhitkZLM2vi5oN7e0akCYzA87lhaFX/nCot7naW6Zkt5d3JKzopFt0 IDCO6Q2pvVXh3TuRoNSvguea2z5f1PORcvRxQidCGtp3gsAWNLPsXk/EeGRHXlHw PlU9GcQua99RykPXypfm+JBmzU7BT3z+yelMm5pgRBBV3tYdRpW96HRw4TnIpM40 Hc29mlk3j5++WfrgjG8EXghdmd5wTSq+kK8aoi8AmXOJVrrk11Jj4Di4UewaATrk xJd4G1Aj9Rq6RmemaHhmWG1ZRPAxXalFw99rYRKylmknwbicrR95ZSW5fUulVcN/ XD2lGozS4j9SBZIWh6/HVqWxBg== -----END CERTIFICATE-----Generated at Sun Apr 19 10:18:38 2026 by rpki-client