$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft File: DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json) Hash identifier: TrznE9LGL5RcbHGvsMThp3XoXQgl/1LvS3mxXs7lEAs= Subject key identifier: 98:D6:B3:B9:80:2D:26:6A:A5:C6:3F:FE:0F:D6:3B:20:51:98:38:2B Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D Certificate issuer: /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft Manifest number: 0834 Signing time: Thu 16 Apr 2026 20:53:39 +0000 Manifest this update: Thu 16 Apr 2026 20:53:39 +0000 Manifest next update: Thu 23 Apr 2026 20:53:39 +0000 Files and hashes: 1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: VpyUluHqUay00W0zf9GetG9E6zzMfjIYvNLi24Afm40=) 2: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D Validity Not Before: Apr 16 20:53:39 2026 GMT Not After : Apr 23 20:53:39 2026 GMT Subject: CN=69e14c53-5092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:c8:f8:6b:20:6a:5d:f2:e7:be:fd:0a:e0: a4:5d:c7:89:25:06:29:2f:7f:d1:39:11:97:fd:a6: 12:50:37:5b:52:09:c6:a3:b0:10:1d:1c:cd:0d:f6: 11:a1:1d:23:aa:44:2b:80:65:76:88:24:de:7b:a9: da:d4:c8:b7:dd:b7:12:c9:b7:bc:b8:83:b9:04:b8: 16:87:6d:eb:62:4a:84:aa:76:36:37:8c:6b:f2:b3: 48:1b:ad:69:6d:b8:b6:ef:83:a7:14:d3:c1:63:dd: c6:e9:44:0a:c2:ed:8c:e3:88:45:8c:9b:8d:7e:22: f7:9f:47:78:6a:80:e9:15:03:7d:e0:dd:a0:a6:92: 58:31:7c:dd:77:99:41:d8:fa:a7:97:c4:2a:de:3b: 52:fa:18:b9:84:7e:8e:7c:3b:ab:af:f5:1d:35:1b: 93:73:b0:4a:22:c8:b4:10:b4:cc:98:a4:58:d7:d1: 68:a1:e4:17:e9:69:66:65:e0:c9:63:3e:fd:93:3f: dd:09:e6:b6:95:26:5b:70:9b:23:1e:8e:7b:05:df: 50:d0:24:d5:8f:24:6d:45:ec:18:4d:0e:af:db:d4: 4c:c1:ec:e6:a1:d7:f3:0b:9d:03:8c:bf:e6:20:51: 9c:38:3d:c5:34:bf:80:ff:67:e4:25:cb:b4:15:88: b6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:B3:B9:80:2D:26:6A:A5:C6:3F:FE:0F:D6:3B:20:51:98:38:2B X509v3 Authority Key Identifier: keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:65:8a:1e:21:29:c2:7c:c0:4f:02:04:c1:84:90:17:59:42: 65:84:91:b9:53:78:25:bc:c1:23:b1:d4:f4:db:e1:ef:0c:6a: 38:f3:06:32:74:6b:bd:76:54:64:76:15:3e:f6:e4:16:f2:97: ca:40:04:24:e0:61:2e:be:c0:8d:29:d1:8b:2d:d9:71:3a:af: aa:f0:7b:c3:e0:71:4f:58:b4:54:a6:8d:c5:a7:e8:3b:40:2f: 62:0d:02:ea:7c:89:41:54:2a:ae:31:84:5f:c0:17:fc:99:18: e0:c5:2e:60:11:2f:1a:57:71:2c:1a:99:fe:01:c3:cb:1f:f0: d7:8c:16:34:71:67:7c:84:a6:af:9c:94:1e:51:96:92:8f:e4: f9:f9:34:f3:01:1d:ab:3d:e7:12:2f:36:b8:f3:49:87:de:30: a9:11:27:95:b7:87:d5:75:19:f9:89:35:ad:ca:0d:14:70:26: 1d:b9:7f:1f:28:ec:3c:a4:13:ea:0d:5f:4c:93:e6:68:5b:92: 59:e1:cd:bc:84:99:cf:1a:61:db:0d:a0:3c:85:26:27:8c:13: 39:ac:89:f9:34:33:4d:13:e1:5a:cd:30:b0:1b:d8:f5:92:fa: 61:f4:31:60:03:39:d8:e6:85:b1:71:a2:cd:85:2f:7a:32:9b: 06:52:2b:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MUUxMTAvBgNVBAUTKDBDNDdFREUzMDQ4RTM1QTZFNkU4Q0IwQ0U0NEZDODQz NzI3MUVCM0QwHhcNMjYwNDE2MjA1MzM5WhcNMjYwNDIzMjA1MzM5WjAYMRYwFAYD VQQDEw02OWUxNGM1My01MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAws7I+Gsgal3y5779CuCkXceJJQYpL3/RORGX/aYSUDdbUgnGo7AQHRzNDfYR oR0jqkQrgGV2iCTee6na1Mi33bcSybe8uIO5BLgWh23rYkqEqnY2N4xr8rNIG61p bbi274OnFNPBY93G6UQKwu2M44hFjJuNfiL3n0d4aoDpFQN94N2gppJYMXzdd5lB 2Pqnl8Qq3jtS+hi5hH6OfDurr/UdNRuTc7BKIsi0ELTMmKRY19FooeQX6WlmZeDJ Yz79kz/dCea2lSZbcJsjHo57Bd9Q0CTVjyRtRewYTQ6v29RMwezmodfzC50DjL/m IFGcOD3FNL+A/2fkJcu0FYi2GQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjWs7mA LSZqpcY//g/WOyBRmDgrMB8GA1UdIwQYMBaAFAxH7eMEjjWm5ujLDORPyENyces9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUxRS81OUNERDU0QTBG RTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05hYm02TXNNNUVfSVEzSng2 ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RFZnQ0d1NPTmFibTZNc001RV9JUTNKeDZ6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUxRS81OUNERDU0QTBGRTkxMUVCOUYzMEM3MjVDNEY5QUUwMi9ERWZ0NHdTT05h Ym02TXNNNUVfSVEzSng2ejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ2WKHiEpwnzATwIEwYSQF1lCZYSRuVN4JbzBI7HU9Nvh7wxqOPMGMnRrvXZU ZHYVPvbkFvKXykAEJOBhLr7AjSnRiy3ZcTqvqvB7w+BxT1i0VKaNxafoO0AvYg0C 6nyJQVQqrjGEX8AX/JkY4MUuYBEvGldxLBqZ/gHDyx/w14wWNHFnfISmr5yUHlGW ko/k+fk08wEdqz3nEi82uPNJh94wqREnlbeH1XUZ+Yk1rcoNFHAmHbl/HyjsPKQT 6g1fTJPmaFuSWeHNvISZzxph2w2gPIUmJ4wTOayJ+TQzTRPhWs0wsBvY9ZL6YfQx YAM52OaFsXGizYUvejKbBlIrXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:55 2026 by rpki-client