$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft File: VCuU2GJc9xGWT9E3QSldJ616kAQ.mft (raw, json) Hash identifier: dvD+T2tSYwaEl9Uga9Nf8xntr/xieeDt6qHwXUzY0BI= Subject key identifier: AC:04:ED:F2:C4:AB:3D:DA:FA:9B:54:E2:01:50:88:DE:0A:65:DA:6B Authority key identifier: 54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 Certificate issuer: /CN=A917B520/serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Certificate serial: 02B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft Manifest number: 0286 Signing time: Fri 17 Apr 2026 02:23:31 +0000 Manifest this update: Fri 17 Apr 2026 02:23:30 +0000 Manifest next update: Fri 24 Apr 2026 02:23:30 +0000 Files and hashes: 1: VCuU2GJc9xGWT9E3QSldJ616kAQ.crl (hash: vNqoyyvl71kHtujeWojR2s611d/EOBeFr91tJ7xDoZg=) 2: 05F505961AA311F0A475D464C4F9AE02.roa (hash: xZbkhabGis/U5mUU9RekGm8eUQ6rFKaSmoEBRgqnHq8=) 3: 232F9552F80D11F0AED4E007706F56BC.roa (hash: 1VQhLb/1DZcPUazmrGPc7TJ13JYFfVY10cAzsAWEN8k=) 4: 020607A2498711EFBB260663C4F9AE02.roa (hash: NE7gXopF/sfzGGjBPy5TRpiqm9S4sfZVevZ1+WaB9aw=) 5: 23852F72273711F1B6AB5B98AD833773.roa (hash: P31b2FKpx48VcLnsu7CI9st3Wk7Nus+neDGiJjmbJZg=) 6: 3352C1BAECFC11EFA398671BC4F9AE02.roa (hash: ByTjShjzlXNDkMN69/J18p3VnbTj5vjjzwheoKvtWG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:23:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 688 (0x2b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=542B94D8625CF711964FD13741295D27AD7A9004 Validity Not Before: Apr 17 02:23:30 2026 GMT Not After : Apr 24 02:23:30 2026 GMT Subject: CN=69e199a3-82f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:11:9c:6e:80:31:60:53:ce:d6:0d:9e:ba: 05:7a:91:5a:8a:dd:e4:2d:59:f9:d2:5d:e1:74:d4: 40:53:99:af:a9:a8:c0:53:75:c1:d4:57:17:e9:68: 5f:92:5a:25:d0:6e:6a:f1:9b:a1:a1:3d:e5:ca:4f: 0b:c0:1a:0c:ae:61:a0:c1:56:d8:1d:42:60:de:9f: 13:f6:33:26:5a:d8:c3:39:e2:41:b9:d7:65:cd:9e: 3b:20:bc:62:d6:83:af:ec:d2:83:9c:83:e3:21:5e: 47:a2:86:53:0c:6f:fd:ef:9e:ac:09:ef:15:da:70: c0:d3:5a:91:6b:ec:b4:04:44:d2:1d:48:af:83:e2: 92:dc:ba:c1:37:cd:94:85:6e:41:61:33:55:3d:c7: ed:6e:10:fc:0f:3d:df:bf:75:38:b5:b8:ac:51:1e: e6:62:d3:d2:29:39:97:32:91:25:ae:cd:28:eb:99: 14:6a:bc:97:47:b1:c5:fc:84:d0:20:f7:3c:6e:c5: 81:d2:17:2f:0c:5f:c5:c3:2c:f0:76:de:b7:61:44: 6b:a9:02:af:10:dc:32:6f:81:ed:89:a0:0f:a8:ce: ff:9a:da:ac:28:5a:10:cf:0e:66:43:fb:fc:16:57: 36:1a:68:f0:30:88:fe:c7:99:14:49:65:71:ab:6e: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:04:ED:F2:C4:AB:3D:DA:FA:9B:54:E2:01:50:88:DE:0A:65:DA:6B X509v3 Authority Key Identifier: keyid:54:2B:94:D8:62:5C:F7:11:96:4F:D1:37:41:29:5D:27:AD:7A:90:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VCuU2GJc9xGWT9E3QSldJ616kAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/161D4C0AE4CA11EDA414E259C4F9AE02/VCuU2GJc9xGWT9E3QSldJ616kAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:20:f8:b3:ce:d0:07:99:d2:2f:9e:e2:39:74:86:f7:a9:c1: 56:16:42:92:fb:d8:e5:08:af:76:8c:f7:fc:56:06:86:63:55: 92:84:7d:a8:ee:14:09:83:0f:51:c5:9b:57:f2:4a:0b:77:57: b1:6d:d1:d5:fe:cd:13:17:28:aa:8a:fb:3b:a7:2e:18:ba:41: df:86:41:1e:9a:36:ec:06:e2:e3:dd:4f:aa:49:c8:02:54:a1: 45:ac:c2:d5:f4:7c:86:7d:d9:21:1a:d3:20:73:09:42:e7:1c: db:f5:d1:ea:33:c3:b1:a8:0c:4d:1e:1b:e6:a6:70:d6:f2:b5: 7f:b6:aa:c3:ab:c6:25:56:cb:2a:e0:1e:d6:7e:da:3f:4f:3d: 3d:6c:4d:ac:68:34:01:52:26:0b:12:8a:41:68:82:54:d5:83: 04:64:f2:bb:79:b9:8b:a7:ef:f7:1c:de:39:5d:7c:2e:1a:b0: f3:b4:22:63:08:f7:70:e9:ba:e6:e7:36:e8:6b:e2:85:f8:15: 5b:86:c7:35:69:58:6c:ed:05:4c:87:7a:c2:1a:98:a1:c5:71: a6:74:5d:3a:8e:03:78:73:ae:55:2e:fb:9f:45:ec:3b:84:06: 61:b0:eb:8d:74:e6:a3:25:c4:b4:6b:c6:1b:3a:9b:c0:36:36: f5:62:38:96 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDU0MkI5NEQ4NjI1Q0Y3MTE5NjRGRDEzNzQxMjk1RDI3 QUQ3QTkwMDQwHhcNMjYwNDE3MDIyMzMwWhcNMjYwNDI0MDIyMzMwWjAYMRYwFAYD VQQDEw02OWUxOTlhMy04MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufMRnG6AMWBTztYNnroFepFait3kLVn50l3hdNRAU5mvqajAU3XB1FcX6Whf klol0G5q8ZuhoT3lyk8LwBoMrmGgwVbYHUJg3p8T9jMmWtjDOeJBuddlzZ47ILxi 1oOv7NKDnIPjIV5HooZTDG/9756sCe8V2nDA01qRa+y0BETSHUivg+KS3LrBN82U hW5BYTNVPcftbhD8Dz3fv3U4tbisUR7mYtPSKTmXMpElrs0o65kUaryXR7HF/ITQ IPc8bsWB0hcvDF/Fwyzwdt63YURrqQKvENwyb4HtiaAPqM7/mtqsKFoQzw5mQ/v8 Flc2GmjwMIj+x5kUSWVxq24cGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKwE7fLE qz3a+ptU4gFQiN4KZdprMB8GA1UdIwQYMBaAFFQrlNhiXPcRlk/RN0EpXSetepAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC8xNjFENEMwQUU0 Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4R1dUOUUzUVNsZEo2MTZr QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZDdVUyR0pjOXhHV1Q5RTNRU2xkSjYxNmtBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC8xNjFENEMwQUU0Q0ExMUVEQTQxNEUyNTlDNEY5QUUwMi9WQ3VVMkdKYzl4 R1dUOUUzUVNsZEo2MTZrQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAayD4s87QB5nSL57iOXSG96nBVhZCkvvY5Qivdoz3/FYGhmNVkoR9qO4UCYMP UcWbV/JKC3dXsW3R1f7NExcoqor7O6cuGLpB34ZBHpo27Abi491PqknIAlShRazC 1fR8hn3ZIRrTIHMJQucc2/XR6jPDsagMTR4b5qZw1vK1f7aqw6vGJVbLKuAe1n7a P089PWxNrGg0AVImCxKKQWiCVNWDBGTyu3m5i6fv9xzeOV18Lhqw87QiYwj3cOm6 5uc26GvihfgVW4bHNWlYbO0FTId6whqYocVxpnRdOo4DeHOuVS77n0XsO4QGYbDr jXTmoyXEtGvGGzqbwDY29WI4lg== -----END CERTIFICATE-----Generated at Sat Apr 18 05:00:45 2026 by rpki-client