$ rpki-client -vvf rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft File: Ak2PFao5dyF1iDou3BZQFOGSiho.mft (raw, json) Hash identifier: UhdV293ONbeniI6RG4uxO13rEukGxSIw1kigq0i+Cvc= Subject key identifier: 8A:03:C3:A4:0B:C0:5B:1E:EB:50:E4:E6:29:51:24:04:31:A3:69:C9 Authority key identifier: 02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A Certificate issuer: /CN=A917B520/serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft Manifest number: 81 Signing time: Fri 17 Apr 2026 02:23:25 +0000 Manifest this update: Fri 17 Apr 2026 02:23:25 +0000 Manifest next update: Fri 24 Apr 2026 02:23:25 +0000 Files and hashes: 1: Ak2PFao5dyF1iDou3BZQFOGSiho.crl (hash: fcmYDFQtyP1KN1a+NbXEkOBkFc+SewsPMi2cUA9EY8Y=) 2: 007686A0D3DD11F08C79D853C4F9AE02.roa (hash: snafex4e2SJ4Z7RULXkopBIE0X2g6JmA9mTt3bV4/r4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B520, serialNumber=024D8F15AA39772175883A2EDC165014E1928A1A Validity Not Before: Apr 17 02:23:25 2026 GMT Not After : Apr 24 02:23:25 2026 GMT Subject: CN=69e1999d-c4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:42:c4:e5:b7:52:f6:3c:08:69:a0:84:9f: bb:f6:e5:56:13:e4:29:e9:ac:8e:aa:da:36:ed:37: 5a:2b:aa:d2:6d:f4:8e:20:c5:17:7a:d2:3e:26:90: bb:eb:98:d2:8f:bc:de:0b:c8:f7:e2:f6:db:50:f8: c0:74:f7:ba:32:da:2b:a9:52:49:af:6d:e4:bf:03: bf:f3:36:0d:3b:a5:25:a8:cb:aa:11:ee:a5:43:5d: 69:51:40:16:0a:b4:67:46:25:81:e7:ed:1c:43:41: b7:6b:07:55:a9:93:94:c5:d5:ae:28:4e:89:7d:fe: de:58:76:90:21:fd:06:0b:34:99:d0:67:a3:67:6e: 65:44:b8:bb:e5:4a:69:6b:12:67:e5:4e:b9:53:56: 4f:3b:81:69:6f:dd:ad:27:67:c6:d1:f4:e3:17:6a: aa:e8:58:fb:09:04:a9:e4:91:32:e6:6f:b2:23:7a: fe:fe:4d:64:fe:e8:1e:75:b7:e4:e2:43:4a:16:56: 16:53:01:b3:1e:d4:e7:73:3c:80:f8:c3:5a:6f:67: e3:4f:7f:62:3d:b4:51:e6:e8:07:29:79:34:6c:1d: 0b:0c:ea:a2:46:20:f6:eb:59:eb:49:0c:cb:e2:6a: 78:5a:f9:42:db:86:96:4f:8e:2d:dc:46:3c:68:13: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:C3:A4:0B:C0:5B:1E:EB:50:E4:E6:29:51:24:04:31:A3:69:C9 X509v3 Authority Key Identifier: keyid:02:4D:8F:15:AA:39:77:21:75:88:3A:2E:DC:16:50:14:E1:92:8A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/Ak2PFao5dyF1iDou3BZQFOGSiho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B520/4A12A33C82F411F09B74354EC4F9AE02/Ak2PFao5dyF1iDou3BZQFOGSiho.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:d7:d7:7e:b1:f4:8d:37:d3:29:14:ce:44:e6:0c:cd:82:ea: 51:91:3b:bf:8f:5b:80:27:b9:6e:2d:58:23:15:f1:13:b0:3b: 3e:86:27:26:0b:00:20:b2:1e:04:2e:20:03:ee:eb:02:8c:a6: 85:3a:87:25:b4:64:25:91:a6:5b:60:f8:99:3c:10:f5:3e:30: 95:72:9c:10:8f:0d:89:d3:ff:c5:56:f5:eb:ae:9c:8d:cf:d6: 3a:ec:9f:aa:b6:17:81:c4:b1:dd:28:e3:98:23:a7:5c:4c:c8: b7:8b:4b:45:28:2b:99:94:d9:b2:33:2e:b7:45:3a:16:6f:79: a9:fb:f9:57:f1:0b:fc:8f:37:a2:f7:2c:57:f3:32:db:8a:0d: 12:d4:0a:ae:a1:8e:af:d1:fe:3e:a6:af:2f:52:ba:11:b0:4e: 88:2b:fc:17:a5:6e:a4:ca:0f:cf:f9:a1:e3:31:7a:6e:7f:0a: f3:de:6a:9d:c0:a9:ac:e0:e3:d4:22:3b:8c:f3:ce:31:0f:32: 91:65:63:a3:76:87:e8:e6:f9:b6:55:a0:94:60:94:e0:50:fd: 26:0a:a3:f5:38:97:86:22:ff:ce:b1:e7:bc:f8:78:a5:1f:9d: 0d:ae:82:24:d5:a9:58:83:19:71:23:03:ec:0a:d8:5e:17:72: 04:2f:d2:39 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1MjAxMTAvBgNVBAUTKDAyNEQ4RjE1QUEzOTc3MjE3NTg4M0EyRURDMTY1MDE0 RTE5MjhBMUEwHhcNMjYwNDE3MDIyMzI1WhcNMjYwNDI0MDIyMzI1WjAYMRYwFAYD VQQDEw02OWUxOTk5ZC1jNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls1CxOW3UvY8CGmghJ+79uVWE+Qp6ayOqto27TdaK6rSbfSOIMUXetI+JpC7 65jSj7zeC8j34vbbUPjAdPe6MtorqVJJr23kvwO/8zYNO6UlqMuqEe6lQ11pUUAW CrRnRiWB5+0cQ0G3awdVqZOUxdWuKE6Jff7eWHaQIf0GCzSZ0GejZ25lRLi75Upp axJn5U65U1ZPO4Fpb92tJ2fG0fTjF2qq6Fj7CQSp5JEy5m+yI3r+/k1k/ugedbfk 4kNKFlYWUwGzHtTnczyA+MNab2fjT39iPbRR5ugHKXk0bB0LDOqiRiD261nrSQzL 4mp4WvlC24aWT44t3EY8aBOsGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoDw6QL wFse61Dk5ilRJAQxo2nJMB8GA1UdIwQYMBaAFAJNjxWqOXchdYg6LtwWUBThkooa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjUyMC80QTEyQTMzQzgy RjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5RjFpRG91M0JaUUZPR1Np aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyL0FrMlBGYW81ZHlGMWlEb3UzQlpRRk9HU2loby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjUyMC80QTEyQTMzQzgyRjQxMUYwOUI3NDM1NEVDNEY5QUUwMi9BazJQRmFvNWR5 RjFpRG91M0JaUUZPR1NpaG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAINfXfrH0jTfTKRTOROYMzYLqUZE7v49bgCe5bi1YIxXxE7A7PoYnJgsAILIe BC4gA+7rAoymhTqHJbRkJZGmW2D4mTwQ9T4wlXKcEI8NidP/xVb1666cjc/WOuyf qrYXgcSx3SjjmCOnXEzIt4tLRSgrmZTZsjMut0U6Fm95qfv5V/EL/I83ovcsV/My 24oNEtQKrqGOr9H+PqavL1K6EbBOiCv8F6VupMoPz/mh4zF6bn8K895qncCprODj 1CI7jPPOMQ8ykWVjo3aH6Ob5tlWglGCU4FD9Jgqj9TiXhiL/zrHnvPh4pR+dDa6C JNWpWIMZcSMD7ArYXhdyBC/SOQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:13:20 2026 by rpki-client