$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: qXSEcLTR5NDALdbaH9htUoznKsAEjxXtDh33D4NrJ3c= Subject key identifier: 59:1E:F9:E5:9C:32:E6:34:5E:2C:94:58:08:D7:45:05:B7:EE:43:17 Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 0523 Signing time: Fri 17 Apr 2026 01:06:25 +0000 Manifest this update: Fri 17 Apr 2026 01:06:25 +0000 Manifest next update: Fri 24 Apr 2026 01:06:25 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: p7tYREKAlDtclAUi/xP+2tw5S+T9eWGXOtXEPLclLZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Apr 17 01:06:25 2026 GMT Not After : Apr 24 01:06:25 2026 GMT Subject: CN=69e18791-8e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:11:7c:f0:3b:fe:71:f9:a5:87:4a:6f:cf: 7b:73:75:c2:a5:f9:66:a1:af:1c:1f:41:fc:18:54: 25:53:45:df:33:12:56:52:d5:32:76:ec:4b:25:cf: 40:45:e4:41:dc:ba:a3:34:37:d0:fb:17:4a:c6:e4: aa:a7:e7:1f:38:5d:64:72:5d:01:92:44:8b:24:e9: c2:49:ae:df:d9:90:19:9c:3e:ae:ec:cb:f9:bd:ef: f3:ae:af:1f:71:c3:39:16:f4:c5:e1:0e:c8:ee:41: 1b:e3:46:43:c3:f3:a9:40:ec:e4:20:10:bd:7c:b5: 87:f6:e5:08:43:01:43:43:47:d4:5b:be:03:9a:ae: 83:34:c6:c1:c2:8e:88:01:42:6f:9a:c0:f1:4b:a3: 8c:d5:a0:0c:47:ea:af:58:5d:96:7e:2f:06:fd:84: 79:65:50:af:e0:d8:bb:e0:c0:43:2b:b6:b6:ff:8e: 0f:62:71:48:82:03:93:cd:e4:b1:9b:cf:e8:f4:f0: 02:b2:21:71:32:9b:bb:1a:78:3d:ff:9c:13:37:45: e3:09:8e:8c:5e:e8:32:84:f2:cb:77:9c:ad:5e:09: 23:86:c6:64:4d:4b:aa:eb:8a:b3:ac:52:98:71:2a: 46:61:6d:38:53:89:00:33:bc:5d:cb:b7:8d:a0:0b: 5b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:1E:F9:E5:9C:32:E6:34:5E:2C:94:58:08:D7:45:05:B7:EE:43:17 X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e7:9d:39:51:02:fd:03:b9:31:45:63:20:36:20:29:28:75: 7d:7b:ff:87:12:10:af:68:4b:0e:be:a8:2d:18:5d:d6:08:8f: 2b:5c:06:f6:ef:a0:26:d9:e0:40:5c:f0:5c:3f:b3:50:e3:c2: 41:7b:6c:52:91:bb:38:3b:fc:ba:0f:de:3c:b9:c1:20:9b:73: 02:5c:e3:ef:71:c7:b1:83:47:b2:d5:2b:fd:eb:0d:4f:9a:66: ac:0e:63:64:74:bc:84:b0:c3:7c:70:4e:d4:c7:0b:52:02:02: c1:3c:63:48:c6:68:b9:d0:11:5f:75:de:cb:12:33:14:69:c2: 3c:3d:df:d9:93:c6:4a:9e:45:66:61:2c:ce:f0:5e:89:b5:3e: cf:d2:91:7b:13:f0:eb:88:6e:5d:2e:cf:81:73:06:1d:77:4b: 00:1c:d3:07:6f:29:60:e4:e5:42:eb:a5:4e:5a:0e:ef:7b:00: 0f:b2:4e:fc:77:3c:1e:2c:f3:b6:d0:96:7b:14:12:1e:bc:68: 9f:d6:ec:eb:62:7f:00:80:32:2d:99:f2:01:86:4e:75:41:6e: 69:81:df:db:df:36:45:48:e5:0a:b7:cf:32:53:2f:e4:a0:b1: e3:d5:81:04:94:18:6f:3f:a4:05:a5:77:5f:2b:32:3d:a4:a5: 76:42:22:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjYwNDE3MDEwNjI1WhcNMjYwNDI0MDEwNjI1WjAYMRYwFAYD VQQDEw02OWUxODc5MS04ZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34URfPA7/nH5pYdKb897c3XCpflmoa8cH0H8GFQlU0XfMxJWUtUyduxLJc9A ReRB3LqjNDfQ+xdKxuSqp+cfOF1kcl0BkkSLJOnCSa7f2ZAZnD6u7Mv5ve/zrq8f ccM5FvTF4Q7I7kEb40ZDw/OpQOzkIBC9fLWH9uUIQwFDQ0fUW74Dmq6DNMbBwo6I AUJvmsDxS6OM1aAMR+qvWF2Wfi8G/YR5ZVCv4Ni74MBDK7a2/44PYnFIggOTzeSx m8/o9PACsiFxMpu7Gng9/5wTN0XjCY6MXugyhPLLd5ytXgkjhsZkTUuq64qzrFKY cSpGYW04U4kAM7xdy7eNoAtbiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFke+eWc MuY0XiyUWAjXRQW37kMXMB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZuedOVEC/QO5MUVjIDYgKSh1fXv/hxIQr2hLDr6oLRhd1giPK1wG9u+gJtng QFzwXD+zUOPCQXtsUpG7ODv8ug/ePLnBIJtzAlzj73HHsYNHstUr/esNT5pmrA5j ZHS8hLDDfHBO1McLUgICwTxjSMZoudARX3XeyxIzFGnCPD3f2ZPGSp5FZmEszvBe ibU+z9KRexPw64huXS7PgXMGHXdLABzTB28pYOTlQuulTloO73sAD7JO/Hc8Hizz ttCWexQSHrxon9bs62J/AIAyLZnyAYZOdUFuaYHf2982RUjlCrfPMlMv5KCx49WB BJQYbz+kBaV3XysyPaSldkIisg== -----END CERTIFICATE-----Generated at Fri Apr 17 11:22:36 2026 by rpki-client