$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: TROW1+R++WfycBRUEX1bLbUyjQh1Nq3tUT/AP+SQ1yg= Subject key identifier: 16:CD:72:14:B0:35:AD:BA:0F:53:EE:FF:7C:5F:27:DB:87:BE:4E:83 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 0885 Signing time: Thu 16 Apr 2026 20:33:53 +0000 Manifest this update: Thu 16 Apr 2026 20:33:52 +0000 Manifest next update: Thu 23 Apr 2026 20:33:52 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: +GBzYVJL3KZ8ofwW6Mv4Yvr353Z6DZn2UlPYWUFr1Uo=) 2: F43185921DF211F18E2EA673173D8C67.roa (hash: srrIw1L1shwtn6ty4ggxa65JRJwKoEkJgFL5J1FGVi8=) 3: FC73A04E22D611F184630225C8833773.roa (hash: tJS9rWyhxR4tRPQ8is4B5FOtrK9FChl388SXvR8zyok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Apr 16 20:33:52 2026 GMT Not After : Apr 23 20:33:52 2026 GMT Subject: CN=69e147b1-d8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3d:e5:b1:39:2a:fe:5b:c2:03:bf:12:e8:0e: 4d:6c:c1:ff:3d:c2:38:3b:3c:23:56:4c:de:62:96: 21:f3:a6:4a:b3:ba:3c:82:58:5c:e7:a4:37:f9:da: 52:2c:ca:aa:bd:9d:c9:66:91:cd:7d:ed:94:84:f0: 51:d8:02:5f:0f:f9:a1:a2:d5:f5:2d:34:31:d2:57: c2:47:ac:46:60:05:5a:47:9e:aa:d5:e8:f8:cf:f5: c2:05:d1:c0:a7:21:f1:0a:d2:91:7c:13:0f:7f:71: a5:5f:d8:a1:50:8d:ee:ec:2a:ee:c9:52:85:30:40: 6c:4a:a3:e7:32:6e:79:ce:25:e8:70:d5:ee:8c:33: 5f:9d:89:a2:89:93:e6:4c:29:0f:11:8d:02:58:57: 0b:7d:3a:b2:2d:a0:7e:66:bb:c1:b8:dd:ea:fa:d5: 15:0c:c2:57:b3:5e:80:cb:63:0c:d5:45:18:68:91: ca:bf:d5:bc:fa:ee:76:3c:49:29:e5:f2:de:fa:83: 59:96:98:be:09:03:35:af:0c:1b:c6:7b:50:4c:b7: 50:8b:5a:ba:09:b1:40:57:4d:b9:2d:60:4c:38:62: d8:af:94:7e:00:9e:07:73:8a:61:bd:5d:e8:1e:d5: 75:fb:18:62:f5:d5:8c:9a:45:84:29:8d:2b:be:ce: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CD:72:14:B0:35:AD:BA:0F:53:EE:FF:7C:5F:27:DB:87:BE:4E:83 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:0a:78:94:01:87:75:20:cf:aa:00:7e:0b:02:75:2d:91:b2: d1:44:08:21:4f:60:e0:e2:12:72:cc:27:5c:20:88:20:9c:23: de:dd:e9:92:8d:0c:2d:4c:6c:f9:a8:02:76:05:cb:c7:31:65: ff:9d:a1:97:91:33:e1:93:c0:6f:99:22:b2:34:b5:65:96:16: fe:30:85:4e:3e:74:e3:f2:5d:03:bd:77:0f:f0:b7:0c:54:69: af:66:e5:52:af:b2:71:c7:b9:33:32:db:c2:22:63:96:99:6d: 92:13:fb:2e:1f:8d:15:78:3a:cc:40:c1:ec:ae:2e:dc:cd:68: af:41:c6:61:7c:99:75:93:46:1d:ac:b7:a5:43:97:c8:db:6f: 24:af:c3:e1:c1:d2:57:14:1e:1f:63:47:98:5f:bc:d5:47:f6: c9:26:88:92:47:52:1f:64:f2:71:4b:8b:51:8f:20:0f:3c:70: 11:eb:17:b2:5d:45:ec:4d:b0:3f:1e:38:f3:45:9a:d1:47:63: bf:82:ac:59:b8:c1:e1:06:26:07:ab:94:71:3f:cf:0b:b0:9f: b8:37:03:e9:11:91:7a:bb:ef:00:4f:e2:eb:dd:20:b1:d3:96: d5:1a:2a:68:93:0e:b3:90:3f:2a:90:07:a4:ba:b2:8c:d4:5e: 39:11:37:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjYwNDE2MjAzMzUyWhcNMjYwNDIzMjAzMzUyWjAYMRYwFAYD VQQDEw02OWUxNDdiMS1kOGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD3lsTkq/lvCA78S6A5NbMH/PcI4OzwjVkzeYpYh86ZKs7o8glhc56Q3+dpS LMqqvZ3JZpHNfe2UhPBR2AJfD/mhotX1LTQx0lfCR6xGYAVaR56q1ej4z/XCBdHA pyHxCtKRfBMPf3GlX9ihUI3u7CruyVKFMEBsSqPnMm55ziXocNXujDNfnYmiiZPm TCkPEY0CWFcLfTqyLaB+ZrvBuN3q+tUVDMJXs16Ay2MM1UUYaJHKv9W8+u52PEkp 5fLe+oNZlpi+CQM1rwwbxntQTLdQi1q6CbFAV025LWBMOGLYr5R+AJ4Hc4phvV3o HtV1+xhi9dWMmkWEKY0rvs500wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBbNchSw Na26D1Pu/3xfJ9uHvk6DMB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvAp4lAGHdSDPqgB+CwJ1LZGy0UQIIU9g4OIScswnXCCIIJwj3t3pko0MLUxs +agCdgXLxzFl/52hl5Ez4ZPAb5kisjS1ZZYW/jCFTj504/JdA713D/C3DFRpr2bl Uq+ycce5MzLbwiJjlpltkhP7Lh+NFXg6zEDB7K4u3M1or0HGYXyZdZNGHay3pUOX yNtvJK/D4cHSVxQeH2NHmF+81Uf2ySaIkkdSH2TycUuLUY8gDzxwEesXsl1F7E2w Px4480Wa0Udjv4KsWbjB4QYmB6uUcT/PC7CfuDcD6RGRervvAE/i690gsdOW1Roq aJMOs5A/KpAHpLqyjNReORE3VA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:34:01 2026 by rpki-client