$ rpki-client -vvf rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft File: _whTCVKXG6BlIktSH1ZWO20hJO0.mft (raw, json) Hash identifier: hoEbMPIZ8Z+DeBlCjQLzwdrNDPjcze9PzXP/LU6wWcY= Subject key identifier: F7:2A:70:31:9C:17:19:1A:13:17:C2:67:B4:A4:AD:D0:8B:D0:81:3F Authority key identifier: FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED Certificate issuer: /CN=A917E475/serialNumber=FF08530952971BA065224B521F56563B6D2124ED Certificate serial: 0D9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft Manifest number: 0D91 Signing time: Thu 16 Apr 2026 17:51:51 +0000 Manifest this update: Thu 16 Apr 2026 17:51:51 +0000 Manifest next update: Thu 23 Apr 2026 17:51:51 +0000 Files and hashes: 1: _whTCVKXG6BlIktSH1ZWO20hJO0.crl (hash: pz/njEM/cvqmIOphhnTHnrVXGQbO+p37fJHRjmy6R3o=) 2: 3A8AC908E41C11E9AD4A8D16C4F9AE02.roa (hash: n4Sr8XQlMSqL6gzDWm/TDckqQSOFH1CNlIw47oAhdDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3482 (0xd9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E475, serialNumber=FF08530952971BA065224B521F56563B6D2124ED Validity Not Before: Apr 16 17:51:51 2026 GMT Not After : Apr 23 17:51:51 2026 GMT Subject: CN=69e121b7-aaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:12:94:b1:b6:23:a8:51:4f:1e:b4:8c:70: 44:21:82:7a:e1:7c:d3:5d:2a:6b:1e:7b:8c:32:e4: ed:b0:1f:4e:2c:a4:b7:06:14:c6:4d:56:49:c9:26: 42:79:63:f7:4b:39:d9:4a:bc:3b:49:7a:25:b3:12: ef:04:1a:ca:c2:8e:9e:bd:02:03:c1:f5:01:32:55: 99:a6:3f:1d:d3:28:01:ed:c5:ce:d2:c8:ce:f6:23: e6:24:fc:1a:74:c9:64:3d:42:dc:b2:89:cc:3d:92: 31:a4:f3:14:43:64:76:c3:18:7a:cd:0f:72:b4:d1: fb:32:22:e9:f0:05:d7:18:d9:0d:1c:1a:30:96:09: 6d:84:de:43:9a:25:cb:a6:28:fb:86:aa:44:f2:0f: 55:1b:e2:7b:b5:dd:12:90:ed:32:a5:f5:c9:22:4b: 0c:25:b1:3a:fd:47:19:9a:22:2e:52:25:df:b2:90: 2a:ac:92:30:fe:98:97:96:38:8a:e4:4c:61:81:02: 0a:38:01:ef:79:90:f4:6a:16:23:9b:4e:5a:de:ca: 93:6b:21:72:a8:cc:67:79:70:04:cf:45:93:f3:5c: b6:a0:e7:49:25:4a:63:16:d4:da:f4:99:f1:42:42: 7e:e8:4a:e5:bd:3b:c7:1d:09:65:3c:28:a3:84:3f: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2A:70:31:9C:17:19:1A:13:17:C2:67:B4:A4:AD:D0:8B:D0:81:3F X509v3 Authority Key Identifier: keyid:FF:08:53:09:52:97:1B:A0:65:22:4B:52:1F:56:56:3B:6D:21:24:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_whTCVKXG6BlIktSH1ZWO20hJO0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E475/DBFB3EB4E41A11E9AD79B811C4F9AE02/_whTCVKXG6BlIktSH1ZWO20hJO0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:77:3f:35:23:96:10:45:c5:13:78:03:cf:e8:8c:b4:6e:72: d4:42:f5:56:ea:f6:db:1f:54:3d:67:ff:52:c9:26:a7:72:13: 48:6d:e2:ac:aa:9b:63:12:3e:cf:4d:76:c8:1f:66:8b:29:fc: ac:57:1f:93:ca:84:7a:e6:12:56:ba:f5:d7:76:f8:b6:75:0b: 41:25:fc:78:8d:af:58:38:a8:92:01:ef:ff:54:3b:7f:44:b9: 86:59:19:31:1a:8c:31:f8:6b:fa:5c:d3:80:b2:7a:4f:43:d1: 94:1a:33:e0:6a:cd:a6:76:87:83:60:29:1f:cc:9d:51:c0:13: cb:84:28:c6:26:b3:45:2b:3c:d0:ff:1f:dd:84:88:ec:01:a7: af:53:4a:ec:15:39:2e:e6:3e:23:66:04:86:df:9d:55:ad:65: a3:00:0d:66:56:bf:32:39:66:ae:22:c2:eb:4f:5e:eb:5c:49: d6:da:50:2e:87:45:54:33:14:81:6c:88:7d:74:f1:fd:f1:2d: a1:ca:eb:65:49:90:72:bb:f0:8c:1b:48:df:5d:cc:3d:dc:b1: 88:06:de:3c:5f:9c:7c:c4:fe:32:fa:47:44:a7:ba:56:26:7e: 85:72:08:72:48:74:3f:49:b3:53:4c:1e:73:e6:1d:01:26:ed: 37:dd:d7:4f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U0NzUxMTAvBgNVBAUTKEZGMDg1MzA5NTI5NzFCQTA2NTIyNEI1MjFGNTY1NjNC NkQyMTI0RUQwHhcNMjYwNDE2MTc1MTUxWhcNMjYwNDIzMTc1MTUxWjAYMRYwFAYD VQQDEw02OWUxMjFiNy1hYWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QASlLG2I6hRTx60jHBEIYJ64XzTXSprHnuMMuTtsB9OLKS3BhTGTVZJySZC eWP3SznZSrw7SXolsxLvBBrKwo6evQIDwfUBMlWZpj8d0ygB7cXO0sjO9iPmJPwa dMlkPULcsonMPZIxpPMUQ2R2wxh6zQ9ytNH7MiLp8AXXGNkNHBowlglthN5DmiXL pij7hqpE8g9VG+J7td0SkO0ypfXJIksMJbE6/UcZmiIuUiXfspAqrJIw/piXljiK 5ExhgQIKOAHveZD0ahYjm05a3sqTayFyqMxneXAEz0WT81y2oOdJJUpjFtTa9Jnx QkJ+6ErlvTvHHQllPCijhD8fbQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcqcDGc FxkaExfCZ7SkrdCL0IE/MB8GA1UdIwQYMBaAFP8IUwlSlxugZSJLUh9WVjttISTt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTQ3NS9EQkZCM0VCNEU0 MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2QmxJa3RTSDFaV08yMGhK TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL193aFRDVktYRzZCbElrdFNIMVpXTzIwaEpPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTQ3NS9EQkZCM0VCNEU0MUExMUU5QUQ3OUI4MTFDNEY5QUUwMi9fd2hUQ1ZLWEc2 QmxJa3RTSDFaV08yMGhKTzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHHc/NSOWEEXFE3gDz+iMtG5y1EL1Vur22x9UPWf/Uskmp3ITSG3irKqbYxI+ z012yB9miyn8rFcfk8qEeuYSVrr113b4tnULQSX8eI2vWDiokgHv/1Q7f0S5hlkZ MRqMMfhr+lzTgLJ6T0PRlBoz4GrNpnaHg2ApH8ydUcATy4QoxiazRSs80P8f3YSI 7AGnr1NK7BU5LuY+I2YEht+dVa1lowANZla/MjlmriLC609e61xJ1tpQLodFVDMU gWyIfXTx/fEtocrrZUmQcrvwjBtI313MPdyxiAbePF+cfMT+MvpHRKe6ViZ+hXII ckh0P0mzU0wec+YdASbtN93XTw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:27:59 2026 by rpki-client