$ rpki-client -vvf rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft File: Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft (raw, json) Hash identifier: hqYRDbP3jLhb2ZA1EbVKTCMgJvdhvA67nwZbotaCedo= Subject key identifier: 4C:7A:EE:1C:01:FA:A0:4B:62:82:56:77:CB:72:B4:81:D9:37:EB:05 Authority key identifier: 1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 Certificate issuer: /CN=A917E951/serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft Manifest number: 0236 Signing time: Fri 17 Apr 2026 02:21:03 +0000 Manifest this update: Fri 17 Apr 2026 02:21:02 +0000 Manifest next update: Fri 24 Apr 2026 02:21:02 +0000 Files and hashes: 1: Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl (hash: i17dKT1ts6WRtNqC3LC5IEzLCYb+6vZypNJpFxbCcAs=) 2: 59ADC606EBDA11F0868F86546C6F56BC.roa (hash: 9lrxfUBWBmg3EvWvMM3CqOq7J9rwqvVHXsxONFDg0xI=) 3: 952F87FAEBDA11F082D0705C6C6F56BC.roa (hash: CsD2M4xYWmD+4KZHvogCG8jsC1NzwYJkcqvvaiFYMlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E951, serialNumber=1A0F786F11B8E17D45DE1EDCE61E1600DD4930A4 Validity Not Before: Apr 17 02:21:02 2026 GMT Not After : Apr 24 02:21:02 2026 GMT Subject: CN=69e1990f-60fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:52:56:1d:c7:ed:d6:ee:f1:a9:a0:90:b4:37: 86:13:33:0b:97:a0:bb:67:c4:e8:72:b4:67:bb:53: 11:01:93:cb:40:94:48:4c:f1:84:9e:3f:ed:6a:fe: e1:dd:eb:7b:9f:6d:f9:9e:33:c7:eb:65:96:d8:43: 20:17:f5:82:19:cd:97:43:98:4d:76:a5:34:85:8a: 62:bc:23:05:51:05:4f:46:f6:6d:70:04:bd:ff:5b: ef:77:ee:58:dd:60:bf:0c:c1:10:5d:98:59:54:7d: a3:81:f1:25:b2:ec:93:ec:7e:f2:16:98:73:75:3e: f6:a9:27:1e:13:81:83:b3:a9:7e:23:45:31:2c:99: 97:55:e8:63:6c:48:37:3e:80:e0:7e:eb:7d:ad:32: 94:4e:e3:bc:17:b5:14:90:b4:8f:4f:53:fc:b4:79: f8:8f:38:0a:11:b2:e3:d3:ef:0b:ce:c3:81:d6:89: 0b:80:6d:8a:5d:eb:6b:fe:c6:50:6c:71:2c:f0:b7: a1:96:b2:95:a3:a9:f5:8d:9b:c5:44:e1:ed:8e:65: 6a:55:3f:31:ca:bc:d4:1a:48:79:c9:77:25:75:43: 4f:c9:c7:0e:a3:83:8a:67:31:85:b8:44:db:af:a6: d9:5e:2d:bd:83:e8:bb:0d:af:7a:1d:7c:73:ad:05: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:7A:EE:1C:01:FA:A0:4B:62:82:56:77:CB:72:B4:81:D9:37:EB:05 X509v3 Authority Key Identifier: keyid:1A:0F:78:6F:11:B8:E1:7D:45:DE:1E:DC:E6:1E:16:00:DD:49:30:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gg94bxG44X1F3h7c5h4WAN1JMKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E951/6F49B992DB7111ED9503D85DC4F9AE02/Gg94bxG44X1F3h7c5h4WAN1JMKQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:e7:0a:51:fe:55:8d:32:5f:c3:d1:76:d9:e4:62:e1:78: b7:4f:36:a7:53:f7:a4:0a:9d:58:60:9f:36:3a:10:42:83:37: 2e:45:ff:55:87:64:e5:2e:5b:43:bb:6f:5c:9f:d5:43:2a:e8: ff:26:cb:87:f4:05:dd:a2:83:fb:bb:73:86:3d:90:f7:d3:e5: 96:7a:74:28:f9:46:00:d4:29:b8:45:03:d0:f6:13:38:8c:e7: f5:29:0e:2a:96:83:77:7b:6a:cf:de:ea:d0:55:6a:18:7a:dc: e8:47:2f:b2:70:89:c2:5e:e9:d2:3e:3d:9e:1e:8a:85:c2:47: 51:84:b0:bc:f5:2b:ee:cc:67:65:0b:a9:e2:d0:13:b8:be:54: a2:57:ac:3d:57:2a:c2:cf:27:6f:d1:72:49:73:21:2b:12:15: 60:82:ef:11:b8:02:fe:c8:0d:af:1d:50:f1:09:2f:ea:52:5e: 54:01:91:46:d6:96:59:58:e2:31:33:71:01:96:ff:9d:78:25: 43:76:2a:a7:33:5a:2a:08:c2:47:ae:4a:ff:d6:42:57:e8:b6: 28:a7:01:d4:b4:b0:d2:3f:a7:69:cd:20:5c:75:4d:e3:58:c3: 1b:1a:15:c2:64:fb:30:ed:16:ed:8f:9b:d4:06:cb:6d:4a:d2: 37:fb:b0:37 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U5NTExMTAvBgNVBAUTKDFBMEY3ODZGMTFCOEUxN0Q0NURFMUVEQ0U2MUUxNjAw REQ0OTMwQTQwHhcNMjYwNDE3MDIyMTAyWhcNMjYwNDI0MDIyMTAyWjAYMRYwFAYD VQQDEw02OWUxOTkwZi02MGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6VJWHcft1u7xqaCQtDeGEzMLl6C7Z8TocrRnu1MRAZPLQJRITPGEnj/tav7h 3et7n235njPH62WW2EMgF/WCGc2XQ5hNdqU0hYpivCMFUQVPRvZtcAS9/1vvd+5Y 3WC/DMEQXZhZVH2jgfElsuyT7H7yFphzdT72qSceE4GDs6l+I0UxLJmXVehjbEg3 PoDgfut9rTKUTuO8F7UUkLSPT1P8tHn4jzgKEbLj0+8LzsOB1okLgG2KXetr/sZQ bHEs8LehlrKVo6n1jZvFROHtjmVqVT8xyrzUGkh5yXcldUNPyccOo4OKZzGFuETb r6bZXi29g+i7Da96HXxzrQUG/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEx67hwB +qBLYoJWd8tytIHZN+sFMB8GA1UdIwQYMBaAFBoPeG8RuOF9Rd4e3OYeFgDdSTCk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTk1MS82RjQ5Qjk5MkRC NzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRYMUYzaDdjNWg0V0FOMUpN S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dnOTRieEc0NFgxRjNoN2M1aDRXQU4xSk1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTk1MS82RjQ5Qjk5MkRCNzExMUVEOTUwM0Q4NURDNEY5QUUwMi9HZzk0YnhHNDRY MUYzaDdjNWg0V0FOMUpNS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHRXnClH+VY0yX8PRdtnkYuF4t082p1P3pAqdWGCfNjoQQoM3LkX/VYdk5S5b Q7tvXJ/VQyro/ybLh/QF3aKD+7tzhj2Q99Pllnp0KPlGANQpuEUD0PYTOIzn9SkO KpaDd3tqz97q0FVqGHrc6EcvsnCJwl7p0j49nh6KhcJHUYSwvPUr7sxnZQup4tAT uL5UolesPVcqws8nb9FySXMhKxIVYILvEbgC/sgNrx1Q8Qkv6lJeVAGRRtaWWVji MTNxAZb/nXglQ3YqpzNaKgjCR65K/9ZCV+i2KKcB1LSw0j+nac0gXHVN41jDGxoV wmT7MO0W7Y+b1AbLbUrSN/uwNw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:36:40 2026 by rpki-client