$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft File: diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json) Hash identifier: P6ESA/Ardn5uXF0FA12d8VP3X7i+AEy6y4++GhTSlds= Subject key identifier: D3:D3:23:56:CF:32:A1:A7:DC:84:33:40:DC:B9:84:6F:30:D5:3A:7F Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB Certificate issuer: /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft Manifest number: 04 Signing time: Fri 17 Apr 2026 08:54:18 +0000 Manifest this update: Fri 17 Apr 2026 08:54:18 +0000 Manifest next update: Fri 24 Apr 2026 08:54:18 +0000 Files and hashes: 1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: 0RH0pSXyPHZTB0sRUpokA6LNDIdqUBYKbvcCoSB3Iu0=) 2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB Validity Not Before: Apr 17 08:54:18 2026 GMT Not After : Apr 24 08:54:18 2026 GMT Subject: CN=69e1f53a-5f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d9:be:34:bc:47:18:c4:e7:5c:1b:a3:5a:56: fb:02:12:40:ea:a2:af:b1:f5:c5:81:d2:dc:9b:0e: 6e:a7:e8:57:e6:e7:52:b7:40:b7:a9:fd:46:13:57: 4c:3a:e1:fa:71:b6:e7:2c:de:6c:ef:4e:d1:71:da: db:f1:a4:b6:e2:0e:ba:b0:b7:ed:ac:a4:dc:7b:86: 11:c2:31:52:84:d2:a3:61:92:72:ed:4b:fa:be:f7: 92:3b:c5:55:eb:1b:e8:35:cf:ea:4e:da:8d:99:cd: 88:95:f7:ed:82:b8:46:d5:5e:90:9b:05:5f:99:76: 93:f0:b8:4e:47:d9:07:5b:d6:a0:84:b2:9f:85:2e: 81:ab:1e:40:36:b0:2b:4b:0d:e1:fb:06:83:5a:f7: 0a:46:b4:5a:70:72:ec:b0:9a:59:e7:06:9e:2e:54: eb:db:bc:30:9e:88:ec:90:76:0f:5a:50:5c:72:d8: b9:0b:3a:54:a6:d5:70:e2:41:86:67:17:6a:ff:d9: 96:09:ca:8e:02:a4:6f:34:6c:79:5c:5c:04:9a:2c: 8a:16:0a:4f:98:ac:99:dc:6c:b7:95:06:11:94:ab: ce:10:ba:e0:6f:cf:ad:52:65:ee:42:01:f2:bc:9b: 8a:d9:db:9f:0b:5a:45:ad:f0:c0:0b:4c:c3:4a:c5: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:23:56:CF:32:A1:A7:DC:84:33:40:DC:B9:84:6F:30:D5:3A:7F X509v3 Authority Key Identifier: keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:85:37:82:a1:48:e8:c1:58:2e:3b:41:d5:ab:3d:7f:57:ef: 0e:8d:6e:e2:5f:93:03:e9:44:4f:e3:96:4e:f8:b6:22:09:35: cb:05:58:6b:74:9a:7e:21:15:2d:35:28:17:e5:5f:cc:8c:82: ed:20:6c:29:45:fe:cb:87:3c:b8:75:e8:02:87:22:9f:07:1a: 10:19:d5:6c:db:9b:48:60:bc:7d:71:2d:5f:4e:d7:e7:8e:81: 2f:a3:73:d9:d6:12:81:07:7e:68:7b:87:6c:20:b6:29:27:17: ef:f0:d2:26:30:8b:9a:b5:48:81:c0:25:d4:3b:72:4e:99:c1: 71:62:0f:b6:a6:7c:b2:9c:44:74:52:ec:e5:50:e9:c2:96:cf: d0:e3:62:36:9a:55:12:00:9d:9f:66:d3:6c:27:69:20:00:37: 38:f4:0e:46:88:5e:5a:3e:c6:84:db:c8:ad:f7:da:48:07:9b: fb:1e:36:17:8c:f0:e2:b7:c4:c0:79:8d:e7:b4:95:3a:c4:e0: 35:0a:8e:d9:25:7e:55:11:8d:0d:e9:da:d5:b7:94:ef:f0:f7: 3e:2e:2d:50:b7:69:5e:0a:0a:62:57:29:57:15:5a:fe:93:26: e2:ac:e9:cf:42:78:1a:1d:d9:29:7f:89:ac:4f:c3:c8:43:67: a9:ed:08:62 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjQyOTExMC8GA1UEBRMoNzYyNThFMDgxRjJFMDlDMEYxRkE3QkI0OTlCMTc1OTcw NTY1QzBFQjAeFw0yNjA0MTcwODU0MThaFw0yNjA0MjQwODU0MThaMBgxFjAUBgNV BAMTDTY5ZTFmNTNhLTVmMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX2b40vEcYxOdcG6NaVvsCEkDqoq+x9cWB0tybDm6n6Ffm51K3QLep/UYTV0w6 4fpxtucs3mzvTtFx2tvxpLbiDrqwt+2spNx7hhHCMVKE0qNhknLtS/q+95I7xVXr G+g1z+pO2o2ZzYiV9+2CuEbVXpCbBV+ZdpPwuE5H2Qdb1qCEsp+FLoGrHkA2sCtL DeH7BoNa9wpGtFpwcuywmlnnBp4uVOvbvDCeiOyQdg9aUFxy2LkLOlSm1XDiQYZn F2r/2ZYJyo4CpG80bHlcXASaLIoWCk+YrJncbLeVBhGUq84QuuBvz61SZe5CAfK8 m4rZ258LWkWt8MALTMNKxYNZAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU09MjVs8y oafchDNA3LmEbzDVOn8wHwYDVR0jBBgwFoAUdiWOCB8uCcDx+nu0mbF1lwVlwOsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzI2NzU4N0E4Mzcx OTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NEeC1udTBtYkYxbHdWbHdP cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZGlXT0NCOHVDY0R4LW51MG1iRjFsd1Zsd09zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NDI5LzI2NzU4N0E4MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NE eC1udTBtYkYxbHdWbHdPcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAxhTeCoUjowVguO0HVqz1/V+8OjW7iX5MD6URP45ZO+LYiCTXLBVhrdJp+IRUt NSgX5V/MjILtIGwpRf7Lhzy4degChyKfBxoQGdVs25tIYLx9cS1fTtfnjoEvo3PZ 1hKBB35oe4dsILYpJxfv8NImMIuatUiBwCXUO3JOmcFxYg+2pnyynER0UuzlUOnC ls/Q42I2mlUSAJ2fZtNsJ2kgADc49A5GiF5aPsaE28it99pIB5v7HjYXjPDit8TA eY3ntJU6xOA1Co7ZJX5VEY0N6drVt5Tv8Pc+Li1Qt2leCgpiVylXFVr+kybirOnP QngaHdkpf4msT8PIQ2ep7Qhi -----END CERTIFICATE-----Generated at Fri Apr 17 21:13:17 2026 by rpki-client