$ rpki-client -vvf rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft File: 6B98qs6m95z87OFlMxRpL94sTpQ.mft (raw, json) Hash identifier: DX/Mgl3tAgQj0KF8MxcTxbR8TPmiyrKXM17JXq1VosQ= Subject key identifier: 65:20:8F:C9:A1:E9:5D:D4:8F:E4:37:FB:BB:DF:17:84:49:23:37:55 Authority key identifier: E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94 Certificate issuer: /CN=A9197650/serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft Manifest number: 22 Signing time: Fri 17 Apr 2026 08:34:48 +0000 Manifest this update: Fri 17 Apr 2026 08:34:47 +0000 Manifest next update: Fri 24 Apr 2026 08:34:47 +0000 Files and hashes: 1: 6B98qs6m95z87OFlMxRpL94sTpQ.crl (hash: GfVSm5uP6DrpoddJ2+cpQdE/y+jZ16h4Uj/GN6LQdZg=) 2: F1550AF80D9711F198E5D2412C3D8C67.roa (hash: 3cG3KuaJ63N0g/ucQNpVQLysGS2l0hrNaxx97LdNuPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:34:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197650, serialNumber=E81F7CAACEA6F79CFCECE1653314692FDE2C4E94 Validity Not Before: Apr 17 08:34:47 2026 GMT Not After : Apr 24 08:34:47 2026 GMT Subject: CN=69e1f0a8-ceb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:16:de:d1:0c:75:69:dd:0d:86:d7:33:55:20: e3:63:4b:ef:c3:56:29:8f:a6:e6:6f:31:ce:4e:50: 20:16:32:41:62:21:08:f4:a8:96:65:24:cd:b7:90: 54:50:98:26:86:77:78:45:a6:b2:8e:c0:65:7b:64: af:17:cb:6e:ed:e1:34:d9:4e:94:d7:c6:fd:bf:66: 6c:08:d1:b6:4f:01:13:67:c0:d1:b1:c4:77:12:cc: 80:86:29:cb:f1:77:9b:38:90:8e:1a:50:68:18:5b: e5:b6:3c:4f:35:c2:b2:f5:39:ab:fa:ef:55:5e:7f: 90:39:a1:b4:7a:9d:51:fc:4b:a4:5d:6a:65:62:f2: 22:39:6d:a6:9b:d7:84:69:05:d7:d9:2c:6a:09:ba: df:f9:a1:03:fb:fb:59:a2:59:38:09:58:17:57:6d: cd:56:80:b2:7f:ab:51:56:de:1d:96:b0:e9:06:88: 73:95:4f:75:c9:28:2a:bb:c3:cd:fb:6a:f9:1e:e2: 65:e0:70:d8:7f:24:63:e2:e4:f5:40:17:2f:4d:91: c9:0c:15:c4:31:ce:aa:fe:88:23:c6:31:58:79:7f: af:c4:a5:40:28:7b:24:8b:a0:7c:10:1a:f2:f7:c6: f3:94:c8:f6:24:cf:28:89:0b:ad:16:34:66:fc:9c: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:20:8F:C9:A1:E9:5D:D4:8F:E4:37:FB:BB:DF:17:84:49:23:37:55 X509v3 Authority Key Identifier: keyid:E8:1F:7C:AA:CE:A6:F7:9C:FC:EC:E1:65:33:14:69:2F:DE:2C:4E:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6B98qs6m95z87OFlMxRpL94sTpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197650/D2B615700D9611F1942361D32B3D8C67/6B98qs6m95z87OFlMxRpL94sTpQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:b6:4f:f5:a5:1f:5e:af:ff:42:a3:e2:d3:7d:e9:83:6c:f9: c3:96:4e:8d:77:e7:fc:0b:5a:fd:2c:0a:69:16:37:6e:17:22: c8:8e:1f:3b:ce:02:74:36:9e:63:e7:41:77:62:24:38:56:6c: f2:d4:25:76:39:21:f9:2a:ca:0c:3a:c4:38:cd:27:07:70:ac: 76:6a:51:70:8b:80:29:40:64:50:f1:57:95:16:4d:72:ea:21: 77:d6:0d:b0:6b:26:92:13:cf:7c:85:11:8c:5a:25:a4:25:f0: d1:4a:26:43:5f:99:b9:a5:1f:3b:91:4c:73:cd:cf:b1:2a:b9: 3c:a8:bb:c5:c9:22:6f:48:5e:d5:ef:23:b7:bb:40:ad:b4:20: c5:42:07:92:98:59:b8:b6:66:2f:c4:95:e0:d4:b7:6b:75:74: 78:1c:ef:ca:4b:73:65:e6:3a:32:42:7b:07:45:76:5f:51:f1: 64:da:9f:eb:5b:b5:35:9c:57:0b:66:61:66:9b:f4:1b:25:9d: 46:00:5d:a5:a3:8c:36:80:b9:dc:cc:c5:51:50:f7:6f:a9:d5: 0e:af:5c:62:33:0a:ac:54:2c:47:f8:d0:bb:24:e2:09:4b:60: 22:b8:6c:58:cf:bc:e0:a4:b7:7e:9f:ab:2f:f7:c3:7a:a9:e2: dd:90:e4:a1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzY1MDExMC8GA1UEBRMoRTgxRjdDQUFDRUE2Rjc5Q0ZDRUNFMTY1MzMxNDY5MkZE RTJDNEU5NDAeFw0yNjA0MTcwODM0NDdaFw0yNjA0MjQwODM0NDdaMBgxFjAUBgNV BAMTDTY5ZTFmMGE4LWNlYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqFt7RDHVp3Q2G1zNVIONjS+/DVimPpuZvMc5OUCAWMkFiIQj0qJZlJM23kFRQ mCaGd3hFprKOwGV7ZK8Xy27t4TTZTpTXxv2/ZmwI0bZPARNnwNGxxHcSzICGKcvx d5s4kI4aUGgYW+W2PE81wrL1Oav671Vef5A5obR6nVH8S6RdamVi8iI5baab14Rp BdfZLGoJut/5oQP7+1miWTgJWBdXbc1WgLJ/q1FW3h2WsOkGiHOVT3XJKCq7w837 avke4mXgcNh/JGPi5PVAFy9NkckMFcQxzqr+iCPGMVh5f6/EpUAoeySLoHwQGvL3 xvOUyPYkzyiJC60WNGb8nPJjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUZSCPyaHp XdSP5Df7u98XhEkjN1UwHwYDVR0jBBgwFoAU6B98qs6m95z87OFlMxRpL94sTpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NjUwL0QyQjYxNTcwMEQ5 NjExRjE5NDIzNjFEMzJCM0Q4QzY3LzZCOThxczZtOTV6ODdPRmxNeFJwTDk0c1Rw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkI5OHFzNm05NXo4N09GbE14UnBMOTRzVHBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NjUwL0QyQjYxNTcwMEQ5NjExRjE5NDIzNjFEMzJCM0Q4QzY3LzZCOThxczZtOTV6 ODdPRmxNeFJwTDk0c1RwUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADtk/1pR9er/9Co+LTfemDbPnDlk6Nd+f8C1r9LAppFjduFyLIjh87zgJ0Np5j 50F3YiQ4Vmzy1CV2OSH5KsoMOsQ4zScHcKx2alFwi4ApQGRQ8VeVFk1y6iF31g2w ayaSE898hRGMWiWkJfDRSiZDX5m5pR87kUxzzc+xKrk8qLvFySJvSF7V7yO3u0Ct tCDFQgeSmFm4tmYvxJXg1LdrdXR4HO/KS3Nl5joyQnsHRXZfUfFk2p/rW7U1nFcL ZmFmm/QbJZ1GAF2lo4w2gLnczMVRUPdvqdUOr1xiMwqsVCxH+NC7JOIJS2AiuGxY z7zgpLd+n6sv98N6qeLdkOSh -----END CERTIFICATE-----Generated at Fri Apr 17 19:41:01 2026 by rpki-client