$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft File: pObuKivUtt87NTuua8SJKm047yk.mft (raw, json) Hash identifier: 77pcq2ziROi/0WIg9SFDqX4iyTJtTKlOJ8uC9mha8II= Subject key identifier: 10:5B:A8:13:45:A8:01:7E:13:9C:6B:AA:B3:B7:8C:B9:01:7F:3B:E1 Authority key identifier: A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 Certificate issuer: /CN=A9116BB8/serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft Manifest number: 0158 Signing time: Mon 20 Apr 2026 21:23:21 +0000 Manifest this update: Mon 20 Apr 2026 21:23:21 +0000 Manifest next update: Mon 27 Apr 2026 21:23:21 +0000 Files and hashes: 1: pObuKivUtt87NTuua8SJKm047yk.crl (hash: HtIYNLxBN+xf7iAbFYD+f5m9dgXr/cGkQDeqi/TGNgo=) 2: 5B3369383DC911EFAFD59635C4F9AE02.roa (hash: datkaq9Qj7s5b2XKTfU6R7KhB3Tz4l6ZdYv0MI/ikx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 21:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116BB8, serialNumber=A4E6EE2A2BD4B6DF3B353BAE6BC4892A6D38EF29 Validity Not Before: Apr 20 21:23:21 2026 GMT Not After : Apr 27 21:23:21 2026 GMT Subject: CN=69e69949-5fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:d1:64:47:e3:49:4e:63:47:59:25:90:77: 65:88:d2:56:2f:03:14:d1:fc:1e:66:82:94:16:f3: 1d:a9:a0:30:1e:97:6f:15:0b:aa:8f:5b:e1:e0:ca: 17:41:3a:27:ed:08:e2:93:9c:e7:d3:bc:1c:0c:48: e3:7c:d4:96:f0:ec:07:77:fe:43:cb:e3:18:a8:f7: dc:db:55:da:00:f8:79:4a:1b:15:7f:33:b2:42:a8: d0:61:24:d1:8f:7b:1f:8c:c5:51:64:61:c1:a1:2a: 8e:aa:2a:75:1a:8e:b9:e4:04:20:eb:40:2c:68:86: 1d:4a:8c:12:4b:59:cc:77:ce:92:fd:24:32:e9:e0: f7:23:17:58:8e:be:dc:1e:87:7d:5a:03:53:6b:8a: 58:77:33:08:33:31:c1:d1:e6:2c:e6:73:18:6c:2d: ab:dc:e7:8d:50:19:d8:29:40:22:93:95:25:b7:0f: bb:88:e0:e6:a6:0e:4f:70:64:94:19:2b:c3:d5:70: 2f:ec:8a:11:ff:ca:da:f3:2b:28:27:16:fc:dd:27: 16:66:ab:8c:5e:41:38:d4:93:87:9f:f3:15:54:a6: 90:10:d0:b4:51:9f:e5:3b:84:df:63:01:f2:af:3a: a1:3f:eb:bb:19:08:dd:67:97:60:26:be:f0:7e:e6: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5B:A8:13:45:A8:01:7E:13:9C:6B:AA:B3:B7:8C:B9:01:7F:3B:E1 X509v3 Authority Key Identifier: keyid:A4:E6:EE:2A:2B:D4:B6:DF:3B:35:3B:AE:6B:C4:89:2A:6D:38:EF:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pObuKivUtt87NTuua8SJKm047yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/861963163DA411EFAD3EA818C4F9AE02/pObuKivUtt87NTuua8SJKm047yk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:48:04:81:a3:b8:1f:d6:80:f4:95:63:4e:be:89:e2:7a:80: 3f:0f:e9:db:f7:34:79:c7:2b:ea:3e:04:00:c5:2f:18:1a:ef: 80:5f:b3:7b:c0:be:a9:ad:2b:9d:a9:24:72:5b:1b:0b:d0:3f: 19:1e:5e:31:81:b7:80:e7:50:e9:9a:13:56:52:a5:06:20:e7: ca:6b:48:c9:da:a6:70:c4:c0:0e:e2:00:a9:c8:45:33:04:5a: 32:1f:cc:0b:a4:e2:d7:28:88:18:36:d8:79:df:ce:37:34:23: 1d:d7:d1:ee:a1:40:32:cb:ab:53:41:c4:5f:61:2a:5b:6a:d8: f1:7a:a6:db:54:29:f4:e7:d2:09:df:50:92:87:92:a2:a8:d2: 78:41:a4:a5:cb:a4:dd:29:0b:3c:01:b7:16:c2:bd:88:86:ca: b3:48:b3:91:34:08:fb:6d:10:0f:15:ee:da:fe:f6:63:84:03: ad:a2:55:fe:fa:68:31:d6:55:a9:7d:c3:bf:db:ab:4d:e8:79: e8:a1:04:8f:0b:e0:65:c4:ad:6f:67:b6:dc:3f:2a:85:45:dc: 86:e5:0f:9e:b2:25:13:44:8a:ed:06:8b:b9:9d:ac:7f:4a:f9: 3d:22:2d:a8:16:5c:24:e8:f8:0e:7b:e5:0b:71:f0:6f:b2:44: d9:f5:05:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTZCQjgxMTAvBgNVBAUTKEE0RTZFRTJBMkJENEI2REYzQjM1M0JBRTZCQzQ4OTJB NkQzOEVGMjkwHhcNMjYwNDIwMjEyMzIxWhcNMjYwNDI3MjEyMzIxWjAYMRYwFAYD VQQDEw02OWU2OTk0OS01ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5QLRZEfjSU5jR1klkHdliNJWLwMU0fweZoKUFvMdqaAwHpdvFQuqj1vh4MoX QTon7Qjik5zn07wcDEjjfNSW8OwHd/5Dy+MYqPfc21XaAPh5ShsVfzOyQqjQYSTR j3sfjMVRZGHBoSqOqip1Go655AQg60AsaIYdSowSS1nMd86S/SQy6eD3IxdYjr7c Hod9WgNTa4pYdzMIMzHB0eYs5nMYbC2r3OeNUBnYKUAik5Ultw+7iODmpg5PcGSU GSvD1XAv7IoR/8ra8ysoJxb83ScWZquMXkE41JOHn/MVVKaQENC0UZ/lO4TfYwHy rzqhP+u7GQjdZ5dgJr7wfua9XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBbqBNF qAF+E5xrqrO3jLkBfzvhMB8GA1UdIwQYMBaAFKTm7ior1LbfOzU7rmvEiSptOO8p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkJCOC84NjE5NjMxNjNE QTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0ODdOVHV1YThTSkttMDQ3 eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPYnVLaXZVdHQ4N05UdXVhOFNKS20wNDd5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NkJCOC84NjE5NjMxNjNEQTQxMUVGQUQzRUE4MThDNEY5QUUwMi9wT2J1S2l2VXR0 ODdOVHV1YThTSkttMDQ3eWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc0gEgaO4H9aA9JVjTr6J4nqAPw/p2/c0eccr6j4EAMUvGBrvgF+ze8C+qa0r nakkclsbC9A/GR5eMYG3gOdQ6ZoTVlKlBiDnymtIydqmcMTADuIAqchFMwRaMh/M C6Ti1yiIGDbYed/ONzQjHdfR7qFAMsurU0HEX2EqW2rY8Xqm21Qp9OfSCd9QkoeS oqjSeEGkpcuk3SkLPAG3FsK9iIbKs0izkTQI+20QDxXu2v72Y4QDraJV/vpoMdZV qX3Dv9urTeh56KEEjwvgZcStb2e23D8qhUXchuUPnrIlE0SK7QaLuZ2sf0r5PSIt qBZcJOj4DnvlC3Hwb7JE2fUFfg== -----END CERTIFICATE-----Generated at Tue Apr 21 23:06:48 2026 by rpki-client