$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft File: pOlXbOhgyP9flyr1k7QFTngj5kI.mft (raw, json) Hash identifier: Dy3aC6DLqClxwSrrVPRJZiOOHYet+n9ZKIoYilmRS38= Subject key identifier: AD:29:A5:7A:08:C5:48:8D:C2:47:7F:B6:D9:76:16:53:49:22:81:03 Authority key identifier: A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42 Certificate issuer: /CN=A9117E4D/serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642 Certificate serial: 2CE4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft Manifest number: 2CE1 Signing time: Mon 20 Apr 2026 14:26:22 +0000 Manifest this update: Mon 20 Apr 2026 14:26:21 +0000 Manifest next update: Mon 27 Apr 2026 14:26:21 +0000 Files and hashes: 1: pOlXbOhgyP9flyr1k7QFTngj5kI.crl (hash: 1qzLAgGpTnyz87Ts4Xv3IKdB7UrBTNfNO9LaIfp4LE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 14:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11492 (0x2ce4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117E4D, serialNumber=A4E9576CE860C8FF5F972AF593B4054E7823E642 Validity Not Before: Apr 20 14:26:21 2026 GMT Not After : Apr 27 14:26:21 2026 GMT Subject: CN=69e6378e-7beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2e:66:97:44:b2:03:3e:70:b3:8b:21:7f:4c: f8:8c:3c:76:07:32:25:44:dd:db:61:01:13:1c:95: da:26:fc:d7:2b:7a:f8:0d:f7:2e:1f:75:27:06:0b: a0:ef:33:42:e8:85:02:33:49:3f:cf:b4:1a:22:d8: ea:b2:2a:20:3d:2d:b5:66:52:d3:ef:70:25:26:80: 4f:b8:fc:0b:90:29:55:0f:f3:53:f6:24:1b:16:d8: f1:8f:06:ae:c5:f9:15:4a:fc:bd:b8:e6:6a:dd:b8: 7b:93:03:59:6a:d3:ab:2f:bc:c2:f4:77:c7:5d:6b: 71:52:47:65:d8:f2:2b:da:ac:d7:3a:a9:2f:00:c7: 33:73:72:3f:ce:14:ed:22:a9:81:06:12:68:ad:75: d0:79:a6:61:5c:9a:9f:1a:2f:ec:38:39:de:86:d7: ca:47:1c:31:fa:75:aa:ca:f4:53:3c:56:27:63:7b: 95:e8:cc:45:88:5c:71:3b:9e:f7:84:20:80:11:f8: d7:ec:99:e2:50:15:fc:4d:3a:d6:d5:5c:af:46:32: cc:2b:96:ae:6e:52:32:d9:b3:33:db:2a:86:c5:c4: 3c:c5:e8:0b:df:3b:fb:27:bd:c2:a3:79:e5:65:44: 93:9b:0f:7c:54:d5:bc:51:e5:6f:8a:9a:ff:42:37: cf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:29:A5:7A:08:C5:48:8D:C2:47:7F:B6:D9:76:16:53:49:22:81:03 X509v3 Authority Key Identifier: keyid:A4:E9:57:6C:E8:60:C8:FF:5F:97:2A:F5:93:B4:05:4E:78:23:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/pOlXbOhgyP9flyr1k7QFTngj5kI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E4D/A64FBCE0C05811E39D8A06645911EA32/pOlXbOhgyP9flyr1k7QFTngj5kI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:87:a3:70:b6:22:20:1c:a2:b9:4e:bf:51:3a:3b:82:14:24: 2c:70:29:9e:77:f6:ff:51:c0:a9:c3:d2:4b:cb:29:67:af:56: 5b:dc:fd:b0:e5:c0:1c:6c:33:b2:f9:e9:d1:77:ee:cb:8b:c1: a3:1c:e2:e5:97:be:5e:db:55:ab:5f:56:f3:6e:e4:59:1d:a9: 78:3b:6b:95:14:6d:8a:da:2c:e5:55:7e:6b:d2:72:3e:a0:66: d1:f6:d1:bc:53:2f:2b:8e:8b:4f:d3:01:55:6f:05:3f:51:b1: 90:c5:60:46:a4:48:fc:ba:bd:28:23:be:57:12:94:76:1a:ff: ef:aa:07:97:1a:2e:ef:f4:0d:58:7d:79:22:10:7d:84:85:3b: 40:89:c6:e7:5b:c1:2e:cc:08:9d:97:c7:ef:09:45:47:1d:9a: ea:95:63:df:09:fb:0a:5b:1f:f1:0a:a2:27:f9:b2:fb:8b:3d: 25:7a:98:41:18:6d:3c:95:90:a0:33:43:dd:9c:7c:1e:04:84: 13:c2:69:6d:77:93:d3:52:fe:a9:be:93:a9:9b:88:51:d0:a5: 38:5f:e9:55:6a:57:cf:22:3a:c9:93:82:25:5e:d4:1c:a5:7f: 6d:2c:63:ad:35:1e:95:0a:8f:7e:f8:7a:a5:07:7a:0c:28:c0: a2:4e:70:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdFNEQxMTAvBgNVBAUTKEE0RTk1NzZDRTg2MEM4RkY1Rjk3MkFGNTkzQjQwNTRF NzgyM0U2NDIwHhcNMjYwNDIwMTQyNjIxWhcNMjYwNDI3MTQyNjIxWjAYMRYwFAYD VQQDEw02OWU2Mzc4ZS03YmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1i5ml0SyAz5ws4shf0z4jDx2BzIlRN3bYQETHJXaJvzXK3r4DfcuH3UnBgug 7zNC6IUCM0k/z7QaItjqsiogPS21ZlLT73AlJoBPuPwLkClVD/NT9iQbFtjxjwau xfkVSvy9uOZq3bh7kwNZatOrL7zC9HfHXWtxUkdl2PIr2qzXOqkvAMczc3I/zhTt IqmBBhJorXXQeaZhXJqfGi/sODnehtfKRxwx+nWqyvRTPFYnY3uV6MxFiFxxO573 hCCAEfjX7JniUBX8TTrW1VyvRjLMK5aublIy2bMz2yqGxcQ8xegL3zv7J73Co3nl ZUSTmw98VNW8UeVvipr/QjfPZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0ppXoI xUiNwkd/ttl2FlNJIoEDMB8GA1UdIwQYMBaAFKTpV2zoYMj/X5cq9ZO0BU54I+ZC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0RC9BNjRGQkNFMEMw NTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQOWZseXIxazdRRlRuZ2o1 a0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3BPbFhiT2hneVA5Zmx5cjFrN1FGVG5najVrSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0U0RC9BNjRGQkNFMEMwNTgxMUUzOUQ4QTA2NjQ1OTExRUEzMi9wT2xYYk9oZ3lQ OWZseXIxazdRRlRuZ2o1a0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl4ejcLYiIByiuU6/UTo7ghQkLHApnnf2/1HAqcPSS8spZ69WW9z9sOXAHGwz svnp0Xfuy4vBoxzi5Ze+XttVq19W827kWR2peDtrlRRtitos5VV+a9JyPqBm0fbR vFMvK46LT9MBVW8FP1GxkMVgRqRI/Lq9KCO+VxKUdhr/76oHlxou7/QNWH15IhB9 hIU7QInG51vBLswInZfH7wlFRx2a6pVj3wn7Clsf8QqiJ/my+4s9JXqYQRhtPJWQ oDND3Zx8HgSEE8JpbXeT01L+qb6TqZuIUdClOF/pVWpXzyI6yZOCJV7UHKV/bSxj rTUelQqPfvh6pQd6DCjAok5wyg== -----END CERTIFICATE-----Generated at Wed Apr 22 01:46:20 2026 by rpki-client