$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: 1XfrJlF5feZRQqTE6voDnwhpJQqQ/O5iG31jbzYYhFk= Subject key identifier: 23:6C:04:50:21:19:6F:47:46:8B:00:09:10:6F:59:BE:45:CE:72:AE Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 07CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 07BD Signing time: Thu 16 Apr 2026 21:23:35 +0000 Manifest this update: Thu 16 Apr 2026 21:23:34 +0000 Manifest next update: Thu 23 Apr 2026 21:23:34 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: 8np5GIxe+Ow6f3PAO9XZubI3yUhjpiyaPsOZQk2llqM=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1996 (0x7cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Apr 16 21:23:34 2026 GMT Not After : Apr 23 21:23:34 2026 GMT Subject: CN=69e15356-b930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:72:23:80:b3:45:8e:70:aa:09:eb:3b:35: 1c:4d:82:56:e5:73:e6:4c:6d:b6:67:45:e8:9e:88: a5:70:82:51:7f:d3:3d:8a:da:88:a9:4e:b3:7b:78: 47:d4:95:11:35:b1:12:4c:7b:1b:e4:ba:72:e1:20: 36:67:cd:6c:e8:a8:58:98:f2:7c:f8:15:f8:d0:8c: 9c:5b:79:2f:6b:23:ea:ab:ae:5b:40:7a:5f:41:0d: 2a:e7:bf:58:83:5d:96:7f:cd:c6:08:e3:6e:84:de: 62:3e:24:b6:88:c7:07:79:20:1f:db:8e:86:fa:9a: eb:6c:8b:6d:9b:7e:2d:fc:a7:8d:bd:2d:fb:19:31: 0a:69:16:bb:cd:7d:00:ea:86:34:f0:a8:f1:5c:c1: 5d:0f:31:91:ad:4b:a6:e6:9d:a9:3e:a4:21:db:07: 46:56:de:e2:0c:8c:89:e4:85:bb:ee:10:a5:eb:ab: c2:a9:16:e7:46:5e:1b:36:d5:a1:54:7e:54:ba:e5: 82:38:4d:8d:df:9a:ef:1c:e8:fd:96:87:b0:18:3a: 68:bb:1b:25:9e:e4:e0:ff:34:10:0c:29:54:9c:e8: 7a:f0:e2:92:54:a3:3e:ad:c5:51:10:8a:75:1b:05: c4:9a:da:67:d8:77:40:d8:7d:8f:85:16:a1:a9:87: d2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:04:50:21:19:6F:47:46:8B:00:09:10:6F:59:BE:45:CE:72:AE X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:cf:76:57:00:ad:4b:9f:1e:0c:c0:09:f4:0b:c8:b3:03:6a: 22:2f:0c:a8:98:c6:f1:23:1b:6b:85:09:b3:f2:f8:e5:0e:a3: 18:92:e8:0b:ee:17:f9:e9:84:9d:39:a0:df:8d:b9:03:77:0a: 46:18:83:0e:86:cf:b0:59:07:bf:f4:17:14:ab:01:24:de:61: ad:36:68:83:2e:57:9f:39:60:b4:20:6a:69:4b:15:83:5d:6c: f0:6f:2c:7a:e9:68:20:61:13:96:9a:86:2c:63:a7:1b:1e:bf: 7c:0d:1a:bb:21:8b:15:92:9f:fc:a2:74:a8:90:0a:f0:51:da: be:d8:d5:6c:a9:34:bd:cc:01:06:c7:11:94:2d:a8:8c:0c:e7: 34:6e:bb:d2:f4:6e:3b:96:55:92:46:ba:d7:78:fa:46:45:aa: d3:74:d5:0f:b6:76:09:f5:21:9e:d8:56:75:03:f4:f6:ac:97: 9f:dd:4b:54:23:47:d3:88:0a:2b:f5:a8:ca:63:87:30:ef:eb: 10:a2:0c:44:70:89:2e:9a:eb:56:b4:83:3f:74:48:33:da:e9: 92:ad:19:73:11:0d:57:c1:66:3b:f5:22:a3:b9:3e:54:5b:ce: 07:5e:4a:39:29:b1:4c:32:d0:8b:1d:90:8f:2a:e9:87:5d:72: b4:9b:48:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjYwNDE2MjEyMzM0WhcNMjYwNDIzMjEyMzM0WjAYMRYwFAYD VQQDEw02OWUxNTM1Ni1iOTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AJyI4CzRY5wqgnrOzUcTYJW5XPmTG22Z0XonoilcIJRf9M9itqIqU6ze3hH 1JURNbESTHsb5Lpy4SA2Z81s6KhYmPJ8+BX40IycW3kvayPqq65bQHpfQQ0q579Y g12Wf83GCONuhN5iPiS2iMcHeSAf246G+prrbIttm34t/KeNvS37GTEKaRa7zX0A 6oY08KjxXMFdDzGRrUum5p2pPqQh2wdGVt7iDIyJ5IW77hCl66vCqRbnRl4bNtWh VH5UuuWCOE2N35rvHOj9loewGDpouxslnuTg/zQQDClUnOh68OKSVKM+rcVREIp1 GwXEmtpn2HdA2H2PhRahqYfSVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCNsBFAh GW9HRosACRBvWb5FznKuMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAds92VwCtS58eDMAJ9AvIswNqIi8MqJjG8SMba4UJs/L45Q6jGJLoC+4X+emE nTmg3425A3cKRhiDDobPsFkHv/QXFKsBJN5hrTZogy5XnzlgtCBqaUsVg11s8G8s euloIGETlpqGLGOnGx6/fA0auyGLFZKf/KJ0qJAK8FHavtjVbKk0vcwBBscRlC2o jAznNG670vRuO5ZVkka613j6RkWq03TVD7Z2CfUhnthWdQP09qyXn91LVCNH04gK K/WoymOHMO/rEKIMRHCJLprrVrSDP3RIM9rpkq0ZcxENV8FmO/Uio7k+VFvOB15K OSmxTDLQix2Qjyrph11ytJtIvg== -----END CERTIFICATE-----Generated at Sat Apr 18 21:05:52 2026 by rpki-client