$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft File: rRYSQOl6MtEDCZunigKM0J9fW5M.mft (raw, json) Hash identifier: QsINM4CyQRPcNSpUlO4bL/LGNPjH/dtzsxmQlvfmxh4= Subject key identifier: 00:07:88:39:FB:EC:B8:2A:AF:62:0D:68:0E:03:2E:61:DC:0C:19:FA Authority key identifier: AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 Certificate issuer: /CN=A9169BAF/serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Certificate serial: 0199 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft Manifest number: 0192 Signing time: Fri 17 Apr 2026 04:05:15 +0000 Manifest this update: Fri 17 Apr 2026 04:05:15 +0000 Manifest next update: Fri 24 Apr 2026 04:05:15 +0000 Files and hashes: 1: rRYSQOl6MtEDCZunigKM0J9fW5M.crl (hash: lk8a74P1+p4XmDHVTSbl/K6NbKTiTMpku04UdiG70us=) 2: 122C6942D9CE11EEB6EA7F6CC4F9AE02.roa (hash: PpBOU4X+uS2a94ESgw3q/TNVKHg9vw4HoislmYncmAU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 409 (0x199) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BAF, serialNumber=AD161240E97A32D103099BA78A028CD09F5F5B93 Validity Not Before: Apr 17 04:05:15 2026 GMT Not After : Apr 24 04:05:15 2026 GMT Subject: CN=69e1b17b-53a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:30:ea:82:07:29:77:df:53:66:78:cc:01:df: ed:7e:5d:be:ee:f6:93:8d:df:79:ad:1b:d7:cc:20: fb:22:49:df:2e:9e:49:8d:16:e9:7f:68:b9:1d:e7: ce:a4:d6:54:6e:3b:ec:74:05:7a:af:fa:e2:ff:58: 91:9d:c5:7a:2d:b5:34:74:d4:2b:e1:16:7d:7f:5c: 95:11:1b:4f:8c:9a:59:79:aa:17:96:1a:07:49:cf: e0:f5:31:24:71:29:c1:a8:5f:51:ec:f7:7d:ed:6a: e7:26:f3:5b:7e:35:f1:d0:07:5c:c0:5c:59:24:10: 24:8e:43:0a:d3:43:7d:af:49:38:77:3c:38:3d:11: 18:80:f3:fc:a4:00:11:e9:22:b1:e9:af:e3:46:92: e8:1e:1b:26:87:55:eb:d9:90:98:fb:06:2a:e8:18: e0:02:61:8e:e7:0d:3e:81:97:ff:2b:b4:1b:c8:d1: 8c:b5:50:fa:1e:71:ce:bd:03:d4:4a:9c:95:c8:69: 06:2a:56:f4:dd:3b:e9:e2:b8:b3:8b:b4:3f:1d:56: 31:18:5c:da:47:a3:e4:f3:53:81:a0:b4:f7:d4:bc: 34:a6:86:1a:2b:6c:17:bf:76:fc:85:f7:24:b3:33: 35:04:35:af:ad:30:24:0e:e4:06:77:d8:25:8e:db: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:07:88:39:FB:EC:B8:2A:AF:62:0D:68:0E:03:2E:61:DC:0C:19:FA X509v3 Authority Key Identifier: keyid:AD:16:12:40:E9:7A:32:D1:03:09:9B:A7:8A:02:8C:D0:9F:5F:5B:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRYSQOl6MtEDCZunigKM0J9fW5M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BAF/AEF70490D9BE11EEAC5BD36DC4F9AE02/rRYSQOl6MtEDCZunigKM0J9fW5M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:a8:f1:0d:00:d5:0b:ce:30:86:2a:a7:c5:62:16:3b:a8:15: ce:70:5a:ab:96:1e:50:8d:20:6d:8b:0f:f8:6c:e8:ab:5c:5a: 54:86:90:22:a1:73:85:e0:fe:3d:04:97:85:c9:58:ae:cd:bf: 05:65:be:82:5f:5a:f3:86:62:a0:f4:0f:a2:cf:27:a0:ba:3c: b1:a8:3c:0f:eb:ac:df:5e:53:bc:f6:d1:e8:4e:f2:b1:2e:ee: e4:df:d4:1a:07:99:11:a1:f0:2a:c0:d3:6f:04:5e:28:7b:e5: dc:23:8c:83:e1:e4:f7:5e:22:a4:af:cd:99:0c:4b:13:3b:db: 55:a4:29:bf:f5:2b:e3:72:69:77:96:61:d8:d5:d3:b8:50:22: ba:10:c7:3a:36:47:ac:15:c4:6e:75:bd:92:d7:ce:e2:27:0d: 6c:a3:4d:6b:fe:30:89:36:cd:df:77:32:c6:88:7b:9b:a4:b5: 19:95:78:90:95:72:6f:13:56:81:5f:b3:35:a4:32:03:65:fe: ff:71:cf:69:61:95:24:ab:88:20:05:63:c0:c4:a3:63:5b:b9: 8d:dc:57:9e:c2:42:a1:20:3a:7f:6b:7a:b0:fd:39:e1:7a:24: 4a:98:27:9b:7a:52:4e:79:98:81:97:1e:20:fe:6c:85:df:d4: ae:57:e5:23 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQUYxMTAvBgNVBAUTKEFEMTYxMjQwRTk3QTMyRDEwMzA5OUJBNzhBMDI4Q0Qw OUY1RjVCOTMwHhcNMjYwNDE3MDQwNTE1WhcNMjYwNDI0MDQwNTE1WjAYMRYwFAYD VQQDEw02OWUxYjE3Yi01M2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTDqggcpd99TZnjMAd/tfl2+7vaTjd95rRvXzCD7IknfLp5JjRbpf2i5HefO pNZUbjvsdAV6r/ri/1iRncV6LbU0dNQr4RZ9f1yVERtPjJpZeaoXlhoHSc/g9TEk cSnBqF9R7Pd97WrnJvNbfjXx0AdcwFxZJBAkjkMK00N9r0k4dzw4PREYgPP8pAAR 6SKx6a/jRpLoHhsmh1Xr2ZCY+wYq6BjgAmGO5w0+gZf/K7QbyNGMtVD6HnHOvQPU SpyVyGkGKlb03Tvp4rizi7Q/HVYxGFzaR6Pk81OBoLT31Lw0poYaK2wXv3b8hfck szM1BDWvrTAkDuQGd9gljtsOTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAAHiDn7 7Lgqr2INaA4DLmHcDBn6MB8GA1UdIwQYMBaAFK0WEkDpejLRAwmbp4oCjNCfX1uT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJBRi9BRUY3MDQ5MEQ5 QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10RURDWnVuaWdLTTBKOWZX NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JSWVNRT2w2TXRFRENadW5pZ0tNMEo5Zlc1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJBRi9BRUY3MDQ5MEQ5QkUxMUVFQUM1QkQzNkRDNEY5QUUwMi9yUllTUU9sNk10 RURDWnVuaWdLTTBKOWZXNU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdKjxDQDVC84whiqnxWIWO6gVznBaq5YeUI0gbYsP+Gzoq1xaVIaQIqFzheD+ PQSXhclYrs2/BWW+gl9a84ZioPQPos8noLo8sag8D+us315TvPbR6E7ysS7u5N/U GgeZEaHwKsDTbwReKHvl3COMg+Hk914ipK/NmQxLEzvbVaQpv/Ur43Jpd5Zh2NXT uFAiuhDHOjZHrBXEbnW9ktfO4icNbKNNa/4wiTbN33cyxoh7m6S1GZV4kJVybxNW gV+zNaQyA2X+/3HPaWGVJKuIIAVjwMSjY1u5jdxXnsJCoSA6f2t6sP054XokSpgn m3pSTnmYgZceIP5shd/UrlflIw== -----END CERTIFICATE-----Generated at Sat Apr 18 21:05:54 2026 by rpki-client