$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: cFsOy95ilED/I6FoGDKvPVfSbt2kc5C+dSvG8yFaSg0= Subject key identifier: DC:AC:20:E1:A4:51:E5:D2:D4:BA:11:4A:B3:4C:D6:6D:36:C6:10:22 Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 020E Signing time: Mon 27 Apr 2026 02:50:16 +0000 Manifest this update: Mon 27 Apr 2026 02:50:16 +0000 Manifest next update: Mon 04 May 2026 02:50:16 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: S3eq2bXqzBCEbMvNsYlN6e5s173ICDVMM46rBlD8oMs=) 2: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=) 3: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Apr 27 02:50:16 2026 GMT Not After : May 4 02:50:16 2026 GMT Subject: CN=69eecee8-4114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:b2:ef:17:3b:c7:a1:4f:25:80:38:15:ff: 2e:f6:63:38:a2:08:df:a2:58:b7:ed:2a:42:d6:7c: 64:4e:28:79:61:bd:ef:29:ee:ec:3d:70:cb:d3:23: 85:91:1f:8e:bb:ea:37:8f:47:bc:9e:3f:69:ba:9e: 21:e6:39:2e:07:67:7f:c2:da:ae:f3:84:69:48:17: f5:f8:a6:3a:58:d6:25:5a:29:3b:cb:46:49:c4:59: 71:b8:5a:d1:a2:db:24:87:9b:ef:05:a9:9d:8b:84: 08:4c:fb:92:da:52:43:f5:c5:0b:75:26:f0:3c:ea: f0:bf:2a:ab:af:f6:1b:ed:37:97:03:49:e6:45:4d: 5f:f7:5c:30:3d:be:ce:a4:5b:1b:6a:54:f7:d1:9f: 9c:92:17:99:7d:5c:79:ce:4c:33:0b:b4:91:d0:e1: bc:8a:db:59:ee:15:12:0f:8a:51:5a:ca:07:83:25: 9c:a3:0d:17:83:b4:6d:7f:fb:45:9b:a5:be:9a:c6: d0:87:b7:76:8d:6b:90:29:6a:99:0e:74:34:98:7e: 07:66:aa:ec:73:1f:48:44:e8:d8:57:be:64:0f:33: c6:27:d5:ff:97:68:67:7e:c0:d0:d8:17:c1:10:93: 0e:6a:74:a4:70:18:43:18:41:db:67:ec:ac:21:9d: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AC:20:E1:A4:51:E5:D2:D4:BA:11:4A:B3:4C:D6:6D:36:C6:10:22 X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:31:3a:10:b1:03:6c:f9:ad:be:b3:eb:22:51:02:4c:12:c3: ff:13:f1:d6:0f:34:5a:4f:33:be:76:2c:6e:27:6a:d7:65:cd: 1e:20:86:f7:38:a3:bb:83:eb:a4:33:ce:5f:3d:a5:dd:77:48: a1:9f:13:a1:ae:02:24:7e:ab:b6:7e:f0:ae:ab:3b:f9:51:95: b5:59:0d:3b:68:58:bd:78:85:53:45:6d:3f:77:f7:b1:1a:23: 62:c4:8a:ea:24:13:a6:1e:d5:d1:c6:9d:af:76:09:c7:49:3b: 03:41:98:82:c2:94:a0:56:82:0e:90:8b:fd:95:c5:48:2b:7b: 9a:91:88:98:79:d6:3d:ec:78:06:ff:10:4d:8b:18:4b:0e:64: b5:f0:e3:eb:cd:64:18:11:01:6e:d6:9f:f5:b5:c5:41:cb:9d: 87:d8:c3:d5:66:56:ef:d5:27:c9:71:12:2c:ad:d2:e5:fe:a2: bf:6d:0b:a1:d5:6e:02:86:32:64:41:74:92:49:6e:8f:70:0d: 23:91:ea:d5:90:6b:90:d6:7e:8f:22:8a:97:42:d8:5f:21:b7: 6e:15:6a:e7:43:ab:e8:29:f8:ce:2e:62:1c:ef:59:52:63:d6: a7:a8:62:d6:12:8a:0b:8c:71:98:85:f9:5e:06:43:1c:3d:d0: a0:0c:48:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjYwNDI3MDI1MDE2WhcNMjYwNTA0MDI1MDE2WjAYMRYwFAYD VQQDEw02OWVlY2VlOC00MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnmy7xc7x6FPJYA4Ff8u9mM4ogjfoli37SpC1nxkTih5Yb3vKe7sPXDL0yOF kR+Ou+o3j0e8nj9pup4h5jkuB2d/wtqu84RpSBf1+KY6WNYlWik7y0ZJxFlxuFrR otskh5vvBamdi4QITPuS2lJD9cULdSbwPOrwvyqrr/Yb7TeXA0nmRU1f91wwPb7O pFsbalT30Z+ckheZfVx5zkwzC7SR0OG8ittZ7hUSD4pRWsoHgyWcow0Xg7Rtf/tF m6W+msbQh7d2jWuQKWqZDnQ0mH4HZqrscx9IROjYV75kDzPGJ9X/l2hnfsDQ2BfB EJMOanSkcBhDGEHbZ+ysIZ2UmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNysIOGk UeXS1LoRSrNM1m02xhAiMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfDE6ELEDbPmtvrPrIlECTBLD/xPx1g80Wk8zvnYsbidq12XNHiCG9ziju4Pr pDPOXz2l3XdIoZ8Toa4CJH6rtn7wrqs7+VGVtVkNO2hYvXiFU0VtP3f3sRojYsSK 6iQTph7V0cadr3YJx0k7A0GYgsKUoFaCDpCL/ZXFSCt7mpGImHnWPex4Bv8QTYsY Sw5ktfDj681kGBEBbtaf9bXFQcudh9jD1WZW79UnyXESLK3S5f6iv20LodVuAoYy ZEF0kkluj3ANI5Hq1ZBrkNZ+jyKKl0LYXyG3bhVq50Or6Cn4zi5iHO9ZUmPWp6hi 1hKKC4xxmIX5XgZDHD3QoAxISA== -----END CERTIFICATE-----Generated at Tue Apr 28 12:44:46 2026 by rpki-client