$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft File: AiMNlU5PPWqtRJXXTNs-4PKHygc.mft (raw, json) Hash identifier: JA/VAWUhCOdEGR5gllwaU46/JjzYZqJaiY7ZjZJ1jhk= Subject key identifier: 0D:34:E2:2A:B4:8D:5D:38:0A:86:1A:4E:2E:7A:2C:E3:A8:0F:AF:48 Authority key identifier: 02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07 Certificate issuer: /CN=A917B4C6/serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07 Certificate serial: 246C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft Manifest number: 243B Signing time: Sat 04 Apr 2026 15:44:08 +0000 Manifest this update: Sat 04 Apr 2026 15:44:07 +0000 Manifest next update: Sat 11 Apr 2026 15:44:07 +0000 Files and hashes: 1: AiMNlU5PPWqtRJXXTNs-4PKHygc.crl (hash: Vk4ak57WfSw1QSSm6jdLnASSfttb6qw8uS76EmZDwK4=) 2: 32B76C00562411E79589C739C4F9AE02.roa (hash: UhOsRuv328ibsD6Eq+bltfZ6G75BexkhspAPfUdHDZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9324 (0x246c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4C6, serialNumber=02230D954E4F3D6AAD4495D74CDB3EE0F287CA07 Validity Not Before: Apr 4 15:44:07 2026 GMT Not After : Apr 11 15:44:07 2026 GMT Subject: CN=69d131c8-8f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:27:16:c3:e8:2f:6e:bb:fa:dc:32:64:dd: d2:a4:5b:0a:e2:bb:3b:4d:43:a6:8e:29:40:6b:04: 2e:1c:42:9b:f6:6a:d7:22:2c:d8:0d:65:eb:f7:96: b7:c2:89:00:69:db:9e:4c:f0:f5:48:f4:c4:ee:01: 66:1c:3f:3f:13:3e:92:df:0a:10:1e:15:fd:db:07: 88:3d:fb:34:a1:34:f1:89:b5:a8:28:54:59:5d:13: c8:c4:42:9a:ae:86:08:f0:ea:5f:e8:06:8c:e0:df: 22:5c:a3:a5:f3:3b:ec:39:e4:13:e2:13:9c:ef:47: 99:fe:be:de:3f:4f:05:14:c4:fe:c5:b7:27:93:96: a5:24:58:4e:68:67:00:05:97:0b:dd:c4:47:17:1a: 7a:21:56:38:f4:b6:72:6b:5a:d8:3b:0f:24:91:f3: 16:42:40:ad:3a:8e:36:ac:6c:d0:39:5a:d3:da:21: 48:db:e0:2e:2e:f4:3c:2e:34:50:39:60:e6:82:c2: b8:1c:e6:34:12:04:fd:23:59:31:c4:27:4a:c6:57: e0:1a:ce:ec:5b:58:06:45:8f:34:10:10:aa:3a:2c: ed:32:d1:aa:3d:15:fc:4b:19:5b:7b:43:46:3e:4e: e5:36:ca:07:94:6d:59:44:40:56:1e:67:88:4e:9d: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:34:E2:2A:B4:8D:5D:38:0A:86:1A:4E:2E:7A:2C:E3:A8:0F:AF:48 X509v3 Authority Key Identifier: keyid:02:23:0D:95:4E:4F:3D:6A:AD:44:95:D7:4C:DB:3E:E0:F2:87:CA:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AiMNlU5PPWqtRJXXTNs-4PKHygc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4C6/8DFE628878A111E5ADE97082C4F9AE02/AiMNlU5PPWqtRJXXTNs-4PKHygc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:56:d7:07:57:a7:e5:18:9b:d9:99:70:3f:6c:b2:e6:f7:33: 5c:17:ed:fa:17:70:59:29:bc:f6:7b:d5:59:f2:c1:e6:60:79: 69:2e:50:5a:3c:a3:25:c0:23:3f:c2:9d:41:e3:08:c8:a3:11: 5d:03:ac:9d:f9:a6:fc:b1:13:df:52:06:5d:51:ac:1d:66:b6: a4:74:f8:e2:1a:9a:b5:4e:11:05:92:8b:5e:a3:f8:54:d6:dc: 45:07:12:69:22:58:a0:27:c2:71:72:04:f5:77:53:4c:aa:34: 45:2f:fe:5f:8e:4c:65:88:83:a4:18:92:13:c6:28:2b:13:ba: 8d:02:37:7a:08:3c:6c:77:fa:93:3a:6e:72:73:70:0b:5d:d0: 2a:46:10:a0:64:37:83:8a:77:71:59:80:67:8b:bb:8b:22:53: 0b:a8:43:de:dc:c6:d0:3f:e3:fa:e6:a5:a3:93:42:32:c4:60: 33:e0:88:99:d0:5b:36:3d:fa:eb:d9:b2:15:fb:86:70:07:79: 2c:d8:33:00:35:c4:7a:bf:23:5f:1b:77:50:0b:62:34:31:e1: 20:78:58:c0:ed:41:ec:1d:b9:5c:f8:6e:b7:dd:d4:7f:3e:85: 69:68:c8:38:7b:e0:dd:f5:e4:ea:c1:55:1a:1c:41:48:de:5f: 27:b4:8c:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJGwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QzYxMTAvBgNVBAUTKDAyMjMwRDk1NEU0RjNENkFBRDQ0OTVENzRDREIzRUUw RjI4N0NBMDcwHhcNMjYwNDA0MTU0NDA3WhcNMjYwNDExMTU0NDA3WjAYMRYwFAYD VQQDEw02OWQxMzFjOC04ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16gnFsPoL267+twyZN3SpFsK4rs7TUOmjilAawQuHEKb9mrXIizYDWXr95a3 wokAadueTPD1SPTE7gFmHD8/Ez6S3woQHhX92weIPfs0oTTxibWoKFRZXRPIxEKa roYI8Opf6AaM4N8iXKOl8zvsOeQT4hOc70eZ/r7eP08FFMT+xbcnk5alJFhOaGcA BZcL3cRHFxp6IVY49LZya1rYOw8kkfMWQkCtOo42rGzQOVrT2iFI2+AuLvQ8LjRQ OWDmgsK4HOY0EgT9I1kxxCdKxlfgGs7sW1gGRY80EBCqOiztMtGqPRX8Sxlbe0NG Pk7lNsoHlG1ZREBWHmeITp2hzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA004iq0 jV04CoYaTi56LOOoD69IMB8GA1UdIwQYMBaAFAIjDZVOTz1qrUSV10zbPuDyh8oH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRDNi84REZFNjI4ODc4 QTExMUU1QURFOTcwODJDNEY5QUUwMi9BaU1ObFU1UFBXcXRSSlhYVE5zLTRQS0h5 Z2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FpTU5sVTVQUFdxdFJKWFhUTnMtNFBLSHlnYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRDNi84REZFNjI4ODc4QTExMUU1QURFOTcwODJDNEY5QUUwMi9BaU1ObFU1UFBX cXRSSlhYVE5zLTRQS0h5Z2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABVbXB1en5Rib2ZlwP2yy5vczXBft+hdwWSm89nvVWfLB5mB5aS5QWjyjJcAj P8KdQeMIyKMRXQOsnfmm/LET31IGXVGsHWa2pHT44hqatU4RBZKLXqP4VNbcRQcS aSJYoCfCcXIE9XdTTKo0RS/+X45MZYiDpBiSE8YoKxO6jQI3egg8bHf6kzpucnNw C13QKkYQoGQ3g4p3cVmAZ4u7iyJTC6hD3tzG0D/j+ualo5NCMsRgM+CImdBbNj36 69myFfuGcAd5LNgzADXEer8jXxt3UAtiNDHhIHhYwO1B7B25XPhut93Ufz6FaWjI OHvg3fXk6sFVGhxBSN5fJ7SMGg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:58 2026 by rpki-client