$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft File: h17HLkbyzRY_Brgi5wQSmu_jGRA.mft (raw, json) Hash identifier: YeJuoEwdWHeCLs2JC1FnpHKMwEOaJLwkgqee4tIY6/4= Subject key identifier: 04:08:CC:A7:B2:5E:54:23:42:03:0E:F1:99:F3:A9:F5:E8:DC:F6:92 Authority key identifier: 87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 Certificate issuer: /CN=A917C716/serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft Manifest number: 0513 Signing time: Sun 05 Apr 2026 00:58:50 +0000 Manifest this update: Sun 05 Apr 2026 00:58:49 +0000 Manifest next update: Sun 12 Apr 2026 00:58:49 +0000 Files and hashes: 1: h17HLkbyzRY_Brgi5wQSmu_jGRA.crl (hash: o3EQ8bzV5yxcIx4iZXgMrpfatGZOGRaBXrrGgaVHG6w=) 2: 9BC8AC96555C11F0AF866966C4F9AE02.roa (hash: MkVVR1kZX4ljIHBsO0dsql9gUaTYJmDwTsoltqD+qZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=875EC72E46F2CD163F06B822E704129AEFE31910 Validity Not Before: Apr 5 00:58:49 2026 GMT Not After : Apr 12 00:58:49 2026 GMT Subject: CN=69d1b3c9-8e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b2:60:7b:4a:78:71:91:a6:b5:f4:8f:17:04: d5:16:9d:ce:f9:1e:7c:29:cb:76:18:cc:1f:6a:ba: b9:2f:ec:5b:57:05:6c:43:2c:ff:0c:02:96:40:49: d1:f9:7c:27:4c:b0:86:4c:0c:59:36:ef:01:eb:77: cc:70:95:cc:1e:6c:25:3c:36:93:67:5f:4f:c6:c7: 1a:b7:25:ac:7c:14:bd:ea:0b:12:f6:a2:88:62:5a: 60:ce:5d:9e:6b:e5:09:da:cf:df:8e:33:a4:c4:14: 0a:6e:3e:09:59:7c:9d:b0:0c:2f:e7:7c:5b:94:93: f0:a0:50:b9:1c:ea:62:cc:d3:80:13:31:5b:94:d6: cd:a4:92:43:37:a2:f5:3a:b0:f2:f7:e0:6c:11:37: 5b:ae:e3:e3:0c:a0:53:cf:17:28:64:fc:bc:44:42: 03:93:46:6b:ea:bb:5a:a9:ad:80:80:07:97:25:68: e4:e5:73:7f:35:80:8d:33:0b:8d:fb:9e:e0:88:f3: 3f:54:1f:cd:29:98:37:27:1e:4a:2c:90:bd:95:53: f4:55:bb:35:f0:c3:a8:79:52:ed:2f:51:77:53:96: 87:3d:1e:28:f1:6f:d6:2e:b6:e1:01:c0:b1:f9:20: dd:e3:9a:f1:ad:0b:cd:c6:7a:73:aa:fc:1c:86:21: 07:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:08:CC:A7:B2:5E:54:23:42:03:0E:F1:99:F3:A9:F5:E8:DC:F6:92 X509v3 Authority Key Identifier: keyid:87:5E:C7:2E:46:F2:CD:16:3F:06:B8:22:E7:04:12:9A:EF:E3:19:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h17HLkbyzRY_Brgi5wQSmu_jGRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/h17HLkbyzRY_Brgi5wQSmu_jGRA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f5:1c:b1:76:32:8f:6f:85:99:f4:f3:23:d0:c2:84:e4:98: 2e:26:af:c4:7d:38:c5:f7:17:5a:cd:57:2e:9a:7c:96:76:83: 99:4c:b2:ec:ee:78:65:a1:c7:21:de:a3:2b:41:66:0b:1c:16: 71:f8:f5:7f:25:47:0f:90:62:0e:d7:8d:02:68:cb:ab:7d:90: aa:7c:15:ad:af:b8:c3:95:be:5c:41:a8:6d:85:24:53:66:d7: 6e:f0:b8:53:16:9a:31:de:f9:22:c6:df:5c:a0:1d:7c:de:5a: 29:0d:0b:3f:9f:35:40:40:fb:af:04:b2:41:1d:0a:4d:db:07: 55:bd:49:17:d9:25:57:b0:e2:fe:94:8a:5c:fd:c8:3d:50:01: 3a:27:64:91:d6:9a:72:8e:5f:fa:8e:c7:40:cf:7c:87:36:2b: 72:8a:1e:8b:89:23:99:b1:0c:74:5f:e8:bd:7b:8e:83:b4:b4: e6:89:7d:69:b2:e4:f2:d3:17:7d:f6:34:8a:43:64:96:74:90: e9:3a:db:e6:13:3d:4c:16:a1:08:4a:07:27:74:29:21:e5:65: c8:d3:72:3d:b3:d3:bc:c2:ff:b8:5b:d5:aa:40:e5:5e:de:01: fe:34:18:ba:57:4d:f8:31:58:01:be:1a:8d:af:c9:8e:4a:61: 6c:4c:34:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDg3NUVDNzJFNDZGMkNEMTYzRjA2QjgyMkU3MDQxMjlB RUZFMzE5MTAwHhcNMjYwNDA1MDA1ODQ5WhcNMjYwNDEyMDA1ODQ5WjAYMRYwFAYD VQQDEw02OWQxYjNjOS04ZTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7Jge0p4cZGmtfSPFwTVFp3O+R58Kct2GMwfarq5L+xbVwVsQyz/DAKWQEnR +XwnTLCGTAxZNu8B63fMcJXMHmwlPDaTZ19PxscatyWsfBS96gsS9qKIYlpgzl2e a+UJ2s/fjjOkxBQKbj4JWXydsAwv53xblJPwoFC5HOpizNOAEzFblNbNpJJDN6L1 OrDy9+BsETdbruPjDKBTzxcoZPy8REIDk0Zr6rtaqa2AgAeXJWjk5XN/NYCNMwuN +57giPM/VB/NKZg3Jx5KLJC9lVP0Vbs18MOoeVLtL1F3U5aHPR4o8W/WLrbhAcCx +SDd45rxrQvNxnpzqvwchiEHtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQIzKey XlQjQgMO8ZnzqfXo3PaSMB8GA1UdIwQYMBaAFIdexy5G8s0WPwa4IucEEprv4xkQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGtieXpSWV9CcmdpNXdRU211X2pH UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gxN0hMa2J5elJZX0JyZ2k1d1FTbXVfakdSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9oMTdITGtieXpS WV9CcmdpNXdRU211X2pHUkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV/UcsXYyj2+FmfTzI9DChOSYLiavxH04xfcXWs1XLpp8lnaDmUyy7O54ZaHH Id6jK0FmCxwWcfj1fyVHD5BiDteNAmjLq32QqnwVra+4w5W+XEGobYUkU2bXbvC4 UxaaMd75IsbfXKAdfN5aKQ0LP581QED7rwSyQR0KTdsHVb1JF9klV7Di/pSKXP3I PVABOidkkdaaco5f+o7HQM98hzYrcooei4kjmbEMdF/ovXuOg7S05ol9abLk8tMX ffY0ikNklnSQ6Trb5hM9TBahCEoHJ3QpIeVlyNNyPbPTvML/uFvVqkDlXt4B/jQY uldN+DFYAb4aja/JjkphbEw0SQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:45 2026 by rpki-client