$ rpki-client -vvf rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft File: diWOCB8uCcDx-nu0mbF1lwVlwOs.mft (raw, json) Hash identifier: QUrftqSZ+LB9WRFzleRMseVoO1QdO/5WBfe+m2JiuCo= Subject key identifier: 18:68:6D:00:43:7D:26:53:40:21:06:59:61:A2:4A:B7:01:26:50:B9 Authority key identifier: 76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB Certificate issuer: /CN=A917F429/serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft Manifest number: 06 Signing time: Tue 21 Apr 2026 08:57:37 +0000 Manifest this update: Tue 21 Apr 2026 08:57:36 +0000 Manifest next update: Tue 28 Apr 2026 08:57:36 +0000 Files and hashes: 1: diWOCB8uCcDx-nu0mbF1lwVlwOs.crl (hash: MTnStaRiK3N6TkP1HkhJENRdTtB+XIA+LmYwVgmnN1o=) 2: E47B5CC8371911F196F6B470C8833773.roa (hash: qBhoDtp7mp14HRwHJwctq+CWjS+yyzLGnVuJb1Tow90=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F429, serialNumber=76258E081F2E09C0F1FA7BB499B175970565C0EB Validity Not Before: Apr 21 08:57:36 2026 GMT Not After : Apr 28 08:57:36 2026 GMT Subject: CN=69e73c01-fee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:56:90:97:52:aa:3c:5f:c4:3a:13:29:7e: 2f:6a:48:52:6b:09:99:23:73:a1:40:63:7f:9a:af: 1a:e8:a6:2a:26:f1:e3:27:c3:a3:d0:63:d3:5a:61: 20:ac:1e:5e:76:ca:87:87:7a:e5:c0:04:a6:e3:3b: 61:8d:87:12:f1:a1:f2:ab:68:09:20:c0:10:26:d7: a5:2f:7a:2d:75:f6:db:87:e1:ee:d1:78:5f:e4:9e: 24:75:26:eb:fa:2b:f6:62:d1:33:dd:58:2b:40:b1: bd:7c:a5:d0:af:8a:08:be:e9:7c:aa:0b:eb:e8:3b: d1:a3:a0:85:7a:e9:0e:53:e6:60:3e:4e:76:92:8b: 6f:97:db:f6:cd:15:02:04:16:fe:80:5b:09:50:31: bc:ab:83:17:59:ff:ad:f0:31:96:39:b2:d8:12:e7: b0:44:fe:a0:57:f4:7c:59:0b:65:1b:db:e4:ce:8d: 5d:b1:7e:b1:f6:0a:41:71:34:21:a4:b0:f2:01:51: e9:62:fb:01:36:07:ed:85:1e:1a:46:15:14:b7:d5: 21:71:3f:c6:78:ef:9b:c6:b3:0a:7b:d0:09:ee:52: 13:b3:ea:4f:a5:c8:ba:28:83:2a:40:8b:04:57:bf: 72:59:3d:10:01:7d:90:bf:ea:28:b9:c6:a6:3b:44: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:68:6D:00:43:7D:26:53:40:21:06:59:61:A2:4A:B7:01:26:50:B9 X509v3 Authority Key Identifier: keyid:76:25:8E:08:1F:2E:09:C0:F1:FA:7B:B4:99:B1:75:97:05:65:C0:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/diWOCB8uCcDx-nu0mbF1lwVlwOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F429/267587A8371911F1A66BD9F8C6833773/diWOCB8uCcDx-nu0mbF1lwVlwOs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:61:ab:4a:0c:25:a3:14:c8:64:db:3a:6f:d5:2d:fa:08:b9: 91:22:76:8f:08:f9:49:f0:e8:a8:8d:16:90:fd:34:df:ea:fb: 49:d4:b3:6f:e6:22:ae:12:65:88:59:ff:05:cd:e2:22:ca:92: 24:44:48:6a:d5:88:12:d5:36:82:a0:4b:91:61:7e:24:23:e1: 90:77:b8:c0:ba:1c:ef:c7:5e:02:9d:d2:89:1d:93:23:ea:7b: 58:2a:ea:eb:70:d4:82:dc:5c:e9:02:12:a6:be:87:cc:f2:45: bc:6c:93:f7:c1:03:e0:34:dd:6e:b3:f7:ff:cb:26:8d:2d:35: b8:17:68:80:68:fe:c1:cb:21:5b:23:65:bb:29:39:57:8e:4f: 67:f2:ae:05:9f:ff:1b:8e:ad:08:20:5c:12:cb:cc:f9:3f:74: 8d:8a:87:cf:d3:fd:32:4f:fa:20:bf:61:17:c1:db:91:8f:f8: 90:e5:56:36:86:32:52:5b:7d:3d:2a:a1:ec:64:b8:6e:31:cd: 58:45:1a:a2:f4:8b:c9:e3:13:e3:12:32:bc:b4:62:15:7f:36: 84:2c:73:de:0a:33:d1:14:ae:91:c1:74:1f:0e:26:ee:b2:1d: 7b:26:2c:09:7f:fc:6e:d3:2f:50:bd:02:e6:e2:bc:bd:54:84: 9f:fa:1c:22 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RjQyOTExMC8GA1UEBRMoNzYyNThFMDgxRjJFMDlDMEYxRkE3QkI0OTlCMTc1OTcw NTY1QzBFQjAeFw0yNjA0MjEwODU3MzZaFw0yNjA0MjgwODU3MzZaMBgxFjAUBgNV BAMTDTY5ZTczYzAxLWZlZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDA01aQl1KqPF/EOhMpfi9qSFJrCZkjc6FAY3+arxropiom8eMnw6PQY9NaYSCs Hl52yoeHeuXABKbjO2GNhxLxofKraAkgwBAm16Uvei119tuH4e7ReF/kniR1Juv6 K/Zi0TPdWCtAsb18pdCvigi+6XyqC+voO9GjoIV66Q5T5mA+TnaSi2+X2/bNFQIE Fv6AWwlQMbyrgxdZ/63wMZY5stgS57BE/qBX9HxZC2Ub2+TOjV2xfrH2CkFxNCGk sPIBUeli+wE2B+2FHhpGFRS31SFxP8Z475vGswp70AnuUhOz6k+lyLoogypAiwRX v3JZPRABfZC/6ii5xqY7RPALAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUGGhtAEN9 JlNAIQZZYaJKtwEmULkwHwYDVR0jBBgwFoAUdiWOCB8uCcDx+nu0mbF1lwVlwOsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGNDI5LzI2NzU4N0E4Mzcx OTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NEeC1udTBtYkYxbHdWbHdP cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZGlXT0NCOHVDY0R4LW51MG1iRjFsd1Zsd09zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG NDI5LzI2NzU4N0E4MzcxOTExRjFBNjZCRDlGOEM2ODMzNzczL2RpV09DQjh1Q2NE eC1udTBtYkYxbHdWbHdPcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCCYatKDCWjFMhk2zpv1S36CLmRInaPCPlJ8OiojRaQ/TTf6vtJ1LNv5iKuEmWI Wf8FzeIiypIkREhq1YgS1TaCoEuRYX4kI+GQd7jAuhzvx14CndKJHZMj6ntYKurr cNSC3FzpAhKmvofM8kW8bJP3wQPgNN1us/f/yyaNLTW4F2iAaP7ByyFbI2W7KTlX jk9n8q4Fn/8bjq0IIFwSy8z5P3SNiofP0/0yT/ogv2EXwduRj/iQ5VY2hjJSW309 KqHsZLhuMc1YRRqi9IvJ4xPjEjK8tGIVfzaELHPeCjPRFK6RwXQfDibush17JiwJ f/xu0y9QvQLm4ry9VISf+hwi -----END CERTIFICATE-----Generated at Tue Apr 21 21:32:56 2026 by rpki-client