$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: nCYA4RJgUiRCp0d5JuwAkCvwtFZWEW+udOMuidobCTQ= Subject key identifier: 84:94:CA:31:9A:B3:5E:89:31:6D:0C:43:4C:4A:D1:A6:64:A3:CC:18 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 0298 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 028B Signing time: Sun 05 Apr 2026 01:21:38 +0000 Manifest this update: Sun 05 Apr 2026 01:21:37 +0000 Manifest next update: Sun 12 Apr 2026 01:21:37 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: PmcKCy/Gwe5S3+OhC4zZp+jP826lw+5hF/n6723sAgk=) 2: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=) 3: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 664 (0x298) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Apr 5 01:21:37 2026 GMT Not After : Apr 12 01:21:37 2026 GMT Subject: CN=69d1b922-50bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:b4:cb:70:8d:ad:14:a4:ed:2c:88:db:13: 68:c6:29:42:44:fc:e2:88:0d:4d:d7:b9:12:10:cf: 74:ae:b8:2d:01:a1:3b:a8:bb:39:2c:f7:b1:7d:cb: f9:5b:f2:a3:c3:10:d1:0d:95:28:f1:f5:a0:ac:af: eb:f9:07:52:26:46:4e:78:cf:bb:f7:44:6e:e9:8f: 56:2c:f1:1d:e6:97:31:e1:b9:00:73:a8:17:7c:07: 4c:8c:2f:28:df:a0:23:d2:c4:38:34:7e:07:bf:f2: f6:3b:a7:db:b1:e3:95:09:91:5d:41:86:18:09:32: fd:b0:30:cd:e8:88:1f:ce:15:6e:4f:58:7e:97:a8: b0:c3:35:bb:5c:65:6f:d0:39:04:3f:b2:a9:4e:ba: d2:a1:cc:33:aa:91:0f:22:a1:f9:1a:72:7c:ce:d0: f3:ff:29:c2:91:39:63:46:8d:9f:98:f6:2b:75:93: 1a:b4:2e:0d:07:49:8d:de:eb:71:8b:91:1d:5b:2b: c2:3a:c0:a2:08:fa:12:c7:b3:6e:91:19:4e:6d:9e: 40:74:3e:7d:8b:7e:97:75:15:c7:b4:6e:cc:45:52: 83:6e:fd:c9:5c:e8:cb:88:70:9b:88:3d:bc:7d:1c: 27:b7:7e:a5:54:c8:f4:10:54:5a:58:82:16:dd:5b: 43:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:94:CA:31:9A:B3:5E:89:31:6D:0C:43:4C:4A:D1:A6:64:A3:CC:18 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:23:34:5c:4f:c8:d2:90:1f:8f:b5:44:35:7b:2e:9c:28:56: 1a:f7:fe:3b:94:0c:2f:58:f9:9f:bb:c9:b0:4b:7c:84:84:89: b3:47:12:6b:05:ae:87:27:24:06:d9:2e:35:af:82:32:ea:c0: 34:fc:ce:2d:e9:0e:3d:dc:62:eb:76:95:1d:70:18:50:44:14: 66:fc:95:d2:0a:cd:5f:83:d1:3d:8d:b2:5f:6c:68:9f:30:54: 3b:3c:f4:63:95:4f:b9:31:2f:ba:ff:63:61:42:de:8f:c4:3e: 59:92:26:2b:2d:45:bf:bd:f1:71:d4:2f:c9:be:0d:6b:70:65: 2d:d4:dc:fb:69:02:d5:05:35:74:52:97:b5:20:bb:8b:28:95: ea:a8:f3:b7:bc:ed:ad:5b:e8:a6:ae:96:30:95:eb:b2:02:f4: 3f:61:52:16:75:68:88:59:36:88:b9:4d:54:70:f1:57:75:d3: 80:d7:73:98:6a:0b:69:ee:92:f2:85:ec:ab:d4:a0:ac:72:11: 8b:3f:37:5a:c0:71:0f:23:30:69:88:5b:16:77:1b:33:ae:6a: 5e:7d:6f:ac:d8:89:f7:81:30:ff:48:bb:ce:4e:57:08:c7:77: 87:0f:bb:e0:a7:07:2a:8c:bb:48:e5:f2:c0:60:9d:d4:28:59: 7d:30:69:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjYwNDA1MDEyMTM3WhcNMjYwNDEyMDEyMTM3WjAYMRYwFAYD VQQDEw02OWQxYjkyMi01MGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QG0y3CNrRSk7SyI2xNoxilCRPziiA1N17kSEM90rrgtAaE7qLs5LPexfcv5 W/KjwxDRDZUo8fWgrK/r+QdSJkZOeM+790Ru6Y9WLPEd5pcx4bkAc6gXfAdMjC8o 36Aj0sQ4NH4Hv/L2O6fbseOVCZFdQYYYCTL9sDDN6IgfzhVuT1h+l6iwwzW7XGVv 0DkEP7KpTrrSocwzqpEPIqH5GnJ8ztDz/ynCkTljRo2fmPYrdZMatC4NB0mN3utx i5EdWyvCOsCiCPoSx7NukRlObZ5AdD59i36XdRXHtG7MRVKDbv3JXOjLiHCbiD28 fRwnt36lVMj0EFRaWIIW3VtDXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFISUyjGa s16JMW0MQ0xK0aZko8wYMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXiM0XE/I0pAfj7VENXsunChWGvf+O5QML1j5n7vJsEt8hISJs0cSawWuhyck BtkuNa+CMurANPzOLekOPdxi63aVHXAYUEQUZvyV0grNX4PRPY2yX2xonzBUOzz0 Y5VPuTEvuv9jYULej8Q+WZImKy1Fv73xcdQvyb4Na3BlLdTc+2kC1QU1dFKXtSC7 iyiV6qjzt7ztrVvopq6WMJXrsgL0P2FSFnVoiFk2iLlNVHDxV3XTgNdzmGoLae6S 8oXsq9SgrHIRiz83WsBxDyMwaYhbFncbM65qXn1vrNiJ94Ew/0i7zk5XCMd3hw+7 4KcHKoy7SOXywGCd1ChZfTBpXA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:01 2026 by rpki-client