$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: OBm4s3jbPJkZFFX7K2F6M3U5b0CMfeZZiuAYv5RIpHo= Subject key identifier: C0:F8:3E:C0:A1:B2:24:E0:D0:0B:E5:5D:C2:90:89:74:52:A8:D6:2A Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: 0100 Signing time: Sun 05 Apr 2026 05:35:18 +0000 Manifest this update: Sun 05 Apr 2026 05:35:17 +0000 Manifest next update: Sun 12 Apr 2026 05:35:17 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: EtIOHzW12YK6sOXGcPvsEfE7ZXCJHU6RD7TVdt4De5g=) 2: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: hENFINj2b9wOIFxjK3nr2DrkTGbz4MTQ9pqxVPQHBxY=) 3: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: WDWRrI/KRtPcAbR2bWOuMpgztLrYoQZ12yzCIYDgRAs=) 4: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 1MNrxKgQIdnkp7DGKWCKsge4/v205nBecHy5tmcmZDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Apr 5 05:35:17 2026 GMT Not After : Apr 12 05:35:17 2026 GMT Subject: CN=69d1f496-6f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:f6:4e:5d:6f:b3:d1:26:10:6b:4a:6a:d5: dc:80:af:ca:be:25:da:d6:da:c6:ec:b1:2e:ed:17: d3:7b:20:b4:88:af:aa:bd:3e:3f:fe:fb:e5:7b:06: 38:8b:13:af:83:0e:64:64:03:50:5b:3c:c1:b1:9e: 01:92:d3:e8:37:fe:22:29:e5:9f:5f:99:bd:88:c6: e9:39:de:a2:d4:ed:d7:86:c2:5a:09:2c:ca:94:36: 40:96:a1:32:4b:c5:fc:9b:08:50:46:f9:42:05:32: 83:f5:99:bb:d4:ea:cc:e5:1a:a9:be:22:1d:78:2f: d1:9f:d0:89:86:83:b3:40:08:92:bd:32:1a:4c:08: b3:6e:51:55:3f:2f:bb:71:99:60:a3:b8:34:c5:40: 6c:d4:5b:1e:23:a4:27:a8:8a:05:e0:f0:e0:9b:fe: 5e:45:5d:f3:cc:e1:80:6d:a4:11:a1:6e:f6:39:21: 82:fc:a7:3a:aa:0f:05:39:9d:29:77:03:c9:aa:61: fd:71:b1:61:d4:7a:1e:15:d4:3c:a1:a3:21:39:18: 9c:ac:b0:17:67:0a:68:43:e9:65:59:2d:19:71:9e: 84:3b:1d:b4:5b:77:dd:e8:cc:f2:d3:13:21:c3:e3: 6d:11:c0:c5:e4:f9:02:3d:0a:87:a1:9a:53:c1:3d: 21:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F8:3E:C0:A1:B2:24:E0:D0:0B:E5:5D:C2:90:89:74:52:A8:D6:2A X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:db:be:2f:3d:ba:31:02:b8:2e:12:74:a6:9b:44:c7:d8:65: 1b:bf:01:c1:02:8f:c6:ea:06:52:1f:ce:ad:af:52:e0:06:a1: 51:74:c9:1a:35:90:b7:d8:1e:5e:a3:97:ba:2c:9d:45:31:72: d8:89:67:72:93:83:e8:79:22:3d:7e:16:db:14:79:8e:b5:0e: df:71:28:40:53:0c:58:48:8f:79:02:6a:56:6a:7a:58:69:f6: 3d:c1:29:db:ff:ce:e8:eb:67:99:3b:69:d7:7f:4e:4e:91:bf: 0e:5e:f0:61:f7:54:48:bf:49:9f:7d:54:4b:f6:cb:81:ca:d8: 1b:25:4d:d1:34:00:98:5d:87:53:20:36:78:21:1b:18:1e:d2: d4:af:93:1e:ec:77:e9:d9:62:0d:a5:1b:ed:f0:7a:a0:d4:c4: 88:04:4d:96:96:72:be:f3:82:46:00:07:4e:4d:13:62:2a:64: 1c:98:6d:17:00:d3:be:ed:e9:ee:85:61:68:c5:45:2b:66:8e: cc:5b:e8:36:62:a8:5b:37:ce:ce:f7:af:ce:fe:7f:13:d6:ab: 27:8c:b9:b5:b1:dd:4c:ac:17:c5:44:8b:e8:2c:47:70:ca:15: 79:e4:66:fd:99:21:76:aa:fc:ac:64:08:94:55:2d:5b:42:cd: 0b:71:2d:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw NjM0MDJERjEwHhcNMjYwNDA1MDUzNTE3WhcNMjYwNDEyMDUzNTE3WjAYMRYwFAYD VQQDEw02OWQxZjQ5Ni02ZjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRn2Tl1vs9EmEGtKatXcgK/KviXa1trG7LEu7RfTeyC0iK+qvT4//vvlewY4 ixOvgw5kZANQWzzBsZ4BktPoN/4iKeWfX5m9iMbpOd6i1O3XhsJaCSzKlDZAlqEy S8X8mwhQRvlCBTKD9Zm71OrM5RqpviIdeC/Rn9CJhoOzQAiSvTIaTAizblFVPy+7 cZlgo7g0xUBs1FseI6QnqIoF4PDgm/5eRV3zzOGAbaQRoW72OSGC/Kc6qg8FOZ0p dwPJqmH9cbFh1HoeFdQ8oaMhORicrLAXZwpoQ+llWS0ZcZ6EOx20W3fd6Mzy0xMh w+NtEcDF5PkCPQqHoZpTwT0heQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMD4PsCh siTg0AvlXcKQiXRSqNYqMB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk SjVRODIzS24xSkVHTkFMZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAN9u+Lz26MQK4LhJ0pptEx9hlG78BwQKPxuoGUh/Ora9S4AahUXTJGjWQt9ge XqOXuiydRTFy2IlncpOD6HkiPX4W2xR5jrUO33EoQFMMWEiPeQJqVmp6WGn2PcEp 2//O6OtnmTtp139OTpG/Dl7wYfdUSL9Jn31US/bLgcrYGyVN0TQAmF2HUyA2eCEb GB7S1K+THux36dliDaUb7fB6oNTEiARNlpZyvvOCRgAHTk0TYipkHJhtFwDTvu3p 7oVhaMVFK2aOzFvoNmKoWzfOzvevzv5/E9arJ4y5tbHdTKwXxUSL6CxHcMoVeeRm /Zkhdqr8rGQIlFUtW0LNC3Et/A== -----END CERTIFICATE-----Generated at Sun Apr 5 19:44:08 2026 by rpki-client