$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: P18XlFS5afuYTmXlCItR/U0UXnAM8ChWS6OI+nuW/ik= Subject key identifier: 4A:52:56:0A:54:EB:7C:D5:08:BF:BA:20:C7:FB:FE:DF:A4:75:C1:FE Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: 0137 Signing time: Sun 05 Apr 2026 04:49:29 +0000 Manifest this update: Sun 05 Apr 2026 04:49:29 +0000 Manifest next update: Sun 12 Apr 2026 04:49:29 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: SdfDN4DpA/sGZA/EyuBEKf4lPeAXOuykYExjKBBiwRM=) 2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=) 3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:49:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Apr 5 04:49:29 2026 GMT Not After : Apr 12 04:49:29 2026 GMT Subject: CN=69d1e9d9-d035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:d1:64:75:03:a4:90:d5:55:56:ca:9f:c0: 08:50:53:4b:93:a1:c9:6c:f8:5b:51:97:7d:8a:32: e7:0d:9b:cb:36:ab:2e:63:15:af:53:e8:24:2a:bb: ba:c8:fb:0a:0f:27:9a:d9:0d:80:3a:a1:45:05:75: ff:04:a2:38:85:78:e2:e0:94:5e:03:e4:1c:a7:f6: 96:22:7c:46:77:0d:ad:33:d2:9e:35:34:60:73:82: d6:29:66:39:f1:e6:64:fe:7f:a0:93:81:b6:73:59: c7:92:bb:d8:ed:26:6f:9d:de:b0:ba:df:e7:b5:03: 1f:48:6e:46:9f:64:d3:03:74:b5:d7:6d:83:4c:0b: f2:d0:41:f4:d2:8f:30:4c:60:8f:25:21:09:85:b3: 9e:e4:72:ba:d5:47:a7:ea:0e:5f:30:de:f7:ab:f6: 4c:b1:3d:ad:44:8f:6c:b6:2a:22:cc:6c:d3:2b:2f: 11:24:0d:71:fe:43:a5:3c:ff:fb:ab:33:8e:9c:a0: 00:13:6f:67:de:68:e3:e8:97:76:3d:a3:a2:ca:0f: 85:e4:f1:80:e5:8b:d3:b5:bc:16:d4:b8:2d:9d:cd: 3f:8b:e9:4f:9e:de:3a:51:6c:d0:fe:45:36:ad:53: 90:05:57:25:5e:a9:ca:b1:5e:65:d9:21:30:1d:b5: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:52:56:0A:54:EB:7C:D5:08:BF:BA:20:C7:FB:FE:DF:A4:75:C1:FE X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:1e:50:56:fe:fa:bb:b0:46:a0:88:f9:38:4b:cb:9d:f8:16: 45:7f:c5:b5:d2:2a:fc:ad:12:22:0c:dc:96:b7:e9:1c:ba:f8: bf:21:ee:d9:fd:26:4b:fe:02:e5:f0:dc:e0:f2:88:07:1a:a6: 79:40:19:f1:f8:c1:2f:ff:38:34:81:13:90:3f:00:7f:31:4a: 3b:c4:69:2c:99:5a:4e:b1:8b:04:ca:be:9d:b6:02:26:f7:c4: 4d:86:3c:41:f4:00:6b:d1:fb:93:fd:01:5a:82:fa:8c:c8:e0: 8c:92:7d:2d:03:05:b5:18:94:0f:6b:ef:f4:43:f8:4d:c2:41: 21:ef:70:53:9f:32:94:ec:c7:af:e1:84:1f:14:85:73:86:ff: c5:3f:b3:73:45:41:1d:36:22:5c:8f:40:48:96:6c:6c:bf:c0: af:6f:d9:ce:24:46:dc:d8:2f:b3:db:97:e3:9b:33:32:32:72: 32:d3:c9:13:31:aa:f9:bc:ee:a1:59:8b:83:30:47:1b:dd:a1: fb:70:68:05:cc:ae:b6:a8:00:11:01:65:1b:78:b3:5b:f4:8a: cd:ee:b4:88:ce:ab:ed:20:f4:f7:a7:06:ba:00:8f:a7:4d:d4: 21:5b:36:22:2d:ef:ff:94:ef:cf:54:7d:17:6a:f2:01:1a:41: 27:06:20:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjYwNDA1MDQ0OTI5WhcNMjYwNDEyMDQ0OTI5WjAYMRYwFAYD VQQDEw02OWQxZTlkOS1kMDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8bRZHUDpJDVVVbKn8AIUFNLk6HJbPhbUZd9ijLnDZvLNqsuYxWvU+gkKru6 yPsKDyea2Q2AOqFFBXX/BKI4hXji4JReA+Qcp/aWInxGdw2tM9KeNTRgc4LWKWY5 8eZk/n+gk4G2c1nHkrvY7SZvnd6wut/ntQMfSG5Gn2TTA3S1122DTAvy0EH00o8w TGCPJSEJhbOe5HK61Uen6g5fMN73q/ZMsT2tRI9stioizGzTKy8RJA1x/kOlPP/7 qzOOnKAAE29n3mjj6Jd2PaOiyg+F5PGA5YvTtbwW1Lgtnc0/i+lPnt46UWzQ/kU2 rVOQBVclXqnKsV5l2SEwHbX/jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEpSVgpU 63zVCL+6IMf7/t+kdcH+MB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANB5QVv76u7BGoIj5OEvLnfgWRX/FtdIq/K0SIgzclrfpHLr4vyHu2f0mS/4C 5fDc4PKIBxqmeUAZ8fjBL/84NIETkD8AfzFKO8RpLJlaTrGLBMq+nbYCJvfETYY8 QfQAa9H7k/0BWoL6jMjgjJJ9LQMFtRiUD2vv9EP4TcJBIe9wU58ylOzHr+GEHxSF c4b/xT+zc0VBHTYiXI9ASJZsbL/Ar2/ZziRG3Ngvs9uX45szMjJyMtPJEzGq+bzu oVmLgzBHG92h+3BoBcyutqgAEQFlG3izW/SKze60iM6r7SD096cGugCPp03UIVs2 Ii3v/5Tvz1R9F2ryARpBJwYgoA== -----END CERTIFICATE-----Generated at Sun Apr 5 19:39:47 2026 by rpki-client