$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: 84sRM8f5zzmXV9ZZXZ5oCwcmnBaT6ePFKk+o7VhAOKE= Subject key identifier: DF:5D:42:16:E8:C6:73:53:DD:A8:58:42:2D:9C:35:1B:59:C8:E4:3B Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 0689 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 0677 Signing time: Sat 04 Apr 2026 22:20:20 +0000 Manifest this update: Sat 04 Apr 2026 22:20:19 +0000 Manifest next update: Sat 11 Apr 2026 22:20:19 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: fafY3NUv10bWu/zXmqAu2hODx3xechruVce7aIH4Ub8=) 2: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: PJtMmmzqWr4Ah2oRz29LH07ry6ra6iCiilV599rXJrQ=) 3: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: qAA+JmCD1XiQPNk2+rjFsSeH+9Ig2+qzcEQPIf4Yw7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1673 (0x689) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Apr 4 22:20:19 2026 GMT Not After : Apr 11 22:20:19 2026 GMT Subject: CN=69d18ea4-b658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:ac:8f:1a:cc:93:83:67:11:4e:b6:0a:08: 40:66:db:02:2f:d3:d8:4a:bc:bb:be:d5:95:7d:92: c2:64:32:67:39:fb:24:1a:ee:e6:8a:67:66:9b:4a: 2f:52:7d:df:f0:fc:aa:e0:91:58:94:31:5b:4e:6d: 7e:df:de:02:9e:6e:24:c5:69:40:3a:62:11:79:19: 98:a3:16:f6:c2:b4:46:cf:c5:98:2e:69:22:eb:b7: 40:75:ee:7a:0b:ee:2f:78:4b:59:8a:3b:6e:b2:27: 1e:d2:a3:64:9c:96:25:27:a1:c8:2f:b1:1a:38:f5: 16:4c:b8:33:e5:ed:4d:29:53:e6:76:f7:df:ab:aa: ac:b5:ed:75:33:a9:35:7a:89:58:2c:93:b3:e8:fe: c8:90:30:e7:4c:1d:d9:87:40:a3:f6:4a:8c:4a:ec: f3:5e:3f:d9:c6:b7:98:24:de:9a:3c:af:0a:4d:d5: 9d:d8:ec:ee:64:41:85:67:84:fe:15:d9:a6:c8:95: b4:e8:c3:6b:d4:05:59:d3:fc:b1:a0:79:3c:a0:9d: 37:a4:5e:14:09:0c:15:23:5d:07:b5:b5:56:f0:bd: 49:2d:3c:d4:f0:4c:b9:bd:e4:17:68:12:2d:56:1b: b2:fd:d4:aa:18:94:bb:1d:17:3f:13:d6:cb:e7:72: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5D:42:16:E8:C6:73:53:DD:A8:58:42:2D:9C:35:1B:59:C8:E4:3B X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:95:e4:66:55:32:84:e6:6e:3c:29:c7:2a:4a:7a:a8:2c:a9: 1f:8f:23:ee:78:0e:ac:8a:d2:d0:34:0f:0f:4d:b7:a2:a4:0f: f8:a1:9b:fb:4b:f5:9b:92:01:98:3d:29:fc:4b:a6:ce:56:66: 67:1f:69:af:73:23:48:d8:20:ee:e6:04:ae:00:b9:58:f0:eb: 94:a3:84:fa:c9:73:a1:4f:6a:c1:56:ad:6c:dd:01:10:d6:5f: 63:45:f1:86:f2:ae:82:7a:94:cb:89:f2:fd:09:2d:4e:f2:f9: a7:89:52:b8:cd:dd:db:bc:a5:e9:07:f9:d5:3d:e2:9d:fa:52: bc:73:5e:06:1c:a7:63:21:04:16:42:48:91:95:41:8d:67:01: c2:e9:58:8e:d9:eb:31:c8:18:9c:48:98:e5:43:71:af:5b:8d: 9a:db:55:d5:e5:19:35:b2:30:f1:d4:23:73:e8:1a:05:21:d9: b7:7f:45:94:df:ea:a0:30:5b:c0:c9:e9:b1:0b:06:0b:fa:f3: ae:83:1c:19:0d:4c:98:f9:3f:cf:9e:22:31:12:12:eb:64:ad: 9c:df:89:07:00:9c:12:eb:2a:55:e6:90:f4:17:b3:13:c1:0f: 6e:d6:04:f7:0f:a8:0d:9e:b9:bf:55:56:aa:e9:7e:17:ad:29: bf:16:61:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjYwNDA0MjIyMDE5WhcNMjYwNDExMjIyMDE5WjAYMRYwFAYD VQQDEw02OWQxOGVhNC1iNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0i+sjxrMk4NnEU62CghAZtsCL9PYSry7vtWVfZLCZDJnOfskGu7mimdmm0ov Un3f8Pyq4JFYlDFbTm1+394Cnm4kxWlAOmIReRmYoxb2wrRGz8WYLmki67dAde56 C+4veEtZijtusice0qNknJYlJ6HIL7EaOPUWTLgz5e1NKVPmdvffq6qste11M6k1 eolYLJOz6P7IkDDnTB3Zh0Cj9kqMSuzzXj/ZxreYJN6aPK8KTdWd2OzuZEGFZ4T+ FdmmyJW06MNr1AVZ0/yxoHk8oJ03pF4UCQwVI10HtbVW8L1JLTzU8Ey5veQXaBIt Vhuy/dSqGJS7HRc/E9bL53IZxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFN9dQhbo xnNT3ahYQi2cNRtZyOQ7MB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiJXkZlUyhOZuPCnHKkp6qCypH48j7ngOrIrS0DQPD023oqQP+KGb+0v1m5IB mD0p/EumzlZmZx9pr3MjSNgg7uYErgC5WPDrlKOE+slzoU9qwVatbN0BENZfY0Xx hvKugnqUy4ny/QktTvL5p4lSuM3d27yl6Qf51T3infpSvHNeBhynYyEEFkJIkZVB jWcBwulYjtnrMcgYnEiY5UNxr1uNmttV1eUZNbIw8dQjc+gaBSHZt39FlN/qoDBb wMnpsQsGC/rzroMcGQ1MmPk/z54iMRIS62StnN+JBwCcEusqVeaQ9BezE8EPbtYE 9w+oDZ65v1VWqul+F60pvxZhKw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:17 2026 by rpki-client