$ rpki-client -vvf rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft File: tNHFfu7y2pEKr3lGCpvLIab80v0.mft (raw, json) Hash identifier: 5GZ9uAGJb4IB71tveE8IJ+yLbAbU88LzmVc97SMZcUs= Subject key identifier: 5C:F9:27:64:4B:A4:D0:4B:60:87:26:E2:BB:61:77:0D:A6:F6:75:38 Authority key identifier: B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD Certificate issuer: /CN=A916A033/serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft Manifest number: 07EA Signing time: Sat 04 Apr 2026 21:03:43 +0000 Manifest this update: Sat 04 Apr 2026 21:03:42 +0000 Manifest next update: Sat 11 Apr 2026 21:03:42 +0000 Files and hashes: 1: tNHFfu7y2pEKr3lGCpvLIab80v0.crl (hash: it9wVmdE6samK5GQsdXZ28Zf0JVRByMQ4tVbo8SJBnI=) 2: EB0FEBAA295811EBB519AC70C4F9AE02.roa (hash: fw5/QJjCTBWxtMG/FipH4dmnUQpkZIfnjR5R3n7X6UI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A033, serialNumber=B4D1C57EEEF2DA910AAF79460A9BCB21A6FCD2FD Validity Not Before: Apr 4 21:03:42 2026 GMT Not After : Apr 11 21:03:42 2026 GMT Subject: CN=69d17cae-c2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:3e:91:be:83:4d:f7:59:0f:af:8f:54:f8: 31:8b:18:1b:da:23:9c:bb:6f:a4:27:4a:ba:08:fc: e0:59:67:dc:85:8e:f0:0d:7d:a9:ce:ec:71:b2:8c: 0d:e6:e2:c9:4d:aa:e5:49:7b:21:8e:64:9b:87:fd: e1:be:67:f8:09:33:57:af:5d:3f:15:24:36:c1:e9: 19:3d:b5:b6:ca:aa:58:d3:bf:f2:2d:ea:4b:a2:12: cf:be:81:1b:8e:48:41:4f:dd:0b:f0:e2:1f:dc:24: cc:9b:3c:ea:e4:0b:0f:e8:5c:83:78:76:46:31:cd: 8e:57:7b:be:10:92:1d:ad:3b:4e:10:24:01:6a:99: da:25:9d:fd:38:12:11:fa:e9:8e:83:85:46:a0:6b: 94:3f:d8:82:3e:ce:f8:f8:2c:88:b3:06:71:e5:4b: a2:cb:70:2c:fb:18:ef:e5:3c:f2:08:bb:e4:cb:9d: 64:83:9a:d3:69:a9:20:c0:e5:f9:d6:9c:72:a9:89: d8:05:7f:8e:3d:84:e9:c5:0b:51:0d:bc:ac:eb:d7: 5a:4e:6f:27:1f:a9:65:80:81:40:3a:23:06:85:89: 3d:db:10:4b:b4:cc:98:77:ac:e2:67:d4:33:ec:d2: 42:33:7e:c9:71:70:c5:6a:36:6a:fd:d7:f9:d8:11: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F9:27:64:4B:A4:D0:4B:60:87:26:E2:BB:61:77:0D:A6:F6:75:38 X509v3 Authority Key Identifier: keyid:B4:D1:C5:7E:EE:F2:DA:91:0A:AF:79:46:0A:9B:CB:21:A6:FC:D2:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNHFfu7y2pEKr3lGCpvLIab80v0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A033/8BAE8B88294B11EBA0BC902FC4F9AE02/tNHFfu7y2pEKr3lGCpvLIab80v0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6e:08:80:c9:a9:2d:48:2a:c5:b0:4d:88:99:bb:28:1e:68: 03:47:52:20:f1:f4:e1:67:6b:3e:5d:ab:0a:bd:38:43:74:ec: 6a:eb:ba:36:7c:a3:96:f9:28:43:cc:7d:b7:83:2d:7f:2c:93: fa:ff:78:f1:5e:c5:5e:1c:e1:5e:b9:7c:58:23:9a:55:ae:17: c1:ce:87:75:a9:f4:51:c0:7c:8f:62:cd:ad:cd:e7:7f:1e:e5: 84:2b:41:99:16:ee:b0:17:88:80:f3:59:07:6e:7f:4a:dd:4b: 31:db:97:cc:05:d1:a7:7e:f4:f4:b9:cf:9d:83:6c:fe:96:18: 2f:b0:c2:51:b9:dc:45:7a:8e:f8:a0:0e:7d:01:99:10:40:82: e0:f5:50:7f:ce:e0:c6:3b:52:7b:68:34:40:2a:99:ef:f2:b1: a8:89:37:7e:84:97:32:2d:d8:fa:f6:b1:a8:7a:aa:e8:7f:b3: 32:24:04:82:32:02:ec:b3:c2:04:a4:13:44:21:b1:24:1d:de: 6a:b6:f3:40:f1:c1:42:32:ce:e1:5c:f6:8b:c9:9d:25:13:b8: 93:a0:57:ab:d3:ba:54:5f:bd:f6:a4:37:47:b2:e0:aa:aa:51: dd:68:15:7e:52:d1:14:53:ad:bb:01:d5:eb:f6:3a:14:67:a3: 7c:6b:2f:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwMzMxMTAvBgNVBAUTKEI0RDFDNTdFRUVGMkRBOTEwQUFGNzk0NjBBOUJDQjIx QTZGQ0QyRkQwHhcNMjYwNDA0MjEwMzQyWhcNMjYwNDExMjEwMzQyWjAYMRYwFAYD VQQDEw02OWQxN2NhZS1jMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqQ+kb6DTfdZD6+PVPgxixgb2iOcu2+kJ0q6CPzgWWfchY7wDX2pzuxxsowN 5uLJTarlSXshjmSbh/3hvmf4CTNXr10/FSQ2wekZPbW2yqpY07/yLepLohLPvoEb jkhBT90L8OIf3CTMmzzq5AsP6FyDeHZGMc2OV3u+EJIdrTtOECQBapnaJZ39OBIR +umOg4VGoGuUP9iCPs74+CyIswZx5Uuiy3As+xjv5TzyCLvky51kg5rTaakgwOX5 1pxyqYnYBX+OPYTpxQtRDbys69daTm8nH6llgIFAOiMGhYk92xBLtMyYd6ziZ9Qz 7NJCM37JcXDFajZq/df52BEOAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFz5J2RL pNBLYIcm4rthdw2m9nU4MB8GA1UdIwQYMBaAFLTRxX7u8tqRCq95RgqbyyGm/NL9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTAzMy84QkFFOEI4ODI5 NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJwRUtyM2xHQ3B2TElhYjgw djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSEZmdTd5MnBFS3IzbEdDcHZMSWFiODB2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTAzMy84QkFFOEI4ODI5NEIxMUVCQTBCQzkwMkZDNEY5QUUwMi90TkhGZnU3eTJw RUtyM2xHQ3B2TElhYjgwdjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOG4IgMmpLUgqxbBNiJm7KB5oA0dSIPH04WdrPl2rCr04Q3Tsauu6Nnyjlvko Q8x9t4MtfyyT+v948V7FXhzhXrl8WCOaVa4Xwc6Hdan0UcB8j2LNrc3nfx7lhCtB mRbusBeIgPNZB25/St1LMduXzAXRp3709LnPnYNs/pYYL7DCUbncRXqO+KAOfQGZ EECC4PVQf87gxjtSe2g0QCqZ7/KxqIk3foSXMi3Y+vaxqHqq6H+zMiQEgjIC7LPC BKQTRCGxJB3earbzQPHBQjLO4Vz2i8mdJRO4k6BXq9O6VF+99qQ3R7LgqqpR3WgV flLRFFOtuwHV6/Y6FGejfGsvnw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:06 2026 by rpki-client