$ rpki-client -vvf rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft File: ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft (raw, json) Hash identifier: wmCkMXU42v8BlxLBuMTLgk+qEqLisOpvRPeNcBwAtGc= Subject key identifier: A8:97:17:E5:77:E9:50:14:66:B4:4E:71:3D:5A:EB:BB:2F:B1:0D:9B Authority key identifier: 49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 Certificate issuer: /CN=A916C7B6/serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Certificate serial: 0C05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft Manifest number: 0BFD Signing time: Sat 04 Apr 2026 18:40:15 +0000 Manifest this update: Sat 04 Apr 2026 18:40:14 +0000 Manifest next update: Sat 11 Apr 2026 18:40:14 +0000 Files and hashes: 1: ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl (hash: crFXOZmmFSwCieTvdxH6S+UzJtHqOrM6bqLsEE7hTew=) 2: 1A8553B831F011EAA18AC76AC4F9AE02.roa (hash: tnVPuD19UwWln3/34cxqq1xm4up8rwSwfbjxhWxlsQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3077 (0xc05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C7B6, serialNumber=493D3EAFE040572841E9FAB256D0C6044CB858C8 Validity Not Before: Apr 4 18:40:14 2026 GMT Not After : Apr 11 18:40:14 2026 GMT Subject: CN=69d15b0f-5012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:b7:d9:a4:f2:24:59:e9:e3:e3:0a:97:11: 22:47:6f:5e:e7:52:66:e3:34:c1:d8:62:d2:43:6c: d2:53:7a:b6:80:b8:50:ab:e3:64:43:b4:86:92:cd: 5b:c4:58:46:31:f0:4c:87:49:5c:96:c1:36:89:66: eb:a4:fd:97:42:d0:14:34:1c:4c:f7:a9:49:b8:56: 9a:f0:82:47:53:42:ff:ec:cb:b7:92:8f:44:77:fd: 4d:b9:39:3e:c6:bd:b1:c1:f0:77:ac:86:95:7c:79: d1:eb:f2:8a:cd:0e:3c:c9:9f:6e:41:9a:bb:b4:d0: c0:13:50:8a:d0:1c:1a:1a:b2:72:be:27:67:fd:37: 94:7f:5b:f9:b2:05:92:37:07:c7:62:76:96:1d:3f: 38:4f:cb:cd:a5:8b:3f:a0:4e:bf:cb:08:50:ef:2b: 42:47:4f:d6:b1:ef:85:32:a6:cf:4c:63:51:0b:ee: bf:a2:2c:d1:13:ef:a5:89:85:ae:7f:ac:cb:ee:49: cb:46:df:44:dd:55:43:10:5d:41:16:d8:c9:06:aa: 73:d5:32:d3:cf:44:49:88:f0:22:2a:cc:c6:e3:e1: 1d:9a:2b:dd:cd:79:e6:07:33:1d:a7:43:bb:a4:7e: 0a:b1:d3:eb:d2:5e:5a:0d:82:1e:54:ea:a5:b3:8d: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:97:17:E5:77:E9:50:14:66:B4:4E:71:3D:5A:EB:BB:2F:B1:0D:9B X509v3 Authority Key Identifier: keyid:49:3D:3E:AF:E0:40:57:28:41:E9:FA:B2:56:D0:C6:04:4C:B8:58:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ST0-r-BAVyhB6fqyVtDGBEy4WMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C7B6/43F6A57831EE11EAAB01E767C4F9AE02/ST0-r-BAVyhB6fqyVtDGBEy4WMg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fc:21:28:74:3a:da:75:7f:da:8a:6c:a7:42:16:50:a4:c4: 9c:74:e3:f7:21:59:3f:3b:37:0d:88:69:b4:4d:81:2f:70:b8: af:cd:0b:85:3e:7d:53:4e:63:a0:cb:e6:8d:5a:5e:9b:1e:5e: e3:25:e8:da:d2:3f:41:32:dd:da:11:ef:2c:39:a5:74:55:12: 25:91:b8:78:32:1a:8e:55:a9:53:d5:4e:00:2d:aa:69:48:ef: fe:ba:cf:e8:8c:3b:50:68:0c:d8:cb:fd:ce:04:8a:44:9c:87: 83:8a:90:73:5f:44:b5:52:5c:26:df:66:0a:a8:c0:f6:99:e1: 97:2b:78:40:e6:b5:87:fa:b2:fb:3d:7c:5a:5a:8a:04:31:80: d7:ee:75:33:7e:84:aa:77:db:f0:bf:4e:5f:64:eb:3d:c0:f4: 23:ee:96:9a:61:b0:31:b7:4f:d5:3f:8c:09:79:ac:65:e0:50: 9b:72:4e:8f:be:0c:e7:af:17:9e:0c:0f:84:1c:fd:c5:80:c2: 7c:3c:b1:54:2b:0f:e2:39:51:36:97:9f:74:a9:2c:d0:c4:f6: f8:6d:7e:78:10:ef:0a:b0:80:20:37:ae:30:99:93:0c:be:69: f8:58:38:b5:bd:09:0a:9e:a1:e5:de:7f:7e:72:d6:83:a4:71: d6:8f:a2:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3QjYxMTAvBgNVBAUTKDQ5M0QzRUFGRTA0MDU3Mjg0MUU5RkFCMjU2RDBDNjA0 NENCODU4QzgwHhcNMjYwNDA0MTg0MDE0WhcNMjYwNDExMTg0MDE0WjAYMRYwFAYD VQQDEw02OWQxNWIwZi01MDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvea32aTyJFnp4+MKlxEiR29e51Jm4zTB2GLSQ2zSU3q2gLhQq+NkQ7SGks1b xFhGMfBMh0lclsE2iWbrpP2XQtAUNBxM96lJuFaa8IJHU0L/7Mu3ko9Ed/1NuTk+ xr2xwfB3rIaVfHnR6/KKzQ48yZ9uQZq7tNDAE1CK0BwaGrJyvidn/TeUf1v5sgWS NwfHYnaWHT84T8vNpYs/oE6/ywhQ7ytCR0/Wse+FMqbPTGNRC+6/oizRE++liYWu f6zL7knLRt9E3VVDEF1BFtjJBqpz1TLTz0RJiPAiKszG4+EdmivdzXnmBzMdp0O7 pH4KsdPr0l5aDYIeVOqls41gEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKiXF+V3 6VAUZrROcT1a67svsQ2bMB8GA1UdIwQYMBaAFEk9Pq/gQFcoQen6slbQxgRMuFjI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzdCNi80M0Y2QTU3ODMx RUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5aEI2ZnF5VnRER0JFeTRX TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NUMC1yLUJBVnloQjZmcXlWdERHQkV5NFdNZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzdCNi80M0Y2QTU3ODMxRUUxMUVBQUIwMUU3NjdDNEY5QUUwMi9TVDAtci1CQVZ5 aEI2ZnF5VnRER0JFeTRXTWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAT/whKHQ62nV/2opsp0IWUKTEnHTj9yFZPzs3DYhptE2BL3C4r80LhT59U05j oMvmjVpemx5e4yXo2tI/QTLd2hHvLDmldFUSJZG4eDIajlWpU9VOAC2qaUjv/rrP 6Iw7UGgM2Mv9zgSKRJyHg4qQc19EtVJcJt9mCqjA9pnhlyt4QOa1h/qy+z18WlqK BDGA1+51M36Eqnfb8L9OX2TrPcD0I+6WmmGwMbdP1T+MCXmsZeBQm3JOj74M568X ngwPhBz9xYDCfDyxVCsP4jlRNpefdKks0MT2+G1+eBDvCrCAIDeuMJmTDL5p+Fg4 tb0JCp6h5d5/fnLWg6Rx1o+iyw== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:24 2026 by rpki-client