$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft File: CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json) Hash identifier: IR78TuwdQEMwovivJ0TTkv4AqYQW1lXmglljYip2AnA= Subject key identifier: FE:86:EA:EE:A4:99:6A:80:23:03:34:C1:5A:5B:9B:55:32:AF:4A:D2 Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED Certificate issuer: /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Certificate serial: 0543 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft Manifest number: 0521 Signing time: Mon 06 Apr 2026 23:21:32 +0000 Manifest this update: Mon 06 Apr 2026 23:21:31 +0000 Manifest next update: Mon 13 Apr 2026 23:21:31 +0000 Files and hashes: 1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: ZbWO0i71haLYCTsb6u+ZCZokr4S3bjVM2XCDCOJmROk=) 2: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: 3Nz0u0qKawbNn//HDkZr80q3+/OhbNMzbbOUzKEulCE=) 3: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: 6VGJIXHJFD6gG6e/bpw0km40IC6Vms57Pyehvnv97As=) 4: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: qtZVADdmFN9d5j6ch3m5PUYodnBui2LsIftYffK0ss4=) 5: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: zOR5TgVBsSHkOmvQ/lOL+jCdE7mO8zRHpP652KPFcEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 23:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1347 (0x543) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED Validity Not Before: Apr 6 23:21:31 2026 GMT Not After : Apr 13 23:21:31 2026 GMT Subject: CN=69d43ffc-ffea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:a1:60:46:ff:5c:a4:02:c3:4b:73:ca:71: f7:5c:40:cc:5b:2c:7f:f3:fa:44:a7:56:07:77:49: 5e:24:68:c7:90:f7:90:86:e1:30:9a:13:24:1f:70: b8:9e:c1:d3:ff:4a:59:05:1b:94:b9:6f:9f:09:e4: 83:45:f2:a3:96:a9:c2:28:55:5f:6a:8d:e9:0c:99: f7:26:89:c9:63:6e:78:af:fd:31:88:3b:3d:eb:5f: bf:32:44:1d:c1:c6:55:e1:ff:34:3e:bb:a0:7f:bf: 8b:fe:53:ad:57:6d:66:8b:8e:57:0e:42:99:3c:f1: 88:f6:e3:1a:89:78:9f:0b:bf:6a:a6:9f:14:be:b2: 5d:14:4d:d6:ec:29:8a:45:38:cb:8c:fd:d3:10:b9: 97:f4:b6:ad:79:e4:22:56:c4:bb:8a:d9:00:89:d7: 68:3c:4d:7d:f3:4e:f4:8e:da:15:0a:93:48:c5:8b: d7:d1:ce:b2:e6:be:2c:8b:8e:35:19:55:64:80:a4: 7a:48:9d:bd:69:13:00:17:f4:9b:f1:f2:47:0d:45: e3:11:52:62:a8:4a:26:22:b0:5e:2e:91:16:88:61: 32:3c:29:ff:9e:31:51:bd:a2:e2:c8:b1:3f:5c:e7: fb:44:31:69:74:a6:7f:58:c3:19:3b:64:c7:61:73: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:86:EA:EE:A4:99:6A:80:23:03:34:C1:5A:5B:9B:55:32:AF:4A:D2 X509v3 Authority Key Identifier: keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:43:bb:77:f3:5d:45:a5:1f:a4:62:30:36:ad:ec:f7:03:dd: 71:71:85:04:35:85:20:31:db:f9:4c:dd:ed:07:f2:88:65:df: d1:ce:9a:45:5d:05:1b:a2:ad:23:a3:c5:63:8b:c9:36:41:34: f4:81:54:4f:55:59:2c:57:9f:0e:36:e5:89:9c:05:f2:57:22: b1:35:4f:d8:56:e0:eb:40:11:73:c9:2a:48:ac:a7:d3:d8:64: 8c:e6:65:f1:24:47:e4:25:c8:e7:da:0d:96:ed:a0:29:9c:50: 8d:3f:99:98:2b:3c:3f:6f:b6:5a:5f:78:82:36:0a:21:83:17: ac:32:ea:e8:b8:44:ca:04:ec:a1:0d:b8:f2:c4:5c:33:8f:67: 0e:29:4e:6e:20:fa:32:df:cc:d8:7e:ad:77:92:e6:16:f0:26: 4e:f1:17:25:4e:49:ee:dd:40:f0:8c:7c:8e:5f:86:4b:8f:b3: 77:41:b1:b1:8a:cf:62:0c:0c:9d:02:64:b1:a4:51:97:6d:28: e7:69:57:41:05:9b:c8:cc:19:ee:99:b2:aa:b6:2d:67:b2:5a: 6b:89:9b:25:8e:a1:1c:f3:1c:f2:30:a9:10:21:56:24:d8:e0: 80:51:63:7b:2b:49:3c:91:cb:29:a4:8a:a7:07:b0:56:21:4d: b0:2a:1a:f9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNDRkYxMTAvBgNVBAUTKDA4MDM2NjJDNTcxMzI1NzI4RjI0RkFBRDhDQjFBNUYx OTAwNzE1RUQwHhcNMjYwNDA2MjMyMTMxWhcNMjYwNDEzMjMyMTMxWjAYMRYwFAYD VQQDEw02OWQ0M2ZmYy1mZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5WhYEb/XKQCw0tzynH3XEDMWyx/8/pEp1YHd0leJGjHkPeQhuEwmhMkH3C4 nsHT/0pZBRuUuW+fCeSDRfKjlqnCKFVfao3pDJn3JonJY254r/0xiDs961+/MkQd wcZV4f80Prugf7+L/lOtV21mi45XDkKZPPGI9uMaiXifC79qpp8UvrJdFE3W7CmK RTjLjP3TELmX9LateeQiVsS7itkAiddoPE198070jtoVCpNIxYvX0c6y5r4si441 GVVkgKR6SJ29aRMAF/Sb8fJHDUXjEVJiqEomIrBeLpEWiGEyPCn/njFRvaLiyLE/ XOf7RDFpdKZ/WMMZO2THYXPOewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6G6u6k mWqAIwM0wVpbm1Uyr0rSMB8GA1UdIwQYMBaAFAgDZixXEyVyjyT6rYyxpfGQBxXt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0NGRi85QTVFQzE2QzQ2 RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpYS1BKUHF0akxHbDhaQUhG ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBTm1MRmNUSlhLUEpQcXRqTEdsOFpBSEZlMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0NGRi85QTVFQzE2QzQ2RkUxMUVDOTRFM0QyNEFDNEY5QUUwMi9DQU5tTEZjVEpY S1BKUHF0akxHbDhaQUhGZTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFkO7d/NdRaUfpGIwNq3s9wPdcXGFBDWFIDHb+Uzd7QfyiGXf0c6aRV0FG6Kt I6PFY4vJNkE09IFUT1VZLFefDjbliZwF8lcisTVP2Fbg60ARc8kqSKyn09hkjOZl 8SRH5CXI59oNlu2gKZxQjT+ZmCs8P2+2Wl94gjYKIYMXrDLq6LhEygTsoQ248sRc M49nDilObiD6Mt/M2H6td5LmFvAmTvEXJU5J7t1A8Ix8jl+GS4+zd0GxsYrPYgwM nQJksaRRl20o52lXQQWbyMwZ7pmyqrYtZ7Jaa4mbJY6hHPMc8jCpECFWJNjggFFj eytJPJHLKaSKpwewViFNsCoa+Q== -----END CERTIFICATE-----Generated at Tue Apr 7 12:05:54 2026 by rpki-client