$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft File: vXIUPbev9hPoLqKQtMnCv_qIvCY.mft (raw, json) Hash identifier: 6uPVRzn6mtlS76dXqOqga8Yl+MqjMGOYf0nS59KmBsg= Subject key identifier: 25:D9:1F:51:E5:C2:8F:79:06:B9:58:24:09:5D:94:16:7B:7E:E3:C5 Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft Manifest number: 13 Signing time: Sun 05 Apr 2026 08:21:57 +0000 Manifest this update: Sun 05 Apr 2026 08:21:57 +0000 Manifest next update: Sun 12 Apr 2026 08:21:57 +0000 Files and hashes: 1: vXIUPbev9hPoLqKQtMnCv_qIvCY.crl (hash: QW/BodfYangt2e2C+q+bctVSsBi8gH3MdlFgtz3LYOU=) 2: A90EFDD2184E11F1A5F3D04C283D8C67.roa (hash: GF/l2SZwknV/YN0h9ka4JnIB7U28JEFxozdko/6I8BY=) 3: F5841C74184E11F187DD6055283D8C67.roa (hash: 1eCvlfrhwMJgBVBc2wUYU+P7lRMVeJM21k0aMFZwo+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 08:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Validity Not Before: Apr 5 08:21:57 2026 GMT Not After : Apr 12 08:21:57 2026 GMT Subject: CN=69d21ba5-b379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:11:a9:f1:d1:c7:50:93:36:d2:92:64:2d: 16:c1:22:e3:d4:4f:ab:84:e0:2c:08:0f:f6:b5:d2: a6:60:ef:18:75:1a:7e:d2:7e:12:d2:ed:19:82:4e: 92:6c:cd:e4:41:e8:34:c1:a5:0f:78:bf:a9:f3:5d: 8a:8b:72:2e:84:83:82:5d:f2:b8:c9:eb:c3:c9:1b: e6:7c:30:87:c6:9c:cb:30:2e:a1:b9:63:6e:0d:3c: ae:6d:07:ea:0b:66:29:31:89:3c:2a:f6:d3:48:ca: 27:ff:0d:3d:50:4d:8c:88:84:1b:f4:8e:c2:f5:b0: e0:6c:d6:9f:13:bb:ab:e5:95:12:f3:56:55:f6:5b: da:65:c3:a8:0b:ad:31:3e:e4:d9:54:28:bc:90:cb: dc:20:ee:6b:c3:51:98:26:59:e9:a8:e2:41:84:82: 56:59:50:e3:3b:79:8d:1b:ac:9b:d9:9d:a1:85:de: bc:5f:92:e5:13:48:7a:f9:51:f3:d6:96:b0:af:d4: 58:01:2c:8b:bf:a2:96:87:11:2d:e2:a3:59:6d:49: 84:73:55:90:49:20:c1:04:bd:9b:e4:52:53:b8:a5: f8:66:24:1f:7c:5e:2a:ef:02:2c:ef:b9:de:17:b0: 74:a2:5b:96:f6:07:cb:7e:63:34:9a:a9:82:c5:35: 41:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D9:1F:51:E5:C2:8F:79:06:B9:58:24:09:5D:94:16:7B:7E:E3:C5 X509v3 Authority Key Identifier: keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:17:83:d8:6e:c1:9a:a6:3f:c9:11:05:44:2a:25:a1:84:95: 54:39:1d:d6:bb:af:d0:13:03:73:58:82:71:80:87:ff:10:0a: 7d:d8:6c:bf:3e:24:e5:10:ba:0a:2c:ab:43:a6:95:9c:cc:fe: c0:af:57:85:4a:2d:2e:95:49:34:af:95:60:42:c5:46:8e:73: 2e:10:98:40:45:06:18:63:2b:a0:48:b5:33:70:23:38:22:22: d5:bc:23:67:22:8e:09:5a:44:d0:bd:c5:6d:fc:2e:d4:02:23: 7a:8f:70:12:f3:f9:9c:6a:e0:66:6e:32:2b:b1:34:24:ed:2e: af:79:d9:c7:3e:11:5a:03:64:4f:cf:e6:19:aa:eb:d9:06:b8: b1:7b:df:dd:d0:05:47:ca:5f:48:97:90:69:ea:78:39:b3:2a: a5:e9:0d:9e:eb:bd:df:57:6d:4f:fc:56:42:6e:79:4a:e8:66: f7:ca:d2:4e:19:de:36:c8:06:08:7a:09:e2:eb:8c:05:28:d3: 1c:66:e9:4f:5e:c3:a7:8c:9d:b7:01:ea:a9:a2:4f:fd:1a:3c: ee:1c:49:5e:5a:c3:3a:5b:d3:99:9a:fb:22:1c:40:32:f0:c8: be:9c:a7:7d:a6:7a:41:53:b3:28:7e:a7:30:58:7a:8b:0e:f1: d6:c0:14:87 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoQkQ3MjE0M0RCN0FGRjYxM0U4MkVBMjkwQjRDOUMyQkZG QTg4QkMyNjAeFw0yNjA0MDUwODIxNTdaFw0yNjA0MTIwODIxNTdaMBgxFjAUBgNV BAMTDTY5ZDIxYmE1LWIzNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtVRGp8dHHUJM20pJkLRbBIuPUT6uE4CwID/a10qZg7xh1Gn7SfhLS7RmCTpJs zeRB6DTBpQ94v6nzXYqLci6Eg4Jd8rjJ68PJG+Z8MIfGnMswLqG5Y24NPK5tB+oL ZikxiTwq9tNIyif/DT1QTYyIhBv0jsL1sOBs1p8Tu6vllRLzVlX2W9plw6gLrTE+ 5NlUKLyQy9wg7mvDUZgmWemo4kGEglZZUOM7eY0brJvZnaGF3rxfkuUTSHr5UfPW lrCv1FgBLIu/opaHES3io1ltSYRzVZBJIMEEvZvkUlO4pfhmJB98XirvAizvud4X sHSiW5b2B8t+YzSaqYLFNUFlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJdkfUeXC j3kGuVgkCV2UFnt+48UwHwYDVR0jBBgwFoAUvXIUPbev9hPoLqKQtMnCv/qIvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzYzMDI3REY2MTg0 RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhJVVBiZXY5aFBvTHFLUXRNbkN2X3FJdkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD Mjg3LzYzMDI3REY2MTg0RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQ b0xxS1F0TW5Ddl9xSXZDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCXF4PYbsGapj/JEQVEKiWhhJVUOR3Wu6/QEwNzWIJxgIf/EAp92Gy/PiTlELoK LKtDppWczP7Ar1eFSi0ulUk0r5VgQsVGjnMuEJhARQYYYyugSLUzcCM4IiLVvCNn Io4JWkTQvcVt/C7UAiN6j3AS8/mcauBmbjIrsTQk7S6vednHPhFaA2RPz+YZquvZ Brixe9/d0AVHyl9Il5Bp6ng5syql6Q2e673fV21P/FZCbnlK6Gb3ytJOGd42yAYI egni64wFKNMcZulPXsOnjJ23Aeqpok/9GjzuHEleWsM6W9OZmvsiHEAy8Mi+nKd9 pnpBU7MofqcwWHqLDvHWwBSH -----END CERTIFICATE-----Generated at Sun Apr 5 20:57:34 2026 by rpki-client