$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft File: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft (raw, json) Hash identifier: UtwCjih8J0HWytvhblpCBHRbRA6V+kH7Y5yYcHq94Pg= Subject key identifier: 32:38:71:E0:99:DB:9B:E3:A6:9F:CA:9F:FC:7C:B4:9F:CE:96:F1:A1 Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 Certificate issuer: /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Certificate serial: 0BE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft Manifest number: 0BCB Signing time: Sat 04 Apr 2026 18:46:58 +0000 Manifest this update: Sat 04 Apr 2026 18:46:58 +0000 Manifest next update: Sat 11 Apr 2026 18:46:58 +0000 Files and hashes: 1: MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl (hash: x76D4WbBmclvTBoqXa4udPl0UXIHO2CGKd6EXFVfBlg=) 2: E324E2F6F40611EAA5B2244FC4F9AE02.roa (hash: avhdzluktcTaPNlKm0CJ2cLBjs4VkOW1cKeJBnenY/0=) 3: E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (hash: 4Z5iYLEtKBfjWooahsTM+JCERTIB6b3TIat4TqCaYIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3046 (0xbe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8 Validity Not Before: Apr 4 18:46:58 2026 GMT Not After : Apr 11 18:46:58 2026 GMT Subject: CN=69d15ca2-90d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:5e:67:23:0b:51:18:3b:a9:56:fa:c3:bc: b8:e0:64:11:3e:fd:24:c3:83:e7:0a:8f:f6:39:26: d9:a5:72:e5:fa:a0:26:72:d0:71:b9:aa:51:0d:e6: 47:d0:f9:02:af:aa:9b:a1:f7:81:ec:bf:78:4b:37: 12:16:4c:56:6c:23:21:53:ab:43:1a:b3:ed:0a:b3: 14:47:bd:0f:af:81:ab:77:56:f7:97:26:e1:02:33: c3:bb:e3:64:11:c3:48:b0:3c:36:e1:3d:d4:fd:8d: c8:eb:02:e5:c6:8b:d0:c8:9c:f7:8f:61:b2:bd:78: 41:6b:cc:55:20:c6:5a:bd:45:90:a8:cf:e4:62:46: 76:e2:9a:65:44:1e:64:4a:ed:c4:e1:99:15:6d:27: 7c:c8:65:66:17:b9:bf:16:c5:7f:df:6e:9d:12:07: 80:6f:0a:2d:07:73:e9:52:9b:20:cd:97:41:3d:03: ca:65:69:54:6d:a1:d9:ac:3a:79:a5:33:72:7f:2d: af:77:7c:2f:6b:1f:ae:02:03:cf:50:14:c5:83:a0: fa:fb:b1:78:46:de:c5:f4:19:c0:a3:f7:b3:32:ac: 41:52:bc:8a:ed:ad:31:23:ea:e3:1b:a7:85:14:99: 18:3c:32:50:7e:5e:f4:87:94:28:86:e4:20:48:7e: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:38:71:E0:99:DB:9B:E3:A6:9F:CA:9F:FC:7C:B4:9F:CE:96:F1:A1 X509v3 Authority Key Identifier: keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:1a:31:49:36:2e:4a:6d:95:fb:9a:80:9a:27:9c:46:66:b3: 65:b3:c9:0f:43:19:53:10:fc:5e:aa:ea:61:63:68:ea:f0:e4: 23:1b:9f:a2:95:78:27:aa:e7:1a:0d:d8:22:7a:4a:c8:2f:98: 59:22:b6:65:86:ab:13:eb:55:ea:f9:44:0d:7e:f0:59:de:3a: fb:f8:13:c7:bf:9c:80:08:5a:00:10:28:54:86:9a:98:d5:48: c5:47:cd:63:90:b6:63:5d:1a:76:48:4d:b2:ac:94:4a:80:25: 88:39:c3:4e:6f:7a:f3:55:c0:06:5c:45:f5:ab:86:53:cf:94: b7:63:23:f6:20:54:e1:41:14:38:a1:d6:93:df:c3:14:5d:f5: a0:14:67:bc:2d:a6:11:03:d3:f5:2e:5e:f9:d0:57:3e:45:95: ae:33:76:3b:1a:82:f0:3b:25:f3:df:32:b7:30:83:35:dd:57: 70:ec:38:9f:c4:73:3c:a4:f1:0e:c2:49:75:17:b8:a9:48:98: 85:1a:28:12:74:47:f3:8c:99:1d:ee:c2:84:c8:34:42:14:57: ee:4c:59:05:77:77:12:9b:a2:93:95:c1:3a:90:8c:06:25:1d: a1:ab:cd:77:f9:bb:50:e2:a2:a9:9e:23:1e:cb:3a:94:32:50: f3:05:d3:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM4OEQxMTAvBgNVBAUTKDMyNjQ0MzY0NzlBNTBFRDQwQ0NGRDJCNzA0RTYwMjQ5 NjA4RTQzQTgwHhcNMjYwNDA0MTg0NjU4WhcNMjYwNDExMTg0NjU4WjAYMRYwFAYD VQQDEw02OWQxNWNhMi05MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJFeZyMLURg7qVb6w7y44GQRPv0kw4PnCo/2OSbZpXLl+qAmctBxuapRDeZH 0PkCr6qbofeB7L94SzcSFkxWbCMhU6tDGrPtCrMUR70Pr4Grd1b3lybhAjPDu+Nk EcNIsDw24T3U/Y3I6wLlxovQyJz3j2GyvXhBa8xVIMZavUWQqM/kYkZ24pplRB5k Su3E4ZkVbSd8yGVmF7m/FsV/326dEgeAbwotB3PpUpsgzZdBPQPKZWlUbaHZrDp5 pTNyfy2vd3wvax+uAgPPUBTFg6D6+7F4Rt7F9BnAo/ezMqxBUryK7a0xI+rjG6eF FJkYPDJQfl70h5QohuQgSH4AxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDI4ceCZ 25vjpp/Kn/x8tJ/OlvGhMB8GA1UdIwQYMBaAFDJkQ2R5pQ7UDM/StwTmAklgjkOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzg4RC8zOEFCNTkxRTNE QzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0UU16OUszQk9ZQ1NXQ09R NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tUkRaSG1sRHRRTXo5SzNCT1lDU1dDT1E2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qzg4RC8zOEFCNTkxRTNEQzExMUVBQUYyQjY3MzVDNEY5QUUwMi9NbVJEWkhtbER0 UU16OUszQk9ZQ1NXQ09RNmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZBoxSTYuSm2V+5qAmiecRmazZbPJD0MZUxD8XqrqYWNo6vDkIxufopV4J6rn Gg3YInpKyC+YWSK2ZYarE+tV6vlEDX7wWd46+/gTx7+cgAhaABAoVIaamNVIxUfN Y5C2Y10adkhNsqyUSoAliDnDTm9681XABlxF9auGU8+Ut2Mj9iBU4UEUOKHWk9/D FF31oBRnvC2mEQPT9S5e+dBXPkWVrjN2OxqC8Dsl898ytzCDNd1XcOw4n8RzPKTx DsJJdRe4qUiYhRooEnRH84yZHe7ChMg0QhRX7kxZBXd3Epuik5XBOpCMBiUdoavN d/m7UOKiqZ4jHss6lDJQ8wXTBg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:03 2026 by rpki-client