$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: zKfo+ArILc5XVmOiUuxFmZ1FaPrVG7bQQX8mg7liqjs= Subject key identifier: B8:C3:4F:36:80:2B:52:B0:32:BB:AC:ED:9B:9E:F3:C6:92:52:5E:16 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: BA Signing time: Sun 05 Apr 2026 06:25:26 +0000 Manifest this update: Sun 05 Apr 2026 06:25:25 +0000 Manifest next update: Sun 12 Apr 2026 06:25:25 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: rkZWZdMP1YMsq4JLPIiIy2/dFAmf/3ex/cp7hQVUUk4=) 2: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: BzJbMll/2nErUDx3X8m0xfulq0DUGLZUVlVIKOuCCgI=) 3: 8BACF000172811F0B074151EC4F9AE02.roa (hash: FPDvvLJ/gQTo+9W5C7JTL7cnqUEeaAN36mc784gFf6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Apr 5 06:25:25 2026 GMT Not After : Apr 12 06:25:25 2026 GMT Subject: CN=69d20056-91d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3f:ca:ab:82:2f:6c:01:c1:7d:6e:d8:ae:d7: ce:09:b7:15:2e:8e:eb:fb:1a:df:c9:28:a4:c4:09: 38:b7:1f:9c:6e:d1:42:37:73:72:72:b5:d6:7c:d3: bb:b9:0e:b8:86:b4:d6:39:e1:b1:2d:ca:fb:f5:e5: d7:0b:cb:e7:23:62:65:fe:5b:3a:c0:f5:5d:a1:eb: eb:6a:4a:e2:4f:cc:24:b1:13:ae:50:01:ce:e7:54: 28:4d:4a:78:ea:53:f3:97:e0:80:91:2b:70:df:cb: a5:1f:89:f2:96:22:88:a3:bf:31:14:90:1c:fe:82: e7:d3:59:5b:e5:75:04:0b:e7:af:26:c4:11:74:d8: f3:ff:6d:48:76:a3:a9:b2:49:e9:32:5b:24:87:47: 61:92:f3:4a:7e:7c:38:3c:b2:d7:85:99:ed:3e:78: 2b:dc:98:97:6f:15:0c:5a:25:54:6b:94:ea:2e:a7: fa:18:45:40:23:f1:9a:a1:2f:a3:74:b7:41:d4:72: 3c:d5:b4:f9:3d:b0:16:b5:9c:01:f5:ee:f5:e2:a8: 7e:8c:c7:81:23:0a:90:ea:ce:44:c4:de:14:ea:6b: 36:d7:bb:e9:01:a4:8d:e5:b4:7a:8b:79:ec:6d:99: c7:1b:30:8c:04:2a:92:8b:e3:28:78:f3:e6:f0:f6: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C3:4F:36:80:2B:52:B0:32:BB:AC:ED:9B:9E:F3:C6:92:52:5E:16 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b2:53:ec:8a:ca:40:fa:b5:ea:89:80:44:d4:01:f9:b7:bb: 09:9d:16:d0:f2:a1:5c:1a:f3:54:fc:b0:a2:f1:ff:b7:8d:31: fe:4e:d9:29:d1:16:83:dc:62:4d:f6:48:f1:29:23:f0:96:0b: cd:d7:c6:1a:49:a5:4b:18:dc:9d:46:c5:d0:d1:55:3a:b0:e9: 72:97:7f:5b:c8:61:63:bb:b3:40:32:c9:2a:60:5c:75:af:fc: ca:d2:7f:13:2a:3e:e9:0d:0c:59:cc:ad:69:eb:5b:19:6e:dc: b8:be:f6:7c:ab:85:25:87:f7:93:61:3c:8d:01:aa:97:f6:c0: af:5a:37:6a:5b:e0:53:39:94:b3:28:33:c6:38:70:f1:5c:74: 04:6d:e8:94:14:4d:0f:ce:08:7e:06:94:03:d3:07:5a:90:3b: 18:b5:69:fd:26:53:db:10:21:96:46:1d:fe:ef:9b:99:46:8c: 96:05:b8:77:f8:ed:f5:0f:c0:d7:a2:95:d4:a3:fb:68:ac:a0: a2:a9:3e:2f:90:6f:4c:12:b4:73:38:a4:1f:66:27:6c:86:93: 2e:60:06:ba:75:24:87:c8:d2:92:bf:da:55:5d:71:1b:dd:77: 33:2e:00:dc:42:a0:54:f6:cc:2c:a0:ee:d3:d8:5f:b2:7a:63: aa:b5:86:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2NjMxMTAvBgNVBAUTKDNDQUFFQUYxQjBENEJGNjMxN0FFNEYxRTU0NjM3OUJG RjM0NkNGRDMwHhcNMjYwNDA1MDYyNTI1WhcNMjYwNDEyMDYyNTI1WjAYMRYwFAYD VQQDEw02OWQyMDA1Ni05MWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjD/Kq4IvbAHBfW7YrtfOCbcVLo7r+xrfySikxAk4tx+cbtFCN3NycrXWfNO7 uQ64hrTWOeGxLcr79eXXC8vnI2Jl/ls6wPVdoevrakriT8wksROuUAHO51QoTUp4 6lPzl+CAkStw38ulH4nyliKIo78xFJAc/oLn01lb5XUEC+evJsQRdNjz/21IdqOp sknpMlskh0dhkvNKfnw4PLLXhZntPngr3JiXbxUMWiVUa5TqLqf6GEVAI/GaoS+j dLdB1HI81bT5PbAWtZwB9e714qh+jMeBIwqQ6s5ExN4U6ms217vpAaSN5bR6i3ns bZnHGzCMBCqSi+MoePPm8PbrMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLjDTzaA K1KwMrus7Zue88aSUl4WMB8GA1UdIwQYMBaAFDyq6vGw1L9jF65PHlRjeb/zRs/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY2My83QUM5Njc5RTE3 MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYyTVhyazhlVkdONXZfTkd6 OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY2My83QUM5Njc5RTE3MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYy TVhyazhlVkdONXZfTkd6OU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7JT7IrKQPq16omARNQB+be7CZ0W0PKhXBrzVPywovH/t40x/k7ZKdEWg9xi TfZI8Skj8JYLzdfGGkmlSxjcnUbF0NFVOrDpcpd/W8hhY7uzQDLJKmBcda/8ytJ/ Eyo+6Q0MWcytaetbGW7cuL72fKuFJYf3k2E8jQGql/bAr1o3alvgUzmUsygzxjhw 8Vx0BG3olBRND84IfgaUA9MHWpA7GLVp/SZT2xAhlkYd/u+bmUaMlgW4d/jt9Q/A 16KV1KP7aKygoqk+L5BvTBK0czikH2YnbIaTLmAGunUkh8jSkr/aVV1xG913My4A 3EKgVPbMLKDu09hfsnpjqrWGDg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:51 2026 by rpki-client