$ rpki-client -vvf rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft File: r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft (raw, json) Hash identifier: jQengQqzjqpxzoM1UAMPFl/dhVr7u3SVmnFWDD4h8WI= Subject key identifier: A2:28:E5:A0:F9:90:28:3F:44:07:B9:B1:FD:56:84:F1:56:69:9B:C0 Authority key identifier: AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 Certificate issuer: /CN=A918EC82/serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Certificate serial: 08B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft Manifest number: 08A8 Signing time: Sat 04 Apr 2026 20:18:53 +0000 Manifest this update: Sat 04 Apr 2026 20:18:52 +0000 Manifest next update: Sat 11 Apr 2026 20:18:52 +0000 Files and hashes: 1: r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl (hash: y9K6UetOprGkQcefwmg6ujxNt517qFj1xVPjtjs1t+Q=) 2: 2A0CFF60000811EC9CB70449C4F9AE02.roa (hash: LTCbHauhqctukaxsBI7is9dw2rGH9a0l7IrT+OZtZLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2232 (0x8b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EC82, serialNumber=AF41C9D0446A7FA914C6C16E788CD2C3F80AF502 Validity Not Before: Apr 4 20:18:52 2026 GMT Not After : Apr 11 20:18:52 2026 GMT Subject: CN=69d1722c-1f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:45:cb:6f:3a:cd:97:37:d8:fb:5b:d2:15: 94:2e:ab:c7:e0:cf:f8:7e:33:37:2a:2a:e0:43:80: b7:7f:25:53:56:11:8f:5a:8d:02:32:37:61:7a:52: f5:b5:e6:ec:34:c8:e4:45:89:97:af:78:1d:b7:22: 11:f5:63:27:22:2c:e1:5c:81:c8:de:01:05:b5:53: b8:08:9f:c5:33:8a:2c:fa:50:a1:dd:f9:c3:b3:86: d1:6b:a3:6f:07:e0:70:2c:f2:3c:c4:53:c0:3f:63: 30:31:b1:a2:4f:27:99:39:a5:fa:67:14:ca:cf:84: 0d:60:19:2b:bb:23:54:39:6a:2a:2b:f5:51:b5:1b: 30:03:15:ac:31:dd:50:92:43:0c:af:0b:5e:07:ae: 96:9c:a6:4b:03:17:19:40:96:a3:6d:4f:18:78:1b: 24:51:3d:e0:61:e3:75:c4:99:8b:72:fa:fa:ed:3f: 2d:bf:8d:15:85:5e:95:4c:ab:41:7b:b6:d7:95:cf: 1d:70:53:df:3b:d9:03:d1:1d:d2:7a:7a:0a:74:0b: bc:c2:29:fd:7b:1e:96:7e:93:f1:46:63:8b:48:c3: f8:b9:63:12:ac:3b:e6:64:15:50:89:67:01:03:9b: b8:1a:1c:53:9d:2a:74:a1:47:d8:54:63:a5:83:f8: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:E5:A0:F9:90:28:3F:44:07:B9:B1:FD:56:84:F1:56:69:9B:C0 X509v3 Authority Key Identifier: keyid:AF:41:C9:D0:44:6A:7F:A9:14:C6:C1:6E:78:8C:D2:C3:F8:0A:F5:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r0HJ0ERqf6kUxsFueIzSw_gK9QI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EC82/4025807CE1E811EA9E833A53C4F9AE02/r0HJ0ERqf6kUxsFueIzSw_gK9QI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c7:84:7a:f2:52:69:8a:49:6f:e8:88:c3:7b:ac:0b:ca:0a: d2:d9:14:e9:42:bf:aa:52:cc:09:fb:b0:a7:d4:1e:73:3a:03: 72:80:78:de:8e:f3:7f:a4:43:54:86:ec:ef:4f:14:bc:4f:2e: 55:d9:7e:6a:75:6a:dd:02:92:39:b3:28:81:1f:93:5d:28:ba: ca:25:ad:f3:62:c0:f0:10:40:f2:87:e2:06:4d:29:f7:ed:15: a0:e3:7e:65:94:56:63:17:a2:e3:f8:2b:82:3d:e5:21:65:fc: 1d:20:86:c8:0b:24:bd:65:d9:29:b5:53:9c:89:26:e1:3b:69: 28:b6:ef:df:d8:16:7c:99:c1:ed:f9:85:6b:d5:ac:3c:52:a3: 44:23:ac:82:8e:a9:f6:79:1b:75:59:bf:48:25:1c:7e:38:e3: 27:85:b8:1c:44:47:37:2d:80:02:a1:53:86:43:29:8a:de:c3: 29:de:60:ee:48:7e:ab:03:c8:b4:64:de:17:09:00:ed:ff:4f: d6:79:b1:3b:e6:81:5a:26:80:a9:34:51:55:dd:47:53:1d:13: a9:b4:b2:e5:78:c4:94:04:d3:30:8e:37:28:59:65:11:e1:65: 1f:f1:21:ba:51:53:c4:27:e6:d3:cb:31:f0:0b:cb:db:79:bf: 12:38:f6:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVDODIxMTAvBgNVBAUTKEFGNDFDOUQwNDQ2QTdGQTkxNEM2QzE2RTc4OENEMkMz RjgwQUY1MDIwHhcNMjYwNDA0MjAxODUyWhcNMjYwNDExMjAxODUyWjAYMRYwFAYD VQQDEw02OWQxNzIyYy0xZjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAli5Fy286zZc32Ptb0hWULqvH4M/4fjM3KirgQ4C3fyVTVhGPWo0CMjdhelL1 tebsNMjkRYmXr3gdtyIR9WMnIizhXIHI3gEFtVO4CJ/FM4os+lCh3fnDs4bRa6Nv B+BwLPI8xFPAP2MwMbGiTyeZOaX6ZxTKz4QNYBkruyNUOWoqK/VRtRswAxWsMd1Q kkMMrwteB66WnKZLAxcZQJajbU8YeBskUT3gYeN1xJmLcvr67T8tv40VhV6VTKtB e7bXlc8dcFPfO9kD0R3SenoKdAu8win9ex6WfpPxRmOLSMP4uWMSrDvmZBVQiWcB A5u4GhxTnSp0oUfYVGOlg/gxywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIo5aD5 kCg/RAe5sf1WhPFWaZvAMB8GA1UdIwQYMBaAFK9BydBEan+pFMbBbniM0sP4CvUC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUM4Mi80MDI1ODA3Q0Ux RTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2a1V4c0Z1ZUl6U3dfZ0s5 UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IwSEowRVJxZjZrVXhzRnVlSXpTd19nSzlRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUM4Mi80MDI1ODA3Q0UxRTgxMUVBOUU4MzNBNTNDNEY5QUUwMi9yMEhKMEVScWY2 a1V4c0Z1ZUl6U3dfZ0s5UUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASMeEevJSaYpJb+iIw3usC8oK0tkU6UK/qlLMCfuwp9QeczoDcoB43o7zf6RD VIbs708UvE8uVdl+anVq3QKSObMogR+TXSi6yiWt82LA8BBA8ofiBk0p9+0VoON+ ZZRWYxei4/grgj3lIWX8HSCGyAskvWXZKbVTnIkm4TtpKLbv39gWfJnB7fmFa9Ws PFKjRCOsgo6p9nkbdVm/SCUcfjjjJ4W4HERHNy2AAqFThkMpit7DKd5g7kh+qwPI tGTeFwkA7f9P1nmxO+aBWiaAqTRRVd1HUx0TqbSy5XjElATTMI43KFllEeFlH/Eh ulFTxCfm08sx8AvL23m/Ejj2BQ== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:03 2026 by rpki-client