$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: 9fdq6oLwXtWlFy1DzGvA6KghMef+pyFBvB2fL0epVJI= Subject key identifier: 26:8E:38:6A:DE:16:FF:D7:D8:6E:C9:99:E5:39:5B:BD:C8:99:36:79 Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0EB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E99 Signing time: Sat 04 Apr 2026 17:37:56 +0000 Manifest this update: Sat 04 Apr 2026 17:37:56 +0000 Manifest next update: Sat 11 Apr 2026 17:37:56 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: xROzYd45uTet9+2TTPVNYewY0AEfJurUSp63fxMnOrY=) 2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:37:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3765 (0xeb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Apr 4 17:37:56 2026 GMT Not After : Apr 11 17:37:56 2026 GMT Subject: CN=69d14c74-f5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:ab:5b:45:9f:26:1d:ab:f7:98:97:cc:d1: 94:ff:3c:d8:b6:ab:c4:43:e3:c6:98:c5:56:c1:8a: 52:ce:94:de:ff:be:a0:a1:82:65:24:95:19:62:0c: 88:f7:09:85:15:51:5d:00:6b:0a:bf:fd:b1:ef:9b: 94:4c:50:80:4c:b7:ef:0c:d9:06:ec:b9:2d:67:12: a1:2e:9d:37:d8:3d:bc:5d:d1:93:c8:4f:01:d1:3e: 3f:01:88:81:c6:26:ff:d0:ea:84:88:79:6e:db:06: bc:80:5d:65:ba:86:d4:08:25:75:c4:cc:4e:00:0e: 60:67:7c:6d:80:5a:bb:05:e7:1e:f9:41:2c:40:38: ed:36:18:cd:92:7b:3e:f8:81:fe:0d:2a:4a:6e:24: 21:f8:a8:da:af:1e:7b:70:ac:be:90:3f:b8:04:ee: 3d:7f:24:03:c7:46:3d:c2:12:c1:ca:cd:d8:8d:20: 00:d4:01:3b:0b:91:cd:e2:9f:41:28:53:93:51:17: 67:d4:06:84:98:9e:06:23:74:34:22:d0:5f:d3:e2: 88:d1:c6:15:b0:2f:6e:26:7b:6c:52:a7:d5:fc:90: a8:34:30:d8:8b:41:4c:df:9e:5c:09:27:b2:ad:9b: b2:66:76:81:9a:fa:23:0d:5c:f8:60:80:9f:88:97: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8E:38:6A:DE:16:FF:D7:D8:6E:C9:99:E5:39:5B:BD:C8:99:36:79 X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:cf:9f:09:ad:0a:04:f8:d3:e3:a4:f5:fe:73:86:6d:08:df: 75:a2:20:6d:bc:a7:73:7c:2e:b6:c0:55:08:3a:58:1d:40:b0: 77:c9:02:76:9f:8c:9d:57:c3:f0:69:b1:14:a7:de:a3:4b:1d: 46:d5:74:13:1a:da:d4:a4:1a:1b:1a:26:9a:13:94:d4:cf:53: 1c:85:de:1c:fc:b9:6b:2f:34:24:b1:9d:5f:98:b0:63:a3:29: 3a:2c:36:a1:65:fd:de:25:3b:06:d5:48:d9:ff:11:66:97:b0: 4a:ea:7c:13:da:d5:3b:86:79:ae:3c:09:cc:8e:82:57:25:31: 35:46:06:67:70:86:ef:57:2a:22:f1:ee:66:ad:27:11:0e:24: 15:c3:a0:07:12:33:f3:74:05:fa:81:e6:d5:92:35:9f:12:88: 23:cc:c2:1b:f3:32:2d:a8:a7:f7:b2:b5:43:f2:b3:33:8f:aa: 2f:94:c3:0f:8f:d7:71:02:cb:a7:26:a1:dc:46:f9:6e:56:f5: 0f:40:92:74:ae:ff:78:b3:92:2e:7e:4b:4e:bb:25:e0:03:a3: dd:f5:49:3f:e8:bb:f4:3d:62:fc:a5:9d:8c:71:ad:52:a8:2d: ab:c9:fb:9e:ed:54:aa:5b:42:65:17:8e:f1:24:63:b6:77:bd: 45:f0:e0:c2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjYwNDA0MTczNzU2WhcNMjYwNDExMTczNzU2WjAYMRYwFAYD VQQDEw02OWQxNGM3NC1mNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jqrW0WfJh2r95iXzNGU/zzYtqvEQ+PGmMVWwYpSzpTe/76goYJlJJUZYgyI 9wmFFVFdAGsKv/2x75uUTFCATLfvDNkG7LktZxKhLp032D28XdGTyE8B0T4/AYiB xib/0OqEiHlu2wa8gF1luobUCCV1xMxOAA5gZ3xtgFq7Bece+UEsQDjtNhjNkns+ +IH+DSpKbiQh+Kjarx57cKy+kD+4BO49fyQDx0Y9whLBys3YjSAA1AE7C5HN4p9B KFOTURdn1AaEmJ4GI3Q0ItBf0+KI0cYVsC9uJntsUqfV/JCoNDDYi0FM355cCSey rZuyZnaBmvojDVz4YICfiJeVqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaOOGre Fv/X2G7JmeU5W73ImTZ5MB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK8+fCa0KBPjT46T1/nOGbQjfdaIgbbync3wutsBVCDpYHUCwd8kCdp+MnVfD 8GmxFKfeo0sdRtV0Exra1KQaGxommhOU1M9THIXeHPy5ay80JLGdX5iwY6MpOiw2 oWX93iU7BtVI2f8RZpewSup8E9rVO4Z5rjwJzI6CVyUxNUYGZ3CG71cqIvHuZq0n EQ4kFcOgBxIz83QF+oHm1ZI1nxKII8zCG/MyLain97K1Q/KzM4+qL5TDD4/XcQLL pyah3Eb5blb1D0CSdK7/eLOSLn5LTrsl4AOj3fVJP+i79D1i/KWdjHGtUqgtq8n7 nu1UqltCZReO8SRjtne9RfDgwg== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:24 2026 by rpki-client