$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft File: sXBCw3IXHA9BRv78RNHbqlIjhxs.mft (raw, json) Hash identifier: SZJU8YnWzxOPMHN0hoBhCJDo9e+nrPs6YKX+Mfyg334= Subject key identifier: 51:C5:02:A1:A7:2D:8D:15:58:39:30:48:45:8A:6D:32:81:7B:43:1F Authority key identifier: B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B Certificate issuer: /CN=A918FEF6/serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft Manifest number: 07CC Signing time: Sat 04 Apr 2026 21:09:28 +0000 Manifest this update: Sat 04 Apr 2026 21:09:27 +0000 Manifest next update: Sat 11 Apr 2026 21:09:27 +0000 Files and hashes: 1: sXBCw3IXHA9BRv78RNHbqlIjhxs.crl (hash: qGl/Ra9sjzrbXTrJMCsuEGN+linCEWXuYDGUaZzqZV4=) 2: 3A9A3904330011EBA08B865DC4F9AE02.roa (hash: mKwK5iOPGex40HNrt/NQkPkIKFqlB9W9tlJIyUVibC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 21:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF6, serialNumber=B17042C372171C0F4146FEFC44D1DBAA5223871B Validity Not Before: Apr 4 21:09:27 2026 GMT Not After : Apr 11 21:09:27 2026 GMT Subject: CN=69d17e08-dddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3f:19:e5:c7:2a:56:2c:31:9b:46:c6:b6:56: 48:80:7d:b3:c0:0a:de:d5:c1:2f:c9:bb:7d:b5:d2: 03:61:6c:ba:7b:0b:b2:fa:b0:c7:d4:f7:da:7e:26: 13:c4:c3:aa:0e:a8:09:83:e6:b9:2c:c3:10:0a:28: dd:6c:6e:ff:ff:e7:88:77:c5:c2:79:40:30:44:aa: fb:a6:b7:23:62:71:5a:70:74:a1:38:1b:dc:92:3e: f8:e8:68:b8:ff:3b:ee:92:d3:98:5d:81:3c:74:77: cc:99:d2:30:aa:95:97:fb:e3:72:d0:50:9f:2b:d5: 4b:e7:ee:c2:f7:18:c4:84:25:05:d3:f6:33:37:52: 36:fa:bf:03:50:3b:cd:76:bb:9d:f6:ab:12:5c:e3: 02:b9:b5:6d:b8:aa:d7:e2:4c:5a:cf:95:a7:c9:e1: 45:db:a5:b1:f1:03:39:0a:3c:40:39:78:e8:ce:08: 00:be:d7:a7:0a:15:57:11:6b:1b:08:f7:c4:f5:96: 6a:b3:9b:d7:8c:cb:d8:e9:c1:2a:65:8c:c3:a8:3e: 06:35:54:9a:d5:9b:a5:59:17:d7:99:7b:e8:f4:85: fc:da:36:56:58:ca:6c:f9:10:90:5b:3b:12:1e:a4: 67:0e:89:ce:12:cf:84:1b:e3:a4:b1:6e:6e:3c:b3: 16:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C5:02:A1:A7:2D:8D:15:58:39:30:48:45:8A:6D:32:81:7B:43:1F X509v3 Authority Key Identifier: keyid:B1:70:42:C3:72:17:1C:0F:41:46:FE:FC:44:D1:DB:AA:52:23:87:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXBCw3IXHA9BRv78RNHbqlIjhxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF6/1986B9D832FE11EB85BAD157C4F9AE02/sXBCw3IXHA9BRv78RNHbqlIjhxs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:c7:d9:c3:b2:de:13:8c:69:ec:db:6d:81:f2:2f:ff:b6:0d: 72:28:2f:2d:01:48:5e:2a:f6:6d:6a:d1:dc:d0:62:20:b1:30: 0b:8b:8c:58:79:b7:9f:dd:f3:e7:e9:e7:ba:c0:55:ac:91:b4: 4d:e0:bf:af:e3:c0:48:78:9c:9b:86:ab:a7:ec:3e:4a:17:eb: c7:4d:83:ea:c3:d9:d8:5f:26:6a:04:16:83:57:4d:26:92:2d: c5:82:42:ea:17:45:78:5d:99:c5:5e:f7:5f:36:12:3a:8b:7f: 89:32:37:3b:1b:7c:f8:ca:d9:af:4b:f3:32:8f:00:3b:0f:f2: 64:de:b8:a0:ae:bc:d0:e9:d9:f2:65:e6:84:38:fb:92:74:08: 96:be:16:31:81:76:4a:57:76:62:37:3c:f4:7c:1b:03:15:8c: 70:d3:ca:ae:0d:99:58:5d:7f:bc:c6:ca:18:c1:fd:ff:d2:f3: 3d:62:3d:86:cb:e6:d6:1e:ae:5f:95:b2:54:af:80:25:86:44: 7a:57:e5:83:a5:da:14:93:03:d9:db:ec:89:37:3a:30:36:a7: 47:68:2b:e2:91:0d:72:07:01:d3:f2:48:36:bd:d6:3f:33:f0: 6e:1f:87:bc:a4:db:ce:85:9d:ae:e0:46:69:cc:51:f8:c8:10: f4:93:c3:f6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjYxMTAvBgNVBAUTKEIxNzA0MkMzNzIxNzFDMEY0MTQ2RkVGQzQ0RDFEQkFB NTIyMzg3MUIwHhcNMjYwNDA0MjEwOTI3WhcNMjYwNDExMjEwOTI3WjAYMRYwFAYD VQQDEw02OWQxN2UwOC1kZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvT8Z5ccqViwxm0bGtlZIgH2zwAre1cEvybt9tdIDYWy6ewuy+rDH1PfafiYT xMOqDqgJg+a5LMMQCijdbG7//+eId8XCeUAwRKr7prcjYnFacHShOBvckj746Gi4 /zvuktOYXYE8dHfMmdIwqpWX++Ny0FCfK9VL5+7C9xjEhCUF0/YzN1I2+r8DUDvN drud9qsSXOMCubVtuKrX4kxaz5WnyeFF26Wx8QM5CjxAOXjozggAvtenChVXEWsb CPfE9ZZqs5vXjMvY6cEqZYzDqD4GNVSa1ZulWRfXmXvo9IX82jZWWMps+RCQWzsS HqRnDonOEs+EG+OksW5uPLMWIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHFAqGn LY0VWDkwSEWKbTKBe0MfMB8GA1UdIwQYMBaAFLFwQsNyFxwPQUb+/ETR26pSI4cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGNi8xOTg2QjlEODMy RkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhBOUJSdjc4Uk5IYnFsSWpo eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NYQkN3M0lYSEE5QlJ2NzhSTkhicWxJamh4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGNi8xOTg2QjlEODMyRkUxMUVCODVCQUQxNTdDNEY5QUUwMi9zWEJDdzNJWEhB OUJSdjc4Uk5IYnFsSWpoeHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUsfZw7LeE4xp7NttgfIv/7YNcigvLQFIXir2bWrR3NBiILEwC4uMWHm3n93z 5+nnusBVrJG0TeC/r+PASHicm4arp+w+Shfrx02D6sPZ2F8magQWg1dNJpItxYJC 6hdFeF2ZxV73XzYSOot/iTI3Oxt8+MrZr0vzMo8AOw/yZN64oK680OnZ8mXmhDj7 knQIlr4WMYF2Sld2Yjc89HwbAxWMcNPKrg2ZWF1/vMbKGMH9/9LzPWI9hsvm1h6u X5WyVK+AJYZEelflg6XaFJMD2dvsiTc6MDanR2gr4pENcgcB0/JINr3WPzPwbh+H vKTbzoWdruBGacxR+MgQ9JPD9g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:43:08 2026 by rpki-client