$ rpki-client -vvf rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft File: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft (raw, json) Hash identifier: x5aYjd3mzOC4RY+9GeDNzl1MrPzFsVpfakGQz9HQQus= Subject key identifier: 45:56:8A:07:D2:55:4F:2B:D1:F9:3D:E2:CA:8F:48:8C:19:FC:3E:80 Authority key identifier: 07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B Certificate issuer: /CN=A911BFB0/serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Certificate serial: 0FEE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft Manifest number: 1255 Signing time: Sat 04 Apr 2026 17:21:10 +0000 Manifest this update: Sat 04 Apr 2026 17:21:09 +0000 Manifest next update: Sat 11 Apr 2026 17:21:09 +0000 Files and hashes: 1: B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl (hash: lN7D9b6qLQNOWEn3OdbRkeR2+POAhAPS2GYLCOF/lTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4078 (0xfee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BFB0, serialNumber=07FE4171DD50DCE7B64F76998967A571CF93C40B Validity Not Before: Apr 4 17:21:09 2026 GMT Not After : Apr 11 17:21:09 2026 GMT Subject: CN=69d14886-c2e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:dc:6c:3d:24:83:7e:3e:16:3d:55:58:cd: e1:76:c4:2d:6e:d1:5c:df:62:12:e3:8a:1d:45:63: a9:3a:0c:b8:fa:61:a1:8c:bf:e0:dc:d8:57:2d:80: cf:75:4c:1d:da:b4:cf:78:70:0a:33:3e:74:ed:14: 68:18:0c:6a:d9:65:5d:8d:51:6a:d2:17:04:fb:2f: d3:7e:79:c8:f4:3b:1d:8b:94:e4:17:e4:ab:03:10: d1:f1:77:19:e4:34:a9:44:3e:e7:e7:54:24:6a:70: b6:c9:cf:f9:af:a7:66:db:97:45:38:10:c4:02:09: 32:ec:7d:9c:16:3f:ad:14:35:4b:4f:eb:57:0b:7e: 1e:9d:40:67:b0:be:80:99:54:89:13:75:1a:c1:91: a6:b2:ef:8d:88:2c:78:79:de:f9:88:1b:f4:19:49: 12:ca:90:d7:f2:6e:7c:c1:e5:56:2d:08:f6:8c:76: a8:73:2d:7c:3a:0c:0c:49:db:13:5d:33:ab:6c:cb: 8b:e1:c7:8e:46:5f:63:6d:71:4d:aa:4d:cb:ae:52: e6:c3:d1:eb:14:e4:6c:96:ef:24:6f:5f:fc:16:fb: 23:81:4e:f8:ba:d3:23:6b:28:11:ec:4f:e4:f4:f7: 06:85:1a:dd:0b:8a:f2:73:da:9d:85:98:9c:c4:2f: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:56:8A:07:D2:55:4F:2B:D1:F9:3D:E2:CA:8F:48:8C:19:FC:3E:80 X509v3 Authority Key Identifier: keyid:07:FE:41:71:DD:50:DC:E7:B6:4F:76:99:89:67:A5:71:CF:93:C4:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BFB0/22C251466CC211E9A0D6AF67C4F9AE02/B_5Bcd1Q3Oe2T3aZiWelcc-TxAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:5e:f5:d6:50:f5:80:2d:8d:ec:27:ef:dd:dd:78:12:56:8f: 25:14:0d:a8:04:86:ba:c5:82:35:82:ef:fb:16:28:c6:b0:75: bb:a5:29:fc:4a:cb:d8:85:33:28:b0:86:a9:1f:10:d4:10:14: 7c:6e:19:0d:e3:80:f2:66:64:ae:9b:19:f4:42:80:b3:79:6f: a7:09:f5:6e:14:0c:41:f7:3d:9d:42:68:0d:2c:69:dd:4f:33: a1:e1:bd:88:64:6c:c9:27:e6:3b:7c:4d:84:96:04:29:56:ef: 4e:84:82:f7:d4:fb:d8:70:6a:7f:41:44:6e:61:24:82:10:b7: 90:77:25:ea:fa:96:80:01:e5:89:19:2f:7e:79:89:3f:ba:af: 8a:5a:26:81:80:4c:d0:f2:fe:37:b5:7b:64:7e:b2:78:93:ff: 56:0a:22:8c:e9:8f:06:ca:36:c2:77:a9:ea:12:24:b5:87:97: ed:29:bd:a0:ff:3f:8e:c7:20:b6:98:1a:d1:34:87:f8:16:00: f6:a0:cd:c8:72:95:e0:28:ad:f2:84:01:85:84:4c:0c:1a:c6: 68:70:9f:1b:0f:7c:a5:ca:96:7c:c1:0c:a7:cf:c6:55:9f:0e: 36:fb:7e:3d:74:e1:78:06:68:40:9a:ce:84:9c:8d:92:0f:f8: 40:65:82:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJGQjAxMTAvBgNVBAUTKDA3RkU0MTcxREQ1MERDRTdCNjRGNzY5OTg5NjdBNTcx Q0Y5M0M0MEIwHhcNMjYwNDA0MTcyMTA5WhcNMjYwNDExMTcyMTA5WjAYMRYwFAYD VQQDEw02OWQxNDg4Ni1jMmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhHcbD0kg34+Fj1VWM3hdsQtbtFc32IS44odRWOpOgy4+mGhjL/g3NhXLYDP dUwd2rTPeHAKMz507RRoGAxq2WVdjVFq0hcE+y/TfnnI9Dsdi5TkF+SrAxDR8XcZ 5DSpRD7n51QkanC2yc/5r6dm25dFOBDEAgky7H2cFj+tFDVLT+tXC34enUBnsL6A mVSJE3UawZGmsu+NiCx4ed75iBv0GUkSypDX8m58weVWLQj2jHaocy18OgwMSdsT XTOrbMuL4ceORl9jbXFNqk3LrlLmw9HrFORslu8kb1/8FvsjgU74utMjaygR7E/k 9PcGhRrdC4ryc9qdhZicxC/K5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEVWigfS VU8r0fk94sqPSIwZ/D6AMB8GA1UdIwQYMBaAFAf+QXHdUNzntk92mYlnpXHPk8QL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkZCMC8yMkMyNTE0NjZD QzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNPZTJUM2FaaVdlbGNjLVR4 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfNUJjZDFRM09lMlQzYVppV2VsY2MtVHhBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkZCMC8yMkMyNTE0NjZDQzIxMUU5QTBENkFGNjdDNEY5QUUwMi9CXzVCY2QxUTNP ZTJUM2FaaVdlbGNjLVR4QXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACF711lD1gC2N7Cfv3d14ElaPJRQNqASGusWCNYLv+xYoxrB1u6Up/ErL2IUz KLCGqR8Q1BAUfG4ZDeOA8mZkrpsZ9EKAs3lvpwn1bhQMQfc9nUJoDSxp3U8zoeG9 iGRsySfmO3xNhJYEKVbvToSC99T72HBqf0FEbmEkghC3kHcl6vqWgAHliRkvfnmJ P7qvilomgYBM0PL+N7V7ZH6yeJP/VgoijOmPBso2wnep6hIktYeX7Sm9oP8/jscg tpga0TSH+BYA9qDNyHKV4Cit8oQBhYRMDBrGaHCfGw98pcqWfMEMp8/GVZ8ONvt+ PXTheAZoQJrOhJyNkg/4QGWC8Q== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:28 2026 by rpki-client