$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft File: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft (raw, json) Hash identifier: Nqf/LoVwN2ZwKUqZHILiuull9yJcjD9RBsMiSGv++EQ= Subject key identifier: C2:A3:4C:25:9C:61:C6:94:D8:9B:A9:7B:7E:C4:8D:13:4C:44:FC:42 Authority key identifier: 42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 Certificate issuer: /CN=A912C8AF/serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Certificate serial: 07DD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft Manifest number: 07D1 Signing time: Mon 20 Apr 2026 19:13:31 +0000 Manifest this update: Mon 20 Apr 2026 19:13:30 +0000 Manifest next update: Mon 27 Apr 2026 19:13:30 +0000 Files and hashes: 1: Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl (hash: yo6eDtzcBGPC7L+db0OeiUjDsPG063eTod/P8SKiZv4=) 2: 510308503E8211EBA910FF57C4F9AE02.roa (hash: O/lTB0pDSB8sB0dRmgz1yxjauyhwEgNkjtUoJWKHyCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 19:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2013 (0x7dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8AF, serialNumber=424E0A3843F3FA1F44B6AF2EF3EE11815C4B5209 Validity Not Before: Apr 20 19:13:30 2026 GMT Not After : Apr 27 19:13:30 2026 GMT Subject: CN=69e67adb-df56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f6:0c:8b:88:fc:8d:db:57:00:ba:ba:a2:0b: 18:37:57:f1:f2:b4:30:b9:40:76:10:da:2e:50:ce: 42:f7:67:10:98:9c:21:fc:9c:23:e7:f2:57:53:30: 58:61:6b:77:a2:3e:90:8a:8f:08:65:ab:95:79:d1: ee:fb:8d:9f:f6:88:a4:30:fc:65:ff:7a:44:71:52: 85:2c:16:03:85:ea:81:da:65:30:83:83:d9:07:4c: 19:80:d0:e3:d7:a3:7e:ee:1d:1a:bc:99:f4:3b:3d: bb:fe:04:fc:1e:40:95:5c:29:7e:79:bb:4f:01:de: 24:91:36:d2:df:cf:95:e0:f5:44:3b:b0:29:87:2c: ed:20:61:79:1e:f1:55:95:aa:b0:11:06:c0:67:56: 70:ff:98:ca:78:8c:20:1f:61:fc:6e:24:75:cd:56: 79:c1:53:14:bc:4f:db:d4:fd:17:00:e4:b9:90:a7: 15:46:b1:44:f9:56:5c:a4:56:6b:05:58:1d:74:ef: 9f:da:61:1b:0e:d3:47:b3:c6:9c:43:4b:b7:ae:66: 8f:6d:14:2a:2d:90:d4:f1:55:73:75:9e:ad:a4:91: eb:0f:0d:e2:71:c0:10:26:7e:7d:f6:81:7a:c8:d4: 97:fe:b3:86:43:6b:91:2a:e0:04:34:0a:dd:4d:70: 01:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A3:4C:25:9C:61:C6:94:D8:9B:A9:7B:7E:C4:8D:13:4C:44:FC:42 X509v3 Authority Key Identifier: keyid:42:4E:0A:38:43:F3:FA:1F:44:B6:AF:2E:F3:EE:11:81:5C:4B:52:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8AF/EE0AEECA3E8111EB9ABD920FC4F9AE02/Qk4KOEPz-h9Etq8u8-4RgVxLUgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ee:48:aa:13:f9:f0:ad:c5:67:7c:25:28:9d:66:13:f5:0b: a5:75:7f:28:ef:d0:42:f5:ea:3f:01:23:d0:21:78:be:17:b6: 68:9c:24:da:d7:63:e6:74:11:22:80:6e:b8:ce:af:17:22:b3: 81:88:5d:7a:e9:39:41:eb:02:57:51:3b:ae:b2:2d:99:6e:6e: 06:78:d4:b6:1c:42:12:67:ed:dd:1b:c6:f0:3c:6d:40:19:68: dd:ac:69:8e:13:38:47:46:d8:61:b0:73:49:6b:66:a7:76:60: 63:1c:d8:99:2b:8b:0e:85:d5:a6:a4:7d:40:eb:4f:f2:ed:72: 54:58:15:9d:cd:68:f9:b9:c5:35:23:92:69:a2:c4:22:cd:a5: 82:71:53:ee:76:db:8d:42:c4:b7:ef:df:2e:6d:e1:61:45:20: 02:1b:40:b2:04:d1:0a:cc:eb:21:f4:2b:cc:18:a7:b7:18:dc: b7:85:36:fd:e1:fe:87:0f:11:34:09:cf:d9:f8:0d:2c:60:78: 9e:50:f1:bc:0a:88:fa:14:b0:a1:b5:72:48:14:17:56:43:3b: 4b:a0:f9:bf:86:39:86:a4:99:83:6c:08:76:e3:9f:76:5c:cc: ad:0f:16:25:33:0b:29:6b:5f:58:75:24:3f:b7:2f:89:f4:22: 14:41:a7:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4QUYxMTAvBgNVBAUTKDQyNEUwQTM4NDNGM0ZBMUY0NEI2QUYyRUYzRUUxMTgx NUM0QjUyMDkwHhcNMjYwNDIwMTkxMzMwWhcNMjYwNDI3MTkxMzMwWjAYMRYwFAYD VQQDEw02OWU2N2FkYi1kZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoPYMi4j8jdtXALq6ogsYN1fx8rQwuUB2ENouUM5C92cQmJwh/Jwj5/JXUzBY YWt3oj6Qio8IZauVedHu+42f9oikMPxl/3pEcVKFLBYDheqB2mUwg4PZB0wZgNDj 16N+7h0avJn0Oz27/gT8HkCVXCl+ebtPAd4kkTbS38+V4PVEO7AphyztIGF5HvFV laqwEQbAZ1Zw/5jKeIwgH2H8biR1zVZ5wVMUvE/b1P0XAOS5kKcVRrFE+VZcpFZr BVgddO+f2mEbDtNHs8acQ0u3rmaPbRQqLZDU8VVzdZ6tpJHrDw3iccAQJn599oF6 yNSX/rOGQ2uRKuAENArdTXABQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKjTCWc YcaU2Jupe37EjRNMRPxCMB8GA1UdIwQYMBaAFEJOCjhD8/ofRLavLvPuEYFcS1IJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhBRi9FRTBBRUVDQTNF ODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1oOUV0cTh1OC00UmdWeExV Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1FrNEtPRVB6LWg5RXRxOHU4LTRSZ1Z4TFVnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhBRi9FRTBBRUVDQTNFODExMUVCOUFCRDkyMEZDNEY5QUUwMi9RazRLT0VQei1o OUV0cTh1OC00UmdWeExVZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWe5IqhP58K3FZ3wlKJ1mE/ULpXV/KO/QQvXqPwEj0CF4vhe2aJwk2tdj5nQR IoBuuM6vFyKzgYhdeuk5QesCV1E7rrItmW5uBnjUthxCEmft3RvG8DxtQBlo3axp jhM4R0bYYbBzSWtmp3ZgYxzYmSuLDoXVpqR9QOtP8u1yVFgVnc1o+bnFNSOSaaLE Is2lgnFT7nbbjULEt+/fLm3hYUUgAhtAsgTRCszrIfQrzBintxjct4U2/eH+hw8R NAnP2fgNLGB4nlDxvAqI+hSwobVySBQXVkM7S6D5v4Y5hqSZg2wIduOfdlzMrQ8W JTMLKWtfWHUkP7cvifQiFEGn3w== -----END CERTIFICATE-----Generated at Wed Apr 22 00:09:59 2026 by rpki-client