$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: pLi4z1Q9O84RraBGz4WqJaFoI/8+aoOV0Kj7ufVZ/gM= Subject key identifier: 31:F1:60:0A:55:9E:80:AF:D0:45:93:80:ED:DA:C7:13:30:17:E6:DE Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0861 Signing time: Mon 20 Apr 2026 20:39:14 +0000 Manifest this update: Mon 20 Apr 2026 20:39:14 +0000 Manifest next update: Mon 27 Apr 2026 20:39:14 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: 3K9YCPrhrMGN+xndY2OQXmAYSxI8q3SAUAnbNFSc6Yw=) 2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=) 3: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=) 4: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=) 5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=) 6: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Apr 20 20:39:14 2026 GMT Not After : Apr 27 20:39:14 2026 GMT Subject: CN=69e68ef2-cd0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:48:a1:e4:8a:1e:26:b7:b4:2c:5f:bf:19: 62:48:5e:d2:ca:b2:4d:8b:11:6e:77:81:f9:cd:d0: 96:d3:74:23:13:3f:d6:db:e0:f2:d1:47:20:02:58: f1:f1:a1:68:af:3f:e4:43:c8:36:ab:73:05:e2:41: 3d:00:cb:69:b9:de:45:29:ee:23:5f:69:92:42:14: 80:a7:1b:e0:18:88:3e:82:29:f6:cf:96:0f:b0:9e: bf:16:6a:95:ce:d1:8a:04:e8:4f:e1:f2:08:24:be: 94:98:2d:7d:ee:e2:2b:17:02:55:d4:39:76:a2:c6: 47:d2:c3:5a:b5:98:53:73:2c:0c:ab:95:1e:1a:54: e8:40:f3:03:b0:e3:eb:47:a2:c1:3d:66:c1:df:63: 72:79:7f:3f:85:36:cd:61:44:d6:7f:89:31:fd:5a: fb:40:0f:d1:6a:2f:b8:17:18:11:86:2f:d6:79:89: 7a:ea:1d:5a:81:3c:22:b5:dd:11:17:53:90:91:69: 8f:46:d8:55:03:f9:98:7c:1d:4a:32:be:8f:06:46: 95:36:c2:a3:57:e2:b5:8b:3a:a7:90:ab:ec:3d:d4: b4:5d:78:25:7b:31:a7:bc:8a:c7:50:88:bc:6d:7d: 31:1c:bd:f2:20:1d:28:48:b5:6f:02:11:8e:cf:39: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F1:60:0A:55:9E:80:AF:D0:45:93:80:ED:DA:C7:13:30:17:E6:DE X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:86:53:8b:87:0e:66:88:7a:70:2b:67:46:d8:f7:f3:89:84: b2:e4:56:51:ae:99:bf:e9:8e:73:0d:5d:f5:98:65:e4:21:3b: 27:16:54:7f:17:68:c9:4c:4e:13:b7:81:b9:7a:f5:cb:1e:2e: 43:c6:b9:fb:4e:22:21:20:b4:5d:7d:84:77:73:8d:d7:4b:1e: 42:22:cd:70:36:22:ce:4b:fd:f2:74:e2:5b:3f:97:92:10:a1: f4:47:1a:93:e4:b3:ac:43:2c:24:86:e9:5e:89:3c:bb:be:50: 86:52:9c:59:50:25:b8:34:4b:3c:8e:64:92:bd:b7:4e:dd:99: 7e:86:33:03:69:4f:36:12:c8:2b:75:6e:f7:50:12:4b:1b:06: f0:46:ed:c8:29:c1:f1:b5:47:16:fd:ac:87:93:2f:79:e0:2f: 6c:c9:a8:29:e1:4f:12:86:14:a9:3f:55:b5:4f:d1:8b:af:37: b5:5b:03:c3:e8:c7:f3:5a:29:1b:c7:85:83:35:ed:6b:0e:c2: 02:c4:32:20:24:b7:40:d4:c0:d6:5f:bd:3b:3a:e9:14:4b:ed: ac:90:ca:06:dd:de:5f:79:e3:e3:63:ff:a9:17:c7:36:cc:75: 79:98:84:e2:06:52:0f:83:af:40:80:35:81:2c:66:8c:89:34: 24:74:11:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjYwNDIwMjAzOTE0WhcNMjYwNDI3MjAzOTE0WjAYMRYwFAYD VQQDEw02OWU2OGVmMi1jZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvNIoeSKHia3tCxfvxliSF7SyrJNixFud4H5zdCW03QjEz/W2+Dy0UcgAljx 8aForz/kQ8g2q3MF4kE9AMtpud5FKe4jX2mSQhSApxvgGIg+gin2z5YPsJ6/FmqV ztGKBOhP4fIIJL6UmC197uIrFwJV1Dl2osZH0sNatZhTcywMq5UeGlToQPMDsOPr R6LBPWbB32NyeX8/hTbNYUTWf4kx/Vr7QA/Rai+4FxgRhi/WeYl66h1agTwitd0R F1OQkWmPRthVA/mYfB1KMr6PBkaVNsKjV+K1izqnkKvsPdS0XXglezGnvIrHUIi8 bX0xHL3yIB0oSLVvAhGOzzlXawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHxYApV noCv0EWTgO3axxMwF+beMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUYZTi4cOZoh6cCtnRtj384mEsuRWUa6Zv+mOcw1d9Zhl5CE7JxZUfxdoyUxO E7eBuXr1yx4uQ8a5+04iISC0XX2Ed3ON10seQiLNcDYizkv98nTiWz+XkhCh9Eca k+SzrEMsJIbpXok8u75QhlKcWVAluDRLPI5kkr23Tt2ZfoYzA2lPNhLIK3Vu91AS SxsG8EbtyCnB8bVHFv2sh5MveeAvbMmoKeFPEoYUqT9VtU/Ri683tVsDw+jH81op G8eFgzXtaw7CAsQyICS3QNTA1l+9OzrpFEvtrJDKBt3eX3nj42P/qRfHNsx1eZiE 4gZSD4OvQIA1gSxmjIk0JHQRkw== -----END CERTIFICATE-----Generated at Wed Apr 22 14:45:46 2026 by rpki-client