$ rpki-client -vvf rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft File: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft (raw, json) Hash identifier: BSmtJx4LsoKWw5sNItq65PWAhiAzGdBPXZF4bOg6sD0= Subject key identifier: 3A:E0:86:37:47:E0:62:37:A2:08:C3:D5:2A:B7:CA:2F:80:04:BA:AD Authority key identifier: AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C Certificate issuer: /CN=A912D2CE/serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft Manifest number: 0D05 Signing time: Sat 04 Apr 2026 18:01:35 +0000 Manifest this update: Sat 04 Apr 2026 18:01:35 +0000 Manifest next update: Sat 11 Apr 2026 18:01:35 +0000 Files and hashes: 1: rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl (hash: 1qLCvXeak16+4fu6vgKjKa0/JzdOOkELpnTdWQflBL8=) 2: 25234272DF4311EDA83C7074C4F9AE02.roa (hash: GvywSj55EV1yzQml0fqNzXzPDZF0ADJSCDwlr5eZm/s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D2CE, serialNumber=AE16045872DDDAC3DCF12F0795CAD70E4C09D96C Validity Not Before: Apr 4 18:01:35 2026 GMT Not After : Apr 11 18:01:35 2026 GMT Subject: CN=69d151ff-b628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:ae:c7:d8:c6:05:b4:36:a3:da:74:fa:21: 29:c0:b3:8e:a6:7b:81:6f:b8:b4:71:17:c3:cb:49: 27:3c:c7:72:7f:85:22:fb:75:fd:a9:c7:59:34:d7: fb:90:f6:92:aa:01:fb:e9:91:a7:48:82:9f:08:0d: b3:98:6b:c7:b0:95:81:73:80:23:60:60:40:03:d3: ac:a7:31:58:ea:c8:92:e8:b6:e6:05:b2:bc:dd:b5: ec:3c:9c:fe:69:c2:c4:5a:a7:0a:dd:a3:85:1b:62: 3f:7e:5d:54:e0:ed:10:ca:15:d6:fa:91:f1:88:09: 47:b0:92:ff:0f:45:c7:06:96:9f:54:c7:c8:64:17: d9:a4:15:df:4d:df:7d:b5:4e:d6:35:c9:33:95:ce: 74:80:ca:7c:55:27:5b:30:a7:20:f7:29:c0:b9:4d: a2:7f:40:61:68:3c:a7:08:e5:5e:a6:e8:40:d7:cc: 87:de:5b:49:61:f1:a6:fc:53:cb:6c:be:01:5f:88: 2d:e3:89:21:4c:73:a1:5d:44:ed:e6:7d:ab:68:3a: 43:69:a2:8c:36:bf:cf:b6:4f:0b:72:44:81:56:15: 1d:81:0b:2b:30:7a:73:69:b1:f1:fd:c3:28:98:da: 52:87:66:01:2f:ce:ad:af:31:26:c9:74:a7:3c:94: 9d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E0:86:37:47:E0:62:37:A2:08:C3:D5:2A:B7:CA:2F:80:04:BA:AD X509v3 Authority Key Identifier: keyid:AE:16:04:58:72:DD:DA:C3:DC:F1:2F:07:95:CA:D7:0E:4C:09:D9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D2CE/2B0E7240013611EAB0006438C4F9AE02/rhYEWHLd2sPc8S8HlcrXDkwJ2Ww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b7:99:31:74:a4:c1:ad:82:8f:6d:c3:02:6e:f3:a1:f1:56: da:1c:80:01:b0:5c:ee:a6:2b:25:c9:4c:3f:b1:b8:1b:03:e1: 19:93:22:8a:27:dc:f4:90:ce:dd:85:ac:55:39:ec:eb:a4:c1: 5f:f2:17:32:e3:b1:02:05:07:35:66:db:4c:b1:54:7b:fa:89: 8a:38:7a:02:8d:5e:ea:c8:b1:29:8a:3f:db:a2:4d:98:72:77: 8d:cb:9c:5b:d0:68:c2:d5:43:7e:21:2c:ab:d9:cc:7e:c7:83: 2d:5a:5a:b9:ea:6a:4d:b1:46:82:8e:b4:d2:16:28:9a:99:fa: 17:ab:9f:c5:de:98:f4:19:6b:df:f6:8b:7f:da:1a:8f:68:2e: 90:4f:ee:1b:3e:98:29:67:8b:56:c2:e1:75:6e:8c:68:7c:ea: 7f:ca:6a:dd:e1:b8:2e:c4:6c:fd:e0:d9:47:b8:bb:b8:2e:0f: 3a:30:df:5f:d3:51:38:57:c1:98:0e:c3:c4:34:7a:db:2f:ce: dd:9a:69:23:4f:2e:c1:0f:35:bb:d2:d7:fb:9b:c9:31:4d:6b: ea:61:04:37:47:db:b4:e0:75:ad:05:78:fe:6d:e3:d0:98:4c: a4:a4:35:9b:bb:40:22:2a:04:39:c9:f4:ad:3f:dd:1a:d6:90: 40:39:90:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQyQ0UxMTAvBgNVBAUTKEFFMTYwNDU4NzJERERBQzNEQ0YxMkYwNzk1Q0FENzBF NEMwOUQ5NkMwHhcNMjYwNDA0MTgwMTM1WhcNMjYwNDExMTgwMTM1WjAYMRYwFAYD VQQDEw02OWQxNTFmZi1iNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Yqux9jGBbQ2o9p0+iEpwLOOpnuBb7i0cRfDy0knPMdyf4Ui+3X9qcdZNNf7 kPaSqgH76ZGnSIKfCA2zmGvHsJWBc4AjYGBAA9OspzFY6siS6LbmBbK83bXsPJz+ acLEWqcK3aOFG2I/fl1U4O0QyhXW+pHxiAlHsJL/D0XHBpafVMfIZBfZpBXfTd99 tU7WNckzlc50gMp8VSdbMKcg9ynAuU2if0BhaDynCOVepuhA18yH3ltJYfGm/FPL bL4BX4gt44khTHOhXUTt5n2raDpDaaKMNr/Ptk8LckSBVhUdgQsrMHpzabHx/cMo mNpSh2YBL86trzEmyXSnPJSdEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDrghjdH 4GI3ogjD1Sq3yi+ABLqtMB8GA1UdIwQYMBaAFK4WBFhy3drD3PEvB5XK1w5MCdls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDJDRS8yQjBFNzI0MDAx MzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJzUGM4UzhIbGNyWERrd0oy V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JoWUVXSExkMnNQYzhTOEhsY3JYRGt3SjJXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDJDRS8yQjBFNzI0MDAxMzYxMUVBQjAwMDY0MzhDNEY5QUUwMi9yaFlFV0hMZDJz UGM4UzhIbGNyWERrd0oyV3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF7eZMXSkwa2Cj23DAm7zofFW2hyAAbBc7qYrJclMP7G4GwPhGZMiiifc9JDO 3YWsVTns66TBX/IXMuOxAgUHNWbbTLFUe/qJijh6Ao1e6sixKYo/26JNmHJ3jcuc W9BowtVDfiEsq9nMfseDLVpauepqTbFGgo600hYompn6F6ufxd6Y9Blr3/aLf9oa j2gukE/uGz6YKWeLVsLhdW6MaHzqf8pq3eG4LsRs/eDZR7i7uC4POjDfX9NROFfB mA7DxDR62y/O3ZppI08uwQ81u9LX+5vJMU1r6mEEN0fbtOB1rQV4/m3j0JhMpKQ1 m7tAIioEOcn0rT/dGtaQQDmQ2g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:44 2026 by rpki-client