$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: N7VLwZNZOiGezSYCP6IAgNRcChW4AWr6VL1irHMXC8U= Subject key identifier: FE:84:C3:60:EC:6F:29:D5:B2:62:91:76:48:32:DF:AE:EB:32:EB:83 Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0AFB Signing time: Sun 26 Apr 2026 19:18:03 +0000 Manifest this update: Sun 26 Apr 2026 19:18:02 +0000 Manifest next update: Sun 03 May 2026 19:18:02 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: 5qYletxsC2btk0jZQTyEb8JLeTGaW/5mL6Jp1xtiISM=) 2: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=) 3: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 19:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Apr 26 19:18:02 2026 GMT Not After : May 3 19:18:02 2026 GMT Subject: CN=69ee64ea-6140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1b:bd:d0:d6:fc:d1:71:ea:63:0e:fc:9d:7f: 41:71:1d:a9:e1:f1:a1:a5:34:3e:b9:5c:52:d4:60: 74:e4:ce:26:ac:32:7f:c4:7a:a7:2b:ec:1c:50:fa: 16:d6:17:8b:97:e3:e3:4e:87:57:ea:e5:59:cd:36: 85:22:8e:40:09:10:59:6e:e9:95:6e:f7:44:82:80: fb:ff:35:fc:cd:a2:c3:61:16:01:67:95:d8:e9:d9: 22:ec:1d:e7:08:a3:88:e5:6d:bd:b5:b5:21:00:be: 68:f6:94:8a:9d:87:ba:e5:00:6b:a0:6f:41:3e:2a: fa:e8:fb:a7:e8:7c:bd:02:b0:1f:55:c4:dd:c0:fb: 02:49:c3:ba:5b:89:b6:47:f6:17:7d:4f:20:ec:1b: c7:cf:67:49:a6:02:98:40:35:28:13:7a:cc:74:7b: 7a:aa:e7:4a:a8:bd:54:e4:b0:b6:c9:42:f5:8e:c5: d8:75:57:d2:88:e8:b6:78:2e:4d:d1:83:21:6b:ec: c1:b4:1c:2d:c5:54:a4:51:1a:ec:c1:8b:3a:29:e8: 3b:53:d9:2c:01:e9:f1:bc:06:a5:7d:ca:f6:92:c5: 7b:ae:61:14:3f:1e:49:d8:2c:e5:91:ba:3e:e9:e5: 27:b5:e6:83:da:09:02:7b:a0:26:69:6c:44:9e:83: 85:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:C3:60:EC:6F:29:D5:B2:62:91:76:48:32:DF:AE:EB:32:EB:83 X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7a:56:3d:24:37:6c:44:05:7e:27:ca:6c:0b:d4:86:00:b5: 0f:f0:11:f0:00:5f:f9:d0:41:93:a1:ca:80:63:bf:05:3b:4c: 8c:2a:aa:3b:18:06:71:ae:e7:ac:b4:1d:4c:14:e0:47:db:7d: a3:c6:df:51:b6:b2:f1:84:2c:b1:84:bb:dd:e7:39:53:40:2e: 15:0a:06:77:f1:c2:57:5f:fb:c5:6e:8d:cc:46:fa:a0:af:39: a2:22:b2:bd:3a:77:9c:75:ac:4a:1a:0c:83:aa:d1:13:b6:4f: 46:d3:e7:02:87:5b:66:b4:c8:3f:c2:ec:5b:f9:be:39:cd:ed: da:3d:a7:4c:95:e5:79:51:5c:aa:af:84:55:1d:37:ff:39:16: 54:6c:a7:40:ad:b8:6e:3d:fd:a3:fb:ff:43:0f:ba:5b:26:85: 2b:57:20:4b:e8:10:91:4c:48:4c:88:e7:7c:26:75:04:ae:2d: e4:d4:6c:a1:7c:a3:ea:ce:e5:fe:bb:2c:da:e7:59:98:4c:41: b4:44:c7:cb:29:58:64:58:45:43:62:7c:11:29:ff:2b:12:d7: c0:e2:35:92:1a:4d:a4:c7:dd:e3:fb:a6:7b:f2:fc:67:2e:88: 39:0e:04:52:5f:97:22:8e:9c:d0:f0:0a:d5:41:c8:b1:95:36: c5:d8:b6:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjYwNDI2MTkxODAyWhcNMjYwNTAzMTkxODAyWjAYMRYwFAYD VQQDEw02OWVlNjRlYS02MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8hu90Nb80XHqYw78nX9BcR2p4fGhpTQ+uVxS1GB05M4mrDJ/xHqnK+wcUPoW 1heLl+PjTodX6uVZzTaFIo5ACRBZbumVbvdEgoD7/zX8zaLDYRYBZ5XY6dki7B3n CKOI5W29tbUhAL5o9pSKnYe65QBroG9BPir66Pun6Hy9ArAfVcTdwPsCScO6W4m2 R/YXfU8g7BvHz2dJpgKYQDUoE3rMdHt6qudKqL1U5LC2yUL1jsXYdVfSiOi2eC5N 0YMha+zBtBwtxVSkURrswYs6Keg7U9ksAenxvAalfcr2ksV7rmEUPx5J2Czlkbo+ 6eUnteaD2gkCe6AmaWxEnoOFiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP6Ew2Ds bynVsmKRdkgy367rMuuDMB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAj3pWPSQ3bEQFfifKbAvUhgC1D/AR8ABf+dBBk6HKgGO/BTtMjCqqOxgGca7n rLQdTBTgR9t9o8bfUbay8YQssYS73ec5U0AuFQoGd/HCV1/7xW6NzEb6oK85oiKy vTp3nHWsShoMg6rRE7ZPRtPnAodbZrTIP8LsW/m+Oc3t2j2nTJXleVFcqq+EVR03 /zkWVGynQK24bj39o/v/Qw+6WyaFK1cgS+gQkUxITIjnfCZ1BK4t5NRsoXyj6s7l /rss2udZmExBtETHyylYZFhFQ2J8ESn/KxLXwOI1khpNpMfd4/ume/L8Zy6IOQ4E Ul+XIo6c0PAK1UHIsZU2xdi2RQ== -----END CERTIFICATE-----Generated at Tue Apr 28 11:37:35 2026 by rpki-client