$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft File: MnO_dM_TfcKwgKpPGtntXtY-YyA.mft (raw, json) Hash identifier: lRhyoQVlF+daWE3SI0NzEoGbRHSngfx/gvnwzz1UWIc= Subject key identifier: 7A:55:6F:7B:DE:08:3D:40:55:16:40:F3:7A:3C:08:21:16:5B:EF:CC Authority key identifier: 32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 Certificate issuer: /CN=A912E3C7/serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft Manifest number: FB Signing time: Sun 05 Apr 2026 05:37:25 +0000 Manifest this update: Sun 05 Apr 2026 05:37:24 +0000 Manifest next update: Sun 12 Apr 2026 05:37:24 +0000 Files and hashes: 1: MnO_dM_TfcKwgKpPGtntXtY-YyA.crl (hash: 7+fYSm8AqZ9BT29HdvR63jWlS2jBKu51VQXJjOrwKrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 05:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E3C7, serialNumber=3273BF74CFD37DC2B080AA4F1AD9ED5ED63E6320 Validity Not Before: Apr 5 05:37:24 2026 GMT Not After : Apr 12 05:37:24 2026 GMT Subject: CN=69d1f515-816b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:42:f2:35:da:25:fa:79:de:b4:ef:22:86: 80:6b:bd:0a:28:1d:42:5e:52:0d:b7:4d:cf:37:c5: d8:68:42:d6:4d:47:a4:a7:55:e3:48:5d:3f:cc:92: b8:90:b8:07:f7:b1:0c:c0:cf:45:d2:73:e7:b3:8a: da:4e:d7:e5:3c:13:5d:02:37:39:2b:cb:37:ac:9a: 0a:6a:5a:ff:7d:1e:53:32:98:da:2f:54:b6:32:91: bf:2d:2d:48:ee:d2:db:fc:ff:f6:f2:bc:44:64:c1: c4:e8:2a:ef:fe:8c:71:8c:2c:e0:a1:83:0b:e7:91: 11:33:00:c7:e7:2e:6c:a6:38:41:40:81:61:dc:49: 3c:9b:61:6b:76:35:28:37:ec:c4:ea:dd:6a:11:e0: 6d:94:e6:dc:7a:45:1a:b5:29:c4:48:69:6e:64:64: f3:49:bc:c3:25:49:30:63:9c:a4:b3:d3:55:8e:ec: 0c:a8:ee:ee:57:f6:7f:ac:4b:5a:7e:12:b5:b8:fb: f8:36:0c:67:6b:e7:d3:ac:d8:ec:78:90:ba:65:d3: 2e:1d:22:57:28:dd:d7:17:62:4b:2d:ce:fd:5f:02: a5:f4:29:e2:dc:1e:b0:bc:31:a0:b8:77:b9:8f:e9: c6:79:91:b1:05:d2:fe:57:bd:3a:0b:77:8f:0b:85: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:55:6F:7B:DE:08:3D:40:55:16:40:F3:7A:3C:08:21:16:5B:EF:CC X509v3 Authority Key Identifier: keyid:32:73:BF:74:CF:D3:7D:C2:B0:80:AA:4F:1A:D9:ED:5E:D6:3E:63:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MnO_dM_TfcKwgKpPGtntXtY-YyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/8E608A8AB26711EFA565A849C4F9AE02/MnO_dM_TfcKwgKpPGtntXtY-YyA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:20:9c:0c:1e:49:55:cc:ce:98:ad:f2:ec:cd:e6:08:38:93: 0b:06:3e:e1:b2:68:c2:89:e3:77:7c:93:7d:d5:21:71:80:6e: 54:a6:57:69:47:fd:55:c0:7b:ea:6a:89:ae:fa:99:0e:3f:ae: d5:02:38:7f:a6:06:3f:06:bf:44:5b:9d:83:35:34:bc:2c:8b: 9c:e6:2c:dc:2c:a5:57:09:e7:2f:e1:69:01:1a:5c:2d:0c:24: 87:2e:a4:8a:cb:7c:e8:1b:ca:85:bf:5f:73:a0:2e:b4:dd:d9: 08:37:48:fa:7c:16:40:bb:b8:e3:48:94:c7:a2:0d:5c:5a:f9: 87:80:86:c3:2b:66:0c:43:eb:eb:e8:35:d6:fd:33:26:3c:b8: 96:60:d1:a7:3d:e8:de:70:6c:d2:eb:44:83:d8:8c:77:42:57: c9:12:de:d1:37:81:67:74:77:71:68:f9:7f:df:ca:f8:d6:63: 8e:3e:fb:e0:04:11:32:6b:1a:e5:13:0b:30:10:8d:94:60:8d: 92:aa:5b:d8:c1:8d:4c:7c:4f:45:ac:39:ed:32:74:26:0d:19: e0:ed:33:6a:d8:c5:f4:7e:5a:fa:58:4d:5e:48:8e:d8:ba:e4: 14:06:a9:b0:96:28:f4:2c:56:73:a1:29:ca:a8:b3:12:18:55: bf:22:1b:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkUzQzcxMTAvBgNVBAUTKDMyNzNCRjc0Q0ZEMzdEQzJCMDgwQUE0RjFBRDlFRDVF RDYzRTYzMjAwHhcNMjYwNDA1MDUzNzI0WhcNMjYwNDEyMDUzNzI0WjAYMRYwFAYD VQQDEw02OWQxZjUxNS04MTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMZC8jXaJfp53rTvIoaAa70KKB1CXlINt03PN8XYaELWTUekp1XjSF0/zJK4 kLgH97EMwM9F0nPns4raTtflPBNdAjc5K8s3rJoKalr/fR5TMpjaL1S2MpG/LS1I 7tLb/P/28rxEZMHE6Crv/oxxjCzgoYML55ERMwDH5y5spjhBQIFh3Ek8m2FrdjUo N+zE6t1qEeBtlObcekUatSnESGluZGTzSbzDJUkwY5yks9NVjuwMqO7uV/Z/rEta fhK1uPv4Ngxna+fTrNjseJC6ZdMuHSJXKN3XF2JLLc79XwKl9Cni3B6wvDGguHe5 j+nGeZGxBdL+V706C3ePC4WnTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHpVb3ve CD1AVRZA83o8CCEWW+/MMB8GA1UdIwQYMBaAFDJzv3TP033CsICqTxrZ7V7WPmMg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTNDNy84RTYwOEE4QUIy NjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZjS3dnS3BQR3RudFh0WS1Z eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01uT19kTV9UZmNLd2dLcFBHdG50WHRZLVl5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTNDNy84RTYwOEE4QUIyNjcxMUVGQTU2NUE4NDlDNEY5QUUwMi9Nbk9fZE1fVGZj S3dnS3BQR3RudFh0WS1ZeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGiCcDB5JVczOmK3y7M3mCDiTCwY+4bJowonjd3yTfdUhcYBuVKZXaUf9VcB7 6mqJrvqZDj+u1QI4f6YGPwa/RFudgzU0vCyLnOYs3CylVwnnL+FpARpcLQwkhy6k ist86BvKhb9fc6AutN3ZCDdI+nwWQLu440iUx6INXFr5h4CGwytmDEPr6+g11v0z Jjy4lmDRpz3o3nBs0utEg9iMd0JXyRLe0TeBZ3R3cWj5f9/K+NZjjj774AQRMmsa 5RMLMBCNlGCNkqpb2MGNTHxPRaw57TJ0Jg0Z4O0zatjF9H5a+lhNXkiO2LrkFAap sJYo9CxWc6EpyqizEhhVvyIbmA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:53:47 2026 by rpki-client