$ rpki-client -vvf rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft File: d31UDhYfpnH7JFijP_5L8z1qcBU.mft (raw, json) Hash identifier: 31i0+QSVcpSJzBDetskcDYXbGrxNLavkc0ss+H+zIhU= Subject key identifier: F2:27:65:9D:B9:0A:BC:6C:69:9F:EF:0C:EB:7E:3C:25:A2:65:11:1A Authority key identifier: 77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 Certificate issuer: /CN=A913BA27/serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft Manifest number: A1 Signing time: Sun 05 Apr 2026 06:44:14 +0000 Manifest this update: Sun 05 Apr 2026 06:44:13 +0000 Manifest next update: Sun 12 Apr 2026 06:44:13 +0000 Files and hashes: 1: d31UDhYfpnH7JFijP_5L8z1qcBU.crl (hash: pLciKLxCFuc7MsbcCLxpSPAEljZJYvM3ic1HfNkdWcQ=) 2: 71B7688645AB11F0949A471EC4F9AE02.roa (hash: ke0eM4iCkX12hZuJQbpYZP0Prlr3aNWgiqlFHxWSZPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913BA27, serialNumber=777D540E161FA671FB2458A33FFE4BF33D6A7015 Validity Not Before: Apr 5 06:44:13 2026 GMT Not After : Apr 12 06:44:13 2026 GMT Subject: CN=69d204be-d749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:eb:54:ed:9f:85:c8:42:47:8a:37:65:8b: 92:6a:22:5d:1e:85:9f:22:9b:e7:4c:ba:f0:f7:34: fa:1e:87:ec:af:f4:73:b7:c5:ad:29:7a:59:b9:63: 57:30:18:58:41:f5:4a:64:da:bb:23:e2:67:6d:9a: 5d:59:51:e9:f7:8d:1d:ae:81:a7:23:ef:de:cf:3f: 5c:a9:70:83:b5:2b:79:90:36:ce:82:d2:35:be:de: 11:3e:b2:ce:d6:a2:2a:17:f9:c1:9e:29:32:f6:05: bf:8c:63:d1:19:5c:0c:90:7f:76:8c:5c:25:ea:48: 33:ab:4d:be:04:4f:d1:6a:b7:8f:dd:d4:c9:39:e9: 1b:e1:0c:55:f2:4f:ff:a4:1e:75:6f:3c:2d:94:28: 55:e3:eb:d7:28:d9:76:e9:b5:16:10:c8:c4:35:79: b0:86:dd:ce:5b:28:89:3a:94:82:ff:b4:db:e4:d6: a2:81:28:e5:f6:c2:45:3b:b4:52:f7:95:c3:aa:d8: 4c:53:bc:10:4d:5d:5b:3a:2c:48:bf:bd:e5:f6:0c: 7f:bd:67:9d:e1:3b:f6:3b:19:88:24:38:50:8d:6b: 99:45:f9:f1:06:db:a0:e9:d8:e8:b1:06:ab:25:83: 41:48:e2:63:48:ac:3c:71:db:9f:80:9b:02:3a:c7: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:27:65:9D:B9:0A:BC:6C:69:9F:EF:0C:EB:7E:3C:25:A2:65:11:1A X509v3 Authority Key Identifier: keyid:77:7D:54:0E:16:1F:A6:71:FB:24:58:A3:3F:FE:4B:F3:3D:6A:70:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d31UDhYfpnH7JFijP_5L8z1qcBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BA27/EA4E669C458C11F0B2BEB64DC4F9AE02/d31UDhYfpnH7JFijP_5L8z1qcBU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a7:8c:3b:38:4c:98:76:e3:81:b4:05:d9:70:8d:cb:62:7e: 9c:17:eb:68:dd:4a:fb:22:da:15:db:e8:42:57:81:6e:8c:bb: af:8e:ad:bc:3e:32:ed:f5:52:c8:81:99:bb:57:18:a3:3c:7c: fe:09:e2:22:b5:c7:a6:22:54:6f:1a:d1:91:cc:57:1b:ae:a3: d6:cd:d3:28:dd:de:71:c7:23:c6:23:27:d9:50:d0:bd:16:0c: 71:1d:a1:32:22:55:b3:54:77:25:de:0f:77:c2:83:14:05:63: bb:1c:be:2b:2d:ff:f3:47:a8:f8:9c:40:e9:c7:45:42:1e:d2: 0a:49:21:8c:9f:c5:0b:d4:69:4a:e2:37:ac:5e:35:7e:9d:90: 92:26:be:8c:24:88:91:da:4f:b5:6d:d6:0a:1a:30:a1:6b:05: c7:ea:47:1a:00:fb:8f:5c:6e:a6:52:22:0d:43:3c:46:a4:a0: 68:56:75:18:2b:eb:a3:9b:ed:e5:ca:21:d5:a9:97:11:41:2a: 76:21:60:5b:ea:3c:12:80:b5:44:73:4e:a8:b6:41:eb:f5:c3: a5:7d:91:37:5e:ee:d1:80:e1:80:c9:76:3a:84:3c:0f:83:d7: 0b:1f:de:b5:8f:e2:e8:8e:c2:43:94:17:9b:b3:52:03:a4:d4: 09:72:29:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0JBMjcxMTAvBgNVBAUTKDc3N0Q1NDBFMTYxRkE2NzFGQjI0NThBMzNGRkU0QkYz M0Q2QTcwMTUwHhcNMjYwNDA1MDY0NDEzWhcNMjYwNDEyMDY0NDEzWjAYMRYwFAYD VQQDEw02OWQyMDRiZS1kNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw13rVO2fhchCR4o3ZYuSaiJdHoWfIpvnTLrw9zT6Hofsr/Rzt8WtKXpZuWNX MBhYQfVKZNq7I+JnbZpdWVHp940droGnI+/ezz9cqXCDtSt5kDbOgtI1vt4RPrLO 1qIqF/nBniky9gW/jGPRGVwMkH92jFwl6kgzq02+BE/RareP3dTJOekb4QxV8k// pB51bzwtlChV4+vXKNl26bUWEMjENXmwht3OWyiJOpSC/7Tb5NaigSjl9sJFO7RS 95XDqthMU7wQTV1bOixIv73l9gx/vWed4Tv2OxmIJDhQjWuZRfnxBtug6djosQar JYNBSOJjSKw8cdufgJsCOsctAQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPInZZ25 CrxsaZ/vDOt+PCWiZREaMB8GA1UdIwQYMBaAFHd9VA4WH6Zx+yRYoz/+S/M9anAV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkEyNy9FQTRFNjY5QzQ1 OEMxMUYwQjJCRUI2NERDNEY5QUUwMi9kMzFVRGhZZnBuSDdKRmlqUF81TDh6MXFj QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzMVVEaFlmcG5IN0pGaWpQXzVMOHoxcWNCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QkEyNy9FQTRFNjY5QzQ1OEMxMUYwQjJCRUI2NERDNEY5QUUwMi9kMzFVRGhZZnBu SDdKRmlqUF81TDh6MXFjQlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEqeMOzhMmHbjgbQF2XCNy2J+nBfraN1K+yLaFdvoQleBboy7r46tvD4y7fVS yIGZu1cYozx8/gniIrXHpiJUbxrRkcxXG66j1s3TKN3ecccjxiMn2VDQvRYMcR2h MiJVs1R3Jd4Pd8KDFAVjuxy+Ky3/80eo+JxA6cdFQh7SCkkhjJ/FC9RpSuI3rF41 fp2Qkia+jCSIkdpPtW3WChowoWsFx+pHGgD7j1xuplIiDUM8RqSgaFZ1GCvro5vt 5coh1amXEUEqdiFgW+o8EoC1RHNOqLZB6/XDpX2RN17u0YDhgMl2OoQ8D4PXCx/e tY/i6I7CQ5QXm7NSA6TUCXIpOg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:02 2026 by rpki-client