$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: Fz8tgrHHHOnQGo3bLK6gWRovP+S+xoyzXY6jdYWYpzI= Subject key identifier: B5:88:A7:7E:11:63:77:06:D8:47:71:CA:16:A7:A9:71:E6:4E:E8:3F Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 014B Signing time: Sun 05 Apr 2026 04:35:21 +0000 Manifest this update: Sun 05 Apr 2026 04:35:20 +0000 Manifest next update: Sun 12 Apr 2026 04:35:20 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: sbUQHDSpIMa3fX4AL0OobywVT0E9W4c0WUpD90fKah0=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: 6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 04:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Apr 5 04:35:20 2026 GMT Not After : Apr 12 04:35:20 2026 GMT Subject: CN=69d1e688-6ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:8a:bf:b9:0d:8d:b3:2b:d2:83:83:01:a3: e5:5d:a8:c5:48:4c:28:25:65:fc:51:ec:36:37:d6: 65:0b:16:5d:07:b1:63:bf:a1:8f:78:07:ed:22:e5: 5f:d4:90:c5:64:36:f1:bd:27:a1:61:d9:01:f0:66: ba:ec:82:d2:b9:19:97:fa:75:d4:d4:3e:82:f5:6f: 43:d2:46:71:e5:08:b2:2e:3e:f0:3b:b2:6a:a4:ab: 8c:5d:5b:08:f6:6c:9d:01:e0:fa:93:2b:a5:48:66: e5:8b:58:1b:d6:f8:fd:83:6d:fc:e7:51:c5:a5:d1: 46:5e:78:77:15:ec:db:70:52:30:fd:69:8b:e9:22: 34:c1:53:3d:b0:4a:00:f3:93:f9:2c:d1:83:2f:1e: 7f:eb:67:51:98:ef:ba:df:a9:3b:4b:96:f7:b4:28: 9d:21:06:01:e7:ca:e6:8e:67:d7:8f:71:33:85:f2: 36:84:c3:c2:dc:22:69:b0:bf:14:61:4c:2f:8b:08: e8:16:e8:89:6e:06:e4:0b:b5:ee:fd:f8:c5:f0:6f: 6d:ec:15:91:ff:2c:19:9e:94:9f:69:39:ba:59:d1: dc:de:9b:73:35:1f:1f:53:79:bc:96:59:c8:6d:d4: 89:4f:88:5e:3c:0f:b2:f7:dc:f7:40:01:81:35:dd: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:A7:7E:11:63:77:06:D8:47:71:CA:16:A7:A9:71:E6:4E:E8:3F X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:fc:e0:96:83:5c:95:45:42:42:b1:86:48:2d:d3:fd:92:5f: ca:86:8e:86:0f:08:a1:f6:00:18:62:f4:ab:ba:c1:5e:41:66: 87:64:de:37:96:a9:ae:5e:81:1b:db:87:a7:d8:c4:6e:e5:9f: 4e:12:e3:0b:76:ed:3d:84:6b:fb:e5:e0:68:e3:86:59:85:81: 28:df:98:14:89:bb:ae:2f:8d:7b:39:c5:89:d5:f3:a6:67:c2: ec:dd:64:0d:38:ef:88:b5:00:ef:a9:00:e6:38:9f:49:19:67: 1b:1a:ec:b0:99:a4:94:8e:5a:c5:ca:d8:67:b4:a0:b3:8b:8e: e0:79:f1:9b:9c:9d:61:92:f3:d4:96:a3:79:d9:38:af:f3:41: ba:76:a5:b3:9a:e4:0f:e0:0d:8f:a5:1d:86:da:7b:ad:21:20: 0b:c2:03:71:ee:9c:ab:69:d2:78:1d:bc:5d:9c:5f:2e:ad:92: 00:de:04:36:9c:51:85:94:20:2d:72:cb:b1:c7:ae:c7:74:fd: ec:58:b7:8c:12:be:c4:56:a2:68:3d:f4:ae:94:b3:2a:d3:b5: 9b:8d:35:ea:ef:0c:f0:ff:83:c9:fd:38:f5:4d:f0:ca:52:6f: 80:1a:b1:eb:05:8f:a9:93:92:af:5b:aa:b9:52:87:dc:9c:42: 6a:76:2a:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjYwNDA1MDQzNTIwWhcNMjYwNDEyMDQzNTIwWjAYMRYwFAYD VQQDEw02OWQxZTY4OC02ZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyb2Kv7kNjbMr0oODAaPlXajFSEwoJWX8Uew2N9ZlCxZdB7Fjv6GPeAftIuVf 1JDFZDbxvSehYdkB8Ga67ILSuRmX+nXU1D6C9W9D0kZx5QiyLj7wO7JqpKuMXVsI 9mydAeD6kyulSGbli1gb1vj9g23851HFpdFGXnh3FezbcFIw/WmL6SI0wVM9sEoA 85P5LNGDLx5/62dRmO+636k7S5b3tCidIQYB58rmjmfXj3EzhfI2hMPC3CJpsL8U YUwviwjoFuiJbgbkC7Xu/fjF8G9t7BWR/ywZnpSfaTm6WdHc3ptzNR8fU3m8llnI bdSJT4hePA+y99z3QAGBNd1HCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLWIp34R Y3cG2EdxyhanqXHmTug/MB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2/zgloNclUVCQrGGSC3T/ZJfyoaOhg8IofYAGGL0q7rBXkFmh2TeN5aprl6B G9uHp9jEbuWfThLjC3btPYRr++XgaOOGWYWBKN+YFIm7ri+NeznFidXzpmfC7N1k DTjviLUA76kA5jifSRlnGxrssJmklI5axcrYZ7Sgs4uO4Hnxm5ydYZLz1Jajedk4 r/NBunals5rkD+ANj6Udhtp7rSEgC8IDce6cq2nSeB28XZxfLq2SAN4ENpxRhZQg LXLLsceux3T97Fi3jBK+xFaiaD30rpSzKtO1m4016u8M8P+Dyf049U3wylJvgBqx 6wWPqZOSr1uquVKH3JxCanYqgQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:35:31 2026 by rpki-client