$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: wddMBCu0ykE1qDBFqiOUjhtMv7h/lsrp3oj312jDqBQ= Subject key identifier: 68:A3:7C:00:EC:F2:6F:29:5B:5C:18:E2:D4:4E:83:F0:BB:7C:D8:FE Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0B20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0B18 Signing time: Sat 04 Apr 2026 19:07:00 +0000 Manifest this update: Sat 04 Apr 2026 19:06:59 +0000 Manifest next update: Sat 11 Apr 2026 19:06:59 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: LwBX9dQM2UNZyuHMCItL9NfSEgkbyrJ36ci/1VvapHU=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2848 (0xb20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Apr 4 19:06:59 2026 GMT Not After : Apr 11 19:06:59 2026 GMT Subject: CN=69d16153-bc63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:07:e6:e9:bf:23:de:ee:6a:d7:c7:8e:a7:7d: a2:9b:7f:43:d2:66:50:81:8d:f0:19:f9:98:22:df: e1:c2:4b:23:5c:28:79:3e:75:f9:b0:29:7e:a2:66: 43:03:50:af:55:94:96:e0:43:05:1d:0f:26:88:98: b3:17:4b:5e:a5:ce:5f:e8:90:e3:41:3c:ae:69:75: ae:6a:60:ac:93:a3:53:5b:ad:ee:c1:b8:eb:d9:30: 26:45:64:ff:fb:b3:19:4c:18:f6:83:54:e8:26:b8: d6:00:7c:16:bf:11:97:cb:b3:66:69:c7:96:73:3f: 77:5f:29:55:12:13:ef:f9:4c:3d:65:d3:3e:9b:25: 18:72:58:dc:f2:a2:1b:6b:92:37:0e:97:02:3f:1d: 51:70:a2:6a:2f:ad:13:0b:47:ad:b7:cc:c3:15:0b: 45:81:e3:0a:05:44:f6:84:81:fa:f4:99:04:1e:d3: db:05:47:21:7c:c9:a3:ab:24:12:bd:83:06:81:fb: 49:b5:d2:4f:49:d3:a9:3c:9a:bf:ec:b7:76:4b:51: 09:7b:1c:a1:4b:6f:9e:90:20:95:9f:4b:72:53:c1: 76:8d:f9:f1:7d:f8:43:36:98:e1:2b:d1:fd:6f:e3: 5c:a3:8d:db:1c:02:21:f4:07:02:8a:a9:b2:f8:3c: ff:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:7C:00:EC:F2:6F:29:5B:5C:18:E2:D4:4E:83:F0:BB:7C:D8:FE X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:96:7c:db:90:93:b8:18:3d:29:c1:59:a5:19:67:eb:4f:cc: e6:5e:44:04:66:58:d6:56:d1:d4:17:d4:c7:fb:98:63:5d:df: 62:98:28:4e:a4:25:f8:4a:47:f7:dc:a8:44:51:9a:fa:d7:99: 5c:cd:0d:35:c3:1a:94:58:e6:d6:ba:37:66:9a:f3:59:42:65: ed:21:ec:10:b5:36:da:fb:05:21:83:61:0c:fc:ee:dd:a0:e1: e6:d0:fa:42:75:55:ec:75:67:9b:1d:1f:20:8a:e4:12:35:6d: 9b:46:76:d2:bd:aa:d0:64:ef:93:e7:c0:77:f3:c6:98:fa:ed: 62:cb:49:7f:f7:cf:b3:2e:3c:c9:5b:65:98:44:2d:61:fe:2c: f4:7e:2c:c0:a5:af:c9:96:63:74:e1:01:b7:56:a7:e4:a0:a3: 5e:69:62:09:4f:68:1f:06:22:ee:7a:dc:83:8f:b0:8b:ee:d5: 80:4c:7f:b5:b2:81:b0:8a:7f:c2:0b:dc:5c:ce:09:d0:6c:ce: cb:fd:bc:47:4c:c3:47:1c:f6:85:e6:97:2e:21:09:86:bf:9e: c3:dc:53:aa:b0:6e:94:96:85:96:e6:9a:18:01:fa:c9:d8:46: f9:56:10:de:7c:23:39:1f:35:2d:d2:f5:7c:33:2d:06:4f:ea: f2:96:6d:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCyAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjYwNDA0MTkwNjU5WhcNMjYwNDExMTkwNjU5WjAYMRYwFAYD VQQDEw02OWQxNjE1My1iYzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkwfm6b8j3u5q18eOp32im39D0mZQgY3wGfmYIt/hwksjXCh5PnX5sCl+omZD A1CvVZSW4EMFHQ8miJizF0tepc5f6JDjQTyuaXWuamCsk6NTW63uwbjr2TAmRWT/ +7MZTBj2g1ToJrjWAHwWvxGXy7NmaceWcz93XylVEhPv+Uw9ZdM+myUYcljc8qIb a5I3DpcCPx1RcKJqL60TC0ett8zDFQtFgeMKBUT2hIH69JkEHtPbBUchfMmjqyQS vYMGgftJtdJPSdOpPJq/7Ld2S1EJexyhS2+ekCCVn0tyU8F2jfnxffhDNpjhK9H9 b+Nco43bHAIh9AcCiqmy+Dz/tQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGijfADs 8m8pW1wY4tROg/C7fNj+MB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHpZ825CTuBg9KcFZpRln60/M5l5EBGZY1lbR1BfUx/uYY13fYpgoTqQl+EpH 99yoRFGa+teZXM0NNcMalFjm1ro3ZprzWUJl7SHsELU22vsFIYNhDPzu3aDh5tD6 QnVV7HVnmx0fIIrkEjVtm0Z20r2q0GTvk+fAd/PGmPrtYstJf/fPsy48yVtlmEQt Yf4s9H4swKWvyZZjdOEBt1an5KCjXmliCU9oHwYi7nrcg4+wi+7VgEx/tbKBsIp/ wgvcXM4J0GzOy/28R0zDRxz2heaXLiEJhr+ew9xTqrBulJaFluaaGAH6ydhG+VYQ 3nwjOR81LdL1fDMtBk/q8pZtvg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:58:04 2026 by rpki-client