$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft File: 1O0zil4gh9gu9ML2RZm0ERJy5eA.mft (raw, json) Hash identifier: LA6mWFl2GZs8AnEwXYtl0xqCHeavrZVxEWb0Oq+pm5U= Subject key identifier: AC:3E:82:00:32:54:E2:0A:57:36:29:CF:40:F0:82:9A:04:B4:62:4C Authority key identifier: D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 Certificate issuer: /CN=A914ECA4/serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Certificate serial: 07D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft Manifest number: 07C4 Signing time: Sun 26 Apr 2026 21:19:15 +0000 Manifest this update: Sun 26 Apr 2026 21:19:15 +0000 Manifest next update: Sun 03 May 2026 21:19:15 +0000 Files and hashes: 1: 1O0zil4gh9gu9ML2RZm0ERJy5eA.crl (hash: BGcmS4/ueJEmLeSR7b0t/n/f4hZ8IBt941epxBWiF6c=) 2: FC07CE5C3A7C11EBB38FF025C4F9AE02.roa (hash: yYH3PcU0cdRRsZ0s/WXAKj+o8DaLhXORjZzgZMVE1n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 21:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2000 (0x7d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914ECA4, serialNumber=D4ED338A5E2087D82EF4C2F64599B4111272E5E0 Validity Not Before: Apr 26 21:19:15 2026 GMT Not After : May 3 21:19:15 2026 GMT Subject: CN=69ee8153-0c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6a:89:f3:3a:6f:ef:99:0f:36:3f:49:93:3c: fd:95:70:a0:de:6f:d9:0e:63:aa:f6:2b:1c:bd:bf: 22:4f:02:28:82:1d:67:c7:a0:d9:a9:4d:06:10:50: 14:c8:69:0e:ae:43:b2:0c:d1:be:5a:c8:a5:04:7e: 7b:89:92:bd:34:b9:84:74:e7:9b:a8:28:a2:af:9d: 46:86:42:51:f7:eb:74:c1:90:1c:e0:4b:26:fd:eb: 51:8f:1c:cf:24:f4:c7:4e:29:d7:2a:c3:a1:d3:93: 9b:9a:b7:52:d4:49:e5:9c:34:3b:f0:82:5c:0a:18: 9f:d0:93:32:85:b5:ef:7f:9c:26:af:36:37:f5:d6: 0c:13:c1:5b:3c:c9:cd:e6:44:dd:86:c4:b7:2e:92: 1f:6b:1e:e5:c5:b4:3c:e0:7a:c7:36:db:f6:e6:1d: 27:79:f4:2b:49:b4:32:30:20:08:f1:41:a1:7d:1d: 8d:10:0f:8e:61:1c:a0:45:fb:95:54:29:a6:e1:63: 9d:1f:d6:3b:31:b5:89:50:9f:a7:ec:d1:4d:b3:47: 18:5e:86:e4:83:76:bc:3c:2b:dc:a8:fe:1e:d6:1a: 67:fb:ff:6f:44:be:48:5e:f1:d7:7e:5e:6c:c5:ad: 11:08:85:ae:fc:0e:c3:55:8a:a0:0c:dc:79:5d:3f: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3E:82:00:32:54:E2:0A:57:36:29:CF:40:F0:82:9A:04:B4:62:4C X509v3 Authority Key Identifier: keyid:D4:ED:33:8A:5E:20:87:D8:2E:F4:C2:F6:45:99:B4:11:12:72:E5:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1O0zil4gh9gu9ML2RZm0ERJy5eA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECA4/7AE9FED63A7B11EBB7869C24C4F9AE02/1O0zil4gh9gu9ML2RZm0ERJy5eA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:b2:21:41:be:27:18:34:1e:a0:eb:f9:6f:fc:d1:a5:17:8b: 9f:8a:e6:3b:10:1a:04:27:dc:53:ef:8b:b5:67:2a:0a:fd:7e: b3:8c:7f:d4:0e:c6:da:a3:a4:cc:92:06:c3:65:71:f4:d0:e3: 53:9f:15:47:d7:a4:89:48:e1:b2:1f:78:bc:e8:82:24:69:62: 62:4e:eb:90:46:78:4a:92:f6:17:01:c2:3c:21:ee:4b:0e:ce: a1:5a:f1:62:b2:91:76:0c:ad:77:13:91:23:84:73:f3:de:c0: b7:33:29:d1:65:4f:7d:87:64:5b:9e:9a:a8:a3:a5:cd:52:2c: e7:88:ac:1e:ed:13:ec:3f:06:e8:4a:08:e0:dc:06:b4:66:c9: 2e:23:9b:5e:66:36:ee:c9:bf:c8:dc:a3:ce:7a:56:dd:9c:97: c2:d1:28:ee:0d:b4:9e:02:db:b6:86:2b:27:e9:98:c4:cb:06: b5:0b:df:83:4b:ba:9c:57:d0:18:3f:25:d9:df:03:34:c1:e3: d5:d5:2e:82:6c:a8:c0:e7:10:7c:c3:0b:09:76:47:f7:98:8e: f7:40:2f:7f:b0:37:ca:7e:89:d9:6c:4d:f6:95:21:f0:53:a7: f0:1c:e7:80:43:40:ed:c4:4b:4a:36:b9:0e:3b:45:fb:79:77: a4:7b:5e:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVDQTQxMTAvBgNVBAUTKEQ0RUQzMzhBNUUyMDg3RDgyRUY0QzJGNjQ1OTlCNDEx MTI3MkU1RTAwHhcNMjYwNDI2MjExOTE1WhcNMjYwNTAzMjExOTE1WjAYMRYwFAYD VQQDEw02OWVlODE1My0wYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmqJ8zpv75kPNj9Jkzz9lXCg3m/ZDmOq9iscvb8iTwIogh1nx6DZqU0GEFAU yGkOrkOyDNG+WsilBH57iZK9NLmEdOebqCiir51GhkJR9+t0wZAc4Esm/etRjxzP JPTHTinXKsOh05ObmrdS1EnlnDQ78IJcChif0JMyhbXvf5wmrzY39dYME8FbPMnN 5kTdhsS3LpIfax7lxbQ84HrHNtv25h0nefQrSbQyMCAI8UGhfR2NEA+OYRygRfuV VCmm4WOdH9Y7MbWJUJ+n7NFNs0cYXobkg3a8PCvcqP4e1hpn+/9vRL5IXvHXfl5s xa0RCIWu/A7DVYqgDNx5XT91jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKw+ggAy VOIKVzYpz0DwgpoEtGJMMB8GA1UdIwQYMBaAFNTtM4peIIfYLvTC9kWZtBEScuXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUNBNC83QUU5RkVENjNB N0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5Z3U5TUwyUlptMEVSSnk1 ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFPMHppbDRnaDlndTlNTDJSWm0wRVJKeTVlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUNBNC83QUU5RkVENjNBN0IxMUVCQjc4NjlDMjRDNEY5QUUwMi8xTzB6aWw0Z2g5 Z3U5TUwyUlptMEVSSnk1ZUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU7IhQb4nGDQeoOv5b/zRpReLn4rmOxAaBCfcU++LtWcqCv1+s4x/1A7G2qOk zJIGw2Vx9NDjU58VR9ekiUjhsh94vOiCJGliYk7rkEZ4SpL2FwHCPCHuSw7OoVrx YrKRdgytdxORI4Rz897AtzMp0WVPfYdkW56aqKOlzVIs54isHu0T7D8G6EoI4NwG tGbJLiObXmY27sm/yNyjznpW3ZyXwtEo7g20ngLbtoYrJ+mYxMsGtQvfg0u6nFfQ GD8l2d8DNMHj1dUugmyowOcQfMMLCXZH95iO90Avf7A3yn6J2WxN9pUh8FOn8Bzn gENA7cRLSja5DjtF+3l3pHteMA== -----END CERTIFICATE-----Generated at Mon Apr 27 20:13:29 2026 by rpki-client