$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: Lv9vWDoYDGCvNk+afv7qeZl3yWZ5OiBn6GrmsTmMhoA= Subject key identifier: 5B:FF:E1:91:73:3B:8F:3A:7C:3D:36:3D:2D:F7:BB:0D:5B:C0:87:97 Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 04FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 04EF Signing time: Sat 04 Apr 2026 23:34:33 +0000 Manifest this update: Sat 04 Apr 2026 23:34:33 +0000 Manifest next update: Sat 11 Apr 2026 23:34:33 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: nCZsgZxWgZXBbZNnSMxYLoCwsU9Ho7IryeAZA7eK9K8=) 2: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=) 3: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1279 (0x4ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Apr 4 23:34:33 2026 GMT Not After : Apr 11 23:34:33 2026 GMT Subject: CN=69d1a009-ff1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fe:14:13:b1:b4:f8:be:3b:14:22:4e:18:f8: 32:61:08:8e:70:77:15:ea:91:ce:25:ec:05:60:58: df:c0:44:a2:69:0e:22:d0:83:3b:41:0a:b4:0d:63: 9e:8d:17:a1:2f:c4:17:16:50:b0:fd:9c:86:29:0f: 2d:66:2c:b9:83:b8:d8:09:5b:da:dd:2d:72:d6:58: be:bd:c5:c0:c3:11:56:d0:85:fb:3f:99:b1:d5:15: dd:57:69:17:66:0a:84:ea:b8:b0:e6:cf:71:78:83: f9:ac:d6:57:f2:6d:6c:5e:a5:87:17:3f:3e:65:e0: db:98:dd:a3:c7:2c:19:d0:86:78:c0:10:0c:ac:ca: 33:56:94:57:c7:a2:41:0d:b7:f7:1e:65:cc:79:71: b5:fe:87:a9:a8:d4:d3:94:71:da:98:9f:33:ef:d1: d1:ca:11:21:ac:35:a7:a4:76:a4:84:3f:69:07:af: 11:7d:2f:b2:ec:ae:d8:4c:ed:eb:4c:c9:7f:e9:2a: 6b:a0:27:32:27:00:53:b4:3d:2b:3f:e3:7b:d0:0d: aa:5d:da:d3:32:62:39:32:1e:36:3b:54:13:8a:8c: d2:70:93:ad:50:ac:b5:e8:f2:de:29:1d:b6:fc:e2: 94:59:39:d5:8d:3f:48:65:f4:2f:d3:a0:ef:92:e9: 02:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FF:E1:91:73:3B:8F:3A:7C:3D:36:3D:2D:F7:BB:0D:5B:C0:87:97 X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:1e:ff:f3:88:48:ba:55:a6:76:e4:06:2e:e3:18:1d:20:0c: db:45:e8:15:16:5b:ee:f4:50:ab:20:10:c4:3b:31:42:df:ec: 49:96:2a:a6:81:d1:77:1f:cc:19:0a:ff:36:0a:55:3c:fa:e0: 2a:69:9a:6c:70:ef:b0:50:c6:c1:d4:00:da:c0:0e:b4:7f:e9: 6d:54:a2:88:ee:b0:33:63:65:94:c4:d0:c0:d0:c2:77:7b:94: 7d:63:ad:c1:6f:51:de:0c:63:63:ce:f3:4b:71:83:2e:d6:f0: 29:a2:4d:a8:c2:eb:19:0a:91:c1:4b:5c:6f:ad:c4:22:3d:fc: 36:d0:2e:b0:86:34:23:23:bd:03:42:40:87:71:e0:75:71:1a: 01:6c:d8:d2:d0:e6:7e:22:62:50:4f:e9:1a:69:21:7a:52:71: 8f:2e:87:f6:74:e4:bd:7f:74:cc:9d:7d:88:62:58:74:8a:29: 49:64:8b:10:81:2b:7d:85:e8:93:d5:45:7c:24:25:61:94:36: 30:8e:9f:f5:fe:3d:98:16:e7:25:b4:e8:75:48:80:44:12:c4: 72:55:e2:2d:35:c0:b3:9f:a5:2c:77:dd:eb:a1:fd:00:ba:e6: e6:8c:2d:d9:3f:03:e4:a3:59:51:10:c1:0a:fa:99:5f:6b:e6: 0a:81:15:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjYwNDA0MjMzNDMzWhcNMjYwNDExMjMzNDMzWjAYMRYwFAYD VQQDEw02OWQxYTAwOS1mZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg/4UE7G0+L47FCJOGPgyYQiOcHcV6pHOJewFYFjfwESiaQ4i0IM7QQq0DWOe jRehL8QXFlCw/ZyGKQ8tZiy5g7jYCVva3S1y1li+vcXAwxFW0IX7P5mx1RXdV2kX ZgqE6riw5s9xeIP5rNZX8m1sXqWHFz8+ZeDbmN2jxywZ0IZ4wBAMrMozVpRXx6JB Dbf3HmXMeXG1/oepqNTTlHHamJ8z79HRyhEhrDWnpHakhD9pB68RfS+y7K7YTO3r TMl/6SproCcyJwBTtD0rP+N70A2qXdrTMmI5Mh42O1QTiozScJOtUKy16PLeKR22 /OKUWTnVjT9IZfQv06DvkukCIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFv/4ZFz O486fD02PS33uw1bwIeXMB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABB7/84hIulWmduQGLuMYHSAM20XoFRZb7vRQqyAQxDsxQt/sSZYqpoHRdx/M GQr/NgpVPPrgKmmabHDvsFDGwdQA2sAOtH/pbVSiiO6wM2NllMTQwNDCd3uUfWOt wW9R3gxjY87zS3GDLtbwKaJNqMLrGQqRwUtcb63EIj38NtAusIY0IyO9A0JAh3Hg dXEaAWzY0tDmfiJiUE/pGmkhelJxjy6H9nTkvX90zJ19iGJYdIopSWSLEIErfYXo k9VFfCQlYZQ2MI6f9f49mBbnJbTodUiARBLEclXiLTXAs5+lLHfd66H9ALrm5owt 2T8D5KNZURDBCvqZX2vmCoEVzA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:38 2026 by rpki-client