$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: 6gb0jnJHve1mTC/mpxKIBkPZioQXCpNtTxA9MMvMw0k= Subject key identifier: 29:76:74:35:6F:3E:74:EC:C7:E8:48:FE:83:B9:4E:50:40:70:AA:35 Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0E49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0E3E Signing time: Sat 04 Apr 2026 17:39:55 +0000 Manifest this update: Sat 04 Apr 2026 17:39:54 +0000 Manifest next update: Sat 11 Apr 2026 17:39:54 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: cF8Y8QZ7+ABXx1Jvinw5vSOJaXYoUoNKZNMuroHWAh8=) 2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: aKgTE44Ui4Km2SlMzbMZshdm2FGBkzXAI+GmGPjCfyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3657 (0xe49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Apr 4 17:39:54 2026 GMT Not After : Apr 11 17:39:54 2026 GMT Subject: CN=69d14cea-b9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:13:5e:f3:d5:d9:54:16:a4:84:e9:50:27: 43:19:1f:c8:e5:ad:4f:9f:65:38:bb:e7:0d:b4:f8: 6d:54:52:91:13:ee:92:ed:4c:1b:80:89:4a:46:5e: 55:fb:4a:69:67:93:e4:03:af:20:16:06:86:48:b9: a5:ab:b3:2a:9e:58:ca:dd:ab:a6:ed:13:ff:ab:ea: 99:be:53:e1:b0:0e:02:3f:72:e1:ba:36:de:79:e4: 44:9b:5b:88:3a:85:65:8a:da:19:c1:52:b7:75:b3: 9d:ae:78:31:cc:87:f3:fd:82:ed:48:be:09:3c:49: 03:e3:eb:02:c5:bf:69:9e:f6:bd:0b:cb:13:11:3d: bd:06:5b:5b:80:da:77:02:8c:56:81:c1:6f:62:7a: d3:fe:f1:90:97:5e:de:46:9b:c2:ed:eb:49:9c:f1: 2f:97:b8:1f:da:ed:8b:63:a7:de:1f:15:55:37:70: c7:59:74:00:14:80:17:06:c6:fa:8c:87:a9:95:53: 87:94:ad:8a:59:d6:a7:9a:3a:20:1f:0d:d0:b9:0d: 37:aa:51:99:f8:28:60:ea:55:1a:4e:0b:9d:8d:bf: 09:ca:24:93:b6:89:48:52:f3:4c:a4:9c:08:67:6c: 2b:c8:ce:2f:de:87:51:2e:8b:68:59:7a:60:b4:97: 4d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:76:74:35:6F:3E:74:EC:C7:E8:48:FE:83:B9:4E:50:40:70:AA:35 X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d4:96:b8:bd:e0:a2:80:99:0e:c7:f9:f4:5f:e2:d3:62:bb: 8b:d0:7a:c0:e3:40:b5:2f:6e:bb:c7:5f:59:78:b3:ea:8d:85: bb:6e:a9:97:37:25:d6:f6:6b:de:1f:7d:21:5a:03:df:13:f2: a6:55:46:ec:58:f6:c8:10:0a:f4:36:99:74:c2:d1:26:7f:13: 95:e6:e3:72:41:f4:5f:61:83:17:dc:a1:17:b3:a4:66:04:39: 66:9f:ae:02:81:75:50:fb:1d:c3:cc:a5:49:1f:1a:4e:50:0f: ed:98:dc:6e:55:a3:a8:bf:00:8b:94:c4:73:37:19:d1:77:d6: 09:09:7e:12:7f:51:aa:f5:04:d6:1b:ed:22:16:04:18:19:f6: 54:b4:59:ee:6a:27:b0:04:bf:80:f9:2b:16:03:ae:30:a4:4e: c5:c6:2c:a8:77:d0:67:5c:2f:3a:b2:ad:9a:fb:ce:f5:cc:ec: 9c:f4:9a:e9:26:f0:9a:d6:a2:d1:e8:c7:54:d2:e2:d2:2f:97: f3:e8:b1:08:ba:1b:d1:a9:ea:cc:b5:4c:53:6d:db:1c:ac:df: e7:4c:ef:58:be:3a:77:e8:74:1b:ab:4b:71:fc:28:d3:85:56: cf:ef:af:49:fd:2c:df:31:6f:5d:d7:44:cc:70:fc:a7:48:94: d5:40:51:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjYwNDA0MTczOTU0WhcNMjYwNDExMTczOTU0WjAYMRYwFAYD VQQDEw02OWQxNGNlYS1iOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbITXvPV2VQWpITpUCdDGR/I5a1Pn2U4u+cNtPhtVFKRE+6S7UwbgIlKRl5V +0ppZ5PkA68gFgaGSLmlq7MqnljK3aum7RP/q+qZvlPhsA4CP3LhujbeeeREm1uI OoVlitoZwVK3dbOdrngxzIfz/YLtSL4JPEkD4+sCxb9pnva9C8sTET29BltbgNp3 AoxWgcFvYnrT/vGQl17eRpvC7etJnPEvl7gf2u2LY6feHxVVN3DHWXQAFIAXBsb6 jIeplVOHlK2KWdanmjogHw3QuQ03qlGZ+Chg6lUaTgudjb8JyiSTtolIUvNMpJwI Z2wryM4v3odRLotoWXpgtJdNDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCl2dDVv PnTsx+hI/oO5TlBAcKo1MB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAadSWuL3gooCZDsf59F/i02K7i9B6wONAtS9uu8dfWXiz6o2Fu26plzcl1vZr 3h99IVoD3xPyplVG7Fj2yBAK9DaZdMLRJn8TlebjckH0X2GDF9yhF7OkZgQ5Zp+u AoF1UPsdw8ylSR8aTlAP7ZjcblWjqL8Ai5TEczcZ0XfWCQl+En9RqvUE1hvtIhYE GBn2VLRZ7monsAS/gPkrFgOuMKROxcYsqHfQZ1wvOrKtmvvO9czsnPSa6Sbwmtai 0ejHVNLi0i+X8+ixCLob0anqzLVMU23bHKzf50zvWL46d+h0G6tLcfwo04VWz++v Sf0s3zFvXddEzHD8p0iU1UBRKg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:04 2026 by rpki-client