$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: YXGizp0vq192dr9yrPWskK8rVDP+FcDwGhjtY3r04xw= Subject key identifier: F5:55:E6:08:35:69:51:75:F5:4A:6C:DB:E0:00:6A:85:11:75:99:A1 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 0245 Signing time: Sun 05 Apr 2026 02:08:15 +0000 Manifest this update: Sun 05 Apr 2026 02:08:15 +0000 Manifest next update: Sun 12 Apr 2026 02:08:15 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: dIE+jgGwtC6cmq063t5Wg+6K42ZkD/bb8de32Eqn6Kc=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Apr 5 02:08:15 2026 GMT Not After : Apr 12 02:08:15 2026 GMT Subject: CN=69d1c40f-e748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:04:b0:ea:2b:0b:8c:d6:8d:f3:1e:ab:49:c8: d2:cf:d2:b5:e8:6a:59:74:4d:13:82:c5:34:ac:25: 39:3e:53:0a:91:43:99:02:56:c6:9b:90:b5:37:e1: 8a:9e:84:cb:c8:7d:bb:2e:00:c7:e5:06:00:47:98: 85:69:e0:f2:8d:ae:26:02:23:46:23:95:8c:66:b2: b4:05:9a:17:c4:8a:e8:53:49:b0:dd:d1:70:1d:ea: bc:e9:86:68:c0:ba:e5:fe:3a:70:ec:61:00:24:c3: 79:8b:67:5a:4b:89:a5:12:28:4a:2f:5f:49:6a:7a: 8f:de:c7:ad:9c:db:91:bb:22:ae:5a:d0:0b:4b:44: df:ef:b5:0a:06:14:35:b9:a6:4d:56:40:2b:68:a4: 6b:78:9a:0a:98:b5:33:45:ec:53:6a:bf:7d:0b:37: 03:54:6a:79:16:2a:89:a4:dc:91:c8:79:a0:e4:2f: 85:a3:51:d7:20:42:33:7a:b7:c4:9e:83:0f:8a:4b: d5:b6:ed:12:2b:a2:ea:6e:d2:31:f7:e3:9d:f9:ab: 22:49:34:7e:66:32:3b:ea:ac:f2:95:f1:e5:73:67: 9f:b9:76:1b:f0:ff:26:34:83:b0:31:b1:a8:e7:b1: d9:c3:7b:e9:ac:d5:a8:c4:f0:f1:29:f9:62:18:6f: 21:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:55:E6:08:35:69:51:75:F5:4A:6C:DB:E0:00:6A:85:11:75:99:A1 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:31:55:b3:6d:96:19:ac:f8:f6:f5:3a:e3:df:4c:ab:e9:e6: 94:4f:cb:89:70:25:4e:b0:3f:ec:3a:d0:f6:f0:6d:93:02:5a: ee:c9:d5:ce:69:40:8c:db:6a:e6:47:10:65:ce:de:c7:46:62: 6c:f9:84:5c:bd:62:62:ca:4d:4f:5d:f9:8c:f6:7b:dc:a7:f6: c0:50:9f:33:ba:43:27:36:05:63:0a:11:a5:5a:f9:2a:94:0b: 68:af:35:df:73:e8:8f:29:1d:c1:85:e4:f8:4f:8f:80:a2:23: 77:03:44:e4:b2:bc:a0:b4:6c:57:d2:42:53:23:e6:bf:da:27: 32:13:16:78:cd:19:54:27:02:59:1d:05:8c:9b:9c:c2:2d:3a: 7f:f6:26:e7:4d:63:9e:a7:86:81:46:87:e8:81:8d:bb:56:8a: 05:7f:05:ed:a8:d0:88:3c:2d:33:72:93:49:f9:cf:a0:b9:a8: 93:23:00:2a:22:0d:35:11:e6:b3:53:5f:52:d6:36:97:02:3c: d2:d3:e9:3d:e6:5e:c5:0f:ac:ab:0f:48:86:80:b0:b7:48:7a: 76:23:ec:8c:9e:16:21:d1:75:74:cc:1e:ea:04:64:36:9e:bb: ba:2a:66:97:b7:59:03:ad:f9:77:2a:5a:90:a1:23:0c:64:50: 7e:a2:41:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjYwNDA1MDIwODE1WhcNMjYwNDEyMDIwODE1WjAYMRYwFAYD VQQDEw02OWQxYzQwZi1lNzQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswSw6isLjNaN8x6rScjSz9K16GpZdE0TgsU0rCU5PlMKkUOZAlbGm5C1N+GK noTLyH27LgDH5QYAR5iFaeDyja4mAiNGI5WMZrK0BZoXxIroU0mw3dFwHeq86YZo wLrl/jpw7GEAJMN5i2daS4mlEihKL19JanqP3setnNuRuyKuWtALS0Tf77UKBhQ1 uaZNVkAraKRreJoKmLUzRexTar99CzcDVGp5FiqJpNyRyHmg5C+Fo1HXIEIzerfE noMPikvVtu0SK6LqbtIx9+Od+asiSTR+ZjI76qzylfHlc2efuXYb8P8mNIOwMbGo 57HZw3vprNWoxPDxKfliGG8hLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPVV5gg1 aVF19Ups2+AAaoURdZmhMB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtjFVs22WGaz49vU6499Mq+nmlE/LiXAlTrA/7DrQ9vBtkwJa7snVzmlAjNtq 5kcQZc7ex0ZibPmEXL1iYspNT135jPZ73Kf2wFCfM7pDJzYFYwoRpVr5KpQLaK81 33PojykdwYXk+E+PgKIjdwNE5LK8oLRsV9JCUyPmv9onMhMWeM0ZVCcCWR0FjJuc wi06f/Ym501jnqeGgUaH6IGNu1aKBX8F7ajQiDwtM3KTSfnPoLmokyMAKiINNRHm s1NfUtY2lwI80tPpPeZexQ+sqw9IhoCwt0h6diPsjJ4WIdF1dMwe6gRkNp67uipm l7dZA635dypakKEjDGRQfqJBLA== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:24 2026 by rpki-client