$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: je6Ipz3hrzTX9y686r8UW8Lyrc40wlX3ULjNpGBm5TU= Subject key identifier: 73:13:C7:A5:02:EB:D5:A2:0C:DA:D6:3B:F0:A0:70:60:B1:50:3E:E4 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 2718 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 25E2 Signing time: Sat 04 Apr 2026 15:41:46 +0000 Manifest this update: Sat 04 Apr 2026 15:41:46 +0000 Manifest next update: Sat 11 Apr 2026 15:41:46 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: O76iKXdoChTwFyNqcuArv6F7gu9LVjTU7Z9FNMb4/eE=) 2: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 1rZWgbUmjxQN06CeOuGX07QdWjTq8x0pS2P/AZOZPKA=) 3: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: 8YUEuPh3TxbLBkrRsi2o2BfYfS5T4DERKvY1wpAF8Lg=) 4: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: EsFL7ZLG4qzCWyTx81VJ4FIJ+vovxCZrLT1BVweKgqc=) 5: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: uifIApbHfV42HS+k8rHXkfR4eC5owLbdOciccVTBlF8=) 6: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: Spot7p9zSNAAsEMFmZpLPx1zmvfxVQZv9xfzDFvYL6o=) 7: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: AHfY7AUJpWe7BNWUNT/uLmoUme06v0hAUNHbmnBADSc=) 8: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: Dg/YVoaAbQDeMOZ225L2eC6YXpKJAjiybrKz9YFG+0w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10008 (0x2718) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Apr 4 15:41:46 2026 GMT Not After : Apr 11 15:41:46 2026 GMT Subject: CN=69d1313a-27aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:4d:17:60:90:fe:87:80:23:0a:81:21:5e: 4b:40:83:e9:37:96:bb:34:84:ce:7a:ce:41:71:d7: f8:0d:42:69:d6:de:d2:5a:97:c0:38:c2:f1:b1:17: f0:e3:d2:51:ab:36:88:78:e2:40:d3:e8:51:c5:4e: 36:f7:be:9a:3e:bc:0b:a4:aa:fa:75:17:46:bb:8b: b0:68:1e:e2:df:39:7e:02:c3:50:6f:bf:3f:3c:ff: e4:ec:f0:67:48:75:4c:1f:4a:1a:19:17:39:f1:19: 6f:84:80:cb:b1:12:a2:16:1b:bd:a5:79:b6:3c:99: b8:7f:c4:86:e1:af:b1:70:85:2b:af:89:53:3f:43: ca:68:7d:7d:10:10:33:28:e7:13:d5:34:4d:ca:ac: 50:a9:f7:99:3a:2f:ed:4e:4a:0f:fa:98:93:ea:b0: f8:5a:8f:12:a3:3c:fe:a8:46:a0:c3:84:68:2f:d4: bd:53:eb:b1:a3:2f:c3:1d:db:0a:10:e5:c1:5a:ac: b4:bb:88:5f:2a:ba:6d:1b:7a:9f:34:04:9f:2f:73: 2e:84:c1:c8:0c:f1:b2:52:92:c3:61:43:6b:b8:bd: df:07:bc:77:c3:41:75:1b:43:23:a7:8d:6d:9b:fd: 94:58:ad:2e:b6:d4:7a:4f:de:56:c1:87:d6:fb:1f: 0c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:13:C7:A5:02:EB:D5:A2:0C:DA:D6:3B:F0:A0:70:60:B1:50:3E:E4 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c5:39:0d:32:db:e3:5b:4c:d9:03:96:e8:e2:9c:55:c6:c8: 29:04:e2:3c:61:aa:d4:55:fd:ce:2f:ac:2f:f8:e4:ae:74:e3: de:49:23:e3:0f:e8:a8:23:5e:4e:92:3e:ce:43:7a:ed:2c:de: a1:a3:5c:8e:d2:4d:d3:7f:ac:54:71:f8:c1:73:96:01:63:3a: 86:49:83:41:30:2e:c1:b8:40:09:c5:5d:f2:38:4b:13:a7:ee: 01:6e:8c:9b:fd:d3:b1:7a:d1:58:6a:cb:2f:14:39:73:27:a5: ed:b1:4a:6a:fd:29:97:c3:de:f8:15:72:e6:42:43:40:f8:30: c1:ef:9a:22:9c:3d:91:3f:fe:9a:b8:7e:d3:68:f1:66:00:a4: 5f:b2:97:a8:e0:54:90:e5:ba:ee:9b:52:eb:1b:f6:ab:99:cc: 66:b1:2d:1b:84:87:1a:1b:5b:a5:13:6c:d0:e7:a0:28:64:dd: 06:23:f5:b5:16:87:92:81:08:1e:8e:6a:83:9f:1a:8b:72:dc: f8:4f:1b:d4:7c:b6:90:41:49:72:5b:45:93:7b:9e:7f:6a:c5: 74:aa:df:f5:2a:c1:f4:a0:a5:e2:5d:90:37:65:2f:17:bd:9a: 6f:f4:12:71:a7:f3:e8:05:5d:80:bf:de:1e:70:d5:ca:69:b2: 19:63:50:f2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNDA0MTU0MTQ2WhcNMjYwNDExMTU0MTQ2WjAYMRYwFAYD VQQDEw02OWQxMzEzYS0yN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxoZNF2CQ/oeAIwqBIV5LQIPpN5a7NITOes5Bcdf4DUJp1t7SWpfAOMLxsRfw 49JRqzaIeOJA0+hRxU42976aPrwLpKr6dRdGu4uwaB7i3zl+AsNQb78/PP/k7PBn SHVMH0oaGRc58RlvhIDLsRKiFhu9pXm2PJm4f8SG4a+xcIUrr4lTP0PKaH19EBAz KOcT1TRNyqxQqfeZOi/tTkoP+piT6rD4Wo8Sozz+qEagw4RoL9S9U+uxoy/DHdsK EOXBWqy0u4hfKrptG3qfNASfL3MuhMHIDPGyUpLDYUNruL3fB7x3w0F1G0Mjp41t m/2UWK0uttR6T95WwYfW+x8MTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHMTx6UC 69WiDNrWO/CgcGCxUD7kMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAncU5DTLb41tM2QOW6OKcVcbIKQTiPGGq1FX9zi+sL/jkrnTj3kkj4w/oqCNe TpI+zkN67SzeoaNcjtJN03+sVHH4wXOWAWM6hkmDQTAuwbhACcVd8jhLE6fuAW6M m/3TsXrRWGrLLxQ5cyel7bFKav0pl8Pe+BVy5kJDQPgwwe+aIpw9kT/+mrh+02jx ZgCkX7KXqOBUkOW67ptS6xv2q5nMZrEtG4SHGhtbpRNs0OegKGTdBiP1tRaHkoEI Ho5qg58ai3Lc+E8b1Hy2kEFJcltFk3uef2rFdKrf9SrB9KCl4l2QN2UvF72ab/QS cafz6AVdgL/eHnDVymmyGWNQ8g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:05:31 2026 by rpki-client