$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft File: cLDwRtLzp0OW6Cx56OPazyYLOe4.mft (raw, json) Hash identifier: rYqb9H38whJvzLc7o0E7K0cuRk0koewW7C9HMbnm44c= Subject key identifier: 4F:FE:C0:F6:1F:72:DA:CB:60:35:EC:12:65:50:33:40:3E:00:49:0B Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE Certificate issuer: /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Certificate serial: 2547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft Manifest number: 24FD Signing time: Sat 04 Apr 2026 15:42:29 +0000 Manifest this update: Sat 04 Apr 2026 15:42:28 +0000 Manifest next update: Sat 11 Apr 2026 15:42:28 +0000 Files and hashes: 1: cLDwRtLzp0OW6Cx56OPazyYLOe4.crl (hash: VZEuojjFGybfN+QWPpryJ+otmzgOxtaj+N5/MlbgB8o=) 2: E080F3508DFC11E7A7F08785C4F9AE02.roa (hash: N/cJUWhUEKkKWK0CKRJr7DF4dmuct4+FW2hs6wmCMag=) 3: 5C9B073691CD11E7AD932563C4F9AE02.roa (hash: ywt3dHYNiuHbaJVB62YniE7qoiCCSqHfA23fnnqywh8=) 4: B2ED9AEE913311E79B98C45BC4F9AE02.roa (hash: N9yj3pAAVs5m7SimFwaSce/DJ3a2aOwWL6WwhlLDDfs=) 5: 027532E6385F11EAA879692AC4F9AE02.roa (hash: zmQ9A/lcBUnjJnBlCqaFgeAg9dsA076fd2DTYjhD0KY=) 6: 1A8324E28DF311E7B616ED66C4F9AE02.roa (hash: xPiIQYGhCGnM669LTO7uPzCNucP7Qj7zT3MtzGxRzjA=) 7: 83684F548DF411E7A230506DC4F9AE02.roa (hash: MUxckfSz9Vm7iQtZJ6qwGlxpqt//E4KlehICs43rvhI=) 8: 19C92BC88DF311E7B616ED66C4F9AE02.roa (hash: +IkwJLutymOe9v3tylysd9fl5AOsxnKrdRtvPHuXuAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9543 (0x2547) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE Validity Not Before: Apr 4 15:42:28 2026 GMT Not After : Apr 11 15:42:28 2026 GMT Subject: CN=69d13165-223b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:e9:5c:8a:eb:df:53:2f:b9:8e:11:79:cd: 3a:ea:bd:e4:4e:b7:26:96:57:e0:a0:2c:ed:28:ab: 2e:31:6b:83:01:fd:b5:d6:f0:dd:ff:3b:16:3b:83: 5c:36:81:88:ee:36:2a:81:5f:f9:80:13:6f:1d:fe: 87:24:d8:10:ea:3b:39:d5:b8:c1:3c:c0:01:12:8a: 3b:dd:3b:fe:b4:e6:6b:1b:12:cd:bf:99:39:c8:93: df:e8:b2:40:3e:05:41:fb:c8:36:36:58:53:97:66: 3c:77:00:46:9f:1f:a0:3e:05:d8:ca:7e:bb:6b:2e: 14:b9:02:84:d1:fd:6e:6b:74:98:e8:ad:6a:6a:ed: e7:e7:9f:88:fd:06:76:88:a4:93:62:a7:f8:78:30: c8:1d:a7:3f:d3:d6:70:0d:cd:2a:5c:9a:2d:3d:3f: 48:3a:7f:34:11:48:e1:98:15:73:91:86:93:8f:06: f5:4a:0b:7b:9f:45:ff:36:c0:56:26:92:80:53:d9: d6:65:27:41:73:5c:0c:c4:e8:e5:1f:d2:29:1a:e3: 8c:28:b4:d5:7b:7d:f7:49:eb:cf:ce:a7:9e:d3:e9: 1d:49:ec:d6:b7:98:07:3d:05:97:69:1f:b0:8e:28: 01:a2:55:36:56:6a:91:d2:87:3d:d4:7d:ed:33:6f: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FE:C0:F6:1F:72:DA:CB:60:35:EC:12:65:50:33:40:3E:00:49:0B X509v3 Authority Key Identifier: keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:2f:5e:85:1e:9d:51:66:2d:c9:cc:29:13:74:36:04:c7:83: 2c:4c:40:4f:7c:1b:bb:cd:4c:e4:c5:2b:e2:98:11:fa:97:c6: c3:db:18:92:fb:0b:71:82:34:72:79:66:da:61:59:8e:23:40: 4f:6f:9b:a9:a2:e2:fe:77:ad:5f:8e:88:d8:0f:69:81:c0:2d: 14:c6:aa:59:3e:ce:3a:86:15:f0:9b:10:82:6f:a5:84:1f:05: e5:8a:5c:17:0f:0f:b5:c9:aa:d8:e1:5a:da:d6:22:11:26:b4: 9c:d7:be:70:8e:e3:4d:9d:67:9e:5c:34:ab:a5:42:4e:12:14: 4e:86:ab:18:b2:b5:f7:bb:8f:57:3f:54:47:34:a7:4e:25:f9: d2:04:2a:8d:60:6d:1e:28:e4:8b:95:b7:7b:7a:7f:ba:99:ba: 6d:71:b9:55:e3:0c:eb:84:8f:6a:a6:01:2f:cc:d4:39:71:da: 50:38:f5:6b:77:43:ff:fa:03:4a:2d:b9:2e:d2:0f:a9:91:a1: 62:42:85:26:86:03:13:40:2b:4c:5a:ad:9a:fd:51:a9:9c:f9: a9:ce:6d:f2:96:2a:4b:a0:7c:29:ac:3b:5f:14:70:42:ec:e2: c5:02:2b:c0:14:0c:f9:84:8a:e9:6d:ff:a2:e7:1f:25:d0:98: 89:b3:92:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKDcwQjBGMDQ2RDJGM0E3NDM5NkU4MkM3OUU4RTNEQUNG MjYwQjM5RUUwHhcNMjYwNDA0MTU0MjI4WhcNMjYwNDExMTU0MjI4WjAYMRYwFAYD VQQDEw02OWQxMzE2NS0yMjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu03pXIrr31MvuY4Rec066r3kTrcmllfgoCztKKsuMWuDAf211vDd/zsWO4Nc NoGI7jYqgV/5gBNvHf6HJNgQ6js51bjBPMABEoo73Tv+tOZrGxLNv5k5yJPf6LJA PgVB+8g2NlhTl2Y8dwBGnx+gPgXYyn67ay4UuQKE0f1ua3SY6K1qau3n55+I/QZ2 iKSTYqf4eDDIHac/09ZwDc0qXJotPT9IOn80EUjhmBVzkYaTjwb1Sgt7n0X/NsBW JpKAU9nWZSdBc1wMxOjlH9IpGuOMKLTVe333SevPzqee0+kdSezWt5gHPQWXaR+w jigBolU2VmqR0oc91H3tM28TvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/+wPYf ctrLYDXsEmVQM0A+AEkLMB8GA1UdIwQYMBaAFHCw8EbS86dDlugseejj2s8mCznu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS80NkM3RjE3MjRG MTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAwT1c2Q3g1Nk9QYXp5WUxP ZTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMRHdSdEx6cDBPVzZDeDU2T1BhenlZTE9lNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS80NkM3RjE3MjRGMTYxMUU1OEQyQTMzMjdDNEY5QUUwMi9jTER3UnRMenAw T1c2Q3g1Nk9QYXp5WUxPZTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAly9ehR6dUWYtycwpE3Q2BMeDLExAT3wbu81M5MUr4pgR+pfGw9sYkvsLcYI0 cnlm2mFZjiNAT2+bqaLi/netX46I2A9pgcAtFMaqWT7OOoYV8JsQgm+lhB8F5Ypc Fw8Ptcmq2OFa2tYiESa0nNe+cI7jTZ1nnlw0q6VCThIUToarGLK197uPVz9URzSn TiX50gQqjWBtHijki5W3e3p/upm6bXG5VeMM64SPaqYBL8zUOXHaUDj1a3dD//oD Si25LtIPqZGhYkKFJoYDE0ArTFqtmv1RqZz5qc5t8pYqS6B8Kaw7XxRwQuzixQIr wBQM+YSK6W3/oucfJdCYibOSiA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:23 2026 by rpki-client