$ rpki-client -vvf rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft File: pC2IwS1kcYPHe_xK74KM8pRLnsY.mft (raw, json) Hash identifier: iOd8+1uEHrfp1F7W+i1srOoX4USP5MfuXYquNxI5jeU= Subject key identifier: A8:63:7E:A5:18:19:9D:A9:7F:37:F9:B5:E1:FF:68:5E:00:FB:A3:8E Authority key identifier: A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 Certificate issuer: /CN=A916C756/serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft Manifest number: 028C Signing time: Sun 05 Apr 2026 01:18:31 +0000 Manifest this update: Sun 05 Apr 2026 01:18:31 +0000 Manifest next update: Sun 12 Apr 2026 01:18:31 +0000 Files and hashes: 1: pC2IwS1kcYPHe_xK74KM8pRLnsY.crl (hash: BJAQT8fmjzpyndqZMFZgiu2BnQBNKdBxg5ukA7TpvKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C756, serialNumber=A42D88C12D647183C77BFC4AEF828CF2944B9EC6 Validity Not Before: Apr 5 01:18:31 2026 GMT Not After : Apr 12 01:18:31 2026 GMT Subject: CN=69d1b867-696f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:d5:dc:bf:ce:1d:4c:7e:56:62:a8:d6:52: d1:16:9f:24:21:67:66:f2:88:71:1f:77:96:74:2b: 39:8d:38:2a:a7:15:c3:84:f5:e4:04:19:d4:48:50: 33:20:1c:2f:9e:f4:3f:b4:f0:3a:cf:51:5d:62:c2: b2:17:ad:0f:b7:c2:5b:a4:00:50:4c:11:98:7b:8f: bd:62:81:b9:52:9e:b9:02:6d:99:6f:77:c6:46:2e: dc:67:fc:12:27:4a:19:0f:a6:02:45:1d:f3:6b:7d: 3f:06:2b:4f:14:18:dc:83:85:24:5a:df:81:72:6c: 2a:1b:b1:35:0a:e4:37:95:16:cc:e5:10:8f:77:0d: 40:94:06:42:38:3b:5b:44:ec:7f:22:ed:3d:14:0c: c5:09:ab:4a:6f:fd:4e:d5:d2:50:f4:b0:f2:5d:55: 77:ad:4e:df:b9:e5:9f:50:0d:e3:a2:d8:c6:c6:8c: d7:1c:d0:aa:a4:22:b5:bc:54:12:19:3a:b4:f7:bc: ba:3b:b6:c3:92:6d:fa:62:2e:87:e4:11:a1:92:29: 7a:13:e2:a2:f2:76:b5:46:85:06:b4:cd:7e:1e:a4: 97:5d:19:7b:dc:ce:15:e2:3f:14:5b:1e:44:b9:0c: 8d:1e:17:c5:93:89:44:a1:73:e9:28:fc:59:02:99: 41:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:63:7E:A5:18:19:9D:A9:7F:37:F9:B5:E1:FF:68:5E:00:FB:A3:8E X509v3 Authority Key Identifier: keyid:A4:2D:88:C1:2D:64:71:83:C7:7B:FC:4A:EF:82:8C:F2:94:4B:9E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pC2IwS1kcYPHe_xK74KM8pRLnsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C756/3374546E4B6511EDAACE2D76C4F9AE02/pC2IwS1kcYPHe_xK74KM8pRLnsY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7b:8a:4d:93:94:c3:44:9a:ab:6d:57:5d:cc:7b:cd:8f:db: f0:f4:23:18:72:b9:16:f5:ba:31:e4:43:30:cc:a9:06:cf:33: 0c:ee:d1:55:c1:82:d8:f8:58:3d:04:60:9c:d1:15:f5:74:c4: 97:40:64:e0:53:92:db:f6:89:ae:a8:f6:d1:e5:19:66:60:2e: 53:bc:03:62:f1:8a:da:92:ba:26:d0:3f:a6:62:eb:4e:ff:14: 6e:dc:78:0b:50:5b:f5:a5:08:02:80:50:82:1e:52:ba:42:0c: 07:08:53:ad:c1:9e:52:de:24:d2:35:79:58:2c:03:11:85:f0: af:8d:cb:51:66:d3:d1:27:a6:68:2a:4e:5e:3a:9e:c4:65:10: 0a:f5:c4:0a:ee:b7:f3:78:2c:da:17:af:d6:c2:f4:4b:d2:f0: f3:94:48:8d:19:91:67:69:f4:6f:ac:14:28:47:78:75:85:70: 19:1e:39:9d:52:99:71:6f:2c:14:d6:71:65:1f:d3:87:76:0a: 93:17:37:f5:3a:42:38:e0:b9:eb:3e:02:be:5b:1b:c7:23:1d: 31:fe:41:12:22:0b:36:6e:3a:1e:13:a1:0d:73:28:df:97:f9: 40:9e:c3:a1:db:c8:fd:5d:01:08:5e:a2:a3:53:81:92:bd:ed: e9:ef:0e:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM3NTYxMTAvBgNVBAUTKEE0MkQ4OEMxMkQ2NDcxODNDNzdCRkM0QUVGODI4Q0Yy OTQ0QjlFQzYwHhcNMjYwNDA1MDExODMxWhcNMjYwNDEyMDExODMxWjAYMRYwFAYD VQQDEw02OWQxYjg2Ny02OTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneXV3L/OHUx+VmKo1lLRFp8kIWdm8ohxH3eWdCs5jTgqpxXDhPXkBBnUSFAz IBwvnvQ/tPA6z1FdYsKyF60Pt8JbpABQTBGYe4+9YoG5Up65Am2Zb3fGRi7cZ/wS J0oZD6YCRR3za30/BitPFBjcg4UkWt+BcmwqG7E1CuQ3lRbM5RCPdw1AlAZCODtb ROx/Iu09FAzFCatKb/1O1dJQ9LDyXVV3rU7fueWfUA3jotjGxozXHNCqpCK1vFQS GTq097y6O7bDkm36Yi6H5BGhkil6E+Ki8na1RoUGtM1+HqSXXRl73M4V4j8UWx5E uQyNHhfFk4lEoXPpKPxZAplBJwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKhjfqUY GZ2pfzf5teH/aF4A+6OOMB8GA1UdIwQYMBaAFKQtiMEtZHGDx3v8Su+CjPKUS57G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qzc1Ni8zMzc0NTQ2RTRC NjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZUEhlX3hLNzRLTThwUkxu c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BDMkl3UzFrY1lQSGVfeEs3NEtNOHBSTG5zWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Qzc1Ni8zMzc0NTQ2RTRCNjUxMUVEQUFDRTJENzZDNEY5QUUwMi9wQzJJd1Mxa2NZ UEhlX3hLNzRLTThwUkxuc1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGnuKTZOUw0Saq21XXcx7zY/b8PQjGHK5FvW6MeRDMMypBs8zDO7RVcGC2PhY PQRgnNEV9XTEl0Bk4FOS2/aJrqj20eUZZmAuU7wDYvGK2pK6JtA/pmLrTv8Ubtx4 C1Bb9aUIAoBQgh5SukIMBwhTrcGeUt4k0jV5WCwDEYXwr43LUWbT0SemaCpOXjqe xGUQCvXECu6383gs2hev1sL0S9Lw85RIjRmRZ2n0b6wUKEd4dYVwGR45nVKZcW8s FNZxZR/Th3YKkxc39TpCOOC56z4CvlsbxyMdMf5BEiILNm46HhOhDXMo35f5QJ7D odvI/V0BCF6io1OBkr3t6e8OZg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:53:14 2026 by rpki-client