$ rpki-client -vvf rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft File: R1MAyW65ok4zHQs5AHDEWinJXmk.mft (raw, json) Hash identifier: 5iCCsjHIi5HvSL8UKlb1n0rajkdIYnXWeruJaKfbq7M= Subject key identifier: 48:62:C9:EF:49:90:D6:3D:83:1E:93:3A:1F:D8:D0:DF:9D:DF:F8:D9 Authority key identifier: 47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 Certificate issuer: /CN=A917C36A/serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Certificate serial: 0249 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft Manifest number: 0242 Signing time: Sun 05 Apr 2026 02:04:33 +0000 Manifest this update: Sun 05 Apr 2026 02:04:32 +0000 Manifest next update: Sun 12 Apr 2026 02:04:32 +0000 Files and hashes: 1: R1MAyW65ok4zHQs5AHDEWinJXmk.crl (hash: OlLrGFTdZtNdA1AsKEbMhD83M7vT6aZOeVuGaCcmRCk=) 2: 9CB879ECC7B511ED9411183FC4F9AE02.roa (hash: P3ej5XFQlJcMQQxLttfvW/K/Ryt5xBSLQ4egcs4pQwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 585 (0x249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C36A, serialNumber=475300C96EB9A24E331D0B390070C45A29C95E69 Validity Not Before: Apr 5 02:04:32 2026 GMT Not After : Apr 12 02:04:32 2026 GMT Subject: CN=69d1c330-830f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:83:3b:bb:da:32:74:54:7b:95:f8:0a:6d: aa:f9:ee:18:59:8b:66:20:45:bb:01:ff:3e:48:2e: b3:c4:8b:b8:36:0d:09:06:33:ec:90:4f:3a:01:1d: 46:91:fa:da:dc:cb:69:56:13:d0:04:57:f7:48:ab: ac:9f:a1:59:69:f8:80:36:15:ce:25:e6:f4:7f:89: d1:ba:a8:63:b3:c8:4d:47:4c:07:f6:29:75:09:c9: 44:75:66:e8:10:20:1c:1b:73:4f:c2:8e:5c:e0:cc: 9e:64:65:10:c2:93:59:a7:cb:d2:e2:81:2c:98:d5: ff:31:03:76:38:74:c5:a4:92:72:0a:04:1e:05:f9: 5f:28:f5:fa:4f:52:c6:b6:55:0c:01:a4:bb:66:01: 03:bb:db:aa:2b:60:e1:49:ae:de:e8:d3:8d:41:ef: 6e:d0:c1:ef:6d:cf:fd:5b:b7:96:9b:3d:99:7f:c8: 08:58:36:cb:09:c7:fa:7e:17:b4:bf:dc:8f:ec:84: a6:5c:3a:0b:d5:34:86:d6:54:1a:3f:12:b9:96:4e: 84:ed:39:dc:1f:63:66:6c:71:98:89:d6:83:71:05: a5:d9:39:57:ee:90:5f:c9:ba:c0:35:83:6a:4a:85: 48:b1:f6:d6:1d:95:cc:b1:bf:26:8b:f9:3c:4f:27: e4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:C9:EF:49:90:D6:3D:83:1E:93:3A:1F:D8:D0:DF:9D:DF:F8:D9 X509v3 Authority Key Identifier: keyid:47:53:00:C9:6E:B9:A2:4E:33:1D:0B:39:00:70:C4:5A:29:C9:5E:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1MAyW65ok4zHQs5AHDEWinJXmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C36A/40934280C7B211ED9357A23CC4F9AE02/R1MAyW65ok4zHQs5AHDEWinJXmk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:d1:1b:93:10:6a:d7:fb:b9:09:2c:8a:cc:a0:57:d2:5a:35: e0:83:8a:e6:b2:38:53:e0:0b:b8:39:a7:d7:24:54:bc:c6:79: 30:db:66:58:95:af:21:04:45:91:61:f0:80:36:c5:a2:21:cf: c3:6e:d7:73:5e:96:51:c4:2c:3b:51:7a:95:c1:d5:05:dd:10: fd:e9:b8:bb:bf:90:08:e1:57:4f:9a:19:db:fa:ca:0f:04:37: 12:93:de:d1:10:f3:9b:83:e5:6e:5b:e2:a9:a6:48:f4:47:30: db:c0:4c:1e:d1:99:04:1f:63:71:c4:4c:a1:57:9c:70:30:99: 9b:fc:42:58:ae:c1:ab:d9:5b:28:73:d8:60:97:4a:2d:31:10: d8:dd:ea:9a:6f:bb:a0:40:b1:b9:eb:a7:ea:87:b2:65:1c:58: 35:b2:47:55:c5:9f:24:4d:c6:2b:27:08:f6:97:68:37:67:24: 2d:70:d3:4c:e7:a7:47:8c:c1:c8:81:9e:27:f7:95:bb:67:84: 5a:44:43:aa:71:5e:15:ab:0c:3c:59:5b:e2:1f:ae:eb:30:ac: 25:55:f0:60:9a:ed:d6:fa:6c:51:9a:b7:5f:46:6c:61:92:33: ad:c1:ab:b0:2f:de:ed:e9:be:64:39:bd:ee:1c:f8:5c:97:3c: de:09:84:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MzNkExMTAvBgNVBAUTKDQ3NTMwMEM5NkVCOUEyNEUzMzFEMEIzOTAwNzBDNDVB MjlDOTVFNjkwHhcNMjYwNDA1MDIwNDMyWhcNMjYwNDEyMDIwNDMyWjAYMRYwFAYD VQQDEw02OWQxYzMzMC04MzBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXeDO7vaMnRUe5X4Cm2q+e4YWYtmIEW7Af8+SC6zxIu4Ng0JBjPskE86AR1G kfra3MtpVhPQBFf3SKusn6FZafiANhXOJeb0f4nRuqhjs8hNR0wH9il1CclEdWbo ECAcG3NPwo5c4MyeZGUQwpNZp8vS4oEsmNX/MQN2OHTFpJJyCgQeBflfKPX6T1LG tlUMAaS7ZgEDu9uqK2DhSa7e6NONQe9u0MHvbc/9W7eWmz2Zf8gIWDbLCcf6fhe0 v9yP7ISmXDoL1TSG1lQaPxK5lk6E7TncH2NmbHGYidaDcQWl2TlX7pBfybrANYNq SoVIsfbWHZXMsb8mi/k8TyfkGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEhiye9J kNY9gx6TOh/Y0N+d3/jZMB8GA1UdIwQYMBaAFEdTAMluuaJOMx0LOQBwxFopyV5p MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzM2QS80MDkzNDI4MEM3 QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9rNHpIUXM1QUhERVdpbkpY bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxTUF5VzY1b2s0ekhRczVBSERFV2luSlhtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzM2QS80MDkzNDI4MEM3QjIxMUVEOTM1N0EyM0NDNEY5QUUwMi9SMU1BeVc2NW9r NHpIUXM1QUhERVdpbkpYbWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQtEbkxBq1/u5CSyKzKBX0lo14IOK5rI4U+ALuDmn1yRUvMZ5MNtmWJWvIQRF kWHwgDbFoiHPw27Xc16WUcQsO1F6lcHVBd0Q/em4u7+QCOFXT5oZ2/rKDwQ3EpPe 0RDzm4PlblviqaZI9Ecw28BMHtGZBB9jccRMoVeccDCZm/xCWK7Bq9lbKHPYYJdK LTEQ2N3qmm+7oECxueun6oeyZRxYNbJHVcWfJE3GKycI9pdoN2ckLXDTTOenR4zB yIGeJ/eVu2eEWkRDqnFeFasMPFlb4h+u6zCsJVXwYJrt1vpsUZq3X0ZsYZIzrcGr sC/e7em+ZDm97hz4XJc83gmEvg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:04:06 2026 by rpki-client