$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: P0p5rylEyU0/JUStO1j1lX5VjjKKMgQOam8wdEDbPss= Subject key identifier: 00:13:C9:35:1B:65:6E:40:E2:02:61:40:15:BF:54:7E:C0:43:52:84 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 18E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 18BE Signing time: Sat 04 Apr 2026 16:23:34 +0000 Manifest this update: Sat 04 Apr 2026 16:23:34 +0000 Manifest next update: Sat 11 Apr 2026 16:23:34 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: 0/3V25C3cNYig+poM+9mohqnerAwGchrze86ZQT5Jew=) 2: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: F7gvzg0So++J2V4XA9vCkNOHszA1gZ0+wMtYApbJrQM=) 3: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6373 (0x18e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Apr 4 16:23:34 2026 GMT Not After : Apr 11 16:23:34 2026 GMT Subject: CN=69d13b06-3fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:06:96:bf:c7:b1:13:54:24:de:51:b2:60:f2: 6b:93:c0:af:d3:e0:42:3b:3e:fe:3c:a1:08:17:a4: 08:17:e5:5e:00:d0:a6:43:8a:c0:3f:c2:b7:49:5c: 67:80:12:b3:20:4d:93:5e:ae:f1:73:6a:96:f6:99: ab:ab:83:1f:42:35:97:f4:3e:a5:5e:f6:a6:b4:e0: 9a:58:40:16:91:1f:d0:08:06:c1:62:69:e6:3b:52: ea:21:c5:e4:9e:f6:45:32:bd:26:f4:2f:6f:ba:ef: 4a:a1:79:24:ce:4f:3c:b3:2a:d9:e6:a7:8a:10:b3: 4c:18:23:bd:fa:15:2b:c7:87:22:92:e1:aa:d4:88: 27:e9:1b:96:43:a6:a2:8b:31:0e:a9:69:8a:e3:4b: 23:9d:4f:7c:96:fb:95:07:03:97:12:0c:0c:ce:bd: d8:a2:c6:6f:d8:f2:fe:6e:a9:3d:b3:cd:b8:c8:bc: f9:eb:96:b1:58:56:0f:7b:a9:92:69:bf:28:fc:5d: 0e:a5:85:b7:79:c8:43:92:21:a2:13:2c:a1:24:24: a6:58:dd:a7:f1:13:9d:af:04:f7:ca:76:3e:9b:b7: 55:3c:23:35:42:e3:ff:62:72:42:49:d8:a6:18:65: 2d:e2:ee:2b:c3:4c:57:1f:29:10:b7:0b:54:0d:f4: c0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:13:C9:35:1B:65:6E:40:E2:02:61:40:15:BF:54:7E:C0:43:52:84 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:8a:d2:21:80:34:89:ca:8a:c4:e3:3a:11:a8:f5:57:0d:af: 36:7d:2a:51:9c:0f:fa:8e:0d:7b:07:35:78:ba:76:59:b7:17: 86:6e:23:b9:76:c1:1b:a2:d0:58:ff:97:90:26:2e:01:f4:91: 00:f7:8b:10:82:8e:c5:0e:db:82:ef:22:dd:70:c2:71:ea:ea: c8:83:d8:e7:1e:f4:81:1f:18:c8:8d:42:04:e9:3d:83:b2:2f: 39:67:a7:ce:80:7d:6e:91:14:47:12:e8:b4:c0:e8:c0:56:41: 1f:d4:3e:27:3e:27:b9:49:d9:43:54:4a:10:11:e9:0e:a3:77: 51:56:9b:06:ef:91:71:bd:d6:65:9d:61:10:c9:4b:da:63:55: 5b:15:98:dd:90:c2:f4:94:30:ce:e4:c2:a9:00:07:f8:04:86: 46:ee:ce:fe:54:d0:2f:b1:7e:55:94:7a:cc:9a:b3:35:e9:a2: e8:1a:2f:cf:46:03:16:b8:c8:9b:02:57:cf:5f:1b:0e:dd:fd: 14:5c:db:6c:93:0d:ed:fa:3f:b4:c7:24:e3:bd:9c:79:05:de: 6e:07:75:35:b4:c0:12:5d:f8:f1:0c:71:31:53:f2:08:36:62: 88:a9:05:06:1f:88:47:b9:55:61:d1:54:6a:98:ae:c2:14:9d: e6:6a:d4:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwNDA0MTYyMzM0WhcNMjYwNDExMTYyMzM0WjAYMRYwFAYD VQQDEw02OWQxM2IwNi0zZmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2waWv8exE1Qk3lGyYPJrk8Cv0+BCOz7+PKEIF6QIF+VeANCmQ4rAP8K3SVxn gBKzIE2TXq7xc2qW9pmrq4MfQjWX9D6lXvamtOCaWEAWkR/QCAbBYmnmO1LqIcXk nvZFMr0m9C9vuu9KoXkkzk88syrZ5qeKELNMGCO9+hUrx4cikuGq1Ign6RuWQ6ai izEOqWmK40sjnU98lvuVBwOXEgwMzr3YosZv2PL+bqk9s824yLz565axWFYPe6mS ab8o/F0OpYW3echDkiGiEyyhJCSmWN2n8ROdrwT3ynY+m7dVPCM1QuP/YnJCSdim GGUt4u4rw0xXHykQtwtUDfTApwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAATyTUb ZW5A4gJhQBW/VH7AQ1KEMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvorSIYA0icqKxOM6Eaj1Vw2vNn0qUZwP+o4Newc1eLp2WbcXhm4juXbBG6LQ WP+XkCYuAfSRAPeLEIKOxQ7bgu8i3XDCcerqyIPY5x70gR8YyI1CBOk9g7IvOWen zoB9bpEURxLotMDowFZBH9Q+Jz4nuUnZQ1RKEBHpDqN3UVabBu+Rcb3WZZ1hEMlL 2mNVWxWY3ZDC9JQwzuTCqQAH+ASGRu7O/lTQL7F+VZR6zJqzNemi6Bovz0YDFrjI mwJXz18bDt39FFzbbJMN7fo/tMck472ceQXebgd1NbTAEl348QxxMVPyCDZiiKkF Bh+IR7lVYdFUapiuwhSd5mrUNQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:00 2026 by rpki-client