$ rpki-client -vvf rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft File: CDWHSXi6MJ7X2kZz53OdkyLyYps.mft (raw, json) Hash identifier: MsrrCx3QK93g9m7RTaQQBQwmktRl7g5KBmJydWDpZKk= Subject key identifier: 36:9C:A3:73:EB:82:1C:5E:AD:8D:E3:D9:16:5F:4E:22:B2:3F:50:4D Authority key identifier: 08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B Certificate issuer: /CN=A917E00F/serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft Manifest number: E7 Signing time: Sat 04 Apr 2026 22:42:35 +0000 Manifest this update: Sat 04 Apr 2026 22:42:34 +0000 Manifest next update: Sat 11 Apr 2026 22:42:34 +0000 Files and hashes: 1: CDWHSXi6MJ7X2kZz53OdkyLyYps.crl (hash: d7ulpASvQ3MF6Sv02hc5hE1now6lW1O3vXNLwNViSok=) 2: 2DA549EAE23E11EFB267422EC4F9AE02.roa (hash: Mr9U/6ZYvZu9qU4Dm1rrpvinPfnT7chjtNPRoJwGxK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E00F, serialNumber=0835874978BA309ED7DA4673E7739D9322F2629B Validity Not Before: Apr 4 22:42:34 2026 GMT Not After : Apr 11 22:42:34 2026 GMT Subject: CN=69d193db-c887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:a3:c2:57:6f:87:af:3f:9e:f2:1d:07:e5: 63:f9:33:f5:4a:69:21:38:ed:01:af:35:b1:94:93: 30:84:e3:15:7d:fb:c4:02:ff:1a:52:62:88:eb:02: ef:d0:7e:bc:16:f9:5b:e1:4c:1d:dd:96:32:a7:0a: b7:71:aa:20:e7:b3:1a:6e:d9:de:ce:13:3d:06:b4: 45:a3:4c:81:ee:67:e0:02:a5:e1:8b:c9:37:62:4f: 2a:eb:a3:df:52:9a:83:d7:a7:c6:6c:e6:39:13:c7: 79:28:7c:b3:d8:35:5f:a9:2d:79:25:9a:44:b5:ce: 0f:48:d0:57:ea:25:dc:fa:c4:af:eb:fa:28:53:84: 5a:99:90:fe:5a:0e:f5:b7:09:9e:73:c4:12:d1:65: 93:01:df:5d:c5:95:1b:6b:bc:a1:ac:e2:8f:b3:05: de:31:5c:ad:2f:1a:0d:1d:c9:ca:d5:8c:0c:ba:47: 41:ea:b3:ad:20:aa:38:9b:c5:6f:2b:e3:84:95:07: 6a:e5:d7:58:c0:91:59:14:35:b8:36:f1:78:56:ff: 45:d3:ea:73:fe:6e:73:65:ba:4f:44:d2:7d:45:44: 85:55:6b:57:9b:a2:01:e5:71:b2:7d:13:83:28:7f: ab:4f:19:df:1b:fc:a2:4e:dc:2f:bd:fe:c1:2f:e8: 70:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:9C:A3:73:EB:82:1C:5E:AD:8D:E3:D9:16:5F:4E:22:B2:3F:50:4D X509v3 Authority Key Identifier: keyid:08:35:87:49:78:BA:30:9E:D7:DA:46:73:E7:73:9D:93:22:F2:62:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CDWHSXi6MJ7X2kZz53OdkyLyYps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E00F/7D2B1DF0D7D011EF9EFC910DC4F9AE02/CDWHSXi6MJ7X2kZz53OdkyLyYps.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:47:75:fc:76:cf:7e:4c:ba:fb:2e:bc:ed:f5:9b:b5:ab:74: b4:d3:10:7e:63:7e:c4:5f:a1:68:9a:08:7a:12:da:28:7e:cc: c9:eb:46:9c:21:5f:75:f3:53:a3:af:e1:03:fa:94:30:be:09: d8:42:5d:d7:46:29:46:48:a5:fc:d9:49:bd:02:4d:9b:5c:a3: e5:7d:d2:b2:49:63:1c:65:ba:6e:4f:09:ff:2b:6d:ff:6e:78: 4c:26:68:51:f0:6e:e4:0a:4f:79:c7:ba:f4:c4:2b:a1:9d:be: b2:b9:57:61:fe:4d:70:52:4c:49:6a:ad:57:d8:37:87:32:e9: 82:7c:76:16:a2:9d:04:4f:b9:1b:f5:26:3f:a9:eb:78:a1:de: 85:79:39:e3:91:f8:ed:c8:8e:27:fe:e3:03:d5:07:39:37:fb: 61:ca:49:6a:43:c7:34:09:a9:50:2d:aa:6b:b7:ad:2f:f5:d7: 27:56:13:79:ca:9a:ac:e7:a2:e0:73:d0:2d:05:98:ce:d4:7d: 6b:77:22:2c:e7:6c:5c:99:e6:04:b3:cf:82:fe:b3:89:ee:db: 5e:22:67:82:ea:69:81:07:f8:f4:89:f1:36:70:be:63:26:93: ac:ea:62:42:2b:c5:ae:25:97:c1:d0:79:56:16:c9:0c:26:c1: 93:53:91:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwMEYxMTAvBgNVBAUTKDA4MzU4NzQ5NzhCQTMwOUVEN0RBNDY3M0U3NzM5RDkz MjJGMjYyOUIwHhcNMjYwNDA0MjI0MjM0WhcNMjYwNDExMjI0MjM0WjAYMRYwFAYD VQQDEw02OWQxOTNkYi1jODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN6jwldvh68/nvIdB+Vj+TP1SmkhOO0BrzWxlJMwhOMVffvEAv8aUmKI6wLv 0H68Fvlb4Uwd3ZYypwq3caog57MabtnezhM9BrRFo0yB7mfgAqXhi8k3Yk8q66Pf UpqD16fGbOY5E8d5KHyz2DVfqS15JZpEtc4PSNBX6iXc+sSv6/ooU4RamZD+Wg71 twmec8QS0WWTAd9dxZUba7yhrOKPswXeMVytLxoNHcnK1YwMukdB6rOtIKo4m8Vv K+OElQdq5ddYwJFZFDW4NvF4Vv9F0+pz/m5zZbpPRNJ9RUSFVWtXm6IB5XGyfROD KH+rTxnfG/yiTtwvvf7BL+hwIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDaco3Pr ghxerY3j2RZfTiKyP1BNMB8GA1UdIwQYMBaAFAg1h0l4ujCe19pGc+dznZMi8mKb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTAwRi83RDJCMURGMEQ3 RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1KN1gya1p6NTNPZGt5THlZ cHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NEV0hTWGk2TUo3WDJrWno1M09ka3lMeVlwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTAwRi83RDJCMURGMEQ3RDAxMUVGOUVGQzkxMERDNEY5QUUwMi9DRFdIU1hpNk1K N1gya1p6NTNPZGt5THlZcHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgUd1/HbPfky6+y687fWbtat0tNMQfmN+xF+haJoIehLaKH7MyetGnCFfdfNT o6/hA/qUML4J2EJd10YpRkil/NlJvQJNm1yj5X3SskljHGW6bk8J/ytt/254TCZo UfBu5ApPece69MQroZ2+srlXYf5NcFJMSWqtV9g3hzLpgnx2FqKdBE+5G/UmP6nr eKHehXk545H47ciOJ/7jA9UHOTf7YcpJakPHNAmpUC2qa7etL/XXJ1YTecqarOei 4HPQLQWYztR9a3ciLOdsXJnmBLPPgv6zie7bXiJnguppgQf49InxNnC+YyaTrOpi QivFriWXwdB5VhbJDCbBk1OR4w== -----END CERTIFICATE-----Generated at Mon Apr 6 13:55:09 2026 by rpki-client