$ rpki-client -vvf rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft File: kEojXLR0fghgD8HSa5P1HEZ066o.mft (raw, json) Hash identifier: MR152wPJTv/YLPo5TQUsvlbg/WUsImzNX1O8lcBHbZM= Subject key identifier: E5:DD:16:54:92:53:1E:66:4E:03:68:00:37:E0:4E:08:CD:53:D1:90 Authority key identifier: 90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA Certificate issuer: /CN=A917F247/serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Certificate serial: 0480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft Manifest number: 0467 Signing time: Sat 04 Apr 2026 23:56:43 +0000 Manifest this update: Sat 04 Apr 2026 23:56:43 +0000 Manifest next update: Sat 11 Apr 2026 23:56:43 +0000 Files and hashes: 1: kEojXLR0fghgD8HSa5P1HEZ066o.crl (hash: Cc3ed9U2JX2Cym53amhtvWIDDIxEi5D1DGJqMu2BOo4=) 2: 155309DAFF3B11EF87CAB56EC4F9AE02.roa (hash: wZ5j7R6Xpr/TxoGuBCCPY8JtPL1WN3VWT4i7dA3yVHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1152 (0x480) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F247, serialNumber=904A235CB4747E08600FC1D26B93F51C4674EBAA Validity Not Before: Apr 4 23:56:43 2026 GMT Not After : Apr 11 23:56:43 2026 GMT Subject: CN=69d1a53b-697c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:2f:f0:21:68:41:eb:3d:64:3e:c2:5c:13: 4f:ec:ab:6c:9d:c9:e7:96:2a:b9:02:c9:fa:ad:0d: 90:95:91:3f:9e:9f:8b:09:6a:1e:10:9f:78:92:6c: 18:6e:ec:f9:f2:44:34:c4:4d:db:4f:c6:5f:3b:da: 56:27:15:f1:c4:85:d7:fc:32:48:1a:20:63:4d:a1: f5:bb:41:71:a2:3b:33:b9:4e:45:db:5d:35:ed:86: 22:f5:1a:a6:61:8f:b6:ab:3b:82:20:22:17:7b:91: 9b:9f:4d:3c:72:5f:3e:37:bd:b7:56:b2:29:2c:1d: da:bd:63:ff:93:3e:3e:4e:36:23:73:90:0e:3b:b1: 2b:70:71:0e:4b:f1:3b:12:ee:42:f4:6d:85:2c:2e: 59:28:d0:99:dc:a2:61:4d:99:13:c3:47:f1:c4:ce: 28:3e:86:76:c7:8d:d8:23:df:78:40:2a:cf:be:01: 79:35:34:2c:33:43:d3:96:23:45:e7:22:70:45:22: 61:40:28:d3:0e:28:91:cb:df:f9:83:49:20:80:15: 69:45:02:15:d0:1b:86:66:74:22:6c:3a:8c:d8:56: c1:46:ee:ec:e0:fe:35:f2:15:40:79:63:cb:4f:ff: ce:45:13:04:7a:7b:51:67:4e:89:10:b1:26:5d:08: 40:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DD:16:54:92:53:1E:66:4E:03:68:00:37:E0:4E:08:CD:53:D1:90 X509v3 Authority Key Identifier: keyid:90:4A:23:5C:B4:74:7E:08:60:0F:C1:D2:6B:93:F5:1C:46:74:EB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kEojXLR0fghgD8HSa5P1HEZ066o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F247/6D22EAF08F0311ECA5C9FE12C4F9AE02/kEojXLR0fghgD8HSa5P1HEZ066o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:ac:b0:70:ac:b2:bf:71:e6:cb:02:de:63:b3:af:ac:20:a1: d2:e8:73:51:b7:2d:b7:ff:73:7a:48:dc:93:03:7e:79:c9:cf: ca:e2:54:76:36:99:12:20:07:b7:42:f0:46:a5:70:a5:c4:ed: 73:9f:8b:8e:13:df:9d:35:fe:b1:33:a7:34:59:55:d2:5a:40: 3e:18:ea:ab:82:4e:b9:69:0e:86:af:0a:d0:a5:eb:5d:a4:d7: 7d:d6:f9:84:ba:9c:b0:15:80:f8:f3:c8:08:eb:0f:80:14:8c: 75:f2:bf:7e:36:d7:87:6b:a9:84:a9:7a:3e:89:07:de:e7:aa: c6:b3:39:20:af:77:fc:b1:77:d3:71:52:ca:b4:95:e9:9a:3b: af:6d:db:6f:3c:ab:15:2f:4c:f6:19:30:0b:6c:01:2e:b8:e7: 3d:eb:a1:1e:e2:d5:b0:24:e5:98:6c:2a:d8:27:8d:c1:76:b8: 32:46:84:d1:fa:b7:64:60:0e:3c:33:52:39:49:fd:88:3a:fb: 5f:36:00:70:e3:bb:b5:ab:3d:9e:58:47:b1:3f:ba:73:36:8b: 6c:de:f4:43:f6:bc:43:a8:ac:2c:a0:cf:a2:db:d6:e5:97:0c: b2:e7:b5:35:c7:6d:3f:22:3f:ea:ed:99:37:0f:90:f1:81:23: 34:6e:e8:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDcxMTAvBgNVBAUTKDkwNEEyMzVDQjQ3NDdFMDg2MDBGQzFEMjZCOTNGNTFD NDY3NEVCQUEwHhcNMjYwNDA0MjM1NjQzWhcNMjYwNDExMjM1NjQzWjAYMRYwFAYD VQQDEw02OWQxYTUzYi02OTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdQv8CFoQes9ZD7CXBNP7Ktsncnnliq5Asn6rQ2QlZE/np+LCWoeEJ94kmwY buz58kQ0xE3bT8ZfO9pWJxXxxIXX/DJIGiBjTaH1u0FxojszuU5F21017YYi9Rqm YY+2qzuCICIXe5Gbn008cl8+N723VrIpLB3avWP/kz4+TjYjc5AOO7ErcHEOS/E7 Eu5C9G2FLC5ZKNCZ3KJhTZkTw0fxxM4oPoZ2x43YI994QCrPvgF5NTQsM0PTliNF 5yJwRSJhQCjTDiiRy9/5g0kggBVpRQIV0BuGZnQibDqM2FbBRu7s4P418hVAeWPL T//ORRMEentRZ06JELEmXQhAfwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOXdFlSS Ux5mTgNoADfgTgjNU9GQMB8GA1UdIwQYMBaAFJBKI1y0dH4IYA/B0muT9RxGdOuq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0Ny82RDIyRUFGMDhG MDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZnaGdEOEhTYTVQMUhFWjA2 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tFb2pYTFIwZmdoZ0Q4SFNhNVAxSEVaMDY2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0Ny82RDIyRUFGMDhGMDMxMUVDQTVDOUZFMTJDNEY5QUUwMi9rRW9qWExSMGZn aGdEOEhTYTVQMUhFWjA2Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdKywcKyyv3HmywLeY7OvrCCh0uhzUbctt/9zekjckwN+ecnPyuJUdjaZEiAH t0LwRqVwpcTtc5+LjhPfnTX+sTOnNFlV0lpAPhjqq4JOuWkOhq8K0KXrXaTXfdb5 hLqcsBWA+PPICOsPgBSMdfK/fjbXh2uphKl6PokH3ueqxrM5IK93/LF303FSyrSV 6Zo7r23bbzyrFS9M9hkwC2wBLrjnPeuhHuLVsCTlmGwq2CeNwXa4MkaE0fq3ZGAO PDNSOUn9iDr7XzYAcOO7tas9nlhHsT+6czaLbN70Q/a8Q6isLKDPotvW5ZcMsue1 NcdtPyI/6u2ZNw+Q8YEjNG7okw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:23 2026 by rpki-client