$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: kHVR92wncFoNZv4cEbFBOnnplJdcM3Fh+ZA2T7+8gVA= Subject key identifier: 71:1C:1C:51:0B:1B:95:BB:5D:6B:DD:C2:64:0A:7A:55:FB:26:A8:9C Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0CF2 Signing time: Sat 04 Apr 2026 18:02:47 +0000 Manifest this update: Sat 04 Apr 2026 18:02:46 +0000 Manifest next update: Sat 11 Apr 2026 18:02:46 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: BFQb3KODjKcOO7owdaO38+5BWEiwEjawbg/SiQBsiAk=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: P1ioyOhHYSe5vrV+nsOcBMRyefJ8DwpbFXIw1wGtzrQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3325 (0xcfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Apr 4 18:02:46 2026 GMT Not After : Apr 11 18:02:46 2026 GMT Subject: CN=69d15247-0cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:35:e8:f5:ae:75:11:42:d8:c3:78:9c:3e:b5: 90:0b:8e:fd:6a:8c:76:e3:9d:82:82:fe:cf:b1:fd: 71:19:4a:ea:d3:38:54:2e:ad:00:ed:10:9d:c9:3f: 51:8b:e8:27:c9:4f:0a:9a:fc:17:02:cd:ab:34:b3: 74:9e:d0:ae:d5:9d:98:a0:6d:40:cb:c1:fd:c9:28: 15:e3:9a:fa:28:50:10:51:0d:6d:50:22:05:7c:31: 42:be:05:7e:e5:44:e4:db:49:f6:8d:e2:f9:1b:fd: 0e:0d:7e:5a:d9:84:1d:0a:46:06:f0:8c:f6:82:19: 93:13:11:ea:cb:d0:2b:4d:60:76:e0:be:76:04:db: 53:7f:3b:2c:f7:81:16:d3:44:a8:ee:c6:0b:21:57: 78:48:c1:e5:f7:29:12:dd:00:27:fc:5b:53:c9:48: e5:a8:ed:ab:0f:06:eb:84:ed:43:af:a7:42:0b:90: e7:42:95:ba:08:fe:d0:8d:10:e2:b9:bb:88:89:20: 16:cb:f8:21:75:29:27:df:a1:b0:64:dc:e4:4d:52: 6e:98:a5:1c:c2:78:8b:cf:6c:6e:84:21:00:1e:93: 07:18:74:91:1b:8d:35:bd:5a:ca:2d:db:9a:19:87: 96:fb:cc:e0:ca:d0:bb:85:76:37:56:84:dc:dd:05: 1e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1C:1C:51:0B:1B:95:BB:5D:6B:DD:C2:64:0A:7A:55:FB:26:A8:9C X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:71:8a:81:16:54:57:1a:ec:d8:0b:d3:81:c5:37:06:c9:60: 80:75:be:97:51:a3:f7:01:fa:f9:75:b3:ff:47:f2:9b:03:2f: 71:04:af:ac:98:cf:1b:4b:bf:91:5c:db:ae:85:fb:5c:28:80: 0f:6c:7e:9b:05:34:65:7a:96:40:0a:ac:c8:1b:b3:a3:eb:8d: 74:6d:35:03:10:ff:54:f0:b0:68:bd:0f:d6:54:3e:3d:83:f6: 7e:b9:bd:58:36:d4:fe:12:14:d1:21:7e:34:9d:20:83:3f:96: 44:fa:c8:e6:c6:be:3e:7a:71:92:ae:d4:95:de:cf:96:56:d9: 5c:86:00:da:1d:9a:70:a0:8f:bb:9c:cf:c1:73:3e:bb:70:39: 2d:ca:68:df:04:5a:d4:c0:03:7d:8c:f5:f1:fa:e2:12:85:75: eb:84:10:05:45:b9:e6:c5:2a:72:04:db:d5:e4:0f:1b:89:53: ba:1d:19:15:37:17:45:b0:56:43:fe:e2:16:5e:c0:f3:db:62: 28:ca:7c:37:ec:d7:23:69:f0:c1:d2:74:18:44:be:2b:df:31: 88:84:4f:c5:a7:d9:c9:a2:70:10:e8:05:73:a5:32:d8:7b:54: 24:fa:26:d9:f9:28:d7:a8:8e:04:23:fb:2b:71:ec:7d:bb:29: 42:99:86:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjYwNDA0MTgwMjQ2WhcNMjYwNDExMTgwMjQ2WjAYMRYwFAYD VQQDEw02OWQxNTI0Ny0wY2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzXo9a51EULYw3icPrWQC479aox2452Cgv7Psf1xGUrq0zhULq0A7RCdyT9R i+gnyU8KmvwXAs2rNLN0ntCu1Z2YoG1Ay8H9ySgV45r6KFAQUQ1tUCIFfDFCvgV+ 5UTk20n2jeL5G/0ODX5a2YQdCkYG8Iz2ghmTExHqy9ArTWB24L52BNtTfzss94EW 00So7sYLIVd4SMHl9ykS3QAn/FtTyUjlqO2rDwbrhO1Dr6dCC5DnQpW6CP7QjRDi ubuIiSAWy/ghdSkn36GwZNzkTVJumKUcwniLz2xuhCEAHpMHGHSRG401vVrKLdua GYeW+8zgytC7hXY3VoTc3QUejwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHEcHFEL G5W7XWvdwmQKelX7JqicMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASHGKgRZUVxrs2AvTgcU3BslggHW+l1Gj9wH6+XWz/0fymwMvcQSvrJjPG0u/ kVzbroX7XCiAD2x+mwU0ZXqWQAqsyBuzo+uNdG01AxD/VPCwaL0P1lQ+PYP2frm9 WDbU/hIU0SF+NJ0ggz+WRPrI5sa+Pnpxkq7Uld7PllbZXIYA2h2acKCPu5zPwXM+ u3A5Lcpo3wRa1MADfYz18friEoV164QQBUW55sUqcgTb1eQPG4lTuh0ZFTcXRbBW Q/7iFl7A89tiKMp8N+zXI2nwwdJ0GES+K98xiIRPxafZyaJwEOgFc6Uy2HtUJPom 2fko16iOBCP7K3HsfbspQpmGcw== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:37 2026 by rpki-client