$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft File: 25LUPJBhJQWzr0bpZKaMyfXzsq8.mft (raw, json) Hash identifier: v7fZ8ex2TZpKqEATGzVg4S8qUC0qp7vxmJi3JM1p9aE= Subject key identifier: 25:6B:FC:D0:5E:05:EF:8B:28:06:7D:24:CE:BA:FE:CA:41:A0:64:29 Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF Certificate issuer: /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft Manifest number: 03CA Signing time: Mon 27 Apr 2026 00:40:01 +0000 Manifest this update: Mon 27 Apr 2026 00:40:00 +0000 Manifest next update: Mon 04 May 2026 00:40:00 +0000 Files and hashes: 1: 25LUPJBhJQWzr0bpZKaMyfXzsq8.crl (hash: SRTtiNElSSd1P2R6xJOplPzHb1eLbgCwp9glkFabl7g=) 2: 9ABE08C606F311F08407D351C4F9AE02.roa (hash: mJ+4aNLfvZt4Gxz5lM68lm7uHN4nwmUYx/R+WnSzyKo=) 3: 299F07F2E15611EFA15DF23DC4F9AE02.roa (hash: xB0/pb5I5xHP02aSQCO9upGknx6BvV6q4THXB9XtRB8=) 4: B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (hash: jNzbZDAmJi3yGAnoraLhyCZK40ZfYa1fB/jtVGeYRGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 May 2026 00:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF Validity Not Before: Apr 27 00:40:00 2026 GMT Not After : May 4 00:40:00 2026 GMT Subject: CN=69eeb060-0be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3e:65:32:51:53:1e:f3:c1:f5:96:89:3d:b1: 22:cb:6e:ee:92:4a:0a:45:c1:00:9f:6e:81:f5:e8: 3f:8f:c5:2b:7f:dd:17:22:d1:dd:5f:c4:60:a0:65: 5f:dd:54:dd:54:89:92:64:4f:82:28:83:10:59:33: 89:1c:cf:9c:93:1f:43:92:e7:57:00:c5:df:9e:cb: 3e:2e:5b:50:11:d3:a9:fb:ee:f1:fc:be:71:91:ec: d7:c1:2d:b9:22:9a:b9:18:8a:1d:ac:4b:26:89:d4: c0:6a:c0:3c:c3:b6:fe:6b:78:25:7d:01:3b:9f:bc: 93:e7:25:fb:8d:79:76:59:3a:59:85:ce:15:44:fe: b4:0d:29:20:8a:95:5b:b3:b2:a7:53:0d:fc:52:06: d2:1a:07:57:6e:94:ff:66:ee:20:c0:42:ea:7a:58: 49:20:dc:3e:9e:a1:d7:75:f0:69:9a:88:be:db:c2: b5:3f:a6:76:71:0e:8d:a8:4c:9d:6d:5b:d4:cf:fd: 8f:98:58:21:bb:4d:bf:9a:3b:b5:47:8d:1d:1a:f1: f9:93:1c:30:aa:c4:5a:23:cf:d0:e2:51:cf:8c:03: de:eb:0c:c0:e2:eb:e8:91:60:07:81:bd:0a:8f:44: 07:50:9f:2f:67:79:76:a6:f1:b8:f1:79:32:1f:2d: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:6B:FC:D0:5E:05:EF:8B:28:06:7D:24:CE:BA:FE:CA:41:A0:64:29 X509v3 Authority Key Identifier: keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:d1:f6:11:e3:e0:71:23:e7:2b:95:23:0f:55:1c:c4:f7:26: 28:b2:40:a3:32:67:32:6d:10:75:3a:54:6f:77:c0:4f:3c:30: 86:1b:88:a5:82:f9:80:09:bb:50:b6:2b:a5:61:de:bb:40:dd: 1a:7c:2d:55:52:ee:c2:3e:d1:36:5d:83:0a:ed:0c:51:7c:e6: af:b9:24:d9:a0:ec:7a:0f:ea:37:3a:b0:ee:fd:e7:22:d9:19: eb:92:a7:88:56:dc:42:a2:ce:54:45:b5:b6:cc:0b:36:47:5b: a3:ae:b9:63:65:9e:b5:3f:0e:79:51:1c:83:ac:de:08:6f:a9: c1:d0:52:dd:4a:8b:7c:55:10:8e:a3:cc:55:39:71:49:4d:06: 3b:a8:fe:40:a3:aa:ed:04:53:4e:5b:ee:0f:c1:40:4f:5f:03: 3e:f0:47:c3:0d:d2:e3:61:97:fe:76:e4:57:cd:79:a2:4d:b5: 56:32:5f:48:0c:30:6c:a3:00:67:e5:65:32:33:d5:7d:68:a5: 0e:24:c8:bd:50:b1:af:e7:af:0e:f9:ad:eb:84:da:a7:50:f2: 26:30:a0:e1:b6:20:78:cd:24:2c:fc:6a:21:ce:92:65:52:25: 0c:48:94:c9:71:c9:18:32:6e:92:76:c4:10:95:62:e5:fa:f0: 40:c3:e0:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxM0IxMTAvBgNVBAUTKERCOTJENDNDOTA2MTI1MDVCM0FGNDZFOTY0QTY4Q0M5 RjVGM0IyQUYwHhcNMjYwNDI3MDA0MDAwWhcNMjYwNTA0MDA0MDAwWjAYMRYwFAYD VQQDEw02OWVlYjA2MC0wYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnT5lMlFTHvPB9ZaJPbEiy27ukkoKRcEAn26B9eg/j8Urf90XItHdX8RgoGVf 3VTdVImSZE+CKIMQWTOJHM+ckx9DkudXAMXfnss+LltQEdOp++7x/L5xkezXwS25 Ipq5GIodrEsmidTAasA8w7b+a3glfQE7n7yT5yX7jXl2WTpZhc4VRP60DSkgipVb s7KnUw38UgbSGgdXbpT/Zu4gwELqelhJINw+nqHXdfBpmoi+28K1P6Z2cQ6NqEyd bVvUz/2PmFghu02/mju1R40dGvH5kxwwqsRaI8/Q4lHPjAPe6wzA4uvokWAHgb0K j0QHUJ8vZ3l2pvG48XkyHy37VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVr/NBe Be+LKAZ9JM66/spBoGQpMB8GA1UdIwQYMBaAFNuS1DyQYSUFs69G6WSmjMn187Kv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjEzQi8wNzA3NkZBMEQ5 QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpRV3pyMGJwWkthTXlmWHpz cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1TFVQSkJoSlFXenIwYnBaS2FNeWZYenNxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjEzQi8wNzA3NkZBMEQ5QzkxMUVDQkUwMDdGNkFDNEY5QUUwMi8yNUxVUEpCaEpR V3pyMGJwWkthTXlmWHpzcTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU9H2EePgcSPnK5UjD1UcxPcmKLJAozJnMm0QdTpUb3fATzwwhhuIpYL5gAm7 ULYrpWHeu0DdGnwtVVLuwj7RNl2DCu0MUXzmr7kk2aDseg/qNzqw7v3nItkZ65Kn iFbcQqLOVEW1tswLNkdbo665Y2WetT8OeVEcg6zeCG+pwdBS3UqLfFUQjqPMVTlx SU0GO6j+QKOq7QRTTlvuD8FAT18DPvBHww3S42GX/nbkV815ok21VjJfSAwwbKMA Z+VlMjPVfWilDiTIvVCxr+evDvmt64Tap1DyJjCg4bYgeM0kLPxqIc6SZVIlDEiU yXHJGDJuknbEEJVi5frwQMPgjw== -----END CERTIFICATE-----Generated at Tue Apr 28 12:45:39 2026 by rpki-client