$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft File: DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft (raw, json) Hash identifier: A5SGRaXWzox8X8zWs8T+A56yZKoUNF0ZYFTUu431bHY= Subject key identifier: D9:F9:A5:74:F0:8A:54:66:78:B0:A1:F9:18:AF:62:93:21:11:A0:41 Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 Certificate issuer: /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Certificate serial: 180E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft Manifest number: 17E7 Signing time: Sat 18 Apr 2026 16:28:15 +0000 Manifest this update: Sat 18 Apr 2026 16:28:14 +0000 Manifest next update: Sat 25 Apr 2026 16:28:14 +0000 Files and hashes: 1: DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl (hash: YSRmvNe0PvTli2jWRuGUOR9nKDbFxQ9THK1J13CL1C0=) 2: FDA89E2CA33511EBA984863CC4F9AE02.roa (hash: G1K2oOJN8JSdZJH7sAiV+vdZ3tm2/QChp9HUt6nzUkw=) 3: FEB0FC60A33511EBA984863CC4F9AE02.roa (hash: eNCAWuAh5KW5qBuvE5k2vNN9F1eCn7J5iVfhenudu/g=) 4: 04AB29D8DFEE11E7B0E71D1CC4F9AE02.roa (hash: 6SGIVV8UzkYI8imkUH9CHf8Pfdrw5iBU8LEsd0w7wTY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6158 (0x180e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5 Validity Not Before: Apr 18 16:28:14 2026 GMT Not After : Apr 25 16:28:14 2026 GMT Subject: CN=69e3b11e-15da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:db:2b:1f:da:c3:d0:c0:eb:f4:a8:bf:1c:38: ae:89:7a:b9:ec:11:cc:7f:ed:7e:04:87:ca:9a:01: d0:dd:3d:3b:be:4d:12:96:bb:bb:13:5e:b8:fc:10: ad:ac:8b:63:f9:dc:ae:84:bc:49:9f:ea:f0:2d:b6: e8:36:3f:72:2d:85:be:0c:5c:15:c9:bb:22:64:d2: 19:74:98:10:bd:03:19:ff:f2:12:f9:40:c1:5a:66: 48:d2:5a:75:4d:2d:ed:2c:dc:a7:b1:73:a9:7c:8a: 34:70:2f:f7:97:36:e4:7a:0a:8d:b8:5c:a1:37:de: 22:23:45:8d:87:11:a9:99:26:38:c8:1c:32:cc:27: e8:a1:27:6c:3e:2f:c7:0b:3c:bf:36:f6:cd:48:39: a1:96:6f:8a:59:c6:09:b3:4d:ca:7f:d4:9e:16:ae: db:f5:23:4e:1d:07:ef:95:6d:e3:a0:f1:b4:54:28: 7a:88:58:8a:c5:bc:47:e8:51:83:ac:a0:10:20:c3: 52:f9:fa:d3:73:df:79:36:69:53:8f:0f:14:d3:0f: 32:7f:81:c3:e0:fa:a8:c5:02:60:d5:04:3e:75:3f: 1d:ab:3a:95:99:81:b2:a0:9a:0f:38:b4:1c:98:7b: 74:0a:4e:fb:e9:d6:74:69:5d:7c:6c:b2:0b:8e:a7: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:A5:74:F0:8A:54:66:78:B0:A1:F9:18:AF:62:93:21:11:A0:41 X509v3 Authority Key Identifier: keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:7b:b6:ce:b5:f1:84:3d:df:fc:f3:ab:e4:d9:6d:c9:3d:27: 8f:90:d6:8e:19:54:2f:67:97:02:89:c6:e3:e2:e9:14:b7:e6: cf:4f:bb:93:a3:2f:81:9f:ec:c0:e7:67:89:48:ff:70:39:97: 98:1a:b4:d8:53:7d:fd:27:e4:a6:31:fb:1e:dc:1d:bf:b5:38: 52:bf:00:47:49:2c:14:0e:27:6f:ef:98:23:f2:e5:13:a7:8c: 88:ee:c9:f0:57:37:60:40:62:33:44:0b:d3:77:4f:d3:bc:2e: ef:9b:a1:76:ce:59:41:e2:b2:cb:07:69:6a:88:63:23:42:bc: 63:c6:aa:fd:f4:12:ba:83:5b:5e:f2:a6:62:cd:77:97:8b:35: 5f:9d:0a:54:aa:e4:08:47:ec:d9:9a:54:8a:e2:b0:5d:0f:b8: 86:82:fd:d0:fe:ce:70:25:38:32:df:b5:52:26:44:1b:47:8c: bd:04:dd:0d:2c:d1:93:b1:00:26:0a:00:98:f8:5a:9a:99:bf: 3f:b6:17:03:de:a2:76:82:aa:8f:d8:d1:bc:ad:fb:91:5b:c8: 15:5c:bb:63:49:8d:41:5a:de:d4:66:5a:d7:80:5f:3e:60:86: ae:31:99:a3:3b:3a:1e:7c:39:e9:1d:8a:49:09:63:fa:8e:15: ac:d8:88:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ5NUYxMTAvBgNVBAUTKDBDNUE1NDJBMUU5QjNGQjVDOEU0OTY4NkVCRUJDRkMw NTBDQ0U0QTUwHhcNMjYwNDE4MTYyODE0WhcNMjYwNDI1MTYyODE0WjAYMRYwFAYD VQQDEw02OWUzYjExZS0xNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdsrH9rD0MDr9Ki/HDiuiXq57BHMf+1+BIfKmgHQ3T07vk0Slru7E164/BCt rItj+dyuhLxJn+rwLbboNj9yLYW+DFwVybsiZNIZdJgQvQMZ//IS+UDBWmZI0lp1 TS3tLNynsXOpfIo0cC/3lzbkegqNuFyhN94iI0WNhxGpmSY4yBwyzCfooSdsPi/H Czy/NvbNSDmhlm+KWcYJs03Kf9SeFq7b9SNOHQfvlW3joPG0VCh6iFiKxbxH6FGD rKAQIMNS+frTc995NmlTjw8U0w8yf4HD4PqoxQJg1QQ+dT8dqzqVmYGyoJoPOLQc mHt0Ck776dZ0aV18bLILjqf0VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNn5pXTw ilRmeLCh+RivYpMhEaBBMB8GA1UdIwQYMBaAFAxaVCoemz+1yOSWhuvrz8BQzOSl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDk1Ri83OEQ1RDg5NkRG RUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3WEk1SmFHNi12UHdGRE01 S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RGcFVLaDZiUDdYSTVKYUc2LXZQd0ZETTVLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDk1Ri83OEQ1RDg5NkRGRUMxMUU3QTI3QTIyMTNDNEY5QUUwMi9ERnBVS2g2YlA3 WEk1SmFHNi12UHdGRE01S1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq3u2zrXxhD3f/POr5NltyT0nj5DWjhlUL2eXAonG4+LpFLfmz0+7k6MvgZ/s wOdniUj/cDmXmBq02FN9/SfkpjH7Htwdv7U4Ur8AR0ksFA4nb++YI/LlE6eMiO7J 8Fc3YEBiM0QL03dP07wu75uhds5ZQeKyywdpaohjI0K8Y8aq/fQSuoNbXvKmYs13 l4s1X50KVKrkCEfs2ZpUiuKwXQ+4hoL90P7OcCU4Mt+1UiZEG0eMvQTdDSzRk7EA JgoAmPhampm/P7YXA96idoKqj9jRvK37kVvIFVy7Y0mNQVre1GZa14BfPmCGrjGZ ozs6Hnw56R2KSQlj+o4VrNiI2g== -----END CERTIFICATE-----Generated at Sat Apr 18 21:06:58 2026 by rpki-client