$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft File: -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json) Hash identifier: BT6RnLebZO3lp32T5e/L4zIslZZPdmH9aSUSTQHqxgo= Subject key identifier: 47:4E:1A:B2:22:53:A4:2B:FF:5E:A9:0D:6E:43:BA:F6:9A:F7:8C:80 Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 Certificate issuer: /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft Manifest number: D9 Signing time: Sun 05 Apr 2026 06:04:05 +0000 Manifest this update: Sun 05 Apr 2026 06:04:05 +0000 Manifest next update: Sun 12 Apr 2026 06:04:05 +0000 Files and hashes: 1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: Gf7F5cggG59jpaAoZpEZacqtd8omQhfqMpsLxoLvSUo=) 2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5 Validity Not Before: Apr 5 06:04:05 2026 GMT Not After : Apr 12 06:04:05 2026 GMT Subject: CN=69d1fb55-2620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:5c:12:4e:aa:60:c0:fb:91:86:ed:61:59: 33:65:95:02:28:56:c0:ac:63:88:18:81:e8:a2:5f: 36:45:80:ff:84:79:3e:d7:b6:98:8a:11:6e:0a:52: 70:94:ab:ba:96:cb:82:64:18:77:94:c6:fa:40:58: 67:5a:80:35:3a:ec:a3:ef:01:7d:3b:78:6f:27:4f: a7:a8:0a:ae:57:1d:8e:2b:8d:fb:bd:e9:b0:13:78: b5:fd:bd:86:9a:b7:2e:38:3f:06:8d:95:4c:46:f5: 55:0b:a2:a1:fd:6d:b3:e6:7e:83:1a:4a:7e:be:90: 77:4b:ee:cb:09:9c:99:b1:f8:0a:5b:ce:27:0b:86: 16:5e:30:b6:78:a6:73:63:60:7c:af:1b:44:99:7a: b3:22:c7:f8:b1:40:65:ad:fb:aa:38:d6:a1:2b:a2: 84:f7:64:d0:95:74:8e:4d:fe:af:16:8c:9c:99:0c: a3:39:f0:54:c3:18:82:f8:90:aa:bb:64:d8:a1:06: 59:9c:64:90:c0:97:58:c5:e2:90:ed:b0:e6:df:d2: c3:8e:5d:c5:7e:15:ff:bb:16:88:13:19:14:98:d8: c8:c0:d3:b8:62:58:23:3f:9d:75:5b:c4:2f:99:1e: 46:f8:2d:3b:a3:6a:d9:32:bc:11:d5:59:fe:7a:17: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:4E:1A:B2:22:53:A4:2B:FF:5E:A9:0D:6E:43:BA:F6:9A:F7:8C:80 X509v3 Authority Key Identifier: keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:f6:fa:e2:fd:be:1d:5e:ad:9b:c4:f0:e5:2f:a8:95:c5:3f: d1:ba:0e:97:1f:98:dd:a0:e3:11:7f:6e:dc:0d:d0:9e:c6:f2: b3:ff:bb:7f:8f:68:72:4a:2b:6f:a5:bb:f9:06:12:af:c5:6c: a4:af:d0:95:0f:85:2b:46:1b:47:35:60:58:8c:cd:c7:78:b1: fd:e0:53:52:aa:45:9a:61:e6:af:89:2d:bd:60:e8:63:c9:aa: cd:9e:59:94:6b:d5:4a:23:95:a1:d4:90:2e:f3:47:6c:57:b6: 0e:fa:cb:bb:7d:0f:58:8c:e5:aa:18:5a:94:a7:d1:4a:9d:7b: 6d:16:27:18:33:17:0a:aa:45:2b:53:a1:c3:86:56:c9:3c:22: 62:8e:33:6b:ab:e5:26:45:28:47:16:7e:b9:37:96:c6:99:45: bf:91:29:56:d8:fe:cc:26:1a:b8:56:ec:68:05:a4:2f:30:31: e3:b3:b2:36:bd:f5:75:7c:f2:3d:cd:b5:9b:ea:99:9b:57:a3: 44:14:7d:0f:4e:2d:93:fc:b6:8a:5c:d7:f6:5d:13:9f:5d:b4: ea:26:29:07:17:a1:f1:6a:cc:83:95:ae:04:92:8b:0b:56:e6: 5a:1b:a9:2c:b6:6f:69:5c:10:64:cd:5c:2d:95:d5:11:50:4d: 7e:bf:18:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI3NTkxMTAvBgNVBAUTKEZCNEI2ODNGQkE0REI2QUMxQTVBQzUwODgwN0ZDN0VB NDk2QzVFQzUwHhcNMjYwNDA1MDYwNDA1WhcNMjYwNDEyMDYwNDA1WjAYMRYwFAYD VQQDEw02OWQxZmI1NS0yNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD5cEk6qYMD7kYbtYVkzZZUCKFbArGOIGIHool82RYD/hHk+17aYihFuClJw lKu6lsuCZBh3lMb6QFhnWoA1Ouyj7wF9O3hvJ0+nqAquVx2OK437vemwE3i1/b2G mrcuOD8GjZVMRvVVC6Kh/W2z5n6DGkp+vpB3S+7LCZyZsfgKW84nC4YWXjC2eKZz Y2B8rxtEmXqzIsf4sUBlrfuqONahK6KE92TQlXSOTf6vFoycmQyjOfBUwxiC+JCq u2TYoQZZnGSQwJdYxeKQ7bDm39LDjl3FfhX/uxaIExkUmNjIwNO4YlgjP511W8Qv mR5G+C07o2rZMrwR1Vn+ehfIswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEdOGrIi U6Qr/16pDW5Duvaa94yAMB8GA1UdIwQYMBaAFPtLaD+6TbasGlrFCIB/x+pJbF7F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qjc1OS82OUMzQkVFNkVC NjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRxd2FXc1VJZ0hfSDZrbHNY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0wdG9QN3BOdHF3YVdzVUlnSF9INmtsc1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Qjc1OS82OUMzQkVFNkVCNjQxMUVGQTlBMkMyNjFDNEY5QUUwMi8tMHRvUDdwTnRx d2FXc1VJZ0hfSDZrbHNYc1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyfb64v2+HV6tm8Tw5S+olcU/0boOlx+Y3aDjEX9u3A3Qnsbys/+7f49ockor b6W7+QYSr8VspK/QlQ+FK0YbRzVgWIzNx3ix/eBTUqpFmmHmr4ktvWDoY8mqzZ5Z lGvVSiOVodSQLvNHbFe2DvrLu30PWIzlqhhalKfRSp17bRYnGDMXCqpFK1Ohw4ZW yTwiYo4za6vlJkUoRxZ+uTeWxplFv5EpVtj+zCYauFbsaAWkLzAx47OyNr31dXzy Pc21m+qZm1ejRBR9D04tk/y2ilzX9l0Tn1206iYpBxeh8WrMg5WuBJKLC1bmWhup LLZvaVwQZM1cLZXVEVBNfr8YeQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:50:25 2026 by rpki-client