$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: WFeGWVSz0donCpoGFMVsqCPhLKy+wPEEPSnnq9m+8ps= Subject key identifier: 27:DE:B5:1D:B4:E5:C4:EF:C2:9E:48:37:AF:2C:55:62:A4:AD:36:82 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 01F5 Signing time: Sun 05 Apr 2026 02:44:38 +0000 Manifest this update: Sun 05 Apr 2026 02:44:38 +0000 Manifest next update: Sun 12 Apr 2026 02:44:38 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: SfrCc2GLmB3cLGRA71Z5hPqzw7H0FUWRh1aXVDvditY=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: Jy8XOiA0kN27oXJXLhTzYwQbS1Mw45QfiLEVZ4JMgEM=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: +VGb3DLO/rVhkz02/GwA3CkCqPb4QLi9bk86uPT+tR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Apr 5 02:44:38 2026 GMT Not After : Apr 12 02:44:38 2026 GMT Subject: CN=69d1cc96-953e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:ff:ab:3f:3e:17:5c:73:dd:58:05:b8:b5: fd:b6:33:f9:9a:57:c4:e2:07:22:c6:a5:f6:c8:9d: b0:42:a3:6c:1c:61:78:99:4e:8a:7c:29:2e:3b:ec: 45:d4:06:5b:14:9a:34:63:ef:50:40:55:c8:28:f6: f1:e7:40:2b:8c:f9:6d:1b:ca:e3:6f:07:da:60:0f: 7d:4f:51:d4:1e:79:ab:bd:ff:02:10:cd:7e:68:db: 6b:fa:9e:de:34:90:33:06:e4:25:d3:ff:7e:49:4c: 56:d9:94:b0:23:3c:84:be:a3:d8:8d:87:50:6d:9f: 6b:87:ae:9a:3a:c2:7b:5a:93:db:ac:a7:56:db:d6: 1e:7a:d8:71:19:16:c2:b9:63:69:d5:83:35:a1:48: 52:92:10:df:de:ea:1c:6d:a0:e6:07:67:57:2d:d5: 6e:92:72:36:eb:e7:b2:47:94:1a:7e:e8:77:e6:79: b5:93:4b:37:ba:33:eb:1e:4e:ca:a4:53:6a:57:be: 1a:be:d9:ca:44:d3:6d:3b:b4:62:9d:b2:2b:46:d6: 5d:33:e7:bd:c3:fa:7c:6d:01:76:f6:b4:96:4b:ef: d1:6a:d0:2e:0a:28:d9:f0:5d:17:39:cc:72:a0:75: 6a:7f:df:a8:75:8f:24:7e:13:ae:62:2d:c2:04:aa: d4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DE:B5:1D:B4:E5:C4:EF:C2:9E:48:37:AF:2C:55:62:A4:AD:36:82 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:7a:22:88:f8:4f:70:23:35:d9:24:27:4b:50:52:48:8e:e2: b8:34:d6:4f:4e:30:be:8d:74:3d:44:a0:bb:d8:2f:ac:38:2b: 89:f4:00:16:4d:5e:74:e3:59:a8:36:08:81:6b:f1:f4:05:27: 64:c3:fc:62:94:1a:7e:a1:fb:71:a0:a7:2c:f3:ed:56:b2:f1: aa:a5:5a:44:25:df:2a:06:3b:f8:87:c9:5c:c9:97:7e:c5:bc: a6:ce:bd:f7:59:8c:b3:44:07:e8:30:b2:17:0b:23:96:59:eb: 8b:b0:97:dc:c8:b5:80:69:01:c5:ca:70:37:ea:86:14:60:81: f3:2c:74:86:25:6b:cd:44:eb:08:b2:a2:fd:47:6a:3d:46:74: f7:ab:e7:33:c7:0f:00:fc:55:6a:36:e8:33:76:72:74:fd:ca: 99:ef:4b:d1:fa:e2:29:97:fc:21:1e:ad:0e:d7:e8:d0:2a:2d: db:84:c2:2a:db:0f:c1:c1:48:f5:98:16:2f:e6:a2:84:db:a7: 00:56:49:3b:fc:0e:3d:9b:14:6f:72:6d:08:9d:66:99:c5:54: 90:c5:aa:f8:a3:58:4b:de:f1:75:62:67:02:81:18:c9:17:c6: 13:f7:33:ca:7f:44:9e:c7:fd:36:34:d5:1f:e5:84:4e:a8:17: 7e:b2:90:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwNDA1MDI0NDM4WhcNMjYwNDEyMDI0NDM4WjAYMRYwFAYD VQQDEw02OWQxY2M5Ni05NTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMb/qz8+F1xz3VgFuLX9tjP5mlfE4gcixqX2yJ2wQqNsHGF4mU6KfCkuO+xF 1AZbFJo0Y+9QQFXIKPbx50ArjPltG8rjbwfaYA99T1HUHnmrvf8CEM1+aNtr+p7e NJAzBuQl0/9+SUxW2ZSwIzyEvqPYjYdQbZ9rh66aOsJ7WpPbrKdW29YeethxGRbC uWNp1YM1oUhSkhDf3uocbaDmB2dXLdVuknI26+eyR5Qafuh35nm1k0s3ujPrHk7K pFNqV74avtnKRNNtO7RinbIrRtZdM+e9w/p8bQF29rSWS+/RatAuCijZ8F0XOcxy oHVqf9+odY8kfhOuYi3CBKrU5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCfetR20 5cTvwp5IN68sVWKkrTaCMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADnoiiPhPcCM12SQnS1BSSI7iuDTWT04wvo10PUSgu9gvrDgrifQAFk1edONZ qDYIgWvx9AUnZMP8YpQafqH7caCnLPPtVrLxqqVaRCXfKgY7+IfJXMmXfsW8ps69 91mMs0QH6DCyFwsjllnri7CX3Mi1gGkBxcpwN+qGFGCB8yx0hiVrzUTrCLKi/Udq PUZ096vnM8cPAPxVajboM3ZydP3Kme9L0friKZf8IR6tDtfo0Cot24TCKtsPwcFI 9ZgWL+aihNunAFZJO/wOPZsUb3JtCJ1mmcVUkMWq+KNYS97xdWJnAoEYyRfGE/cz yn9Ensf9NjTVH+WETqgXfrKQ5g== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:47 2026 by rpki-client