$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft File: 40tPgNnj9wC8rExSxasj61t-37s.mft (raw, json) Hash identifier: +n6YEP0+eDgm0UtovkOQGRfxkHexdylPJxJz09hDl3U= Subject key identifier: 6F:F4:44:79:9C:61:32:B0:5C:72:FB:25:23:0B:AF:FD:D5:42:E3:4F Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB Certificate issuer: /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft Manifest number: 01E2 Signing time: Sun 26 Apr 2026 23:12:24 +0000 Manifest this update: Sun 26 Apr 2026 23:12:23 +0000 Manifest next update: Sun 03 May 2026 23:12:23 +0000 Files and hashes: 1: 40tPgNnj9wC8rExSxasj61t-37s.crl (hash: j2O4M3dd/vyiPcxcAhqqfN8Y2HjViBEM/w7WLIgn0FI=) 2: 1E4ABC8C50C111EFA64C2437C4F9AE02.roa (hash: eMoNWFAjlk42wYo90tOjaYJfYKyeXSPXFsOpwUhELOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB Validity Not Before: Apr 26 23:12:23 2026 GMT Not After : May 3 23:12:23 2026 GMT Subject: CN=69ee9bd7-48fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:ad:32:af:bb:ad:b3:c4:4c:7a:10:99:4b: 46:5e:28:d7:10:a1:31:12:69:eb:3e:7e:45:c0:56: e4:b8:6e:c9:6e:99:ea:f4:23:c4:dd:42:e2:66:b2: 33:6e:da:30:b6:a0:2a:9a:cb:c6:99:f6:11:99:0e: 2d:b5:03:95:3b:27:60:77:0b:13:17:ac:d0:bb:bb: 90:f8:c5:87:04:ff:b0:9f:18:3f:95:8c:12:88:aa: e7:49:cd:23:02:b5:d9:25:5a:d0:54:dd:41:79:0c: b6:1a:b6:15:5a:ec:31:63:5d:10:5a:a5:5d:18:10: 37:4a:2e:59:11:ed:39:b2:41:d3:6e:5d:99:c9:83: 7c:94:63:24:1c:c5:e2:4f:34:89:6d:8d:df:a0:f6: f8:6d:86:a1:a8:84:94:50:dd:13:48:12:ed:a0:c9: fb:c7:db:03:eb:9d:37:0f:4c:0d:5e:9b:fd:0f:a9: b2:7d:85:26:2f:07:75:f9:91:a8:65:f2:2f:08:84: 23:ad:33:8c:25:de:af:66:c7:7d:71:ca:c6:7a:5e: 49:e0:eb:c6:b7:f6:e3:03:f0:59:3d:fa:9a:53:e7: 4d:57:94:55:76:90:b6:4a:29:ac:fc:cf:8d:fc:e6: ff:65:56:68:55:91:e4:41:e1:c5:c7:34:28:7c:73: ca:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F4:44:79:9C:61:32:B0:5C:72:FB:25:23:0B:AF:FD:D5:42:E3:4F X509v3 Authority Key Identifier: keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:8e:31:ad:93:59:bd:83:9d:dc:27:8a:02:22:20:05:1a:6d: c8:d2:0b:72:2c:5b:3d:d7:02:87:b1:0b:02:c8:ee:40:ab:62: b8:af:37:55:38:46:7d:f5:76:e2:aa:ea:bf:cf:55:5e:f9:8e: e2:38:e9:49:5b:c4:06:03:aa:fd:ef:65:ba:97:b0:6d:9d:75: dc:59:d1:45:df:2b:9d:ce:47:38:9c:40:8d:ee:32:af:a7:d6: 24:7c:92:c2:a7:0c:98:9a:2a:40:75:f4:de:bb:20:01:9d:ea: d5:f2:5f:f5:85:09:0a:b8:63:3c:53:65:73:46:44:79:35:2a: 4f:2f:fe:9f:58:ac:a3:3e:eb:89:19:a6:51:23:e7:da:ec:51: d1:c7:ef:7c:60:2a:e6:29:1f:61:82:0b:d4:e8:3d:6e:58:ec: 55:ea:72:19:1f:6d:1c:5d:bb:a0:c0:11:22:5a:9f:84:3d:53: 0e:db:b7:3c:d8:ca:af:07:48:c3:e3:68:5a:2c:33:8a:91:bf: 36:e0:81:9b:f9:fb:a4:c5:92:30:a9:5e:69:4a:0d:86:34:5d: ab:21:95:bc:4c:8f:7b:41:02:c6:e6:4c:11:99:9e:fc:d3:9c: 7c:e9:61:3e:64:6b:8c:31:e4:b3:d7:a6:4c:6f:fb:48:2d:9d: fc:0b:e5:6f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKEUzNEI0RjgwRDlFM0Y3MDBCQ0FDNEM1MkM1QUIyM0VC NUI3RURGQkIwHhcNMjYwNDI2MjMxMjIzWhcNMjYwNTAzMjMxMjIzWjAYMRYwFAYD VQQDEw02OWVlOWJkNy00OGZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSGtMq+7rbPETHoQmUtGXijXEKExEmnrPn5FwFbkuG7Jbpnq9CPE3ULiZrIz btowtqAqmsvGmfYRmQ4ttQOVOydgdwsTF6zQu7uQ+MWHBP+wnxg/lYwSiKrnSc0j ArXZJVrQVN1BeQy2GrYVWuwxY10QWqVdGBA3Si5ZEe05skHTbl2ZyYN8lGMkHMXi TzSJbY3foPb4bYahqISUUN0TSBLtoMn7x9sD6503D0wNXpv9D6myfYUmLwd1+ZGo ZfIvCIQjrTOMJd6vZsd9ccrGel5J4OvGt/bjA/BZPfqaU+dNV5RVdpC2Sims/M+N /Ob/ZVZoVZHkQeHFxzQofHPKzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG/0RHmc YTKwXHL7JSMLr/3VQuNPMB8GA1UdIwQYMBaAFONLT4DZ4/cAvKxMUsWrI+tbft+7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy85NkU2Njc1QTc4 NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3QzhyRXhTeGFzajYxdC0z N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzQwdFBnTm5qOXdDOHJFeFN4YXNqNjF0LTM3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy85NkU2Njc1QTc4NEUxMUVFQjE5QUQzNERDNEY5QUUwMi80MHRQZ05uajl3 QzhyRXhTeGFzajYxdC0zN3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlY4xrZNZvYOd3CeKAiIgBRptyNILcixbPdcCh7ELAsjuQKtiuK83VThGffV2 4qrqv89VXvmO4jjpSVvEBgOq/e9lupewbZ113FnRRd8rnc5HOJxAje4yr6fWJHyS wqcMmJoqQHX03rsgAZ3q1fJf9YUJCrhjPFNlc0ZEeTUqTy/+n1isoz7riRmmUSPn 2uxR0cfvfGAq5ikfYYIL1Og9bljsVepyGR9tHF27oMARIlqfhD1TDtu3PNjKrwdI w+NoWiwzipG/NuCBm/n7pMWSMKleaUoNhjRdqyGVvEyPe0ECxuZMEZme/NOcfOlh PmRrjDHks9emTG/7SC2d/Avlbw== -----END CERTIFICATE-----Generated at Mon Apr 27 15:38:45 2026 by rpki-client