$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: G9vd0ncQiQb0kbJApBQOhn3PdAsnwZ80GtHXDW3Z/fE= Subject key identifier: 68:CF:FD:E7:C7:BB:DC:B4:40:59:82:79:D3:15:30:AF:7B:37:75:7F Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 05DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 05A8 Signing time: Sun 26 Apr 2026 23:12:29 +0000 Manifest this update: Sun 26 Apr 2026 23:12:29 +0000 Manifest next update: Sun 03 May 2026 23:12:29 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: 5fr3/R68qjTfdLg+SRJ776jLP1qdmfpKEzUJgoxWdbs=) 2: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=) 3: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=) 4: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=) 5: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=) 6: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=) 7: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 23:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1501 (0x5dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Apr 26 23:12:29 2026 GMT Not After : May 3 23:12:29 2026 GMT Subject: CN=69ee9bdd-b4a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:24:85:55:47:a6:e2:e5:1e:d1:be:a4:30: 26:ff:a9:6b:81:78:5a:2f:de:23:6d:0b:0f:78:ad: 10:6d:24:b6:d9:a0:b6:35:b8:cd:8a:56:e4:56:ee: 81:38:8b:9a:3d:a8:c3:8a:fd:9c:04:f0:c6:38:68: c7:1d:e3:14:06:47:cb:72:e4:0f:1f:bd:e9:32:9e: 92:04:d3:df:c6:fd:08:e1:50:c5:d4:29:c9:41:10: 55:ad:a6:99:80:a8:48:d0:76:c1:e5:f1:e5:c0:b6: d4:24:9d:9b:ab:7b:e2:c8:d5:af:20:01:ab:c4:98: 7e:23:f1:72:74:53:59:3a:23:2b:ac:b1:d6:5d:6b: 65:5d:f4:01:de:18:b1:a0:9d:ea:e4:32:cc:7b:6b: ba:51:30:69:44:5f:ad:96:43:50:21:97:26:6a:db: c2:25:dd:0d:ac:ec:47:c3:db:d1:86:9b:b8:41:d9: 46:f6:ab:6d:c6:e7:7c:cb:7e:ba:2e:15:c7:1e:70: 88:de:b5:eb:8f:35:40:e9:de:1a:63:9c:00:b1:6e: 9a:84:0a:b3:9a:8c:1a:1c:a2:da:c9:96:c7:c8:c4: a2:c0:3f:bc:40:43:b1:b1:39:2f:4f:b0:32:a8:ee: 2f:78:ca:e2:bd:ef:ff:15:ef:69:43:52:5c:6a:83: 24:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:FD:E7:C7:BB:DC:B4:40:59:82:79:D3:15:30:AF:7B:37:75:7F X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b4:ff:08:22:75:8b:f1:68:7b:b6:43:0d:4c:21:8a:1a:22: b3:8c:fe:6b:8e:fc:bf:c6:07:9b:32:32:8f:d7:4a:8f:8a:e4: 0f:cc:fb:af:f7:1e:f1:29:e1:c7:aa:ef:b2:d6:d0:25:75:d2: a2:f1:b5:78:48:e2:76:61:44:37:3d:a6:07:1c:58:b2:de:f3: b5:3f:9f:14:0d:8f:70:a4:fb:6f:c9:7c:bb:1d:50:83:7f:b5: f9:85:08:59:2c:78:58:6a:bb:b0:5d:18:43:d3:25:20:39:34: 14:62:ad:26:c2:45:4a:bf:fa:37:31:dc:b9:e5:dd:d3:6a:e1: 1b:52:25:b8:d3:16:27:03:61:b1:83:ab:bc:53:db:9f:db:19: 60:13:dc:c3:1d:fa:54:b3:e9:92:76:b8:da:7d:c9:d3:fc:65: 94:4b:10:26:fe:61:ba:3c:c8:ab:0a:cd:5c:e9:3f:5e:6f:f8: 2f:74:bc:af:9c:d5:2b:62:68:88:97:5a:7b:4e:43:d2:cd:8e: 3d:14:1e:72:f7:af:5b:2e:fa:ae:a8:a1:60:77:61:cd:79:5a: 3b:bc:fd:74:fb:a9:a3:67:23:90:70:22:26:4f:73:3a:54:ab: 2d:5c:43:15:1d:2b:f2:da:02:c7:75:cf:87:41:e7:7b:7e:62: e3:6d:eb:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwNDI2MjMxMjI5WhcNMjYwNTAzMjMxMjI5WjAYMRYwFAYD VQQDEw02OWVlOWJkZC1iNGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnHgkhVVHpuLlHtG+pDAm/6lrgXhaL94jbQsPeK0QbSS22aC2NbjNilbkVu6B OIuaPajDiv2cBPDGOGjHHeMUBkfLcuQPH73pMp6SBNPfxv0I4VDF1CnJQRBVraaZ gKhI0HbB5fHlwLbUJJ2bq3viyNWvIAGrxJh+I/FydFNZOiMrrLHWXWtlXfQB3hix oJ3q5DLMe2u6UTBpRF+tlkNQIZcmatvCJd0NrOxHw9vRhpu4QdlG9qttxud8y366 LhXHHnCI3rXrjzVA6d4aY5wAsW6ahAqzmowaHKLayZbHyMSiwD+8QEOxsTkvT7Ay qO4veMrive//Fe9pQ1JcaoMkswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGjP/efH u9y0QFmCedMVMK97N3V/MB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD7T/CCJ1i/Foe7ZDDUwhihois4z+a478v8YHmzIyj9dKj4rkD8z7r/ce8Snh x6rvstbQJXXSovG1eEjidmFENz2mBxxYst7ztT+fFA2PcKT7b8l8ux1Qg3+1+YUI WSx4WGq7sF0YQ9MlIDk0FGKtJsJFSr/6NzHcueXd02rhG1IluNMWJwNhsYOrvFPb n9sZYBPcwx36VLPpkna42n3J0/xllEsQJv5hujzIqwrNXOk/Xm/4L3S8r5zVK2Jo iJdae05D0s2OPRQecvevWy76rqihYHdhzXlaO7z9dPupo2cjkHAiJk9zOlSrLVxD FR0r8toCx3XPh0Hne35i423rTg== -----END CERTIFICATE-----Generated at Mon Apr 27 15:37:58 2026 by rpki-client