$ rpki-client -vvf rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft File: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft (raw, json) Hash identifier: 65RkYTXPcCvEjQlpQo1ZGM+xJ+shGFIcvMAAUZZ144w= Subject key identifier: 0A:98:41:F0:D5:63:B3:C1:B0:D6:20:EC:36:E2:72:54:23:FE:09:A2 Authority key identifier: FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C Certificate issuer: /CN=A919A3F0/serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Certificate serial: 0219 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft Manifest number: 020B Signing time: Sun 05 Apr 2026 02:40:53 +0000 Manifest this update: Sun 05 Apr 2026 02:40:52 +0000 Manifest next update: Sun 12 Apr 2026 02:40:52 +0000 Files and hashes: 1: _gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl (hash: UmZfsFDHHSZqaWRrRso06FDmTGOE/LlGAkPadg6glMk=) 2: 37D03D8CC48111F0BA91643FC4F9AE02.roa (hash: cpXny2w7RispSe37kaJTfb77RVD1gIo1S5cj5Rxm/G0=) 3: 27D894E81D4011F19325F4941B3D8C67.roa (hash: HG6t6YvzBlAumemzb2gstPcteAeL39jX+YuQ75GGVWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 537 (0x219) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A3F0, serialNumber=FE05EFB70125D520476F63BC609F554DC49AC59C Validity Not Before: Apr 5 02:40:52 2026 GMT Not After : Apr 12 02:40:52 2026 GMT Subject: CN=69d1cbb5-624c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:db:ff:0a:d9:d0:d4:dd:bd:f4:0d:08:c5: a1:0c:f4:67:6e:3b:74:5b:06:b5:a1:76:bc:70:f3: c6:2c:38:95:5a:e8:0b:39:43:e4:08:37:18:81:c0: 3a:57:d8:ab:92:41:de:bd:da:66:f3:cb:83:ea:7b: 03:8b:a2:8b:f4:e4:50:52:fd:55:9d:00:c7:22:f9: 3b:5e:07:c1:a3:3a:66:0d:4c:f9:d7:4d:7b:c0:15: 80:e0:12:fb:86:15:f6:9f:eb:20:3b:df:4d:63:24: c6:74:5d:0b:3c:23:d0:9c:79:2a:17:0b:0a:b7:a2: 8c:66:b0:56:8c:87:7e:10:82:e1:27:b9:b1:e0:af: 89:4f:b2:69:e5:92:11:43:90:4c:76:31:76:85:e4: 6a:46:bb:5b:06:2b:14:b0:df:7a:00:3a:db:c3:84: 1d:d1:a5:4f:26:5f:ab:6f:1f:69:46:fa:0e:8a:75: b9:4b:23:e7:7f:27:9d:a5:cf:ac:da:ad:bf:9e:30: fd:a2:44:4e:6b:3c:89:26:96:52:e5:11:fd:3b:9d: 81:a9:a5:3f:aa:7b:95:77:21:65:b1:69:20:ef:a2: cb:43:f4:ea:40:51:45:dd:09:a1:6c:ff:fb:77:9e: f3:da:f6:ac:1f:80:c1:cc:01:98:77:1d:20:d6:53: b9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:98:41:F0:D5:63:B3:C1:B0:D6:20:EC:36:E2:72:54:23:FE:09:A2 X509v3 Authority Key Identifier: keyid:FE:05:EF:B7:01:25:D5:20:47:6F:63:BC:60:9F:55:4D:C4:9A:C5:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A3F0/F3C2A9222B8A11EEADD2210CC4F9AE02/_gXvtwEl1SBHb2O8YJ9VTcSaxZw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:57:63:ed:69:d0:47:be:01:cd:3b:37:e6:0f:72:a7:60:2e: c5:96:20:67:da:f9:67:62:0a:6b:4b:6b:50:49:f1:08:10:1b: b9:3c:7b:f6:7c:d5:51:ea:cc:04:ac:2e:e3:25:9e:46:3f:69: 81:f9:f6:21:4f:d4:56:12:9e:ca:38:7e:c0:18:0f:9c:81:92: ea:1b:e8:f7:78:75:0c:84:61:c4:e5:a0:01:a6:81:73:a0:be: 13:bf:d3:4f:93:76:b9:80:d0:59:78:be:02:db:1f:fc:23:6c: 2f:f3:c8:ae:55:b4:72:98:da:92:ae:01:16:42:c3:14:42:6f: de:33:86:b1:5f:20:e1:a5:ac:dd:38:26:d1:da:ce:52:63:8c: 1c:4b:4b:b6:78:2f:3a:3d:98:76:7f:2f:f2:cf:68:54:fe:54: 46:65:85:ba:95:df:39:3b:03:28:7b:d4:38:22:88:94:c7:42: 5d:42:ae:9e:66:8a:41:b4:3b:dd:2f:e0:04:97:66:f1:6e:2c: 54:6f:b7:37:3a:d2:67:d4:fc:74:d2:79:28:a1:7a:0a:0c:b8: b0:c3:e4:8a:6d:51:6c:43:07:e0:f0:9d:44:7a:dc:a1:1c:a1: 58:98:7f:8f:8e:a3:94:7a:3b:f1:d3:54:b5:5e:fc:16:36:74: 6e:68:06:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUEzRjAxMTAvBgNVBAUTKEZFMDVFRkI3MDEyNUQ1MjA0NzZGNjNCQzYwOUY1NTRE QzQ5QUM1OUMwHhcNMjYwNDA1MDI0MDUyWhcNMjYwNDEyMDI0MDUyWjAYMRYwFAYD VQQDEw02OWQxY2JiNS02MjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6vb/wrZ0NTdvfQNCMWhDPRnbjt0Wwa1oXa8cPPGLDiVWugLOUPkCDcYgcA6 V9irkkHevdpm88uD6nsDi6KL9ORQUv1VnQDHIvk7XgfBozpmDUz51017wBWA4BL7 hhX2n+sgO99NYyTGdF0LPCPQnHkqFwsKt6KMZrBWjId+EILhJ7mx4K+JT7Jp5ZIR Q5BMdjF2heRqRrtbBisUsN96ADrbw4Qd0aVPJl+rbx9pRvoOinW5SyPnfyedpc+s 2q2/njD9okROazyJJpZS5RH9O52BqaU/qnuVdyFlsWkg76LLQ/TqQFFF3QmhbP/7 d57z2vasH4DBzAGYdx0g1lO5qQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAqYQfDV Y7PBsNYg7DbiclQj/gmiMB8GA1UdIwQYMBaAFP4F77cBJdUgR29jvGCfVU3EmsWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTNGMC9GM0MyQTkyMjJC OEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFTQkhiMk84WUo5VlRjU2F4 WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nWHZ0d0VsMVNCSGIyTzhZSjlWVGNTYXhady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTNGMC9GM0MyQTkyMjJCOEExMUVFQUREMjIxMENDNEY5QUUwMi9fZ1h2dHdFbDFT QkhiMk84WUo5VlRjU2F4WncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVVdj7WnQR74BzTs35g9yp2AuxZYgZ9r5Z2IKa0trUEnxCBAbuTx79nzVUerM BKwu4yWeRj9pgfn2IU/UVhKeyjh+wBgPnIGS6hvo93h1DIRhxOWgAaaBc6C+E7/T T5N2uYDQWXi+Atsf/CNsL/PIrlW0cpjakq4BFkLDFEJv3jOGsV8g4aWs3Tgm0drO UmOMHEtLtngvOj2Ydn8v8s9oVP5URmWFupXfOTsDKHvUOCKIlMdCXUKunmaKQbQ7 3S/gBJdm8W4sVG+3NzrSZ9T8dNJ5KKF6Cgy4sMPkim1RbEMH4PCdRHrcoRyhWJh/ j46jlHo78dNUtV78FjZ0bmgG1Q== -----END CERTIFICATE-----Generated at Mon Apr 6 08:27:31 2026 by rpki-client