$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: tQDOAwB7JR31gBwgV+jo28b8ZN2YRHgqKQRDrGQKW5k= Subject key identifier: 1A:91:5C:5D:98:1C:F2:2E:2C:E6:D9:70:AC:74:75:C3:CF:E4:B4:E5 Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0B16 Signing time: Sat 04 Apr 2026 19:09:07 +0000 Manifest this update: Sat 04 Apr 2026 19:09:06 +0000 Manifest next update: Sat 11 Apr 2026 19:09:06 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: WXJPDndBDase4WiV+kBR0/30gCgH7Ju5TWSoi1FC3fQ=) 2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2864 (0xb30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Apr 4 19:09:06 2026 GMT Not After : Apr 11 19:09:06 2026 GMT Subject: CN=69d161d3-f60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:82:01:b7:9e:e0:d5:6a:a4:7e:72:a5:f2:1f: ca:11:7e:57:f5:27:e6:73:c4:43:d5:5f:fc:e8:26: a0:c3:e7:fe:bc:e5:45:48:57:e6:6d:22:69:93:1e: 30:b8:11:ed:44:3e:1c:62:56:7f:33:a8:7f:fb:bc: 8d:50:a6:d8:5f:12:d9:d8:36:ae:98:2e:89:3f:5e: 40:79:0b:b6:f3:b8:ae:c4:49:35:74:28:85:42:24: 83:e6:fd:d0:1a:ae:b9:f4:a3:1d:ed:54:69:9a:52: af:ac:e0:8d:92:11:3a:23:82:d8:21:67:cd:20:b2: ee:85:4b:47:7e:93:85:93:62:c1:d4:a2:07:45:60: 61:11:88:9c:20:95:01:0c:61:3e:9d:5e:c1:4d:54: 9b:14:23:29:bc:9b:47:8e:ec:72:a1:8e:d2:cc:6d: c2:a0:fd:80:5b:c1:71:26:e8:f2:1d:f3:27:01:df: 93:8b:08:9e:e9:34:37:84:23:d7:ad:ca:5c:e9:c4: bd:49:7c:87:6a:11:55:53:6f:3d:cf:04:64:1b:cc: 99:2e:02:8a:02:04:4d:64:14:d1:bb:c5:e4:ed:64: a1:3a:6b:c1:c9:b0:04:f6:a4:33:66:1f:2f:cc:10: f2:78:57:5e:01:56:63:e6:01:e3:12:cc:36:3e:80: ab:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:91:5C:5D:98:1C:F2:2E:2C:E6:D9:70:AC:74:75:C3:CF:E4:B4:E5 X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1c:00:a3:87:00:2b:9c:6e:86:cd:a1:d7:ac:2d:6c:02:77: 50:d6:ae:df:08:87:1d:d9:1d:78:26:41:f2:9d:e7:f1:ab:bb: 05:4c:87:07:df:12:95:9b:e0:38:ab:c9:f1:b8:56:cc:7f:f4: db:99:17:67:c9:28:df:51:f0:12:e7:61:51:a8:57:aa:d5:95: b1:4f:65:36:ce:c7:49:c4:99:f7:c7:86:d8:42:91:ab:b3:ae: 30:9c:4f:fe:b3:aa:70:8e:7e:b4:9a:29:90:69:fe:01:69:8f: 14:95:c1:c3:e3:cf:19:dc:89:5c:ac:56:d2:b3:db:de:5d:78: bf:c5:6e:53:26:85:24:35:a4:2c:ce:08:81:90:cf:ba:24:f7: ae:02:37:74:a2:8b:69:e8:44:13:c3:85:ac:ce:dd:50:a7:cb: 87:8e:a9:2b:be:a0:77:07:69:e4:7f:83:cb:8a:8a:ee:d1:5d: 2a:6f:ec:5a:d5:7d:8a:b5:0c:b1:28:54:3c:21:78:ea:39:cd: 39:a9:62:cb:da:61:a8:7e:9a:a8:e7:d3:09:0c:33:fe:5f:25: 92:29:8c:7a:c4:95:fb:23:56:62:09:22:1d:57:69:4b:19:c0: 61:18:aa:7e:e2:e1:a4:f1:93:b8:1d:a5:b0:d1:7f:1f:2c:db: 20:b3:c8:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwNDA0MTkwOTA2WhcNMjYwNDExMTkwOTA2WjAYMRYwFAYD VQQDEw02OWQxNjFkMy1mNjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IIBt57g1WqkfnKl8h/KEX5X9Sfmc8RD1V/86Cagw+f+vOVFSFfmbSJpkx4w uBHtRD4cYlZ/M6h/+7yNUKbYXxLZ2DaumC6JP15AeQu287iuxEk1dCiFQiSD5v3Q Gq659KMd7VRpmlKvrOCNkhE6I4LYIWfNILLuhUtHfpOFk2LB1KIHRWBhEYicIJUB DGE+nV7BTVSbFCMpvJtHjuxyoY7SzG3CoP2AW8FxJujyHfMnAd+Tiwie6TQ3hCPX rcpc6cS9SXyHahFVU289zwRkG8yZLgKKAgRNZBTRu8Xk7WShOmvBybAE9qQzZh8v zBDyeFdeAVZj5gHjEsw2PoCrTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBqRXF2Y HPIuLObZcKx0dcPP5LTlMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArBwAo4cAK5xuhs2h16wtbAJ3UNau3wiHHdkdeCZB8p3n8au7BUyHB98SlZvg OKvJ8bhWzH/025kXZ8ko31HwEudhUahXqtWVsU9lNs7HScSZ98eG2EKRq7OuMJxP /rOqcI5+tJopkGn+AWmPFJXBw+PPGdyJXKxW0rPb3l14v8VuUyaFJDWkLM4IgZDP uiT3rgI3dKKLaehEE8OFrM7dUKfLh46pK76gdwdp5H+Dy4qK7tFdKm/sWtV9irUM sShUPCF46jnNOaliy9phqH6aqOfTCQwz/l8lkimMesSV+yNWYgkiHVdpSxnAYRiq fuLhpPGTuB2lsNF/HyzbILPIUQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:34 2026 by rpki-client