$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft File: thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft (raw, json) Hash identifier: 2cUu5jvXohNS2LvZDvbpr7UIP5VZP03wFdUMTDRhnT4= Subject key identifier: 81:F1:41:3A:62:85:62:81:9A:C5:54:03:D7:40:DD:AF:AF:68:D8:3F Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Certificate serial: 0446 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft Manifest number: 0440 Signing time: Fri 17 Apr 2026 00:09:55 +0000 Manifest this update: Fri 17 Apr 2026 00:09:54 +0000 Manifest next update: Fri 24 Apr 2026 00:09:54 +0000 Files and hashes: 1: thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl (hash: V41HAsFxmhSbrVgZQskH1Gkakb+YEWPYyQ0l0MZYny4=) 2: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (hash: Kr35OqLAdLLcbYsUb9Idl/TWhv1QqY/qee8KwLiHvqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1094 (0x446) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118B32, serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995 Validity Not Before: Apr 17 00:09:54 2026 GMT Not After : Apr 24 00:09:54 2026 GMT Subject: CN=69e17a53-8653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:c1:ea:a2:50:3e:2a:08:2d:8a:cc:cb:f0: 75:ef:92:67:89:9b:98:8b:26:19:94:a5:b5:55:b7: 01:7d:c9:6a:46:c3:7e:fb:6c:71:7e:75:ef:e0:0e: d4:e6:7c:97:e1:f3:4c:10:c5:43:32:f8:74:73:83: 89:f1:1b:90:d6:c3:8d:ba:75:50:41:dd:9a:3f:d4: 2a:71:d1:05:7a:1b:7c:c6:4f:bb:bf:5b:da:46:be: 54:bc:f7:bc:5a:50:c9:b9:f6:20:20:9c:7c:88:db: 25:fc:87:33:c9:62:b0:1f:82:3f:13:be:06:42:c7: 3a:6f:0b:ff:65:f9:4c:fe:72:60:c1:41:22:0e:e7: 49:5f:b6:2f:b7:9d:76:c1:6f:0a:1c:a6:74:3c:51: 33:41:aa:8b:25:9a:2f:29:d5:d3:fe:cf:d8:41:fc: 10:76:c6:bb:24:b2:8a:3d:da:01:a6:f6:db:4b:6e: 70:94:49:a4:61:21:6c:3b:e5:bc:e5:b5:9e:f4:ea: fb:25:c4:38:a8:6c:0d:39:53:f2:17:a9:45:a7:6e: a9:8d:e9:ab:a2:68:00:19:91:f5:31:4e:49:f4:9e: 77:3b:65:6c:45:8a:ae:7e:7b:49:4d:d8:b2:fc:53: ad:e4:0f:9f:b8:37:92:c6:9e:35:58:e1:40:f6:b6: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F1:41:3A:62:85:62:81:9A:C5:54:03:D7:40:DD:AF:AF:68:D8:3F X509v3 Authority Key Identifier: keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:dd:91:20:b9:21:40:40:e6:7d:88:c4:5e:ce:ec:cb:81:24: 3d:79:45:8d:ae:3b:3f:ed:d0:92:c8:fa:1c:13:71:11:30:1b: 52:c3:85:91:f2:33:49:86:d3:4c:90:a9:2f:f2:7b:d1:12:01: 48:e3:1f:43:ab:7b:ae:ab:bc:01:ea:f2:48:08:94:d5:d7:07: 8f:52:f4:72:bc:e8:e5:dd:14:4c:7d:13:da:52:ec:ad:16:35: 6c:5a:88:27:89:47:6a:fb:4b:14:04:40:c1:3c:50:2c:cd:47: 49:b6:1b:f2:d8:49:99:65:74:9e:9b:7e:06:12:30:73:0a:e8: 3a:59:63:44:c3:b5:4c:85:63:3c:48:00:32:12:af:c2:83:7f: d1:22:76:78:2c:29:ed:b5:2b:9b:bd:39:32:13:4e:4b:86:56: 0f:67:b8:33:27:39:59:d0:e4:7d:4c:09:bc:51:23:d5:23:37: 78:b6:3c:a6:99:0a:94:f8:68:34:25:38:7f:5d:69:c6:0a:28: 8a:a5:53:b2:cd:fe:c1:d9:18:ae:8b:c9:43:07:fc:3b:b3:06: 95:6a:f4:63:26:66:ac:b1:26:78:af:df:5d:02:94:f5:0a:07: fe:3a:e6:e3:af:69:f4:9c:04:65:5c:4c:8d:53:66:27:00:67: a6:db:60:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThCMzIxMTAvBgNVBAUTKEI2MTEwM0E1QzlDQzYwRUFEMTg4QTJGOUZEMTFFNjNE NTIzM0Q5OTUwHhcNMjYwNDE3MDAwOTU0WhcNMjYwNDI0MDAwOTU0WjAYMRYwFAYD VQQDEw02OWUxN2E1My04NjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0anB6qJQPioILYrMy/B175JniZuYiyYZlKW1VbcBfclqRsN++2xxfnXv4A7U 5nyX4fNMEMVDMvh0c4OJ8RuQ1sONunVQQd2aP9QqcdEFeht8xk+7v1vaRr5UvPe8 WlDJufYgIJx8iNsl/IczyWKwH4I/E74GQsc6bwv/ZflM/nJgwUEiDudJX7Yvt512 wW8KHKZ0PFEzQaqLJZovKdXT/s/YQfwQdsa7JLKKPdoBpvbbS25wlEmkYSFsO+W8 5bWe9Or7JcQ4qGwNOVPyF6lFp26pjemromgAGZH1MU5J9J53O2VsRYqufntJTdiy /FOt5A+fuDeSxp41WOFA9racrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIHxQTpi hWKBmsVUA9dA3a+vaNg/MB8GA1UdIwQYMBaAFLYRA6XJzGDq0Yii+f0R5j1SM9mV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOEIzMi9GRjc3MUJCQzlE MjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlPclJpS0w1X1JIbVBWSXoy WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RoRURwY25NWU9yUmlLTDVfUkhtUFZJejJaVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OEIzMi9GRjc3MUJCQzlEMjUxMUVDODVGREYzNkVDNEY5QUUwMi90aEVEcGNuTVlP clJpS0w1X1JIbVBWSXoyWlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq92RILkhQEDmfYjEXs7sy4EkPXlFja47P+3Qksj6HBNxETAbUsOFkfIzSYbT TJCpL/J70RIBSOMfQ6t7rqu8AerySAiU1dcHj1L0crzo5d0UTH0T2lLsrRY1bFqI J4lHavtLFARAwTxQLM1HSbYb8thJmWV0npt+BhIwcwroOlljRMO1TIVjPEgAMhKv woN/0SJ2eCwp7bUrm705MhNOS4ZWD2e4Myc5WdDkfUwJvFEj1SM3eLY8ppkKlPho NCU4f11pxgooiqVTss3+wdkYrovJQwf8O7MGlWr0YyZmrLEmeK/fXQKU9QoH/jrm 469p9JwEZVxMjVNmJwBnpttgFw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:35:03 2026 by rpki-client