$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft File: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft (raw, json) Hash identifier: TOMpJzvLHZcUf6q3p8VwIMxvFBsDriQJFNhHnvHHorg= Subject key identifier: 1C:6C:F2:11:E4:EF:3C:FF:23:5B:C7:71:3D:C4:72:81:D3:CB:13:C8 Authority key identifier: B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD Certificate issuer: /CN=A911BE38/serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Certificate serial: 029E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft Manifest number: 0291 Signing time: Fri 17 Apr 2026 01:30:28 +0000 Manifest this update: Fri 17 Apr 2026 01:30:27 +0000 Manifest next update: Fri 24 Apr 2026 01:30:27 +0000 Files and hashes: 1: sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl (hash: HEzwVZOzXIsva6ypOR3LaqG26Wd9Z5iHU9Fyhh8V8qU=) 2: 59DD05DA541E11EDB324CE7DC4F9AE02.roa (hash: P7sSHVPuY1Kf596MnR9z8qqEbhcKodu0GCazYWuA9b8=) 3: 417DA2566D5E11EE831C802AC4F9AE02.roa (hash: PDnEhXpybcfU5TbW/vsPqy6UwZtYUKAhQ/oRyYe81/U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 670 (0x29e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE38, serialNumber=B18C43743466921DB0425E7367D55C28EE4AF1CD Validity Not Before: Apr 17 01:30:27 2026 GMT Not After : Apr 24 01:30:27 2026 GMT Subject: CN=69e18d34-6177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:12:b6:95:1b:c5:1f:b0:8f:54:bc:29:2e:b3: 1c:d6:27:8e:07:59:2b:e5:c8:70:32:a2:65:18:c0: f7:57:f6:9d:a2:a0:11:51:c4:cc:93:49:e3:f6:4b: 5a:b8:f6:5d:d8:07:87:0e:ad:5c:f3:ff:5c:10:f6: 7e:a8:6f:ec:15:9c:d0:7d:79:b4:36:6d:0a:4f:51: fd:70:10:f1:a1:d5:d3:97:92:e3:2b:4c:fc:ec:f4: 69:46:14:6e:0b:1a:96:6c:15:c0:3c:76:a5:12:11: cf:48:1e:1a:29:30:56:88:30:cd:78:d9:b5:20:f0: c1:53:d4:bd:ff:8d:c2:0d:e4:49:8c:00:c5:1e:08: 20:71:72:2a:cb:73:54:4c:f9:b4:ca:2c:33:3c:b2: 94:5b:9e:56:9a:8f:44:9b:5c:29:32:cd:be:9d:b7: 12:85:0d:88:1e:52:a2:ef:b2:da:0a:39:d9:a1:11: e3:5c:77:af:cd:48:0f:30:8d:e2:71:0f:22:a6:ef: 8e:ea:44:45:1d:79:3a:fc:3d:bf:3a:f1:01:10:46: 99:37:7a:f5:a0:ce:bb:cb:db:bc:3d:20:66:29:b3: 50:6b:bf:03:20:3b:53:c3:5f:de:07:e0:5e:21:e3: 62:18:ca:e8:fa:ef:39:5c:af:92:81:3d:0b:b8:47: 1a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:F2:11:E4:EF:3C:FF:23:5B:C7:71:3D:C4:72:81:D3:CB:13:C8 X509v3 Authority Key Identifier: keyid:B1:8C:43:74:34:66:92:1D:B0:42:5E:73:67:D5:5C:28:EE:4A:F1:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE38/6DA2D9B2541B11EDBEBA4A50C4F9AE02/sYxDdDRmkh2wQl5zZ9VcKO5K8c0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:61:70:82:06:72:68:da:86:8e:97:f3:dd:9d:03:c0:1d:90: a1:a4:70:6d:7a:ec:83:8a:1b:1e:9f:8c:ef:fc:90:7c:93:e5: d8:9a:b2:6e:93:11:3b:fb:69:2b:6d:03:72:f6:49:b5:28:7f: a9:8e:0e:73:48:b0:2a:fa:7c:0b:44:46:aa:69:40:3a:8b:de: 0b:57:9d:44:f7:83:36:e8:74:2c:4d:73:e4:4b:53:78:aa:5e: 3e:7d:64:59:7b:d1:7e:d5:64:9e:ee:ea:75:50:71:65:fe:ce: 18:6f:4d:90:b5:61:48:f5:ef:8c:e0:31:64:28:e4:65:7c:52: 5a:c6:d6:0a:6f:ea:4a:84:ed:b3:c1:82:35:0b:00:ff:19:9c: 5d:4f:06:04:c1:6c:a4:04:7a:b8:a5:aa:50:82:d8:56:f7:b1: b7:1e:23:63:d9:c6:18:f4:03:5b:69:e6:cd:25:5d:40:f9:7e: 63:39:41:e2:e3:d1:93:76:fb:ee:c6:73:a9:6b:71:4b:6e:3b: 23:23:74:9d:14:01:00:96:d4:5c:50:73:3d:74:bc:38:5c:a2: 2c:c8:d1:ec:f6:59:77:c3:4c:0f:c3:9d:ed:08:d9:2e:0d:a4: 74:e2:d9:65:b8:ca:13:45:b7:b8:5e:af:26:3c:85:92:a0:7b: 80:b3:49:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJFMzgxMTAvBgNVBAUTKEIxOEM0Mzc0MzQ2NjkyMURCMDQyNUU3MzY3RDU1QzI4 RUU0QUYxQ0QwHhcNMjYwNDE3MDEzMDI3WhcNMjYwNDI0MDEzMDI3WjAYMRYwFAYD VQQDEw02OWUxOGQzNC02MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5BK2lRvFH7CPVLwpLrMc1ieOB1kr5chwMqJlGMD3V/adoqARUcTMk0nj9kta uPZd2AeHDq1c8/9cEPZ+qG/sFZzQfXm0Nm0KT1H9cBDxodXTl5LjK0z87PRpRhRu CxqWbBXAPHalEhHPSB4aKTBWiDDNeNm1IPDBU9S9/43CDeRJjADFHgggcXIqy3NU TPm0yiwzPLKUW55Wmo9Em1wpMs2+nbcShQ2IHlKi77LaCjnZoRHjXHevzUgPMI3i cQ8ipu+O6kRFHXk6/D2/OvEBEEaZN3r1oM67y9u8PSBmKbNQa78DIDtTw1/eB+Be IeNiGMro+u85XK+SgT0LuEcaFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBxs8hHk 7zz/I1vHcT3EcoHTyxPIMB8GA1UdIwQYMBaAFLGMQ3Q0ZpIdsEJec2fVXCjuSvHN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkUzOC82REEyRDlCMjU0 MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWtoMndRbDV6WjlWY0tPNUs4 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NZeERkRFJta2gyd1FsNXpaOVZjS081SzhjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkUzOC82REEyRDlCMjU0MUIxMUVEQkVCQTRBNTBDNEY5QUUwMi9zWXhEZERSbWto MndRbDV6WjlWY0tPNUs4YzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgmFwggZyaNqGjpfz3Z0DwB2QoaRwbXrsg4obHp+M7/yQfJPl2JqybpMRO/tp K20DcvZJtSh/qY4Oc0iwKvp8C0RGqmlAOoveC1edRPeDNuh0LE1z5EtTeKpePn1k WXvRftVknu7qdVBxZf7OGG9NkLVhSPXvjOAxZCjkZXxSWsbWCm/qSoTts8GCNQsA /xmcXU8GBMFspAR6uKWqUILYVvextx4jY9nGGPQDW2nmzSVdQPl+YzlB4uPRk3b7 7sZzqWtxS247IyN0nRQBAJbUXFBzPXS8OFyiLMjR7PZZd8NMD8Od7QjZLg2kdOLZ ZbjKE0W3uF6vJjyFkqB7gLNJSg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:09:14 2026 by rpki-client