$ rpki-client -vvf rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft File: sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft (raw, json) Hash identifier: yLKEgathGY6Ox/ouyxZA+nz3BToMcWZvfleESzbjwII= Subject key identifier: A2:6D:70:6C:E0:35:B1:3B:45:23:77:D9:23:B5:7B:21:5A:3E:B9:E6 Authority key identifier: B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 Certificate issuer: /CN=A911C53A/serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft Manifest number: A3 Signing time: Fri 17 Apr 2026 06:59:45 +0000 Manifest this update: Fri 17 Apr 2026 06:59:44 +0000 Manifest next update: Fri 24 Apr 2026 06:59:44 +0000 Files and hashes: 1: sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl (hash: FcyU9TjsIqtKQbXtJYxH6oB32PtyfspZ3+BcI58I+Nk=) 2: BDF659C4445111F0945A7E49C4F9AE02.roa (hash: 6VSQw9YwCSnxCiljcOXGVcuD3xshkqepVkI1Kl3yyDw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C53A, serialNumber=B08B59E5D10705C5CB2D3CDB8565B328D502F550 Validity Not Before: Apr 17 06:59:44 2026 GMT Not After : Apr 24 06:59:44 2026 GMT Subject: CN=69e1da60-30b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:f7:1e:2c:f0:b4:58:91:33:d4:6a:58:5e: a2:9a:d9:33:c9:d1:03:a9:c0:5d:e1:7b:82:98:fb: 5d:ad:96:24:b3:32:9c:69:15:0e:b0:69:c3:e3:14: 5c:28:10:af:8f:0a:0e:a6:e6:3e:bc:a2:89:55:0a: 0f:5c:ee:5b:a8:63:1c:73:89:d7:c2:c0:ec:c8:62: d4:60:2a:ad:0f:0a:64:69:25:60:02:42:da:6f:20: fc:b0:0d:3f:2a:80:35:51:62:43:85:12:36:69:b5: 29:1b:07:d3:93:e9:d8:76:d1:95:99:3d:d5:f4:67: f5:45:2a:77:5b:6d:7a:e7:10:de:55:9c:05:40:79: e8:6a:d0:4e:26:1c:d1:65:8b:a1:8e:9a:6f:16:f7: 2b:2c:07:54:fe:b5:07:d1:11:e5:92:6e:a9:ce:67: a6:2e:e4:23:60:2a:c8:7b:79:86:18:c1:eb:ad:5c: e9:97:d5:b7:e6:37:00:90:17:89:99:47:32:cb:9f: 3d:bf:b8:64:c2:0b:dd:df:ed:eb:d3:93:68:9c:d0: 7e:30:92:b5:de:c5:0f:97:58:34:43:a4:ac:ec:28: 97:e9:b2:b2:96:61:a1:8d:1e:54:ce:b9:23:cb:ac: 54:5f:14:d3:fb:c5:67:ae:98:98:df:1b:d3:e9:03: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6D:70:6C:E0:35:B1:3B:45:23:77:D9:23:B5:7B:21:5A:3E:B9:E6 X509v3 Authority Key Identifier: keyid:B0:8B:59:E5:D1:07:05:C5:CB:2D:3C:DB:85:65:B3:28:D5:02:F5:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sItZ5dEHBcXLLTzbhWWzKNUC9VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C53A/4745056E445111F0A09E8A24C4F9AE02/sItZ5dEHBcXLLTzbhWWzKNUC9VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b0:56:f2:1b:b5:0b:26:7b:79:6e:d5:66:d0:8d:d1:8a:3b: fe:d7:d3:40:90:d3:84:7b:fb:fc:69:2b:1d:04:6a:62:26:53: 03:52:76:f5:44:89:18:b5:00:05:00:f4:a3:65:e1:08:c5:4f: d5:15:d4:ca:e2:c7:d1:55:8b:5a:56:fe:33:18:a1:3e:d9:a3: a8:72:b6:39:50:6b:64:fe:5f:51:60:59:d6:57:89:b3:90:60: 6f:d1:4b:61:91:88:79:b6:9b:02:b4:c7:dd:fc:1d:07:b0:5a: fe:83:db:1e:3b:98:c9:5c:0f:74:eb:39:0e:13:06:86:70:31: 43:7a:d3:b0:da:7d:85:06:f2:09:ee:b9:db:51:0d:9c:13:09: 1b:ef:d9:c1:c4:ad:e0:1e:21:e8:d9:c4:39:4d:10:ae:a7:4e: a3:c8:7a:3b:a1:76:23:ee:fb:8c:49:76:e7:3e:00:48:38:e8: 19:d6:ff:a4:4a:56:28:f3:63:db:5b:00:02:f6:19:7b:6a:4e: 3b:c5:b3:f8:25:af:e1:84:0b:9e:64:39:0f:2b:2b:05:45:fc: a0:ac:40:63:48:13:01:93:7f:ce:a7:81:bf:26:b4:3a:f5:d7: 7f:c2:32:a1:be:26:92:76:13:af:98:b5:b5:67:c3:5b:c0:c1: 90:f1:34:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM1M0ExMTAvBgNVBAUTKEIwOEI1OUU1RDEwNzA1QzVDQjJEM0NEQjg1NjVCMzI4 RDUwMkY1NTAwHhcNMjYwNDE3MDY1OTQ0WhcNMjYwNDI0MDY1OTQ0WjAYMRYwFAYD VQQDEw02OWUxZGE2MC0zMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuC/3HizwtFiRM9RqWF6imtkzydEDqcBd4XuCmPtdrZYkszKcaRUOsGnD4xRc KBCvjwoOpuY+vKKJVQoPXO5bqGMcc4nXwsDsyGLUYCqtDwpkaSVgAkLabyD8sA0/ KoA1UWJDhRI2abUpGwfTk+nYdtGVmT3V9Gf1RSp3W2165xDeVZwFQHnoatBOJhzR ZYuhjppvFvcrLAdU/rUH0RHlkm6pzmemLuQjYCrIe3mGGMHrrVzpl9W35jcAkBeJ mUcyy589v7hkwgvd3+3r05NonNB+MJK13sUPl1g0Q6Ss7CiX6bKylmGhjR5Uzrkj y6xUXxTT+8VnrpiY3xvT6QN8DwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKJtcGzg NbE7RSN32SO1eyFaPrnmMB8GA1UdIwQYMBaAFLCLWeXRBwXFyy0824VlsyjVAvVQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzUzQS80NzQ1MDU2RTQ0 NTExMUYwQTA5RThBMjRDNEY5QUUwMi9zSXRaNWRFSEJjWExMVHpiaFdXektOVUM5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NJdFo1ZEVIQmNYTExUemJoV1d6S05VQzlWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzUzQS80NzQ1MDU2RTQ0NTExMUYwQTA5RThBMjRDNEY5QUUwMi9zSXRaNWRFSEJj WExMVHpiaFdXektOVUM5VkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAirBW8hu1CyZ7eW7VZtCN0Yo7/tfTQJDThHv7/GkrHQRqYiZTA1J29USJGLUA BQD0o2XhCMVP1RXUyuLH0VWLWlb+MxihPtmjqHK2OVBrZP5fUWBZ1leJs5Bgb9FL YZGIebabArTH3fwdB7Ba/oPbHjuYyVwPdOs5DhMGhnAxQ3rTsNp9hQbyCe6521EN nBMJG+/ZwcSt4B4h6NnEOU0QrqdOo8h6O6F2I+77jEl25z4ASDjoGdb/pEpWKPNj 21sAAvYZe2pOO8Wz+CWv4YQLnmQ5DysrBUX8oKxAY0gTAZN/zqeBvya0OvXXf8Iy ob4mknYTr5i1tWfDW8DBkPE0kg== -----END CERTIFICATE-----Generated at Sat Apr 18 01:05:09 2026 by rpki-client