$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: oE8VqiJj9BsrDI6iPCTeWjiqlD+bwTNXA9Dj2hGKFxQ= Subject key identifier: 9E:E8:42:61:DD:0A:E0:08:F7:4A:A0:71:9D:10:E2:ED:7A:BF:FD:FC Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 0382 Signing time: Fri 17 Apr 2026 00:43:00 +0000 Manifest this update: Fri 17 Apr 2026 00:43:00 +0000 Manifest next update: Fri 24 Apr 2026 00:43:00 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: QPnpWxfm59PUMO2mBAT00+EcBNhPhlWRsxc48HO6iss=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:42:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Apr 17 00:43:00 2026 GMT Not After : Apr 24 00:43:00 2026 GMT Subject: CN=69e18214-a6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:51:f6:4c:bd:75:94:74:de:f3:b3:ac:55:3b: 54:4a:8f:75:09:cf:21:14:db:4a:df:46:81:53:ab: da:1a:0a:bf:0a:14:24:1c:08:4a:5b:70:50:02:ef: 02:ef:81:a1:ce:cc:13:bf:74:20:62:1a:08:2c:26: ac:d3:67:21:ec:f2:ac:81:40:9a:86:1a:d0:64:40: 19:30:5c:c7:fa:35:72:f6:96:5d:ed:a1:53:72:2d: 40:8c:a8:ef:ec:56:0b:c7:d3:ec:3a:b5:3c:ff:49: e8:8a:5f:86:37:ba:88:e1:36:c1:42:df:69:0a:0a: 0d:27:0f:47:76:e0:ab:03:5c:cc:b7:36:7f:61:37: 86:c9:18:0a:4a:30:8d:b1:0a:d8:43:6c:7b:f8:61: 67:46:12:da:14:b0:15:f8:d1:07:ac:bd:00:38:19: 57:ec:af:c6:35:7f:97:fe:e5:10:3d:0b:26:3e:a1: 88:2f:65:29:89:cd:17:63:6e:78:0e:e6:17:65:49: b6:d7:b0:0d:19:11:ff:0b:38:cc:ed:a0:0f:99:d3: d7:2c:0d:2d:55:72:04:ea:31:51:09:90:5a:46:66: 05:37:74:3e:e8:1e:c0:c6:b1:a7:1b:e6:37:d6:8c: 4c:62:83:08:4f:99:5f:12:7c:1e:b8:0b:f4:09:99: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E8:42:61:DD:0A:E0:08:F7:4A:A0:71:9D:10:E2:ED:7A:BF:FD:FC X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:46:95:a8:f7:0e:0b:87:36:fe:cf:a5:6e:cc:57:b5:be:91: c3:3a:27:b5:f1:6d:ba:a3:fc:0b:62:8a:2f:bf:04:4e:c5:26: cb:f5:0f:9b:92:ed:e0:2a:a4:cb:b5:db:8c:32:fd:d3:ec:7f: 2e:30:57:76:24:d3:49:a4:e6:3c:77:62:ac:90:00:99:59:03: 6b:46:8f:88:26:dd:02:5a:3d:33:72:70:9b:fa:bd:24:b0:e2: 6a:01:58:ce:b5:84:26:11:de:71:63:35:77:82:94:71:00:48: b0:bb:7e:50:e0:b9:bf:8a:a0:89:56:99:78:fe:3c:92:c7:2a: 0e:11:9c:2b:76:ab:f4:cb:cb:d7:d4:6d:7b:9c:8f:d2:36:a6: 69:11:57:83:e1:18:42:6f:e0:4b:12:ae:9a:f0:ba:57:0e:5f: 63:ad:ab:df:2e:eb:a1:d6:79:0c:b3:da:a6:d5:d5:c1:df:65: d6:80:f7:da:c0:9e:07:d2:73:6a:e7:50:0d:0e:87:26:82:d0: b4:3f:69:2d:60:ec:70:cf:c9:0c:a4:54:49:32:48:17:82:d6: 00:22:c5:e5:46:1b:c1:b7:e4:92:f2:de:e8:a1:ea:46:56:e3: 09:fd:e6:06:2e:11:d6:56:b6:92:8e:d3:9e:4f:b9:c9:01:18: 74:a6:31:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjYwNDE3MDA0MzAwWhcNMjYwNDI0MDA0MzAwWjAYMRYwFAYD VQQDEw02OWUxODIxNC1hNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulH2TL11lHTe87OsVTtUSo91Cc8hFNtK30aBU6vaGgq/ChQkHAhKW3BQAu8C 74GhzswTv3QgYhoILCas02ch7PKsgUCahhrQZEAZMFzH+jVy9pZd7aFTci1AjKjv 7FYLx9PsOrU8/0noil+GN7qI4TbBQt9pCgoNJw9HduCrA1zMtzZ/YTeGyRgKSjCN sQrYQ2x7+GFnRhLaFLAV+NEHrL0AOBlX7K/GNX+X/uUQPQsmPqGIL2Upic0XY254 DuYXZUm217ANGRH/CzjM7aAPmdPXLA0tVXIE6jFRCZBaRmYFN3Q+6B7AxrGnG+Y3 1oxMYoMIT5lfEnweuAv0CZljcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7oQmHd CuAI90qgcZ0Q4u16v/38MB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiEaVqPcOC4c2/s+lbsxXtb6RwzontfFtuqP8C2KKL78ETsUmy/UPm5Lt4Cqk y7XbjDL90+x/LjBXdiTTSaTmPHdirJAAmVkDa0aPiCbdAlo9M3Jwm/q9JLDiagFY zrWEJhHecWM1d4KUcQBIsLt+UOC5v4qgiVaZeP48kscqDhGcK3ar9MvL19Rte5yP 0jamaRFXg+EYQm/gSxKumvC6Vw5fY62r3y7rodZ5DLPaptXVwd9l1oD32sCeB9Jz audQDQ6HJoLQtD9pLWDscM/JDKRUSTJIF4LWACLF5UYbwbfkkvLe6KHqRlbjCf3m Bi4R1la2ko7Tnk+5yQEYdKYxSg== -----END CERTIFICATE-----Generated at Fri Apr 17 14:37:16 2026 by rpki-client