$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: dRMhtcnZFgZn08Ii32nQbZTw/XxIEBpYUSeqIzpnksQ= Subject key identifier: BF:D4:6C:38:59:AD:6F:A0:B3:0C:F8:62:EA:8F:FD:58:97:29:E8:49 Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 0255 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 0242 Signing time: Fri 17 Apr 2026 02:17:20 +0000 Manifest this update: Fri 17 Apr 2026 02:17:19 +0000 Manifest next update: Fri 24 Apr 2026 02:17:19 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: OQMZuoVmwbjtn890efSwnjanynzeHDJyrU1kf2aW7dQ=) 2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: 6+mSiCWxaNbfZ0/GasxMsSn1EmvZTNxPDtyY0zKhs0o=) 3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: zawi/wlEpNQoVrlgeNzoGXkUSXbiRvgZkdxKTLUCpcw=) 4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: kxn0Dg877a3vfvZmxRWSok8mv3qj9xPRSNnHx7tUEbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 597 (0x255) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Apr 17 02:17:19 2026 GMT Not After : Apr 24 02:17:19 2026 GMT Subject: CN=69e19830-937e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7a:e6:a3:6e:9f:e1:dc:fa:7e:e1:6f:e8:f2: d7:74:0e:a5:b4:d2:ea:94:9d:a8:54:41:bf:5e:be: 80:87:b0:85:29:e4:f0:b5:f8:6a:0c:eb:6f:a3:c6: ae:c2:17:5b:4f:b4:83:cc:9e:aa:b1:47:3e:b5:f9: d6:ae:fc:28:78:49:e2:2b:66:08:47:1f:21:b3:d3: b1:76:fb:33:96:d3:79:c9:bf:d7:c6:0b:6a:89:81: a5:b3:36:95:76:9d:e9:28:a9:33:3d:7c:10:7e:e8: 2c:5b:5d:f3:c6:e4:5d:f9:b9:d3:fa:d3:a0:f4:88: 5b:09:c9:5c:ac:eb:f4:c6:9a:5d:73:1d:28:52:d8: 4a:fb:2e:18:b2:1f:91:4f:3c:9b:18:39:05:64:0f: ed:1a:8d:3b:71:59:1c:f0:7a:27:52:97:6f:83:f0: a9:48:ca:23:77:9a:50:74:c5:1d:03:d0:b0:8a:74: 4e:85:10:33:39:0e:2d:d7:c2:3f:c0:e2:fa:25:13: cc:15:ad:2c:80:49:3c:24:a9:04:22:44:fe:e7:92: e7:24:26:21:83:e5:96:84:c0:43:0f:ef:dc:af:db: 0a:db:67:84:3a:58:75:0b:b3:ba:bf:5c:95:59:0b: 60:00:15:18:22:16:9c:bb:a6:39:7b:88:dd:2b:07: ec:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:D4:6C:38:59:AD:6F:A0:B3:0C:F8:62:EA:8F:FD:58:97:29:E8:49 X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dd:18:6e:02:20:38:85:b4:70:c3:c4:db:a1:89:d9:4b:ca: 9d:a5:d4:44:52:a7:c9:98:f4:ab:45:29:31:2a:72:dc:d2:0b: 65:73:41:e0:0f:12:88:d2:9e:ff:91:7f:c3:f0:4b:c9:fe:1b: 5f:b0:97:19:61:bf:e1:7a:47:61:9d:e7:ba:2f:59:fc:17:44: 1e:1b:77:d9:88:92:a4:b6:c5:c8:b1:d5:cf:81:a0:ee:e0:74: 86:a3:75:2c:f5:38:10:c6:ab:03:32:3c:03:ca:a9:c3:87:e9: e2:3e:cb:f9:f4:6a:9d:52:8b:db:b2:de:66:ba:a0:b4:a3:0b: 3d:f3:d6:cf:4c:94:a2:06:f8:dd:a4:7c:93:b9:08:2f:1a:92: ba:62:99:bc:60:61:f8:e6:38:57:6a:ba:1c:c0:67:48:94:24: 63:d1:04:83:e1:7d:10:18:c3:59:3e:c4:c2:37:95:b4:50:2e: 2c:e2:d4:48:2e:3c:bd:ec:38:4f:c5:a6:2b:d9:3f:b6:bc:46: d8:45:dd:58:58:4c:d9:4a:2f:7f:81:9a:8d:4c:3a:20:7c:6b: 33:29:d1:b5:4d:4a:34:d1:e7:e2:ca:7e:c4:a7:99:20:13:06: 1a:32:3b:f9:b8:f1:20:52:03:de:9c:96:4b:20:c8:ec:b9:60: 63:45:71:2c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjYwNDE3MDIxNzE5WhcNMjYwNDI0MDIxNzE5WjAYMRYwFAYD VQQDEw02OWUxOTgzMC05MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnrmo26f4dz6fuFv6PLXdA6ltNLqlJ2oVEG/Xr6Ah7CFKeTwtfhqDOtvo8au whdbT7SDzJ6qsUc+tfnWrvwoeEniK2YIRx8hs9OxdvszltN5yb/XxgtqiYGlszaV dp3pKKkzPXwQfugsW13zxuRd+bnT+tOg9IhbCclcrOv0xppdcx0oUthK+y4Ysh+R TzybGDkFZA/tGo07cVkc8HonUpdvg/CpSMojd5pQdMUdA9CwinROhRAzOQ4t18I/ wOL6JRPMFa0sgEk8JKkEIkT+55LnJCYhg+WWhMBDD+/cr9sK22eEOlh1C7O6v1yV WQtgABUYIhacu6Y5e4jdKwfs7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL/UbDhZ rW+gswz4YuqP/ViXKehJMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACt0YbgIgOIW0cMPE26GJ2UvKnaXURFKnyZj0q0UpMSpy3NILZXNB4A8SiNKe /5F/w/BLyf4bX7CXGWG/4XpHYZ3nui9Z/BdEHht32YiSpLbFyLHVz4Gg7uB0hqN1 LPU4EMarAzI8A8qpw4fp4j7L+fRqnVKL27LeZrqgtKMLPfPWz0yUogb43aR8k7kI LxqSumKZvGBh+OY4V2q6HMBnSJQkY9EEg+F9EBjDWT7EwjeVtFAuLOLUSC48vew4 T8WmK9k/trxG2EXdWFhM2Uovf4GajUw6IHxrMynRtU1KNNHn4sp+xKeZIBMGGjI7 +bjxIFID3pyWSyDI7LlgY0VxLA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:39:22 2026 by rpki-client