$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft File: _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json) Hash identifier: 0b+j+Yk3wmxuLIjeL0lFiKZkLxfkvnkb3qK666etGyo= Subject key identifier: 7E:4E:92:73:2B:98:3B:EF:67:84:F3:99:E4:A8:F2:0E:23:04:2A:B6 Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 Certificate issuer: /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Certificate serial: 3594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft Manifest number: 355C Signing time: Thu 16 Apr 2026 14:38:04 +0000 Manifest this update: Thu 16 Apr 2026 14:38:03 +0000 Manifest next update: Thu 23 Apr 2026 14:38:03 +0000 Files and hashes: 1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: MN4GRq07VoTQ92IMVUyK9L1293JX0lfF47Iy5p49rbo=) 2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=) 3: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=) 4: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13716 (0x3594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80 Validity Not Before: Apr 16 14:38:03 2026 GMT Not After : Apr 23 14:38:03 2026 GMT Subject: CN=69e0f44b-b216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:4a:03:b3:ab:5b:64:ec:6c:9c:7b:54:c0: df:79:4a:06:89:d8:94:49:c8:85:6b:ec:59:ff:0b: 7c:fd:76:50:05:bd:3b:a2:4f:03:d3:0a:62:43:1b: 3e:cb:c0:a4:66:7c:58:12:ab:e1:fc:c5:1f:ef:bb: 34:69:b3:b1:7d:20:d1:46:bf:ca:cd:e5:de:a4:0b: c7:34:bb:4a:85:e4:b4:85:b8:10:84:eb:47:80:b2: d1:13:e4:73:bc:72:ab:87:e9:42:f0:73:11:b1:de: 07:2e:2c:7d:f2:bd:42:64:5f:c5:af:0a:5d:1f:ce: 35:a9:2b:58:5b:0f:8f:c3:d4:b5:aa:9c:cc:4f:63: 78:02:4f:5e:76:af:18:3c:f2:35:08:dd:af:d7:2f: 6b:5a:fe:e8:53:b0:79:e5:86:45:08:ef:3e:ab:72: 0f:f1:3a:5f:18:a1:ec:2d:b7:68:fd:df:f4:d7:49: 5a:ef:a0:25:8a:01:1c:ad:7b:ac:16:0a:04:4c:f4: c7:9d:f0:49:5c:df:c1:2d:28:8b:dc:bc:99:4f:36: 21:40:b1:c7:76:4f:e7:f8:58:db:66:00:e9:b4:13: 67:78:23:1f:55:6b:15:f3:1e:92:6b:ec:d3:7a:43: 0b:36:c8:84:c9:ad:f1:f3:de:08:e5:5d:33:fe:69: 4c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:92:73:2B:98:3B:EF:67:84:F3:99:E4:A8:F2:0E:23:04:2A:B6 X509v3 Authority Key Identifier: keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:27:51:45:84:96:1a:51:bd:fb:8f:93:11:21:68:0b:74:08: 22:16:f9:b1:11:e3:4d:51:15:ed:c0:3e:c9:cb:7f:6f:d7:24: 05:53:80:d5:6f:3f:05:df:b2:16:48:ec:c8:89:37:32:3a:39: ff:8a:a7:68:b4:2a:c9:d4:a5:9f:97:3d:c6:d7:cd:24:e0:e9: 05:9b:fe:7d:9f:f9:88:3d:73:4e:cb:91:44:a8:12:a6:c4:aa: 97:8e:d7:78:9b:e5:67:43:d8:a2:fe:d4:28:c8:f4:ad:82:c8: 20:d0:dd:56:e6:b5:cf:2c:30:1f:63:49:fc:62:89:df:44:7a: 60:ce:01:a0:23:dc:d0:fe:82:7f:ec:b4:58:77:2d:bf:38:b3: 9f:5e:9f:a9:aa:42:82:a3:51:35:d7:2b:97:83:14:a9:47:ba: d7:e4:da:bb:8f:91:50:f5:f4:9c:9f:a0:7c:e6:77:86:5c:4a: dc:e9:d9:46:1f:9d:bb:f0:26:d4:fe:b8:96:3e:cf:68:f5:46: 50:05:23:b7:07:9a:a0:08:3b:b8:ca:cc:38:15:2a:1f:e5:38: 8b:43:92:c9:ef:cd:c2:f4:27:83:b6:09:f1:2d:9c:97:72:f2: 97:48:36:ab:43:aa:8a:71:aa:cb:e4:44:aa:d0:f3:f1:5b:b8: 71:e9:91:8f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ4MzQxMTAvBgNVBAUTKEZEQjI3NTREOTUwNjMwRUIxMURGODRFMjg1NUNBQUI3 RDE2MjZGODAwHhcNMjYwNDE2MTQzODAzWhcNMjYwNDIzMTQzODAzWjAYMRYwFAYD VQQDEw02OWUwZjQ0Yi1iMjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRRKA7OrW2TsbJx7VMDfeUoGidiUSciFa+xZ/wt8/XZQBb07ok8D0wpiQxs+ y8CkZnxYEqvh/MUf77s0abOxfSDRRr/KzeXepAvHNLtKheS0hbgQhOtHgLLRE+Rz vHKrh+lC8HMRsd4HLix98r1CZF/FrwpdH841qStYWw+Pw9S1qpzMT2N4Ak9edq8Y PPI1CN2v1y9rWv7oU7B55YZFCO8+q3IP8TpfGKHsLbdo/d/010la76AligEcrXus FgoETPTHnfBJXN/BLSiL3LyZTzYhQLHHdk/n+FjbZgDptBNneCMfVWsV8x6Sa+zT ekMLNsiEya3x894I5V0z/mlMvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH5OknMr mDvvZ4TzmeSo8g4jBCq2MB8GA1UdIwQYMBaAFP2ydU2VBjDrEd+E4oVcqrfRYm+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDgzNC9ERkJBNTBCODFE OEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01Pc1IzNFRpaFZ5cXQ5Rmli NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19iSjFUWlVHTU9zUjM0VGloVnlxdDlGaWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDgzNC9ERkJBNTBCODFEOEQxMUUyODI0REVERUIwOEIwMkNEMi9fYkoxVFpVR01P c1IzNFRpaFZ5cXQ5RmliNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvSdRRYSWGlG9+4+TESFoC3QIIhb5sRHjTVEV7cA+yct/b9ckBVOA1W8/Bd+y FkjsyIk3Mjo5/4qnaLQqydSln5c9xtfNJODpBZv+fZ/5iD1zTsuRRKgSpsSql47X eJvlZ0PYov7UKMj0rYLIINDdVua1zywwH2NJ/GKJ30R6YM4BoCPc0P6Cf+y0WHct vzizn16fqapCgqNRNdcrl4MUqUe61+Tau4+RUPX0nJ+gfOZ3hlxK3OnZRh+du/Am 1P64lj7PaPVGUAUjtweaoAg7uMrMOBUqH+U4i0OSye/NwvQng7YJ8S2cl3Lyl0g2 q0OqinGqy+REqtDz8Vu4cemRjw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:47:34 2026 by rpki-client