$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft File: 4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json) Hash identifier: pSe2RBpFLydBxCcyq45OcAVMwPbHMTsHAxEkx7i9qhI= Subject key identifier: 08:B9:B9:D9:40:34:F1:AC:B5:3D:7B:6E:58:32:45:40:BC:DA:5C:8B Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 Certificate issuer: /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Certificate serial: 099E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft Manifest number: 097C Signing time: Thu 16 Apr 2026 20:00:06 +0000 Manifest this update: Thu 16 Apr 2026 20:00:05 +0000 Manifest next update: Thu 23 Apr 2026 20:00:05 +0000 Files and hashes: 1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: MWKFMZOMJJdBaRAI8MRmyW3QYhTXInwbqSvdFwi/D44=) 2: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: gVcn2SvZaK2nbxle9CZzKz71vAlE+GFSMyND+4DCZiA=) 3: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: bij0GPc4q/HmqyQVEL/k0toCpN5+LlxlDW2eG5CFpnk=) 4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 2QiWBnPaUCTJvdNP0zBmyWdyn7oHyts1Ul70IjP2j6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2462 (0x99e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305 Validity Not Before: Apr 16 20:00:05 2026 GMT Not After : Apr 23 20:00:05 2026 GMT Subject: CN=69e13fc5-ad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:ab:f2:30:76:35:e6:ad:a6:ba:35:40:86: 6e:fd:03:00:70:b6:85:f3:aa:d0:60:88:b6:af:40: 35:8f:e0:a0:52:99:74:d8:ff:0a:10:e7:56:11:cf: c7:1e:59:0c:f8:d5:d4:89:af:24:36:6f:e1:ff:db: 94:31:e1:b5:1c:8b:79:6f:2b:41:d8:44:07:5f:9d: 2e:22:75:18:f6:d5:88:3c:fa:e4:cc:38:65:8b:ed: 81:da:0f:14:6a:f8:35:af:51:da:c2:a9:9e:a8:61: 79:48:a3:c1:5f:5b:c1:9a:ee:db:7f:1d:55:03:c3: f3:97:b2:16:d7:8b:bb:61:7e:69:b6:9c:7c:ea:6e: 18:47:85:45:a9:31:56:3d:39:24:58:f2:bf:4d:fc: 59:72:6f:b5:b5:96:a6:e6:d9:85:f1:21:ee:c6:97: e6:1a:01:00:66:d8:ce:04:a4:70:86:3c:61:10:c1: a8:35:4d:ed:ee:a1:71:5b:86:59:45:d8:5b:8c:23: fa:78:c4:ca:95:78:a0:22:10:6b:4a:1c:65:7c:62: 8f:61:53:7b:61:3b:d6:a7:46:f4:fa:d9:97:ef:d0: b0:7e:a4:5d:99:55:d8:79:18:80:3e:2a:0f:8d:ff: 8e:ec:84:4d:fb:92:b4:ac:09:c4:3d:3a:e2:8e:34: fc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B9:B9:D9:40:34:F1:AC:B5:3D:7B:6E:58:32:45:40:BC:DA:5C:8B X509v3 Authority Key Identifier: keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:bc:8f:17:1c:e3:e7:1a:3b:ad:e7:ed:e7:b1:4e:ff:5d: cf:6c:c7:c7:8c:4c:ae:ad:c6:ed:02:aa:7f:10:e0:dd:7f:bb: 88:1e:c9:ff:56:7d:d9:80:dd:78:9e:74:e8:8f:7f:5d:d7:35: d9:00:f8:8b:55:89:34:df:96:81:1b:97:e6:bc:32:14:16:15: 69:fc:4d:de:5e:f5:d7:67:3d:37:df:83:17:a9:34:91:84:80: 01:80:3c:70:55:3e:4d:83:53:53:5e:59:b8:80:c5:26:36:88: 00:44:40:ac:76:78:ef:14:a7:a1:d2:b7:bd:c3:8d:e1:cd:30: 7b:cb:28:cd:11:ca:60:d2:85:78:a1:82:47:24:70:e2:c9:07: 1c:16:e7:bc:9c:63:cb:c8:98:5e:13:59:ff:d3:f5:1f:26:a5: 74:73:0f:bb:81:20:8b:2a:2e:70:e7:53:31:d0:97:fe:ab:16: 0c:1f:aa:f4:a4:33:c5:83:10:11:66:c9:5a:83:4f:f5:27:59: 8b:15:89:d0:1b:32:ce:03:d4:62:7a:75:3f:2e:e5:e7:f1:14: 9d:f6:32:18:91:b4:c0:ab:50:7e:59:65:13:40:b2:35:21:97: 6e:ef:7b:39:6d:13:0d:c0:1a:94:d2:46:9e:b1:cf:29:f1:9b: 66:03:00:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB RDBBRkMzMDUwHhcNMjYwNDE2MjAwMDA1WhcNMjYwNDIzMjAwMDA1WjAYMRYwFAYD VQQDEw02OWUxM2ZjNS1hZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxeOr8jB2Neatpro1QIZu/QMAcLaF86rQYIi2r0A1j+CgUpl02P8KEOdWEc/H HlkM+NXUia8kNm/h/9uUMeG1HIt5bytB2EQHX50uInUY9tWIPPrkzDhli+2B2g8U avg1r1HawqmeqGF5SKPBX1vBmu7bfx1VA8Pzl7IW14u7YX5ptpx86m4YR4VFqTFW PTkkWPK/TfxZcm+1tZam5tmF8SHuxpfmGgEAZtjOBKRwhjxhEMGoNU3t7qFxW4ZZ RdhbjCP6eMTKlXigIhBrShxlfGKPYVN7YTvWp0b0+tmX79CwfqRdmVXYeRiAPioP jf+O7IRN+5K0rAnEPTrijjT8RQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAi5udlA NPGstT17blgyRUC82lyLMB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0 NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3 d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHQ28jxcc4+caO63n7eexTv9dz2zHx4xMrq3G7QKqfxDg3X+7iB7J/1Z92YDd eJ506I9/Xdc12QD4i1WJNN+WgRuX5rwyFBYVafxN3l7112c9N9+DF6k0kYSAAYA8 cFU+TYNTU15ZuIDFJjaIAERArHZ47xSnodK3vcON4c0we8sozRHKYNKFeKGCRyRw 4skHHBbnvJxjy8iYXhNZ/9P1HyaldHMPu4EgiyoucOdTMdCX/qsWDB+q9KQzxYMQ EWbJWoNP9SdZixWJ0BsyzgPUYnp1Py7l5/EUnfYyGJG0wKtQflllE0CyNSGXbu97 OW0TDcAalNJGnrHPKfGbZgMA8A== -----END CERTIFICATE-----Generated at Fri Apr 17 20:43:47 2026 by rpki-client