$ rpki-client -vvf rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft File: xF0041r6UWc07r4-Xaxxv0jh1fM.mft (raw, json) Hash identifier: vseKTiTC0wlR09cMzjpy1Gggodzd+O/6keuH5mXKYHs= Subject key identifier: 95:D9:05:54:2F:36:87:58:52:D3:BE:CD:2A:81:4B:79:98:63:AA:F8 Authority key identifier: C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3 Certificate issuer: /CN=A912A273/serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft Manifest number: 2F Signing time: Fri 17 Apr 2026 08:25:36 +0000 Manifest this update: Fri 17 Apr 2026 08:25:35 +0000 Manifest next update: Fri 24 Apr 2026 08:25:35 +0000 Files and hashes: 1: xF0041r6UWc07r4-Xaxxv0jh1fM.crl (hash: +drl8rh7FDD6SglWQYzrCAwJco8wL/xtLIdGIflE0rY=) 2: F3BA62BEFD9011F0AC0D2AEE5B6F56BC.roa (hash: fngJ91q3M8+ZvnNF07B50n4sFQUoH1YzhPTItYhTEoc=) 3: F7CC41D2FD9111F0AFA9C1725C6F56BC.roa (hash: ZVS5A/ssJ9e5s48dOy5KKX8LrbmgceLLERs2KPItheg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A273, serialNumber=C45D34E35AFA516734EEBE3E5DAC71BF48E1D5F3 Validity Not Before: Apr 17 08:25:35 2026 GMT Not After : Apr 24 08:25:35 2026 GMT Subject: CN=69e1ee80-10c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:17:c7:40:ce:7d:21:d2:9a:03:e5:04:ea:09: 08:a7:38:5d:74:d6:41:a7:8f:75:21:3f:5d:59:93: 0d:e9:d0:29:a2:93:f8:22:36:c0:62:f3:c8:09:9f: 0d:3d:85:0b:c0:63:13:4b:96:ba:35:b6:40:57:93: bc:99:24:12:8e:70:65:a8:b4:d8:d3:30:fa:cb:fe: 8c:0a:52:50:57:15:c9:80:b5:9c:88:1c:f7:40:c0: 20:87:f5:b2:bd:ea:1f:4a:63:56:e0:6f:75:35:9c: a4:3e:05:98:87:11:7e:1b:17:1c:e1:08:98:82:f5: 71:95:d3:87:60:c8:43:d1:02:bf:44:bb:09:83:e9: a7:6d:3d:b6:19:9c:1c:65:52:ea:74:5a:63:fc:ba: db:6b:a6:64:2a:cf:37:ba:a2:5e:66:50:2c:7f:29: bf:43:0d:47:7b:0b:c2:71:34:68:5e:f6:f2:59:e5: c0:26:c1:79:c4:c2:07:e6:75:1f:7f:82:48:a0:52: 8f:f1:6c:06:06:48:b3:29:4b:9b:5c:3d:f7:8e:80: ef:c4:5b:0e:e9:0c:cd:ac:e8:52:ff:a3:31:ee:d5: f1:78:5b:64:d6:83:e2:56:a2:2e:95:ae:10:ed:a0: 42:f2:85:a3:fb:d9:ac:03:8e:8e:ba:bf:9e:23:ff: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D9:05:54:2F:36:87:58:52:D3:BE:CD:2A:81:4B:79:98:63:AA:F8 X509v3 Authority Key Identifier: keyid:C4:5D:34:E3:5A:FA:51:67:34:EE:BE:3E:5D:AC:71:BF:48:E1:D5:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xF0041r6UWc07r4-Xaxxv0jh1fM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A273/13D325DCFD9011F099ABCB395B6F56BC/xF0041r6UWc07r4-Xaxxv0jh1fM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:75:12:ef:23:13:8e:7e:46:ef:b1:fb:ca:d0:a0:a6:a7:ce: f8:0c:12:25:b1:28:77:99:b2:dd:9b:d9:6c:bc:68:d1:6d:7d: 83:b6:27:fe:a7:34:f2:30:46:e3:1f:a9:92:89:d3:db:2f:60: f8:27:dd:ee:59:c4:5e:e1:e5:66:b1:9d:29:cd:c6:ad:23:e1: 6b:ae:30:75:a6:7c:b0:cd:99:ab:cc:01:2d:b9:fb:f7:5c:5d: 6b:ab:a9:dc:22:64:ed:a9:67:59:a0:8b:06:6d:d2:52:d4:62: 9a:7d:3f:2c:62:36:52:80:2d:15:5f:77:0b:74:98:82:fc:38: 79:cf:d0:0e:c6:a2:57:13:94:ac:7d:69:f6:46:bd:32:09:f6: d8:18:02:c4:6c:d7:85:7e:87:ed:13:9e:81:56:6b:ae:38:b8: 16:cd:53:17:b1:d5:23:22:56:b1:06:3c:ac:78:51:7d:92:f8: f0:d1:3c:8a:5d:d5:f5:61:e2:90:13:b2:4c:a3:36:97:66:cd: 9d:90:db:a5:cc:c5:7c:d6:c1:6b:1d:2e:63:f4:59:0a:4f:cc: c1:4b:b2:e9:3c:eb:6e:44:75:ea:00:95:cd:d1:aa:23:d8:94: 64:2a:7c:25:a1:91:e1:8f:9e:ae:58:00:13:76:d7:a1:c1:29: 29:cd:d8:ff -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QTI3MzExMC8GA1UEBRMoQzQ1RDM0RTM1QUZBNTE2NzM0RUVCRTNFNURBQzcxQkY0 OEUxRDVGMzAeFw0yNjA0MTcwODI1MzVaFw0yNjA0MjQwODI1MzVaMBgxFjAUBgNV BAMTDTY5ZTFlZTgwLTEwYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJF8dAzn0h0poD5QTqCQinOF101kGnj3UhP11Zkw3p0Cmik/giNsBi88gJnw09 hQvAYxNLlro1tkBXk7yZJBKOcGWotNjTMPrL/owKUlBXFcmAtZyIHPdAwCCH9bK9 6h9KY1bgb3U1nKQ+BZiHEX4bFxzhCJiC9XGV04dgyEPRAr9EuwmD6adtPbYZnBxl Uup0WmP8uttrpmQqzze6ol5mUCx/Kb9DDUd7C8JxNGhe9vJZ5cAmwXnEwgfmdR9/ gkigUo/xbAYGSLMpS5tcPfeOgO/EWw7pDM2s6FL/ozHu1fF4W2TWg+JWoi6VrhDt oELyhaP72awDjo66v54j/zM1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUldkFVC82 h1hS077NKoFLeZhjqvgwHwYDVR0jBBgwFoAUxF0041r6UWc07r4+Xaxxv0jh1fMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBMjczLzEzRDMyNURDRkQ5 MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdjMDdyNC1YYXh4djBqaDFm TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEYwMDQxcjZVV2MwN3I0LVhheHh2MGpoMWZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJB MjczLzEzRDMyNURDRkQ5MDExRjA5OUFCQ0IzOTVCNkY1NkJDL3hGMDA0MXI2VVdj MDdyNC1YYXh4djBqaDFmTS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAqdRLvIxOOfkbvsfvK0KCmp874DBIlsSh3mbLdm9lsvGjRbX2Dtif+pzTyMEbj H6mSidPbL2D4J93uWcRe4eVmsZ0pzcatI+FrrjB1pnywzZmrzAEtufv3XF1rq6nc ImTtqWdZoIsGbdJS1GKafT8sYjZSgC0VX3cLdJiC/Dh5z9AOxqJXE5SsfWn2Rr0y CfbYGALEbNeFfoftE56BVmuuOLgWzVMXsdUjIlaxBjyseFF9kvjw0TyKXdX1YeKQ E7JMozaXZs2dkNulzMV81sFrHS5j9FkKT8zBS7LpPOtuRHXqAJXN0aoj2JRkKnwl oZHhj56uWAATdtehwSkpzdj/ -----END CERTIFICATE-----Generated at Fri Apr 17 17:14:30 2026 by rpki-client