$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft File: mbcL8gJe3c35KkfQTLdWrLBz3EU.mft (raw, json) Hash identifier: +4yPU8mFH16iEVPuaCyyst7lzVzhbKVlrlLRd4HLZ1g= Subject key identifier: 2A:2E:CE:F8:41:6F:49:A1:32:F1:8A:77:51:B5:DE:B9:F2:01:B7:1D Authority key identifier: 99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 Certificate issuer: /CN=A912C7DC/serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft Manifest number: F9 Signing time: Fri 17 Apr 2026 05:57:53 +0000 Manifest this update: Fri 17 Apr 2026 05:57:53 +0000 Manifest next update: Fri 24 Apr 2026 05:57:53 +0000 Files and hashes: 1: mbcL8gJe3c35KkfQTLdWrLBz3EU.crl (hash: 6VcRrH0nerzcNYepG5cdDmXtEGd2m6voWg1zyWhP4Og=) 2: E310D7E2C58B11EFBA44DE34C4F9AE02.roa (hash: QYBewwq2Jnoq3XiFtkZ6uq7GsNeS7PlzqiYcUXNMoXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=99B70BF2025EDDCDF92A47D04CB756ACB073DC45 Validity Not Before: Apr 17 05:57:53 2026 GMT Not After : Apr 24 05:57:53 2026 GMT Subject: CN=69e1cbe1-d92a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:25:e6:d1:5e:56:73:58:38:f6:95:92:9c: da:36:cd:b4:83:27:85:82:e1:d2:7c:48:5a:d3:a3: 9f:ec:5f:a9:2d:6b:6e:84:be:d8:82:f7:47:68:58: 0f:f6:27:33:6c:46:4d:58:77:36:6d:ef:51:4f:eb: 7c:92:4e:19:32:31:86:17:c7:d4:35:8e:96:7d:0f: 6e:53:f0:c1:f8:5b:47:0b:3e:24:c8:09:2a:ce:39: e5:8b:78:3b:56:af:09:0e:df:1b:e2:38:03:21:47: 57:eb:bb:b3:73:59:0f:64:06:e7:d6:9d:45:93:3d: 8c:3f:10:c4:d9:de:c2:96:69:ca:b5:3c:90:87:54: 87:d5:c3:a4:f9:0e:36:df:b0:b5:91:ae:4f:bd:b0: cc:b6:73:26:a8:c6:37:b4:84:1c:5e:f7:6d:99:9e: 63:74:ab:e2:42:4a:7b:e7:f0:3f:8d:ad:76:de:06: 68:f3:2b:48:a4:77:a2:56:a1:42:90:ec:72:7c:53: 0d:3b:cc:4e:72:e9:11:81:60:4c:20:b0:29:05:81: 55:61:34:a6:d3:bc:ed:50:f1:df:97:b8:a2:25:e9: 0b:82:40:7f:c7:33:62:e1:1a:59:fe:39:0b:4c:e8: b6:0e:4a:e3:b9:0a:98:81:f9:1c:96:b7:15:b2:b0: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2E:CE:F8:41:6F:49:A1:32:F1:8A:77:51:B5:DE:B9:F2:01:B7:1D X509v3 Authority Key Identifier: keyid:99:B7:0B:F2:02:5E:DD:CD:F9:2A:47:D0:4C:B7:56:AC:B0:73:DC:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mbcL8gJe3c35KkfQTLdWrLBz3EU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/6DEFDB70C58B11EFB87E5F33C4F9AE02/mbcL8gJe3c35KkfQTLdWrLBz3EU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:6e:5b:98:16:be:13:57:3e:2c:28:51:3b:4a:7d:0a:28:4a: 0d:a5:9d:8d:77:68:31:d3:aa:94:3b:6a:b9:bf:f7:4e:95:38: 6a:82:72:26:f0:a4:28:f2:bb:d4:6f:57:7b:6a:ba:a9:86:58: cc:81:ed:0d:a1:de:f7:40:48:a8:29:de:b3:fc:5d:60:ee:27: 28:e5:77:f8:42:31:1e:fd:75:35:a7:cd:3b:38:fd:08:1b:84: ce:1f:d0:ce:af:58:8c:6a:c5:6c:69:f6:0c:4c:60:8b:ea:9d: 29:de:71:2d:75:ff:44:e4:1f:db:79:5d:67:14:43:31:58:5d: 2f:1c:8b:78:41:d9:27:93:33:cd:02:4f:15:8b:29:a3:47:ba: 44:80:bd:d5:91:f8:cf:58:b3:d1:7c:30:2c:93:4d:77:a6:0c: 52:11:ed:c2:c5:a4:99:fa:82:92:35:80:31:d7:7d:bc:ac:7e: 50:e2:e3:45:ea:4f:e8:20:d7:71:8f:ea:ee:52:1e:9a:5b:ce: 22:b1:bb:6c:6c:02:97:3a:0f:f3:69:e0:1e:45:0c:df:90:76: 69:b9:9e:fb:20:f2:52:45:1b:d0:9d:f2:ad:2f:59:58:c6:55: cb:bb:be:4a:45:fa:65:a9:30:ca:f7:d8:25:25:39:c9:b7:11: ae:96:c5:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDk5QjcwQkYyMDI1RUREQ0RGOTJBNDdEMDRDQjc1NkFD QjA3M0RDNDUwHhcNMjYwNDE3MDU1NzUzWhcNMjYwNDI0MDU1NzUzWjAYMRYwFAYD VQQDEw02OWUxY2JlMS1kOTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAylkl5tFeVnNYOPaVkpzaNs20gyeFguHSfEha06Of7F+pLWtuhL7YgvdHaFgP 9iczbEZNWHc2be9RT+t8kk4ZMjGGF8fUNY6WfQ9uU/DB+FtHCz4kyAkqzjnli3g7 Vq8JDt8b4jgDIUdX67uzc1kPZAbn1p1Fkz2MPxDE2d7ClmnKtTyQh1SH1cOk+Q42 37C1ka5PvbDMtnMmqMY3tIQcXvdtmZ5jdKviQkp75/A/ja123gZo8ytIpHeiVqFC kOxyfFMNO8xOcukRgWBMILApBYFVYTSm07ztUPHfl7iiJekLgkB/xzNi4RpZ/jkL TOi2DkrjuQqYgfkclrcVsrB3UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCouzvhB b0mhMvGKd1G13rnyAbcdMB8GA1UdIwQYMBaAFJm3C/ICXt3N+SpH0Ey3Vqywc9xF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82REVGREI3MEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNjMzVLa2ZRVExkV3JMQnoz RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21iY0w4Z0plM2MzNUtrZlFUTGRXckxCejNFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82REVGREI3MEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9tYmNMOGdKZTNj MzVLa2ZRVExkV3JMQnozRVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARG5bmBa+E1c+LChRO0p9CihKDaWdjXdoMdOqlDtqub/3TpU4aoJyJvCkKPK7 1G9Xe2q6qYZYzIHtDaHe90BIqCnes/xdYO4nKOV3+EIxHv11NafNOzj9CBuEzh/Q zq9YjGrFbGn2DExgi+qdKd5xLXX/ROQf23ldZxRDMVhdLxyLeEHZJ5MzzQJPFYsp o0e6RIC91ZH4z1iz0XwwLJNNd6YMUhHtwsWkmfqCkjWAMdd9vKx+UOLjRepP6CDX cY/q7lIemlvOIrG7bGwClzoP82ngHkUM35B2abme+yDyUkUb0J3yrS9ZWMZVy7u+ SkX6ZakwyvfYJSU5ybcRrpbFpg== -----END CERTIFICATE-----Generated at Fri Apr 17 10:58:40 2026 by rpki-client