$ rpki-client -vvf rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft File: 7dKmloaGUlbJsP3da3FJZtU3jzM.mft (raw, json) Hash identifier: 2NMNrUanRMGy6Q+BkzHSr1UF7G2pTmwrusZGdqqLMyo= Subject key identifier: C2:A9:E9:88:8C:96:00:42:04:87:E0:70:F2:78:C0:4B:ED:5C:EC:3A Authority key identifier: ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 Certificate issuer: /CN=A912D3CB/serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Certificate serial: 0B12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft Manifest number: 0AF7 Signing time: Sat 18 Apr 2026 19:16:49 +0000 Manifest this update: Sat 18 Apr 2026 19:16:48 +0000 Manifest next update: Sat 25 Apr 2026 19:16:48 +0000 Files and hashes: 1: 7dKmloaGUlbJsP3da3FJZtU3jzM.crl (hash: fGY56VXMa6FesmPOInGVMVES4C4fRK+tTwhNxeL/dPM=) 2: C2E32E34466B11EE988B243DC4F9AE02.roa (hash: AIFJy6tyFcteuwDpDTLrXHVY3zOX+wOFLhJqRTUM3mU=) 3: 923B6404466B11EE8B37E13CC4F9AE02.roa (hash: 71Hm3TTvUXY6fbA6ubcd977cDED5QXch19XWZX6CKNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 19:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2834 (0xb12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D3CB, serialNumber=EDD2A69686865256C9B0FDDD6B714966D5378F33 Validity Not Before: Apr 18 19:16:48 2026 GMT Not After : Apr 25 19:16:48 2026 GMT Subject: CN=69e3d8a0-d602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:31:0a:d4:a4:af:3e:0e:30:d9:0e:49:ec:48: db:3d:2e:75:40:9b:b5:6d:83:7e:84:0f:bb:c4:e9: c9:59:ba:5f:cc:d0:96:23:aa:d0:12:d4:7e:4f:b5: f5:c5:ea:d4:d0:95:61:10:c4:03:6b:62:ca:1d:09: 40:eb:af:96:0c:91:40:0e:08:8d:af:68:db:9e:c4: 42:f1:33:fe:88:b1:63:c4:36:f1:06:9e:e1:df:71: 25:b9:5c:ee:18:b7:3a:fc:7a:39:b8:26:5e:e1:fb: ef:24:fb:b8:1e:f7:18:89:18:b8:e7:44:87:f4:c6: bc:06:3e:3a:d0:f1:7d:57:2a:9f:0a:e0:7b:aa:2c: 81:4f:58:d5:7d:9d:a1:b1:bc:98:1b:45:19:67:56: 84:60:60:9d:3a:43:ae:26:e7:9d:ae:1b:0d:8c:a0: 71:30:e5:7d:bc:4f:7a:5e:e0:eb:d3:e8:e1:46:58: 1d:18:09:b0:2a:be:4b:63:e6:a3:28:91:78:a9:00: 1c:5b:c2:8c:93:9c:fc:f3:21:42:49:05:98:ac:36: bf:fe:8a:e8:ea:ad:cc:15:f2:01:e0:4a:9f:d5:ef: e1:42:7d:a0:89:04:d6:47:60:72:76:33:7d:c1:db: 32:79:cc:2b:76:65:91:ad:ea:b2:9f:7e:03:7a:46: cb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A9:E9:88:8C:96:00:42:04:87:E0:70:F2:78:C0:4B:ED:5C:EC:3A X509v3 Authority Key Identifier: keyid:ED:D2:A6:96:86:86:52:56:C9:B0:FD:DD:6B:71:49:66:D5:37:8F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7dKmloaGUlbJsP3da3FJZtU3jzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D3CB/A9A439FC69B211EA9779DD48C4F9AE02/7dKmloaGUlbJsP3da3FJZtU3jzM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:3f:9f:7f:08:01:28:3b:c8:ad:ae:30:b1:a2:3f:61:7a:2f: ca:c6:99:17:ef:5c:b9:f2:d8:d9:b2:fa:05:06:bb:4e:d2:11: a4:73:d1:12:91:e2:41:ef:27:ea:f8:26:1c:4b:33:ce:4f:cc: 30:fd:d4:01:ec:d2:a5:35:05:17:17:c9:da:34:e2:8b:30:71: 57:e3:f1:ff:47:7c:5b:30:a0:e8:b2:00:60:a0:83:5d:f4:3a: 19:ef:d2:e5:6a:df:33:9e:5a:75:f7:83:f5:92:20:ce:5b:2b: 17:02:94:b6:49:d5:1a:33:5e:32:01:3d:a2:f6:30:e3:4f:64: d2:3b:3e:ea:8c:98:38:22:4d:11:2b:ef:76:4d:69:1a:5f:8b: a6:7e:bb:47:21:3c:47:2c:59:cf:5a:d6:2c:41:f4:a7:2d:0e: c2:0b:3d:99:fe:23:b8:8b:fd:be:6a:f0:45:88:18:4a:6d:21: 31:51:8e:80:89:bd:04:31:02:b2:10:7c:94:47:3a:db:4a:cc: f7:8b:82:16:a6:af:c5:f5:56:4d:aa:b9:40:1d:22:aa:51:fc: 4b:a1:38:f9:14:22:0a:e8:b3:54:ee:78:1f:8f:0a:2a:c8:e8: bd:66:0c:3a:f2:1c:c7:54:d4:88:a1:50:a8:1b:53:40:99:2f: 3d:6f:82:61 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQzQ0IxMTAvBgNVBAUTKEVERDJBNjk2ODY4NjUyNTZDOUIwRkRERDZCNzE0OTY2 RDUzNzhGMzMwHhcNMjYwNDE4MTkxNjQ4WhcNMjYwNDI1MTkxNjQ4WjAYMRYwFAYD VQQDEw02OWUzZDhhMC1kNjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzEK1KSvPg4w2Q5J7EjbPS51QJu1bYN+hA+7xOnJWbpfzNCWI6rQEtR+T7X1 xerU0JVhEMQDa2LKHQlA66+WDJFADgiNr2jbnsRC8TP+iLFjxDbxBp7h33EluVzu GLc6/Ho5uCZe4fvvJPu4HvcYiRi450SH9Ma8Bj460PF9VyqfCuB7qiyBT1jVfZ2h sbyYG0UZZ1aEYGCdOkOuJuedrhsNjKBxMOV9vE96XuDr0+jhRlgdGAmwKr5LY+aj KJF4qQAcW8KMk5z88yFCSQWYrDa//oro6q3MFfIB4Eqf1e/hQn2giQTWR2BydjN9 wdsyecwrdmWRreqyn34DekbLFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKp6YiM lgBCBIfgcPJ4wEvtXOw6MB8GA1UdIwQYMBaAFO3SppaGhlJWybD93WtxSWbVN48z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDNDQi9BOUE0MzlGQzY5 QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1VsYkpzUDNkYTNGSlp0VTNq ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdkS21sb2FHVWxiSnNQM2RhM0ZKWnRVM2p6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDNDQi9BOUE0MzlGQzY5QjIxMUVBOTc3OURENDhDNEY5QUUwMi83ZEttbG9hR1Vs YkpzUDNkYTNGSlp0VTNqek0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANj+ffwgBKDvIra4wsaI/YXovysaZF+9cufLY2bL6BQa7TtIRpHPREpHiQe8n 6vgmHEszzk/MMP3UAezSpTUFFxfJ2jTiizBxV+Px/0d8WzCg6LIAYKCDXfQ6Ge/S 5WrfM55adfeD9ZIgzlsrFwKUtknVGjNeMgE9ovYw409k0js+6oyYOCJNESvvdk1p Gl+Lpn67RyE8RyxZz1rWLEH0py0Owgs9mf4juIv9vmrwRYgYSm0hMVGOgIm9BDEC shB8lEc620rM94uCFqavxfVWTaq5QB0iqlH8S6E4+RQiCuizVO54H48KKsjovWYM OvIcx1TUiKFQqBtTQJkvPW+CYQ== -----END CERTIFICATE-----Generated at Sun Apr 19 08:21:19 2026 by rpki-client