$ rpki-client -vvf rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft File: loNUUNMhwefEjKDF3NK6bB0tSPE.mft (raw, json) Hash identifier: 8RbsTJ4hWtY1ktiguek+iISI8yA+NjKQNCMykXqyW1I= Subject key identifier: 4E:DB:CE:A7:98:6A:0E:B7:FB:1B:54:51:87:58:84:45:1B:FF:CF:40 Authority key identifier: 96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 Certificate issuer: /CN=A912DF25/serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft Manifest number: 013D Signing time: Fri 17 Apr 2026 05:01:35 +0000 Manifest this update: Fri 17 Apr 2026 05:01:34 +0000 Manifest next update: Fri 24 Apr 2026 05:01:34 +0000 Files and hashes: 1: loNUUNMhwefEjKDF3NK6bB0tSPE.crl (hash: mERaygLmHhlSDv0tW0DpT79EP3mFB70fiuTBBAaVIAA=) 2: 047C04705AC911EF9DF4275AC4F9AE02.roa (hash: rX5GXOpzN7zlqlxxBRKlBapjNOnn5ERzfr6wi0h0HHo=) 3: 050079585AC911EF9DF4275AC4F9AE02.roa (hash: cOFr30T5Sd5bA+9nAjs/xIKvrhVxSk/iBKwzS2ubtBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DF25, serialNumber=96835450D321C1E7C48CA0C5DCD2BA6C1D2D48F1 Validity Not Before: Apr 17 05:01:34 2026 GMT Not After : Apr 24 05:01:34 2026 GMT Subject: CN=69e1beaf-b3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:80:ad:23:8b:ad:d8:98:07:78:ef:f5:34:1e: e6:08:38:3e:b9:fb:9a:30:32:90:9a:37:9a:2b:a3: a9:b2:25:b6:90:a3:c5:ea:db:e7:e9:b0:60:dc:0c: c5:18:11:43:6c:d5:31:61:c8:50:f6:05:92:64:de: d9:f6:6c:1f:b8:7a:5c:4c:d3:8e:06:03:c7:94:1c: dc:1e:80:f7:38:22:04:7d:b1:dd:3a:6d:42:4d:21: 24:0b:86:60:75:f9:4e:20:e7:1f:a9:f8:2c:95:4d: 3e:78:bc:bb:de:72:a3:52:a8:81:15:e6:82:7f:49: c4:98:66:75:b4:42:e1:d8:df:cd:eb:8c:b7:f5:0b: b1:5f:b1:57:aa:9e:be:8b:29:63:f4:f8:b4:dc:7c: 50:97:1b:3e:b8:5e:e4:4f:66:f2:10:28:8b:df:b0: 97:36:a1:a1:f3:fa:3d:f4:d3:5d:c7:b9:fc:e9:76: d6:fe:52:cf:cd:5a:4d:84:c7:42:ba:63:df:2e:63: 73:7f:00:12:01:8d:e6:f7:90:75:f6:f3:4d:7f:c0: 31:e3:62:50:e8:55:90:59:da:72:b2:b3:7b:b4:d4: 48:15:22:15:27:0d:e0:b2:f5:ed:d4:5c:50:96:3f: 94:65:81:af:89:5a:96:e2:e4:d1:b1:d7:8f:17:c1: 3d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:CE:A7:98:6A:0E:B7:FB:1B:54:51:87:58:84:45:1B:FF:CF:40 X509v3 Authority Key Identifier: keyid:96:83:54:50:D3:21:C1:E7:C4:8C:A0:C5:DC:D2:BA:6C:1D:2D:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/loNUUNMhwefEjKDF3NK6bB0tSPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DF25/7F7B1DAC5AC711EF99EAFC43C4F9AE02/loNUUNMhwefEjKDF3NK6bB0tSPE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:e5:2a:0a:82:8a:be:fe:c9:96:b7:a1:e2:49:95:0d:11:b4: b2:c2:9f:d1:66:72:1f:35:62:bc:e3:3c:58:0d:6d:2b:db:c9: f2:a4:c5:9b:75:9a:41:cf:4e:ac:fc:34:4a:6f:1f:f1:61:a4: 7c:5a:72:1b:3f:b7:f6:07:65:e1:bc:0c:6f:85:14:03:04:a9: dc:cc:13:ec:00:db:95:07:33:77:ae:a2:fe:5c:79:ea:0a:53: e9:d0:7a:30:ce:42:09:83:47:e6:bb:b2:8d:8b:9e:c3:01:7d: ae:f9:f6:69:dc:14:9a:4b:76:da:b9:54:d2:9f:78:df:45:57: 00:73:8b:5b:77:23:c8:0a:09:e7:e6:93:f6:88:67:73:83:45: d6:e4:9a:08:74:3a:76:7f:a3:50:7b:4e:1a:26:92:af:17:13: 68:a5:b1:a6:27:4a:35:39:26:a1:36:cb:4f:f8:a3:ad:7f:f7: 13:a2:53:68:27:36:ba:ad:7e:65:ed:d1:d8:12:81:b1:7b:81: 8c:c6:db:63:2b:c7:29:ba:a1:80:94:d6:e0:62:b8:18:f7:77: e0:96:f1:be:91:0d:23:0e:2d:a2:19:b3:f1:2d:6f:c9:56:71: e9:70:80:21:b6:2e:d8:d6:af:39:7c:43:4f:83:cb:c0:1f:a6: 6a:2f:c3:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGMjUxMTAvBgNVBAUTKDk2ODM1NDUwRDMyMUMxRTdDNDhDQTBDNURDRDJCQTZD MUQyRDQ4RjEwHhcNMjYwNDE3MDUwMTM0WhcNMjYwNDI0MDUwMTM0WjAYMRYwFAYD VQQDEw02OWUxYmVhZi1iM2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04CtI4ut2JgHeO/1NB7mCDg+ufuaMDKQmjeaK6OpsiW2kKPF6tvn6bBg3AzF GBFDbNUxYchQ9gWSZN7Z9mwfuHpcTNOOBgPHlBzcHoD3OCIEfbHdOm1CTSEkC4Zg dflOIOcfqfgslU0+eLy73nKjUqiBFeaCf0nEmGZ1tELh2N/N64y39QuxX7FXqp6+ iylj9Pi03HxQlxs+uF7kT2byECiL37CXNqGh8/o99NNdx7n86XbW/lLPzVpNhMdC umPfLmNzfwASAY3m95B19vNNf8Ax42JQ6FWQWdpysrN7tNRIFSIVJw3gsvXt1FxQ lj+UZYGviVqW4uTRsdePF8E9ZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7bzqeY ag63+xtUUYdYhEUb/89AMB8GA1UdIwQYMBaAFJaDVFDTIcHnxIygxdzSumwdLUjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREYyNS83RjdCMURBQzVB QzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdlZkVqS0RGM05LNmJCMHRT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xvTlVVTk1od2VmRWpLREYzTks2YkIwdFNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REYyNS83RjdCMURBQzVBQzcxMUVGOTlFQUZDNDNDNEY5QUUwMi9sb05VVU5NaHdl ZkVqS0RGM05LNmJCMHRTUEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAo+UqCoKKvv7Jlreh4kmVDRG0ssKf0WZyHzVivOM8WA1tK9vJ8qTFm3WaQc9O rPw0Sm8f8WGkfFpyGz+39gdl4bwMb4UUAwSp3MwT7ADblQczd66i/lx56gpT6dB6 MM5CCYNH5ruyjYuewwF9rvn2adwUmkt22rlU0p9430VXAHOLW3cjyAoJ5+aT9ohn c4NF1uSaCHQ6dn+jUHtOGiaSrxcTaKWxpidKNTkmoTbLT/ijrX/3E6JTaCc2uq1+ Ze3R2BKBsXuBjMbbYyvHKbqhgJTW4GK4GPd34JbxvpENIw4tohmz8S1vyVZx6XCA IbYu2NavOXxDT4PLwB+mai/DcA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:58:04 2026 by rpki-client