$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft File: idd5xQ8U7RH8WtuEA3iSsmC5leY.mft (raw, json) Hash identifier: Pnq+2dYmPZrZLf9tFG+sEylt8RKCh9HhJOZvQPPuaJA= Subject key identifier: 97:C8:5A:0B:3F:CA:49:BA:B0:09:D9:A7:87:5C:4C:15:08:6D:D8:CD Authority key identifier: 89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 Certificate issuer: /CN=A913120A/serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft Manifest number: 0125 Signing time: Fri 17 Apr 2026 05:27:40 +0000 Manifest this update: Fri 17 Apr 2026 05:27:39 +0000 Manifest next update: Fri 24 Apr 2026 05:27:39 +0000 Files and hashes: 1: idd5xQ8U7RH8WtuEA3iSsmC5leY.crl (hash: RbcnJIwhNO+zbEtraRfgblc2GYDyTmx6ltr7iO5ejAE=) 2: D4F24058870411EF8D8D2635C4F9AE02.roa (hash: vQxrD0Wy1epRcIQqGanMT2UEnCUMa40m33Ixwa6rxNE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:27:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=89D779C50F14ED11FC5ADB84037892B260B995E6 Validity Not Before: Apr 17 05:27:39 2026 GMT Not After : Apr 24 05:27:39 2026 GMT Subject: CN=69e1c4cb-bc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:4b:65:bd:1a:d7:a3:59:fe:29:b4:22:b6: b3:4b:e2:9a:ba:1b:2f:bf:e2:8e:39:70:95:79:18: 33:fd:02:be:f8:ab:bb:c5:17:38:b6:c3:a5:ea:de: f8:00:0e:68:73:da:7e:37:cb:64:f0:ad:18:a9:d7: ed:4f:83:08:99:83:72:74:76:b0:47:e9:41:49:3b: 02:c4:03:9c:4a:7b:0c:77:f0:6b:a3:40:ef:72:2e: 2b:4e:a2:cd:8d:af:42:7b:d7:b4:fd:38:cf:4f:d0: d9:61:f2:93:fe:a2:e0:d6:37:dc:86:8f:d9:a8:1f: b6:35:0a:31:9b:b3:05:2a:dc:36:87:bc:5b:ab:d3: 86:ce:2a:cf:a4:f1:9c:2a:75:cc:40:da:30:f1:30: b4:9f:ec:45:3e:5b:69:80:86:ef:eb:b9:13:40:8b: 1b:c1:60:2a:3c:7f:ac:64:a8:0e:03:bb:33:54:01: bc:76:7a:d2:97:ed:ee:92:fc:fe:0c:6e:ab:2b:ba: bd:3c:b9:74:af:e8:0b:04:a9:b9:5a:d6:b3:ca:8f: 91:2a:02:aa:22:29:3f:de:81:bd:dc:6c:c1:c5:f8: 9b:90:9e:a3:a3:e0:21:1a:ad:4c:4e:d3:f7:3f:69: 89:85:83:00:51:e2:ee:89:35:0e:a9:13:ea:dc:b1: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C8:5A:0B:3F:CA:49:BA:B0:09:D9:A7:87:5C:4C:15:08:6D:D8:CD X509v3 Authority Key Identifier: keyid:89:D7:79:C5:0F:14:ED:11:FC:5A:DB:84:03:78:92:B2:60:B9:95:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/idd5xQ8U7RH8WtuEA3iSsmC5leY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/829A74A886F311EFBE02536BC4F9AE02/idd5xQ8U7RH8WtuEA3iSsmC5leY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:54:c8:cb:fc:b7:e6:f4:09:62:27:cb:81:cf:39:08:06:1d: ac:b5:e5:1e:24:c8:ee:e2:da:27:0b:bb:d9:b7:53:ee:e6:4c: e7:9a:15:f8:78:ad:a8:02:38:e2:40:8c:f7:37:20:77:95:52: e2:9d:a1:a2:58:79:2f:52:9b:8f:64:6e:b3:80:a4:32:2b:25: b2:5a:4c:2b:13:7b:27:2f:ad:a6:d8:c7:22:19:a4:c8:2f:6e: 8f:2d:97:54:b0:af:1a:c4:62:97:8f:41:5e:93:1c:4b:39:df: 62:a6:1b:25:bf:9e:ab:5b:4f:b7:a7:28:7d:4f:e7:12:81:f0: bb:b8:4d:56:af:29:e4:3c:ce:fc:20:f1:c4:a9:33:f6:dd:52: ce:7b:c4:6b:18:14:4f:15:54:b9:3c:4a:e6:05:bd:22:f6:dc: ca:39:e6:92:6f:34:cf:44:d0:07:fd:e2:ac:10:e9:39:b5:51: 2a:9a:0f:be:2d:6e:d6:2e:f3:b0:1b:ed:60:41:7a:d5:18:db: 1c:6a:da:ec:6e:7a:86:78:e3:d5:1e:d8:5d:56:72:49:54:61: 26:7a:65:42:48:75:c6:96:1e:8d:0c:63:4d:68:2b:62:b8:59: eb:cd:a1:9a:72:2d:a7:0d:7d:14:4a:50:a3:92:ee:08:e8:20: 79:66:98:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDg5RDc3OUM1MEYxNEVEMTFGQzVBREI4NDAzNzg5MkIy NjBCOTk1RTYwHhcNMjYwNDE3MDUyNzM5WhcNMjYwNDI0MDUyNzM5WjAYMRYwFAYD VQQDEw02OWUxYzRjYi1iYzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsXRLZb0a16NZ/im0IrazS+Kauhsvv+KOOXCVeRgz/QK++Ku7xRc4tsOl6t74 AA5oc9p+N8tk8K0YqdftT4MImYNydHawR+lBSTsCxAOcSnsMd/Bro0Dvci4rTqLN ja9Ce9e0/TjPT9DZYfKT/qLg1jfcho/ZqB+2NQoxm7MFKtw2h7xbq9OGzirPpPGc KnXMQNow8TC0n+xFPltpgIbv67kTQIsbwWAqPH+sZKgOA7szVAG8dnrSl+3ukvz+ DG6rK7q9PLl0r+gLBKm5Wtazyo+RKgKqIik/3oG93GzBxfibkJ6jo+AhGq1MTtP3 P2mJhYMAUeLuiTUOqRPq3LHeUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfIWgs/ ykm6sAnZp4dcTBUIbdjNMB8GA1UdIwQYMBaAFInXecUPFO0R/FrbhAN4krJguZXm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS84MjlBNzRBODg2 RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdSSDhXdHVFQTNpU3NtQzVs ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lkZDV4UThVN1JIOFd0dUVBM2lTc21DNWxlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS84MjlBNzRBODg2RjMxMUVGQkUwMjUzNkJDNEY5QUUwMi9pZGQ1eFE4VTdS SDhXdHVFQTNpU3NtQzVsZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA1FTIy/y35vQJYifLgc85CAYdrLXlHiTI7uLaJwu72bdT7uZM55oV+HitqAI4 4kCM9zcgd5VS4p2holh5L1Kbj2Rus4CkMislslpMKxN7Jy+tptjHIhmkyC9ujy2X VLCvGsRil49BXpMcSznfYqYbJb+eq1tPt6cofU/nEoHwu7hNVq8p5DzO/CDxxKkz 9t1SznvEaxgUTxVUuTxK5gW9Ivbcyjnmkm80z0TQB/3irBDpObVRKpoPvi1u1i7z sBvtYEF61RjbHGra7G56hnjj1R7YXVZySVRhJnplQkh1xpYejQxjTWgrYrhZ682h mnItpw19FEpQo5LuCOggeWaYiQ== -----END CERTIFICATE-----Generated at Fri Apr 17 16:53:44 2026 by rpki-client