$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: 5ESNB7q87x7DHbodjUbfIXqxMCa288m2t3dyrKN/f6Y= Subject key identifier: FC:5F:61:06:D6:74:ED:D1:45:86:2B:32:31:A9:F1:CA:21:80:71:6B Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0BBE Signing time: Thu 16 Apr 2026 18:54:20 +0000 Manifest this update: Thu 16 Apr 2026 18:54:20 +0000 Manifest next update: Thu 23 Apr 2026 18:54:20 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: PFfmhNlu6InQbYYJf5dteVaemR4ZPEgMCHLFep+w398=) 2: C43C22501DEF11F1B60466D9163D8C67.roa (hash: xsIr4KFI9a9YHG0N66oMLWH8AurLcb1F9zQyd9fncF4=) 3: 450DDD84EA0A11F09D7A92E76F6F56BC.roa (hash: kJnM7EoAenCH3PCIlTPoGD0IpncArPRKG0ulKlcXT+o=) 4: 4580DDDEEA0A11F09D7A92E76F6F56BC.roa (hash: dP56HqiOS0iPtAVucNZ2wR/KoNuwl+rRD4b0wwXFjDs=) 5: CB926A64E58711F0B2CA0EBF446F56BC.roa (hash: 8Zv5MMAKEdi89aa0T4smQVaAo99bnl+ZMZOEdaQmF7Y=) 6: 44942606EA0A11F09D7A92E76F6F56BC.roa (hash: EeLJby/8EluYAUfNa1xVSHc8kon4tRGoZL1/tkyFn7k=) 7: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: 53LWwpRVZrDTw/6Ogh5Ek7qxm98TR8hKYo+nI3Iokbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3042 (0xbe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Apr 16 18:54:20 2026 GMT Not After : Apr 23 18:54:20 2026 GMT Subject: CN=69e1305c-4c3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:97:a0:94:70:7f:e5:89:a4:aa:bc:f7:a4:21: 3c:0d:bc:3a:cc:0c:77:04:f3:1e:36:0d:59:06:f0: ca:aa:fb:55:6c:47:44:79:92:a7:07:74:24:0d:0c: 86:22:12:82:28:ef:fe:5e:ba:23:46:b9:de:69:66: d9:8b:5c:0c:7e:d0:78:a8:b7:cc:4f:b7:eb:0a:75: 89:28:b7:9c:91:66:a4:66:ff:07:80:56:46:5d:6f: 76:23:df:13:e1:4b:56:40:1f:e5:b4:ea:f9:50:a0: 6b:f0:b6:2c:66:50:79:01:0c:c9:e5:f7:26:86:94: e4:15:c4:2d:b3:27:48:83:d7:b3:21:94:c7:17:0b: c9:27:96:af:e9:4a:9a:bc:c5:2e:c6:d6:b4:d7:a4: 90:5a:70:22:0a:55:bc:52:d2:75:71:a9:9d:b5:21: 33:e1:1a:ce:8e:4c:6e:07:21:4c:f4:95:db:1e:b4: 77:29:27:3f:56:79:93:a9:1b:01:b4:92:f2:1f:b3: 63:65:50:16:4d:d3:62:a7:75:52:45:fc:2e:e0:9a: 63:f4:1d:a9:0f:ef:27:5e:f4:3d:fb:b5:d5:37:69: 93:fb:33:e8:11:dc:4a:2d:42:35:6e:bf:59:56:60: e2:4c:65:08:fd:4d:36:82:ac:52:53:07:3e:9a:34: b1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5F:61:06:D6:74:ED:D1:45:86:2B:32:31:A9:F1:CA:21:80:71:6B X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6d:eb:36:ab:a4:60:7f:d5:5c:f2:1d:34:92:91:32:2e:d8: c8:85:27:1f:b0:db:50:07:f6:3a:ff:77:b4:b8:29:70:72:e4: 57:e7:ee:b0:c9:b0:57:c3:0c:7c:8d:56:dc:b7:fa:24:6e:94: ad:7b:87:d0:6e:9b:3a:77:c6:4b:89:73:43:4a:d5:ed:27:80: e3:6b:4c:d8:17:5a:00:8c:de:73:b9:8d:96:4a:0b:aa:12:d9: 19:ce:d4:d7:80:f7:13:d7:fa:94:d7:66:d9:73:2f:19:0d:52: c3:13:db:8e:53:d1:72:a3:ce:d1:b1:27:bf:1d:4c:1a:63:40: 0a:e0:53:11:4b:11:45:84:b0:15:59:7c:39:0a:ba:8e:3f:24: c0:61:72:82:9c:b6:55:ca:0f:e1:a1:c1:29:9e:e1:ad:2d:a4: 6b:3e:c4:28:32:da:bc:3a:bb:aa:49:33:f1:d5:79:09:d1:04: b0:98:2a:c3:68:51:84:80:b3:25:8e:88:6a:91:ca:87:f6:3a: e2:e9:bd:b1:16:c1:05:3c:ee:46:07:d2:12:fc:0e:4d:23:c9: dc:a3:c9:bd:08:60:89:a9:32:c5:45:cc:90:1f:36:9c:3a:23: 9e:ff:0d:31:f7:f1:b3:04:59:d5:9e:a0:69:c4:1c:1c:f7:a2: 22:f0:af:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjYwNDE2MTg1NDIwWhcNMjYwNDIzMTg1NDIwWjAYMRYwFAYD VQQDEw02OWUxMzA1Yy00YzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5peglHB/5Ymkqrz3pCE8Dbw6zAx3BPMeNg1ZBvDKqvtVbEdEeZKnB3QkDQyG IhKCKO/+XrojRrneaWbZi1wMftB4qLfMT7frCnWJKLeckWakZv8HgFZGXW92I98T 4UtWQB/ltOr5UKBr8LYsZlB5AQzJ5fcmhpTkFcQtsydIg9ezIZTHFwvJJ5av6Uqa vMUuxta016SQWnAiClW8UtJ1camdtSEz4RrOjkxuByFM9JXbHrR3KSc/VnmTqRsB tJLyH7NjZVAWTdNip3VSRfwu4Jpj9B2pD+8nXvQ9+7XVN2mT+zPoEdxKLUI1br9Z VmDiTGUI/U02gqxSUwc+mjSx/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPxfYQbW dO3RRYYrMjGp8cohgHFrMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf23rNqukYH/VXPIdNJKRMi7YyIUnH7DbUAf2Ov93tLgpcHLkV+fusMmwV8MM fI1W3Lf6JG6UrXuH0G6bOnfGS4lzQ0rV7SeA42tM2BdaAIzec7mNlkoLqhLZGc7U 14D3E9f6lNdm2XMvGQ1SwxPbjlPRcqPO0bEnvx1MGmNACuBTEUsRRYSwFVl8OQq6 jj8kwGFygpy2VcoP4aHBKZ7hrS2kaz7EKDLavDq7qkkz8dV5CdEEsJgqw2hRhICz JY6IapHKh/Y64um9sRbBBTzuRgfSEvwOTSPJ3KPJvQhgiakyxUXMkB82nDojnv8N MffxswRZ1Z6gacQcHPeiIvCvEg== -----END CERTIFICATE-----Generated at Fri Apr 17 07:58:12 2026 by rpki-client