$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: qeBo+Tsyag0xRwQLekmOc14+3ZVDwBjpnaibSRsNT2A= Subject key identifier: B4:1D:E8:A9:AA:DD:B5:FB:FB:0D:3F:39:06:BB:C1:0B:28:29:3D:77 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 0150 Signing time: Wed 15 Apr 2026 04:42:10 +0000 Manifest this update: Wed 15 Apr 2026 04:42:09 +0000 Manifest next update: Wed 22 Apr 2026 04:42:09 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: FBuZ+7CMoMT+GJH7NSU19tHls9acmoGDEtIjL4ob7sc=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: 6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Apr 15 04:42:09 2026 GMT Not After : Apr 22 04:42:09 2026 GMT Subject: CN=69df1722-1fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d7:56:db:dc:ec:cd:5b:b8:10:f8:6b:70:21: 84:1c:d1:68:e8:de:f0:80:7e:3d:bc:8d:f9:1f:18: f4:00:e4:82:c9:d1:ab:0b:4d:fa:0b:43:8f:d5:3b: 2a:ac:42:7f:41:c2:0c:50:d4:9c:6b:14:ac:f4:c4: c3:ec:28:3f:39:33:87:39:35:4b:23:90:c9:36:ab: 7d:03:36:83:bd:6d:33:22:9a:6e:ab:d6:db:8d:6b: e4:f4:59:cd:fb:08:9d:f0:8a:2f:6a:67:dd:08:d1: 47:e4:ca:8e:e4:df:1b:31:10:30:a0:e8:d9:e3:36: ef:f8:f3:54:e5:cd:c4:c4:5c:c0:6b:30:f6:0d:07: fa:22:b1:cc:29:2a:68:3b:c4:36:96:d6:78:e2:f2: 29:37:4b:1c:9d:af:fe:08:1e:13:a3:bd:62:a3:16: 2b:b6:8c:4d:63:6e:66:70:02:00:6b:9f:f0:36:95: 7a:e2:94:a4:5e:73:ee:6e:b2:f9:6d:5f:93:af:a6: ae:a1:a4:df:24:5f:42:c1:78:df:43:15:5e:b5:a5: 00:5f:38:47:f1:7a:44:89:41:2b:60:92:9e:e4:e5: 77:ce:1b:bd:84:1e:21:8a:43:3d:29:7d:a4:6c:68: 5e:56:ab:7d:04:05:88:4b:cb:34:ed:8d:b1:57:df: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1D:E8:A9:AA:DD:B5:FB:FB:0D:3F:39:06:BB:C1:0B:28:29:3D:77 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b3:cf:ba:55:11:ae:a5:d4:d1:68:ac:12:69:e7:ef:3b:08: 89:da:3d:bb:f6:70:84:ac:f3:31:27:b5:d4:7d:32:6f:5d:8d: 89:83:cf:d5:76:9a:b2:12:24:26:b8:c1:24:93:cc:0a:cb:57: 00:64:31:6f:f5:6f:9f:eb:8f:c6:35:1c:f0:13:e1:3a:06:bd: 86:12:65:f3:31:e4:f2:e9:9c:9c:ba:11:83:b2:ac:93:4e:18: 65:d8:97:c7:a8:66:82:95:6b:ef:94:b5:b3:55:5c:97:eb:b1: 7b:b4:d3:61:fb:1a:e7:14:c1:a5:ab:fa:08:a6:1a:07:a6:59: a8:ca:40:ff:01:d1:cd:81:64:9f:8c:cd:b6:f4:4b:8a:15:02: 7b:93:93:00:98:ed:37:ff:c9:b3:82:6e:0a:2d:5c:d6:ba:4f: c6:ef:6a:25:a4:67:7b:b6:01:3b:39:6b:72:df:55:01:1f:31: 90:7d:9d:0d:61:de:89:24:3b:5b:44:bf:d2:b5:68:6b:2d:c0: 3b:5a:26:e9:1b:ed:49:1e:2a:82:0c:94:b9:03:1d:b6:a3:26: 76:74:39:6a:3d:26:88:28:09:d1:52:ab:94:58:4d:0a:4d:78: b0:9e:0d:15:71:3d:54:2b:8a:c8:e2:9b:07:f5:c9:e3:ad:f9: 79:12:20:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjYwNDE1MDQ0MjA5WhcNMjYwNDIyMDQ0MjA5WjAYMRYwFAYD VQQDEw02OWRmMTcyMi0xZmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArtdW29zszVu4EPhrcCGEHNFo6N7wgH49vI35Hxj0AOSCydGrC036C0OP1Tsq rEJ/QcIMUNScaxSs9MTD7Cg/OTOHOTVLI5DJNqt9AzaDvW0zIppuq9bbjWvk9FnN +wid8IovamfdCNFH5MqO5N8bMRAwoOjZ4zbv+PNU5c3ExFzAazD2DQf6IrHMKSpo O8Q2ltZ44vIpN0scna/+CB4To71ioxYrtoxNY25mcAIAa5/wNpV64pSkXnPubrL5 bV+Tr6auoaTfJF9CwXjfQxVetaUAXzhH8XpEiUErYJKe5OV3zhu9hB4hikM9KX2k bGheVqt9BAWIS8s07Y2xV9+kjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLQd6Kmq 3bX7+w0/OQa7wQsoKT13MB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYrPPulURrqXU0WisEmnn7zsIido9u/ZwhKzzMSe11H0yb12NiYPP1XaashIk JrjBJJPMCstXAGQxb/Vvn+uPxjUc8BPhOga9hhJl8zHk8umcnLoRg7Ksk04YZdiX x6hmgpVr75S1s1Vcl+uxe7TTYfsa5xTBpav6CKYaB6ZZqMpA/wHRzYFkn4zNtvRL ihUCe5OTAJjtN//Js4JuCi1c1rpPxu9qJaRne7YBOzlrct9VAR8xkH2dDWHeiSQ7 W0S/0rVoay3AO1om6RvtSR4qggyUuQMdtqMmdnQ5aj0miCgJ0VKrlFhNCk14sJ4N FXE9VCuKyOKbB/XJ4635eRIgeQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:34:07 2026 by rpki-client