$ rpki-client -vvf rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft File: b-5tdUHTHLD7ENbScmQkY5LHSdI.mft (raw, json) Hash identifier: QFC+FyCJsPNxjiS7VslVQhTAd6Juzp6MlJj76R4d6fc= Subject key identifier: CA:DA:83:68:10:AD:3D:58:CA:21:30:8A:21:45:83:54:B0:A7:7F:84 Authority key identifier: 6F:EE:6D:75:41:D3:1C:B0:FB:10:D6:D2:72:64:24:63:92:C7:49:D2 Certificate issuer: /CN=A9145CB7/serialNumber=6FEE6D7541D31CB0FB10D6D27264246392C749D2 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft Manifest number: 24 Signing time: Fri 17 Apr 2026 08:32:40 +0000 Manifest this update: Fri 17 Apr 2026 08:32:39 +0000 Manifest next update: Fri 24 Apr 2026 08:32:39 +0000 Files and hashes: 1: b-5tdUHTHLD7ENbScmQkY5LHSdI.crl (hash: VR20+AVrX+9211yZp22G74EmnudoBT7HHT6Zyfv66tc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.crl rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145CB7, serialNumber=6FEE6D7541D31CB0FB10D6D27264246392C749D2 Validity Not Before: Apr 17 08:32:39 2026 GMT Not After : Apr 24 08:32:39 2026 GMT Subject: CN=69e1f027-28b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5d:f2:0e:60:2f:ec:60:97:5b:2e:e0:5b:c9: de:e6:85:4b:b2:8f:e5:3f:4c:d4:47:2e:33:a2:84: 7b:43:1c:97:a1:61:84:c8:0d:1a:c0:bf:d1:90:e4: 8c:1d:1a:60:c6:bd:09:e3:57:59:91:b9:51:4b:e9: 4f:f8:12:3f:17:cd:e9:ef:c1:3d:66:6a:a1:6d:2c: e1:80:61:ca:f5:63:0e:26:50:3d:35:83:3e:b6:18: d8:6b:19:6c:a4:58:c4:6a:6b:43:4b:14:f0:89:bd: b6:07:02:24:b5:3a:b8:4d:d6:7c:03:33:a1:02:e4: c2:c5:f1:59:8e:29:3f:36:5e:7e:5e:2d:eb:98:80: 3b:0a:45:73:8c:21:7b:f5:dc:d3:03:9b:d8:82:8d: 8a:ab:24:04:dd:ef:c1:3b:86:5a:0d:8e:d0:a4:4a: 39:ac:73:1d:99:68:6d:c8:86:a8:3b:4d:e4:24:65: d5:05:b4:90:f4:6c:83:25:d5:90:2b:27:44:33:c8: 5f:46:11:cd:49:85:9c:3f:71:7a:70:3b:69:43:47: ea:b4:a4:77:5b:b3:4b:8f:79:3f:07:ec:23:e6:b7: 94:78:0f:c4:6b:53:16:a2:53:d5:4e:05:2f:cd:70: 5a:a3:e1:d5:9f:cf:65:e6:63:60:a4:60:9b:e4:8d: 70:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:83:68:10:AD:3D:58:CA:21:30:8A:21:45:83:54:B0:A7:7F:84 X509v3 Authority Key Identifier: keyid:6F:EE:6D:75:41:D3:1C:B0:FB:10:D6:D2:72:64:24:63:92:C7:49:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-5tdUHTHLD7ENbScmQkY5LHSdI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145CB7/83EA6D72082A11F1B456BEDF353D8C67/b-5tdUHTHLD7ENbScmQkY5LHSdI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:8e:d5:2c:41:42:86:18:ff:30:2e:56:18:34:2c:1b:c7: 45:cb:3f:ce:61:c3:6a:5d:5a:ab:32:81:38:04:3b:09:76:f3: 9b:cc:f4:87:2a:35:e2:f6:61:ac:22:4f:ca:e1:44:a7:44:3e: 79:83:f1:73:95:82:e8:46:04:13:34:63:18:8c:1b:cd:10:46: 5f:95:1c:ed:cf:2d:8c:a7:15:93:08:fc:92:42:b9:1d:f9:d1: 1a:10:4e:0c:44:09:6b:36:55:f9:14:08:9d:3e:22:78:78:4d: 43:13:9c:95:e0:00:a8:b9:a2:38:f0:c4:8b:6c:d0:13:4c:76: 78:ab:84:5c:89:95:07:6e:d1:0f:7c:3f:bf:ff:9b:75:58:34: 9e:56:a0:a8:2b:f0:82:9e:7d:ad:3a:7d:7a:3d:10:b6:7e:d3: 9b:3d:3c:15:7c:6d:92:16:cf:ba:6e:e8:87:77:48:c0:5f:c7: 13:b3:c4:38:4d:3e:6b:da:9b:f8:6f:cd:42:33:27:a7:63:8c: ea:ba:a1:30:32:c4:5a:10:ec:b0:2f:42:f1:ca:b6:4e:7c:43: c7:56:79:75:17:c0:c9:6f:c6:a1:db:6d:0f:4f:d1:03:63:db: cc:04:05:43:28:ad:4d:83:2a:c3:9b:da:4a:2f:04:28:c6:77: 76:af:c7:68 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUNCNzExMC8GA1UEBRMoNkZFRTZENzU0MUQzMUNCMEZCMTBENkQyNzI2NDI0NjM5 MkM3NDlEMjAeFw0yNjA0MTcwODMyMzlaFw0yNjA0MjQwODMyMzlaMBgxFjAUBgNV BAMTDTY5ZTFmMDI3LTI4YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMXfIOYC/sYJdbLuBbyd7mhUuyj+U/TNRHLjOihHtDHJehYYTIDRrAv9GQ5Iwd GmDGvQnjV1mRuVFL6U/4Ej8XzenvwT1maqFtLOGAYcr1Yw4mUD01gz62GNhrGWyk WMRqa0NLFPCJvbYHAiS1OrhN1nwDM6EC5MLF8VmOKT82Xn5eLeuYgDsKRXOMIXv1 3NMDm9iCjYqrJATd78E7hloNjtCkSjmscx2ZaG3Ihqg7TeQkZdUFtJD0bIMl1ZAr J0QzyF9GEc1JhZw/cXpwO2lDR+q0pHdbs0uPeT8H7CPmt5R4D8RrUxaiU9VOBS/N cFqj4dWfz2XmY2CkYJvkjXBXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUytqDaBCt PVjKITCKIUWDVLCnf4QwHwYDVR0jBBgwFoAUb+5tdUHTHLD7ENbScmQkY5LHSdIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1Q0I3LzgzRUE2RDcyMDgy QTExRjFCNDU2QkVERjM1M0Q4QzY3L2ItNXRkVUhUSExEN0VOYlNjbVFrWTVMSFNk SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYi01dGRVSFRITEQ3RU5iU2NtUWtZNUxIU2RJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1 Q0I3LzgzRUE2RDcyMDgyQTExRjFCNDU2QkVERjM1M0Q4QzY3L2ItNXRkVUhUSExE N0VOYlNjbVFrWTVMSFNkSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzOY7VLEFChhj/MC5WGDQsG8dFyz/OYcNqXVqrMoE4BDsJdvObzPSHKjXi9mGs Ik/K4USnRD55g/FzlYLoRgQTNGMYjBvNEEZflRztzy2MpxWTCPySQrkd+dEaEE4M RAlrNlX5FAidPiJ4eE1DE5yV4ACouaI48MSLbNATTHZ4q4RciZUHbtEPfD+//5t1 WDSeVqCoK/CCnn2tOn16PRC2ftObPTwVfG2SFs+6buiHd0jAX8cTs8Q4TT5r2pv4 b81CMyenY4zquqEwMsRaEOywL0LxyrZOfEPHVnl1F8DJb8ah220PT9EDY9vMBAVD KK1NgyrDm9pKLwQoxnd2r8do -----END CERTIFICATE-----Generated at Fri Apr 17 12:32:07 2026 by rpki-client