$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: 808bDuhaJYPaPZ6BXprjeOt0Mrwp0B29meIm2vUJ0os= Subject key identifier: D0:91:98:23:22:8C:01:4B:76:B2:AB:0A:50:3E:CE:A6:29:55:42:0D Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 35D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 358B Signing time: Thu 16 Apr 2026 14:21:55 +0000 Manifest this update: Thu 16 Apr 2026 14:21:55 +0000 Manifest next update: Thu 23 Apr 2026 14:21:55 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: Ccu7uIDJo7e4UkdvIzF1asYbhc+i+9lvao53W+yzSCo=) 2: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=) 3: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=) 4: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=) 5: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=) 6: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: ylTDDWhoDCYbcojJAKclLssIhT1ZiJ6CbE3tkJEsYzs=) 7: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=) 8: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13778 (0x35d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Apr 16 14:21:55 2026 GMT Not After : Apr 23 14:21:55 2026 GMT Subject: CN=69e0f083-8ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:75:b0:48:9c:84:b4:2b:ff:c0:68:c1:36:f1: 89:b7:b7:f3:d3:67:d0:bb:92:69:a1:71:eb:ac:a3: 31:ae:57:f2:54:5d:7d:b1:ef:4f:e4:ff:50:20:15: 34:e6:e6:64:a1:85:63:a7:24:59:05:61:fd:3a:56: 55:c1:85:29:86:9e:8b:16:73:42:b6:7d:e0:0b:ca: b5:00:69:28:c7:3e:9b:b5:82:4f:71:b2:ea:0f:95: 6c:4e:22:19:c5:56:f1:e2:86:ea:c3:07:db:f5:f3: 51:72:e2:3e:28:47:fc:ca:67:60:2d:5c:4a:a4:0d: fe:0e:ba:57:3d:c0:f1:42:a2:97:e3:ab:ca:1c:d7: 71:64:94:21:07:0e:cf:9b:b0:9e:40:c9:45:e6:5d: 76:31:6d:c8:67:79:e5:b0:59:f3:5c:cf:a3:b2:20: 99:fe:d0:2c:38:4a:db:6d:ce:c5:bf:b4:e5:3e:0b: 98:5d:66:fb:43:52:af:6c:d1:fb:b9:29:7e:49:be: 37:46:17:d6:2c:37:e8:00:d3:84:e3:70:48:c2:8f: 6d:45:9b:7f:67:11:55:2b:0b:00:b7:ca:7b:e3:9c: 5b:47:37:bf:3f:e0:7d:ec:48:58:07:d3:3c:24:1a: 79:d1:fb:11:20:36:4f:51:14:51:8d:35:bc:99:cf: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:91:98:23:22:8C:01:4B:76:B2:AB:0A:50:3E:CE:A6:29:55:42:0D X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:4a:fd:d8:78:c6:3e:52:f8:5e:b3:1d:45:73:c5:30:03:cc: b9:06:71:07:a5:e5:24:bd:51:af:61:3a:87:4f:da:f0:9e:65: 3e:b3:b8:9c:8d:22:2d:9a:64:ec:84:29:7f:ee:24:1d:a5:9d: dc:8b:b2:35:5f:5d:c9:e5:1f:41:7e:dc:8a:f3:60:07:cd:f4: 26:a5:b7:18:f0:4e:5e:d4:d7:a4:c6:34:88:b1:e3:1e:d2:d0: c9:10:63:2d:75:f1:ed:86:be:cb:e8:6f:00:8e:07:20:e9:a2: ed:aa:4b:e7:4e:c7:81:71:b8:e8:75:57:2d:24:b5:23:d7:41: 4b:23:19:68:c9:b9:46:bd:34:07:03:f2:72:36:34:4a:c3:71: 2f:ce:cf:5a:5b:b0:e8:65:4f:76:18:eb:6b:e5:44:aa:02:8d: 67:ab:c1:36:b7:ea:ca:3d:e7:49:29:30:d6:75:6c:8b:7b:40: 05:98:e0:20:a4:7d:be:3a:22:2f:cb:be:a7:fb:8f:1f:ad:f2: 49:e9:4c:02:7f:2a:23:31:19:85:1c:21:73:bb:b2:00:4b:22: e8:74:f6:0f:5c:7c:ff:81:51:63:db:d8:b6:b3:51:74:64:9d: 19:25:e1:17:ac:1e:cc:d1:4e:30:19:5e:e0:da:f8:f8:df:b1: dd:f4:04:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwNDE2MTQyMTU1WhcNMjYwNDIzMTQyMTU1WjAYMRYwFAYD VQQDEw02OWUwZjA4My04ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvnWwSJyEtCv/wGjBNvGJt7fz02fQu5JpoXHrrKMxrlfyVF19se9P5P9QIBU0 5uZkoYVjpyRZBWH9OlZVwYUphp6LFnNCtn3gC8q1AGkoxz6btYJPcbLqD5VsTiIZ xVbx4obqwwfb9fNRcuI+KEf8ymdgLVxKpA3+DrpXPcDxQqKX46vKHNdxZJQhBw7P m7CeQMlF5l12MW3IZ3nlsFnzXM+jsiCZ/tAsOErbbc7Fv7TlPguYXWb7Q1KvbNH7 uSl+Sb43RhfWLDfoANOE43BIwo9tRZt/ZxFVKwsAt8p745xbRze/P+B97EhYB9M8 JBp50fsRIDZPURRRjTW8mc+QGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNCRmCMi jAFLdrKrClA+zqYpVUINMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2Ur92HjGPlL4XrMdRXPFMAPMuQZxB6XlJL1Rr2E6h0/a8J5lPrO4nI0iLZpk 7IQpf+4kHaWd3IuyNV9dyeUfQX7civNgB830JqW3GPBOXtTXpMY0iLHjHtLQyRBj LXXx7Ya+y+hvAI4HIOmi7apL507HgXG46HVXLSS1I9dBSyMZaMm5Rr00BwPycjY0 SsNxL87PWluw6GVPdhjra+VEqgKNZ6vBNrfqyj3nSSkw1nVsi3tABZjgIKR9vjoi L8u+p/uPH63ySelMAn8qIzEZhRwhc7uyAEsi6HT2D1x8/4FRY9vYtrNRdGSdGSXh F6wezNFOMBle4Nr4+N+x3fQENQ== -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:49 2026 by rpki-client