$ rpki-client -vvf rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft File: TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft (raw, json) Hash identifier: UBgowUOEzdIQMEPba4QkH+Zm3VXqvjAtx5vDeYO5GKo= Subject key identifier: 18:1B:54:AE:D3:64:1E:BE:74:89:F4:53:BC:AC:52:5D:92:77:82:A2 Authority key identifier: 4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 Certificate issuer: /CN=A914D271/serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft Manifest number: 0214 Signing time: Fri 17 Apr 2026 02:40:38 +0000 Manifest this update: Fri 17 Apr 2026 02:40:37 +0000 Manifest next update: Fri 24 Apr 2026 02:40:37 +0000 Files and hashes: 1: TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl (hash: eSzmeJPl3exJBXHAuX4iY26TbSX+oFN4F7Jfo8AHRW0=) 2: 5EAB725014A211EEA889E832C4F9AE02.roa (hash: ZLFetUISCazTri6FrtDTduL4atfJrtp2vrG15M5wXe4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D271, serialNumber=4CEEEE6D3663C13FD82E931DAC69F17046FC99B3 Validity Not Before: Apr 17 02:40:37 2026 GMT Not After : Apr 24 02:40:37 2026 GMT Subject: CN=69e19da5-02eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:44:6c:dd:a9:bb:fd:1f:23:c2:65:c7:21: a6:9d:e4:c9:04:f3:6f:63:a3:56:9c:64:2a:08:1a: 76:f2:be:53:b3:24:4e:86:8a:77:32:9d:55:51:a1: eb:ab:60:bb:ce:ea:04:d9:a3:af:36:ee:b5:47:9e: 22:cc:fe:49:c9:da:8c:bb:1b:c6:80:83:08:37:ce: 5b:e7:d0:15:19:3b:86:4c:90:ca:cd:33:d8:af:a1: 05:25:45:df:b0:bc:75:32:18:ca:7a:4b:3d:a9:84: 2a:9f:ea:22:95:8a:20:89:c9:29:eb:f8:93:79:eb: 67:80:ce:6c:64:a4:8a:c6:f4:c6:a9:38:be:77:b4: dd:19:42:c9:9e:c1:54:e6:ae:30:bd:cf:82:2e:d8: a2:03:73:05:6e:da:47:1e:6c:7f:27:61:6b:52:a3: 4d:b6:36:2c:81:ea:1d:80:46:bf:3a:31:24:46:5b: 9c:76:c3:9f:9d:6d:d6:7e:32:9a:d7:ae:bf:6d:dc: a2:c9:a8:77:9a:17:3b:a2:19:a3:86:bf:47:39:88: 0e:55:85:40:da:22:bd:ab:6f:b5:0d:7b:78:c6:cb: 89:0e:ee:a1:72:3f:b6:a5:3a:84:9d:3e:5e:29:d3: 5d:ff:2b:27:0b:b0:f9:1f:a1:0a:c7:2c:a9:81:c0: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1B:54:AE:D3:64:1E:BE:74:89:F4:53:BC:AC:52:5D:92:77:82:A2 X509v3 Authority Key Identifier: keyid:4C:EE:EE:6D:36:63:C1:3F:D8:2E:93:1D:AC:69:F1:70:46:FC:99:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TO7ubTZjwT_YLpMdrGnxcEb8mbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D271/2814F0DE11B111EE9047BF18C4F9AE02/TO7ubTZjwT_YLpMdrGnxcEb8mbM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c3:9f:63:ba:fc:de:6b:16:4f:fe:0f:0d:af:7a:cb:e8:de: a2:b5:73:67:9a:99:6d:ec:20:c1:34:94:e1:3f:2b:b3:3c:22: f4:70:dd:a3:f2:8f:e8:52:f0:d3:fe:34:4c:bb:65:6f:c8:42: f2:a1:2f:98:83:7d:e3:b2:71:1a:4c:49:e7:36:32:78:2e:f9: 21:fd:84:c3:33:30:70:a7:df:90:63:f5:96:a9:f6:8a:29:0f: 09:db:72:e9:8b:7b:ae:a1:58:d0:ab:fb:15:95:1d:e4:ea:e5: a6:1a:f9:38:26:d7:06:a4:8e:a9:be:8e:d5:59:3f:e3:e2:c9: d2:5d:22:3c:96:a5:e5:14:cb:fb:5e:0f:55:81:cc:38:23:d0: 29:ce:f9:13:be:75:7e:5c:6e:73:89:c2:8e:c2:8f:40:c2:a9: b3:68:6d:4c:56:e7:84:6c:38:5d:7c:26:af:72:5a:ad:14:47: d3:7a:b9:31:23:73:1f:e2:c3:14:41:9a:2c:41:3b:da:e7:f3: 96:bd:8e:0a:16:6b:84:ed:ad:6b:0c:9e:62:26:a0:54:48:9c: 0e:50:68:bd:67:3c:0d:58:ed:9d:f3:51:23:6c:4a:68:7b:d8: ba:63:fb:0d:8d:d8:27:c5:ca:f1:49:ed:01:38:a4:a8:30:7a: ca:8e:ef:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNzExMTAvBgNVBAUTKDRDRUVFRTZEMzY2M0MxM0ZEODJFOTMxREFDNjlGMTcw NDZGQzk5QjMwHhcNMjYwNDE3MDI0MDM3WhcNMjYwNDI0MDI0MDM3WjAYMRYwFAYD VQQDEw02OWUxOWRhNS0wMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS1EbN2pu/0fI8JlxyGmneTJBPNvY6NWnGQqCBp28r5TsyROhop3Mp1VUaHr q2C7zuoE2aOvNu61R54izP5JydqMuxvGgIMIN85b59AVGTuGTJDKzTPYr6EFJUXf sLx1MhjKeks9qYQqn+oilYogickp6/iTeetngM5sZKSKxvTGqTi+d7TdGULJnsFU 5q4wvc+CLtiiA3MFbtpHHmx/J2FrUqNNtjYsgeodgEa/OjEkRlucdsOfnW3WfjKa 166/bdyiyah3mhc7ohmjhr9HOYgOVYVA2iK9q2+1DXt4xsuJDu6hcj+2pTqEnT5e KdNd/ysnC7D5H6EKxyypgcAZFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBgbVK7T ZB6+dIn0U7ysUl2Sd4KiMB8GA1UdIwQYMBaAFEzu7m02Y8E/2C6THaxp8XBG/Jmz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI3MS8yODE0RjBERTEx QjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandUX1lMcE1kckdueGNFYjht Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RPN3ViVFpqd1RfWUxwTWRyR254Y0ViOG1iTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI3MS8yODE0RjBERTExQjExMUVFOTA0N0JGMThDNEY5QUUwMi9UTzd1YlRaandU X1lMcE1kckdueGNFYjhtYk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV8OfY7r83msWT/4PDa96y+jeorVzZ5qZbewgwTSU4T8rszwi9HDdo/KP6FLw 0/40TLtlb8hC8qEvmIN947JxGkxJ5zYyeC75If2EwzMwcKffkGP1lqn2iikPCdty 6Yt7rqFY0Kv7FZUd5Orlphr5OCbXBqSOqb6O1Vk/4+LJ0l0iPJal5RTL+14PVYHM OCPQKc75E751flxuc4nCjsKPQMKps2htTFbnhGw4XXwmr3JarRRH03q5MSNzH+LD FEGaLEE72ufzlr2OChZrhO2tawyeYiagVEicDlBovWc8DVjtnfNRI2xKaHvYumP7 DY3YJ8XK8UntATikqDB6yo7vWA== -----END CERTIFICATE-----Generated at Fri Apr 17 07:09:24 2026 by rpki-client