$ rpki-client -vvf rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft File: qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft (raw, json) Hash identifier: cTzD76f1LHnAbGiZqfK/aOCszfJLNiBsEQvLbk7jeik= Subject key identifier: A9:30:CC:D6:F4:F1:0A:D6:98:DB:FC:F0:30:70:55:0E:83:F7:2F:F0 Authority key identifier: AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 Certificate issuer: /CN=A914E026/serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Certificate serial: 0D3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft Manifest number: 0D3D Signing time: Thu 16 Apr 2026 17:57:40 +0000 Manifest this update: Thu 16 Apr 2026 17:57:39 +0000 Manifest next update: Thu 23 Apr 2026 17:57:39 +0000 Files and hashes: 1: qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl (hash: AnzMdxLUv9wQwzAwz4qv8vBh2S9cSprTkemQIy2FLbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3389 (0xd3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E026, serialNumber=AB0D8797C58A83A5B49C077A32EF67328724E412 Validity Not Before: Apr 16 17:57:39 2026 GMT Not After : Apr 23 17:57:39 2026 GMT Subject: CN=69e12314-e966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:9c:a2:4d:bd:96:d1:9a:fe:5d:6f:5e:93: 04:08:7c:1f:7e:50:5d:39:76:6f:ee:72:24:6f:86: 25:f5:5a:94:61:93:a8:06:2d:fa:a9:04:f1:cf:45: 43:61:63:e3:10:d9:80:98:a6:6b:99:72:15:6a:64: 42:a2:65:af:5e:31:c2:f7:23:34:86:34:59:41:78: c6:e9:bc:e2:cb:e1:83:25:90:bb:1a:2a:cc:13:fc: fa:d8:62:9b:fa:77:93:20:f0:14:a3:8f:8a:2d:6c: 7c:94:a1:f5:3a:71:17:7b:71:fc:e9:e5:ea:4e:df: eb:f6:bd:ac:58:e5:ab:28:9a:bd:75:c0:46:03:80: 85:67:df:0b:a7:f5:8a:24:ac:cc:1a:f1:42:c8:d2: 92:a1:5a:20:8e:44:65:67:a5:68:49:22:fb:46:50: 9b:31:e4:5b:04:43:19:61:69:eb:4c:83:5b:8e:90: 76:5f:d5:57:01:fb:12:71:68:37:79:f5:f5:d2:61: 3b:88:6d:8d:84:a4:23:fc:87:b0:82:49:36:dc:0f: 16:3e:a8:3f:61:50:fc:e3:04:4c:d6:93:48:86:7b: 58:6d:d7:08:88:15:3c:f9:43:80:5a:92:ab:b0:04: d4:e8:1c:db:ce:bd:38:21:9b:78:e4:8f:fc:38:01: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:30:CC:D6:F4:F1:0A:D6:98:DB:FC:F0:30:70:55:0E:83:F7:2F:F0 X509v3 Authority Key Identifier: keyid:AB:0D:87:97:C5:8A:83:A5:B4:9C:07:7A:32:EF:67:32:87:24:E4:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qw2Hl8WKg6W0nAd6Mu9nMock5BI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E026/D6B26304F56A11E9BF2AE684C4F9AE02/qw2Hl8WKg6W0nAd6Mu9nMock5BI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:9b:e7:ec:3c:a6:0d:1c:71:01:dd:c4:04:28:dd:46:eb:da: 5c:a7:f9:bf:d6:08:59:16:ae:60:78:bc:e2:10:4d:ad:43:18: 58:a6:b9:f1:2f:10:45:75:90:73:be:bc:e0:7c:f9:d0:10:53: 7f:46:95:d5:19:08:ad:c5:6b:58:4c:98:d7:e8:ce:38:83:aa: f3:61:95:94:89:19:3f:65:55:17:95:3a:4b:0d:1e:8a:5d:1f: 86:d2:21:bd:d1:f3:a4:f4:0c:02:16:d4:8c:b8:77:06:ad:24: 3b:79:32:fb:9d:be:24:83:29:3e:28:68:4a:3b:75:b1:5c:f5: c0:a2:8f:07:bb:0d:b5:c8:fc:8f:77:dd:cb:f4:e4:a3:df:27: 2a:1c:1c:39:6c:6c:e7:20:81:30:c4:0a:a9:df:c7:b3:e9:b5: 77:88:71:57:e8:be:a0:e8:f2:ad:0b:d7:89:9b:ff:8d:7e:9c: f0:26:bc:d3:63:f3:43:62:a7:4e:5d:d2:10:86:ab:26:92:1c: 7d:e4:20:12:a7:90:38:b7:f3:dc:33:0c:04:43:88:27:2b:d6: d3:b2:3e:55:5b:60:5e:2c:33:9e:63:93:de:56:dd:9c:bd:99: aa:2a:63:ef:d6:82:d5:53:9e:31:49:31:06:9b:3a:c5:66:c1: 99:f5:d5:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUwMjYxMTAvBgNVBAUTKEFCMEQ4Nzk3QzU4QTgzQTVCNDlDMDc3QTMyRUY2NzMy ODcyNEU0MTIwHhcNMjYwNDE2MTc1NzM5WhcNMjYwNDIzMTc1NzM5WjAYMRYwFAYD VQQDEw02OWUxMjMxNC1lOTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwCcok29ltGa/l1vXpMECHwfflBdOXZv7nIkb4Yl9VqUYZOoBi36qQTxz0VD YWPjENmAmKZrmXIVamRComWvXjHC9yM0hjRZQXjG6bziy+GDJZC7GirME/z62GKb +neTIPAUo4+KLWx8lKH1OnEXe3H86eXqTt/r9r2sWOWrKJq9dcBGA4CFZ98Lp/WK JKzMGvFCyNKSoVogjkRlZ6VoSSL7RlCbMeRbBEMZYWnrTINbjpB2X9VXAfsScWg3 efX10mE7iG2NhKQj/Iewgkk23A8WPqg/YVD84wRM1pNIhntYbdcIiBU8+UOAWpKr sATU6Bzbzr04IZt45I/8OAFEKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKkwzNb0 8QrWmNv88DBwVQ6D9y/wMB8GA1UdIwQYMBaAFKsNh5fFioOltJwHejLvZzKHJOQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTAyNi9ENkIyNjMwNEY1 NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2VzBuQWQ2TXU5bk1vY2s1 QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F3MkhsOFdLZzZXMG5BZDZNdTluTW9jazVCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTAyNi9ENkIyNjMwNEY1NkExMUU5QkYyQUU2ODRDNEY5QUUwMi9xdzJIbDhXS2c2 VzBuQWQ2TXU5bk1vY2s1QkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdZvn7DymDRxxAd3EBCjdRuvaXKf5v9YIWRauYHi84hBNrUMYWKa58S8QRXWQ c7684Hz50BBTf0aV1RkIrcVrWEyY1+jOOIOq82GVlIkZP2VVF5U6Sw0eil0fhtIh vdHzpPQMAhbUjLh3Bq0kO3ky+52+JIMpPihoSjt1sVz1wKKPB7sNtcj8j3fdy/Tk o98nKhwcOWxs5yCBMMQKqd/Hs+m1d4hxV+i+oOjyrQvXiZv/jX6c8Ca802PzQ2Kn Tl3SEIarJpIcfeQgEqeQOLfz3DMMBEOIJyvW07I+VVtgXiwznmOT3lbdnL2Zqipj 79aC1VOeMUkxBps6xWbBmfXV6g== -----END CERTIFICATE-----Generated at Fri Apr 17 15:59:32 2026 by rpki-client