$ rpki-client -vvf rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft File: tw3qbHe56OzOWDkTKBnvkTc_xSc.mft (raw, json) Hash identifier: Q6ukfHPI5anOOJpA6elUdQLbT+Y95AtN16vQ0C5vA1Q= Subject key identifier: BC:49:AF:E1:E6:57:4B:F4:5D:A6:98:6F:34:A0:C6:D2:E0:08:54:67 Authority key identifier: B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 Certificate issuer: /CN=A914E2B2/serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Certificate serial: 0174 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft Manifest number: 016F Signing time: Fri 17 Apr 2026 04:28:38 +0000 Manifest this update: Fri 17 Apr 2026 04:28:37 +0000 Manifest next update: Fri 24 Apr 2026 04:28:37 +0000 Files and hashes: 1: tw3qbHe56OzOWDkTKBnvkTc_xSc.crl (hash: HVxSlNF9Rju9t1RR+YB1g0sRFQWIxL11DMwwVTaHq0g=) 2: D6AEA2D20DE311EFA1E24F25C4F9AE02.roa (hash: SjviPWHP1DeQCRL5zA27ZA6ZX61NzlG+Six3xPkugE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 04:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 372 (0x174) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E2B2, serialNumber=B70DEA6C77B9E8ECCE5839132819EF91373FC527 Validity Not Before: Apr 17 04:28:37 2026 GMT Not After : Apr 24 04:28:37 2026 GMT Subject: CN=69e1b6f6-6876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5e:7d:99:1a:78:87:b7:42:97:cc:d5:13:ec: b4:7f:db:53:25:4c:02:c7:f1:f1:fc:17:52:cd:4c: 40:c3:54:39:f7:5f:1f:1f:2e:de:b7:21:49:59:a5: 47:fd:e8:8e:a1:05:53:78:ab:59:a9:02:5e:9e:d6: 4c:c6:b1:a6:34:19:cb:34:d0:92:d7:00:e7:89:2a: d9:ed:f0:bb:63:f1:d8:f4:aa:ab:97:06:36:8b:36: e6:a1:72:07:fe:04:41:2d:0b:03:e8:0a:d6:fa:04: bd:ba:52:f3:22:71:83:31:ea:3c:8c:57:a0:08:33: 88:bd:29:2f:86:74:e8:93:74:56:70:08:5d:bf:ca: f4:cd:6d:c2:76:c6:18:ca:6e:52:55:55:21:9a:31: 3a:ce:7e:65:be:0e:80:a3:98:25:09:38:a1:3a:a2: c4:f2:b6:95:26:45:d7:c9:fd:43:22:c7:64:ff:bb: 20:80:58:44:75:39:ad:10:b9:7e:cf:46:58:4f:64: 05:8e:30:f2:8f:d1:5a:51:79:00:05:f5:ed:79:f9: d6:bd:20:76:9f:76:65:b4:01:8a:9e:4a:c9:ec:89: 1a:ce:0e:7e:54:69:61:4b:ce:85:f6:28:06:d5:77: e2:b3:bf:57:a1:ab:d7:f5:0c:12:9b:a8:ae:c3:e9: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:49:AF:E1:E6:57:4B:F4:5D:A6:98:6F:34:A0:C6:D2:E0:08:54:67 X509v3 Authority Key Identifier: keyid:B7:0D:EA:6C:77:B9:E8:EC:CE:58:39:13:28:19:EF:91:37:3F:C5:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tw3qbHe56OzOWDkTKBnvkTc_xSc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E2B2/2B46EA580DE311EF803F6F0EC4F9AE02/tw3qbHe56OzOWDkTKBnvkTc_xSc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:9a:15:b2:c5:51:4f:bb:4e:f4:a8:4c:20:16:fc:d4:1e:00: a1:29:f9:89:cb:82:3e:87:0a:34:51:4b:3b:32:fd:2b:37:f7: 02:1b:be:5f:09:db:16:32:ac:7b:84:d4:dc:e1:62:e5:b7:4f: 6f:30:8c:20:a7:e0:b2:85:4b:f4:e2:32:a3:97:de:0a:57:78: 6a:d4:c0:81:1b:3f:1b:44:80:b1:07:a9:b4:ea:44:d7:46:a7: 7a:5a:4d:6c:f0:65:36:89:f4:92:e0:89:43:49:11:6a:a3:65: 98:5e:0c:b9:e8:f6:7a:3f:54:16:38:63:fb:3a:12:87:72:58: a4:e8:84:60:33:ec:33:38:32:3e:37:6c:bb:95:2f:25:06:7b: 24:6b:88:4e:29:31:5c:ed:0f:e7:5e:01:a8:4a:1c:5c:da:e2: f5:db:6e:98:1b:b8:64:66:05:92:35:e2:ba:b3:cb:3a:b6:2f: b1:ef:17:5e:9a:bb:51:37:ee:c9:18:db:1c:25:74:81:c7:63: ea:b3:bf:60:72:03:fc:24:fe:5c:bc:e9:1e:ee:85:d5:2e:26: 81:12:ab:65:43:24:87:a5:b6:0e:23:82:bc:47:ab:ac:65:da: ba:a5:55:fa:53:75:76:a9:93:54:73:2e:fe:7b:6a:56:88:b0: 65:dc:7d:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUyQjIxMTAvBgNVBAUTKEI3MERFQTZDNzdCOUU4RUNDRTU4MzkxMzI4MTlFRjkx MzczRkM1MjcwHhcNMjYwNDE3MDQyODM3WhcNMjYwNDI0MDQyODM3WjAYMRYwFAYD VQQDEw02OWUxYjZmNi02ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoF59mRp4h7dCl8zVE+y0f9tTJUwCx/Hx/BdSzUxAw1Q5918fHy7etyFJWaVH /eiOoQVTeKtZqQJentZMxrGmNBnLNNCS1wDniSrZ7fC7Y/HY9KqrlwY2izbmoXIH /gRBLQsD6ArW+gS9ulLzInGDMeo8jFegCDOIvSkvhnTok3RWcAhdv8r0zW3CdsYY ym5SVVUhmjE6zn5lvg6Ao5glCTihOqLE8raVJkXXyf1DIsdk/7sggFhEdTmtELl+ z0ZYT2QFjjDyj9FaUXkABfXtefnWvSB2n3ZltAGKnkrJ7Ikazg5+VGlhS86F9igG 1Xfis79XoavX9QwSm6iuw+l6CQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLxJr+Hm V0v0XaaYbzSgxtLgCFRnMB8GA1UdIwQYMBaAFLcN6mx3uejszlg5EygZ75E3P8Un MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTJCMi8yQjQ2RUE1ODBE RTMxMUVGODAzRjZGMEVDNEY5QUUwMi90dzNxYkhlNTZPek9XRGtUS0JudmtUY194 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3R3M3FiSGU1Nk96T1dEa1RLQm52a1RjX3hTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTJCMi8yQjQ2RUE1ODBERTMxMUVGODAzRjZGMEVDNEY5QUUwMi90dzNxYkhlNTZP ek9XRGtUS0JudmtUY194U2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEZoVssVRT7tO9KhMIBb81B4AoSn5icuCPocKNFFLOzL9Kzf3Ahu+XwnbFjKs e4TU3OFi5bdPbzCMIKfgsoVL9OIyo5feCld4atTAgRs/G0SAsQeptOpE10anelpN bPBlNon0kuCJQ0kRaqNlmF4Muej2ej9UFjhj+zoSh3JYpOiEYDPsMzgyPjdsu5Uv JQZ7JGuITikxXO0P514BqEocXNri9dtumBu4ZGYFkjXiurPLOrYvse8XXpq7UTfu yRjbHCV0gcdj6rO/YHID/CT+XLzpHu6F1S4mgRKrZUMkh6W2DiOCvEerrGXauqVV +lN1dqmTVHMu/ntqVoiwZdx9cA== -----END CERTIFICATE-----Generated at Fri Apr 17 12:57:55 2026 by rpki-client