$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: Gy8VuBV2WYEVgxm2Fz9G5xdFPWMeoN9rJ+FKccudFQM= Subject key identifier: B9:32:C1:D3:FF:81:73:63:F3:97:DC:06:B3:9F:80:42:A5:DE:F2:4B Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 052D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 0526 Signing time: Thu 16 Apr 2026 23:28:15 +0000 Manifest this update: Thu 16 Apr 2026 23:28:15 +0000 Manifest next update: Thu 23 Apr 2026 23:28:15 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: yD5T3nj7YgIE4NwOYU7BdLVl6QFwb6dlXNMaNZGQaHU=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1325 (0x52d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Apr 16 23:28:15 2026 GMT Not After : Apr 23 23:28:15 2026 GMT Subject: CN=69e1708f-39ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:a3:67:64:c4:4b:f1:a1:2c:93:bb:bf:46: 47:a5:b7:7b:f0:b5:b5:77:3f:28:ae:af:f7:81:cc: 7c:56:58:1c:a8:77:72:8f:d7:c4:b7:af:bb:05:dc: 1a:b2:36:e6:73:73:4b:9f:11:d3:f5:7b:74:79:5f: 9f:da:d7:e6:bb:76:15:9b:ad:a7:cb:c3:01:43:33: 41:92:86:76:0b:cf:61:02:72:1b:70:b5:31:69:54: 18:7b:c5:1e:08:9b:dc:43:4e:56:cc:69:91:64:d5: 26:e8:8c:a7:3b:13:bd:95:31:4c:e7:c5:8e:e0:a4: 90:bc:9d:dc:50:67:4a:dc:e5:3f:ef:c8:d9:34:a7: 48:d8:e4:50:1c:e6:01:47:bb:91:ee:45:13:3b:95: 59:a7:19:92:c1:1a:e6:d3:26:76:47:b6:bb:27:e9: f3:49:6b:4f:45:9f:8d:7a:ed:b8:86:a9:bb:55:e2: d8:12:21:28:12:af:19:a5:55:41:a6:43:f4:66:71: a0:87:81:36:d1:11:5f:e2:70:85:c0:69:05:c8:7b: 67:48:bd:ea:47:a4:d1:b1:e2:a0:cf:f6:3d:da:02: f3:85:54:83:6d:5c:cf:80:b0:a9:6f:3b:c9:57:16: c8:ea:a3:8c:b4:8c:05:8a:b6:e2:0a:0c:8a:ef:ee: c2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:32:C1:D3:FF:81:73:63:F3:97:DC:06:B3:9F:80:42:A5:DE:F2:4B X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:83:83:f3:b1:f0:89:de:fa:05:67:d0:29:19:8e:95:2b:96: de:74:15:ad:0e:ba:15:01:62:4e:be:75:fd:55:8b:da:20:63: 02:91:cc:89:da:62:79:cf:ad:8c:40:6e:e9:9a:5e:35:18:b4: 00:b6:51:d5:b3:26:a4:28:56:c3:80:65:15:23:05:a1:6a:da: 3e:44:43:1c:7a:9f:75:e3:d1:1d:3f:52:b4:62:8a:41:66:a3: 36:be:09:23:3d:26:a7:28:ff:a8:05:d8:b2:dc:5a:b9:cd:6b: 42:b3:e6:f6:9e:f7:8b:4b:62:d6:20:13:25:56:11:4f:0c:38: 77:19:a3:05:ce:33:59:d3:27:41:d9:ab:46:3d:e9:26:b8:ba: 3d:06:31:17:31:6c:47:41:8b:51:44:d9:3d:fb:76:65:6b:7d: a4:ac:46:df:b8:b9:e9:45:59:01:45:8e:e5:08:11:ae:6b:43: 8f:15:80:01:3b:db:e2:8d:44:aa:b2:2f:c0:48:5d:07:11:5a: 09:12:e1:c0:d3:ae:ac:b1:23:f8:f7:d0:da:8f:5d:6d:e4:fd: 47:fe:e0:4c:aa:8b:28:b7:3c:64:be:cd:9e:3d:58:17:b2:09: c3:76:fa:bb:5f:39:7c:b9:a1:e0:73:0f:6f:62:98:e6:06:1c: d6:c0:34:2d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjYwNDE2MjMyODE1WhcNMjYwNDIzMjMyODE1WjAYMRYwFAYD VQQDEw02OWUxNzA4Zi0zOWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNmjZ2TES/GhLJO7v0ZHpbd78LW1dz8orq/3gcx8VlgcqHdyj9fEt6+7Bdwa sjbmc3NLnxHT9Xt0eV+f2tfmu3YVm62ny8MBQzNBkoZ2C89hAnIbcLUxaVQYe8Ue CJvcQ05WzGmRZNUm6IynOxO9lTFM58WO4KSQvJ3cUGdK3OU/78jZNKdI2ORQHOYB R7uR7kUTO5VZpxmSwRrm0yZ2R7a7J+nzSWtPRZ+Neu24hqm7VeLYEiEoEq8ZpVVB pkP0ZnGgh4E20RFf4nCFwGkFyHtnSL3qR6TRseKgz/Y92gLzhVSDbVzPgLCpbzvJ VxbI6qOMtIwFirbiCgyK7+7C+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLkywdP/ gXNj85fcBrOfgEKl3vJLMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApoOD87Hwid76BWfQKRmOlSuW3nQVrQ66FQFiTr51/VWL2iBjApHMidpiec+t jEBu6ZpeNRi0ALZR1bMmpChWw4BlFSMFoWraPkRDHHqfdePRHT9StGKKQWajNr4J Iz0mpyj/qAXYstxauc1rQrPm9p73i0ti1iATJVYRTww4dxmjBc4zWdMnQdmrRj3p Jri6PQYxFzFsR0GLUUTZPft2ZWt9pKxG37i56UVZAUWO5QgRrmtDjxWAATvb4o1E qrIvwEhdBxFaCRLhwNOurLEj+PfQ2o9dbeT9R/7gTKqLKLc8ZL7Nnj1YF7IJw3b6 u185fLmh4HMPb2KY5gYc1sA0LQ== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:20 2026 by rpki-client