$ rpki-client -vvf rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft File: PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft (raw, json) Hash identifier: w3Fs4cdCHUP5muoZolak/aPVtXspfdD7uucb/+Ggc/U= Subject key identifier: 1B:80:4E:90:08:2A:62:79:DE:ED:BB:58:D3:A6:2F:1E:E8:BE:4D:58 Authority key identifier: 3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 Certificate issuer: /CN=A915B880/serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Certificate serial: 0EE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft Manifest number: 0EDC Signing time: Thu 16 Apr 2026 17:34:36 +0000 Manifest this update: Thu 16 Apr 2026 17:34:35 +0000 Manifest next update: Thu 23 Apr 2026 17:34:35 +0000 Files and hashes: 1: PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl (hash: k6ftp8pOG5/Uv1se8KYNF0sYIPGGQtG/lLRFMhdOK0c=) 2: 0853C13CA2F011E9B721795CC4F9AE02.roa (hash: YtMmvD8+t+Y0DWKnnIer/ep8HqJT/MOFDON0KvPSWok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3815 (0xee7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B880, serialNumber=3D7A4E0A99AF15EF0B3790D0E7961E8875281983 Validity Not Before: Apr 16 17:34:35 2026 GMT Not After : Apr 23 17:34:35 2026 GMT Subject: CN=69e11dab-6a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:99:60:e0:ad:5e:2e:61:81:2f:32:03:b9:34: d6:61:da:24:14:4d:6e:ea:f5:23:03:50:d8:d7:1e: 7b:51:96:8e:7f:0e:0c:43:69:39:9a:4f:fb:37:79: 0b:04:c4:80:6e:cc:76:d6:e7:5d:5d:b5:a7:4d:24: 3d:f7:88:ed:05:5f:f0:79:26:0a:a5:44:7f:b7:cd: 79:d2:37:9a:4e:42:b9:da:9c:4c:c8:36:39:c9:db: ba:3f:86:e1:e2:b6:19:1e:d7:d0:0e:14:fb:d3:11: f1:4d:62:04:99:d2:2a:9b:18:78:a5:da:b4:51:e2: 73:19:9b:26:de:24:df:83:3f:a9:e8:28:fa:47:5d: c8:88:e2:20:42:bd:30:c0:4c:0d:be:8a:7e:ae:35: 54:c7:41:e3:f0:bf:ff:07:8f:17:83:79:2c:3e:6b: 09:b8:66:93:4b:ed:c0:16:2f:0a:87:dc:fa:d8:c5: 5c:4d:91:85:e1:18:c8:f9:67:82:4e:1a:83:f4:79: 57:98:e6:5c:5f:96:d7:28:24:c9:78:19:79:51:30: e9:ee:ac:7f:02:e2:c9:79:08:c5:63:c4:80:69:af: 46:06:d4:b6:07:b4:87:67:eb:92:3a:5b:f6:76:b3: f7:f1:88:78:5d:39:c2:05:e5:49:75:8a:1c:76:bf: 63:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:80:4E:90:08:2A:62:79:DE:ED:BB:58:D3:A6:2F:1E:E8:BE:4D:58 X509v3 Authority Key Identifier: keyid:3D:7A:4E:0A:99:AF:15:EF:0B:37:90:D0:E7:96:1E:88:75:28:19:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PXpOCpmvFe8LN5DQ55YeiHUoGYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B880/1F5118A4A2EF11E99D4E0A5BC4F9AE02/PXpOCpmvFe8LN5DQ55YeiHUoGYM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:76:89:c1:b8:cb:32:16:90:34:f8:8a:10:b7:0c:6f:c8:b6: ac:9c:48:78:91:3b:e5:45:0b:aa:fd:6c:3c:ea:c6:4e:78:c4: 4c:78:89:42:c2:f6:59:73:16:a3:da:ef:6f:1b:bd:47:b1:7c: d8:59:6a:cf:8c:f0:ca:98:dc:40:4c:e4:2a:72:7a:91:a9:20: 47:4b:b2:ca:ff:83:ce:21:f2:ab:68:46:ce:dc:e2:86:31:b4: b7:ce:35:2c:b0:bb:0b:c5:83:8d:71:e4:e4:08:48:93:d7:6e: 4f:4d:e5:38:22:33:65:6d:b8:ac:9a:d1:7b:d3:f0:8b:9d:95: 3e:3e:64:2c:0f:ff:0a:23:3c:be:4b:aa:3d:03:38:4f:f9:1f: 42:ff:36:42:95:ca:ac:9a:4d:9a:a9:57:28:e5:ab:24:0b:8a: dc:ef:1a:af:69:79:f9:be:d5:55:65:f0:1c:8e:b8:84:c6:e7: 32:cf:76:8a:43:8d:46:93:27:fa:cf:ad:1f:67:52:0f:e3:ec: 28:58:c4:56:e8:ee:89:4a:fd:89:79:1c:f2:27:35:2f:d1:72: fd:5d:87:9d:3b:96:3d:98:9e:e1:46:16:25:fe:07:22:41:7c: d5:f9:83:d9:df:f6:bd:59:db:0f:d4:68:51:ed:99:34:d1:4e: bd:7e:0e:06 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI4ODAxMTAvBgNVBAUTKDNEN0E0RTBBOTlBRjE1RUYwQjM3OTBEMEU3OTYxRTg4 NzUyODE5ODMwHhcNMjYwNDE2MTczNDM1WhcNMjYwNDIzMTczNDM1WjAYMRYwFAYD VQQDEw02OWUxMWRhYi02YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn5lg4K1eLmGBLzIDuTTWYdokFE1u6vUjA1DY1x57UZaOfw4MQ2k5mk/7N3kL BMSAbsx21uddXbWnTSQ994jtBV/weSYKpUR/t8150jeaTkK52pxMyDY5ydu6P4bh 4rYZHtfQDhT70xHxTWIEmdIqmxh4pdq0UeJzGZsm3iTfgz+p6Cj6R13IiOIgQr0w wEwNvop+rjVUx0Hj8L//B48Xg3ksPmsJuGaTS+3AFi8Kh9z62MVcTZGF4RjI+WeC ThqD9HlXmOZcX5bXKCTJeBl5UTDp7qx/AuLJeQjFY8SAaa9GBtS2B7SHZ+uSOlv2 drP38Yh4XTnCBeVJdYocdr9j1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBuATpAI KmJ53u27WNOmLx7ovk1YMB8GA1UdIwQYMBaAFD16TgqZrxXvCzeQ0OeWHoh1KBmD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjg4MC8xRjUxMThBNEEy RUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZlOExONURRNTVZZWlIVW9H WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BYcE9DcG12RmU4TE41RFE1NVllaUhVb0dZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjg4MC8xRjUxMThBNEEyRUYxMUU5OUQ0RTBBNUJDNEY5QUUwMi9QWHBPQ3BtdkZl OExONURRNTVZZWlIVW9HWU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtXaJwbjLMhaQNPiKELcMb8i2rJxIeJE75UULqv1sPOrGTnjETHiJQsL2WXMW o9rvbxu9R7F82Flqz4zwypjcQEzkKnJ6kakgR0uyyv+DziHyq2hGztzihjG0t841 LLC7C8WDjXHk5AhIk9duT03lOCIzZW24rJrRe9Pwi52VPj5kLA//CiM8vkuqPQM4 T/kfQv82QpXKrJpNmqlXKOWrJAuK3O8ar2l5+b7VVWXwHI64hMbnMs92ikONRpMn +s+tH2dSD+PsKFjEVujuiUr9iXkc8ic1L9Fy/V2HnTuWPZie4UYWJf4HIkF81fmD 2d/2vVnbD9RoUe2ZNNFOvX4OBg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:27 2026 by rpki-client