$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: P5T8xTOZxhbypva+BEwnUZMOxhZ+ZjaaV7TbqQEVCjs= Subject key identifier: 1D:EF:BD:60:CD:8E:CC:3E:5A:BA:F8:02:A7:46:9D:CE:52:9C:1A:7A Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 0216 Signing time: Fri 17 Apr 2026 02:41:37 +0000 Manifest this update: Fri 17 Apr 2026 02:41:37 +0000 Manifest next update: Fri 24 Apr 2026 02:41:37 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: Hu025ZBAuzl0XYal9NXYvRpgWejjyckah6Ist4Yo/q8=) 2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: qnvrSMl0yQyYkmnyhwN0g0h+sOgggPn26d38v0T1z/c=) 3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: /zH5NCxaOe44lNiOZuL2x1qIFvtAXXk9k531YTZP3Dw=) 4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: WH/ILcSrKq9+xG39/9dwHQTlGi9rnQp31CFmoa5QIUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: Apr 17 02:41:37 2026 GMT Not After : Apr 24 02:41:37 2026 GMT Subject: CN=69e19de1-354e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:9d:6c:d8:eb:a1:92:59:23:9d:4e:b9:b6: 49:4d:51:aa:c5:d4:83:b0:63:09:ad:4b:37:92:65: 0a:cf:34:cf:e1:b9:4a:81:a8:26:b3:cf:b3:85:dc: 53:b7:2f:57:98:66:84:ba:86:92:06:70:be:00:e8: 09:5c:27:90:f1:ca:fa:0f:e3:7c:c2:37:14:ec:bb: 2f:2e:c4:d0:80:83:30:50:9e:38:0f:cb:bc:6f:57: 0e:02:fd:3c:b8:b9:27:15:9c:64:5f:67:cd:8f:a5: 88:97:a9:eb:2c:50:44:20:f8:29:11:27:e2:c3:4a: 90:9f:ab:9b:b6:32:dc:c7:8a:92:ff:d3:75:db:72: 3d:ee:77:2a:17:79:f2:92:00:65:ea:4b:e2:d7:64: 7b:e3:4b:fe:5e:f9:8a:3b:47:42:81:9e:f8:a4:45: 37:68:19:db:e0:8a:75:d9:b7:1e:b1:be:3f:80:a4: 29:64:67:e2:4c:10:3b:12:06:03:d8:f0:f0:32:92: 34:02:6e:d1:1a:f6:3d:08:bc:64:d0:bb:7e:81:c4: 79:19:aa:6d:4d:8a:3f:ba:79:5a:c1:5d:89:7d:8e: a1:01:62:8a:6b:5f:c8:64:a2:a3:d8:5c:ce:45:fa: 47:e2:dd:22:e2:f3:a3:00:34:8d:94:ae:fa:03:36: 9c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EF:BD:60:CD:8E:CC:3E:5A:BA:F8:02:A7:46:9D:CE:52:9C:1A:7A X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5c:99:b8:4b:0e:cc:f4:2e:6a:d8:d0:d9:3a:4c:77:fd:33: 12:c0:da:06:b2:32:fe:ad:3e:17:35:45:09:cb:35:7c:45:44: bc:43:1c:ee:56:3f:46:f2:78:f5:8d:65:6a:a3:6e:66:14:6f: 10:44:eb:44:90:33:b1:7b:58:98:cb:c5:5b:73:73:24:b0:7a: e4:9c:d4:d3:2d:5e:20:39:7d:1d:fb:ea:19:0f:b6:ab:fd:71: 11:ba:e0:4f:81:1a:fa:56:02:44:fc:1a:06:76:10:9a:9a:a9: 45:15:d7:e1:cc:61:32:5e:90:ba:08:6e:bb:a8:31:69:b1:6c: 97:cf:fa:45:da:af:38:b0:aa:ec:b8:36:d8:fb:a8:03:6b:2c: eb:bc:10:35:eb:e0:bb:e6:d5:41:4c:3f:d2:98:bd:ee:f8:55: c4:85:6f:2c:7e:5b:e0:e1:79:34:0a:4a:0e:67:4b:23:0f:59: 9f:d2:54:4b:65:d6:bd:20:14:29:b7:32:53:f2:1e:6f:38:c0: 0d:e3:0a:8f:4b:f6:76:3a:ab:e1:7d:98:9d:b7:f5:9b:06:39: 7c:f2:06:80:95:f4:de:9b:ac:18:9e:ef:29:e9:8f:51:a2:70: 75:be:9a:2a:09:94:17:2e:2f:c5:e0:06:77:ad:10:60:30:71: 15:63:8c:60 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjYwNDE3MDI0MTM3WhcNMjYwNDI0MDI0MTM3WjAYMRYwFAYD VQQDEw02OWUxOWRlMS0zNTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqfadbNjroZJZI51OubZJTVGqxdSDsGMJrUs3kmUKzzTP4blKgagms8+zhdxT ty9XmGaEuoaSBnC+AOgJXCeQ8cr6D+N8wjcU7LsvLsTQgIMwUJ44D8u8b1cOAv08 uLknFZxkX2fNj6WIl6nrLFBEIPgpESfiw0qQn6ubtjLcx4qS/9N123I97ncqF3ny kgBl6kvi12R740v+XvmKO0dCgZ74pEU3aBnb4Ip12bcesb4/gKQpZGfiTBA7EgYD 2PDwMpI0Am7RGvY9CLxk0Lt+gcR5GaptTYo/unlawV2JfY6hAWKKa1/IZKKj2FzO RfpH4t0i4vOjADSNlK76AzacPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB3vvWDN jsw+Wrr4AqdGnc5SnBp6MB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqFyZuEsOzPQuatjQ2TpMd/0zEsDaBrIy/q0+FzVFCcs1fEVEvEMc7lY/RvJ4 9Y1laqNuZhRvEETrRJAzsXtYmMvFW3NzJLB65JzU0y1eIDl9HfvqGQ+2q/1xEbrg T4Ea+lYCRPwaBnYQmpqpRRXX4cxhMl6Qughuu6gxabFsl8/6RdqvOLCq7Lg22Puo A2ss67wQNevgu+bVQUw/0pi97vhVxIVvLH5b4OF5NApKDmdLIw9Zn9JUS2XWvSAU KbcyU/IebzjADeMKj0v2djqr4X2Ynbf1mwY5fPIGgJX03pusGJ7vKemPUaJwdb6a KgmUFy4vxeAGd60QYDBxFWOMYA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:39:54 2026 by rpki-client