$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: mxcnz077EuZ5LSRo4Dsjvh6ZjPjIOFk93LDbVnhqZoM= Subject key identifier: 31:D1:A3:85:59:CD:61:AF:4A:50:5C:6E:0B:35:15:7E:E3:1D:7F:BE Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 09CA Signing time: Thu 16 Apr 2026 21:04:19 +0000 Manifest this update: Thu 16 Apr 2026 21:04:18 +0000 Manifest next update: Thu 23 Apr 2026 21:04:18 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: N0wVXWifzQ4C7V6dQh3ARC6w+OPVZ4iiKLN1awXylqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 21:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Apr 16 21:04:18 2026 GMT Not After : Apr 23 21:04:18 2026 GMT Subject: CN=69e14ed3-8cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:85:b4:0c:08:77:5d:98:20:60:e9:91:17: c1:8e:cb:c1:05:7d:a7:06:24:c0:8b:d2:81:cb:64: 4d:f3:38:79:06:11:41:66:35:44:fb:e8:5e:f1:c5: f4:8c:1a:1e:0a:b0:01:8d:f2:23:a4:79:ce:52:5d: bc:1e:f1:08:db:53:5b:64:77:a4:8a:2e:98:ea:82: 76:4c:0d:aa:8e:d2:88:2e:c6:ca:c7:4b:81:e3:6b: 2e:88:e8:d9:d4:eb:d7:b9:54:f0:3c:70:d6:0d:ab: ed:f9:b7:38:78:57:ff:ea:e9:cb:05:b7:fb:42:c3: 42:fd:4c:8a:38:ff:03:32:e8:f5:6a:64:41:b0:ee: 21:19:10:b6:15:e8:1a:56:24:1f:67:e9:e4:18:68: 72:ef:b6:4a:99:e2:1d:9d:ff:84:3e:11:69:e9:bc: ed:9f:26:08:f4:9d:43:3d:f6:49:5a:1d:34:89:16: 1b:df:c1:4d:fa:53:cf:39:70:12:bc:8c:1f:bc:12: 72:4a:bc:86:3b:08:7e:e8:a5:b4:c9:9c:ff:76:34: fa:3f:41:6f:f4:0c:8c:74:8d:34:bb:be:67:f6:ac: e5:73:4b:86:20:b3:5c:e7:00:34:c8:97:ec:ec:53: e4:af:e6:f0:54:79:a0:3b:2e:2a:c1:8e:de:70:4a: e1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D1:A3:85:59:CD:61:AF:4A:50:5C:6E:0B:35:15:7E:E3:1D:7F:BE X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:60:47:ab:f0:b1:7b:0e:b7:f7:94:55:b0:d9:91:01:55:d4: ca:2a:20:ed:eb:ae:94:e1:2e:99:55:1b:d1:26:7e:2a:22:52: be:f8:c3:74:b8:24:a4:e0:4a:f8:6f:f7:94:76:0d:a8:47:dd: dc:77:e6:9a:ed:51:0c:4c:c0:ff:ec:3e:06:7a:1f:35:35:82: 7b:eb:3b:87:11:79:f5:f8:47:62:f7:4a:d9:8d:c5:24:7c:25: 0a:88:75:ad:13:2f:7a:f0:99:86:c8:33:ed:9e:1b:79:c5:19: ba:9d:fe:2e:a2:b6:a0:54:50:72:1b:37:6a:e9:58:68:ce:e0: f0:b5:6d:aa:20:c7:1e:39:d6:c8:6a:6d:a9:6f:ff:de:fe:04: 2b:6c:d2:16:17:cc:2d:73:a3:fa:8f:40:53:37:09:d7:bf:00: 85:02:9a:47:5d:4c:4e:6d:b3:67:2c:2f:fc:72:c2:5a:e7:1e: 47:e1:12:c1:b9:d5:07:ea:18:da:6a:e1:f5:aa:01:68:ce:e2: 03:80:fa:2a:7f:bb:72:88:cf:39:e3:31:75:ec:ac:e0:eb:6a: 67:78:8b:23:2d:0f:28:71:f4:39:5f:ed:6f:29:e5:0a:2b:cb: b4:50:2c:67:e3:76:b0:b2:b8:e3:23:7f:a0:e6:31:05:7f:e3: a1:26:d4:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjYwNDE2MjEwNDE4WhcNMjYwNDIzMjEwNDE4WjAYMRYwFAYD VQQDEw02OWUxNGVkMy04Y2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAol+FtAwId12YIGDpkRfBjsvBBX2nBiTAi9KBy2RN8zh5BhFBZjVE++he8cX0 jBoeCrABjfIjpHnOUl28HvEI21NbZHekii6Y6oJ2TA2qjtKILsbKx0uB42suiOjZ 1OvXuVTwPHDWDavt+bc4eFf/6unLBbf7QsNC/UyKOP8DMuj1amRBsO4hGRC2Fega ViQfZ+nkGGhy77ZKmeIdnf+EPhFp6bztnyYI9J1DPfZJWh00iRYb38FN+lPPOXAS vIwfvBJySryGOwh+6KW0yZz/djT6P0Fv9AyMdI00u75n9qzlc0uGILNc5wA0yJfs 7FPkr+bwVHmgOy4qwY7ecErhawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDHRo4VZ zWGvSlBcbgs1FX7jHX++MB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI2BHq/Cxew6395RVsNmRAVXUyiog7euulOEumVUb0SZ+KiJSvvjDdLgkpOBK +G/3lHYNqEfd3Hfmmu1RDEzA/+w+BnofNTWCe+s7hxF59fhHYvdK2Y3FJHwlCoh1 rRMvevCZhsgz7Z4becUZup3+LqK2oFRQchs3aulYaM7g8LVtqiDHHjnWyGptqW// 3v4EK2zSFhfMLXOj+o9AUzcJ178AhQKaR11MTm2zZywv/HLCWuceR+ESwbnVB+oY 2mrh9aoBaM7iA4D6Kn+7cojPOeMxdeys4OtqZ3iLIy0PKHH0OV/tbynlCivLtFAs Z+N2sLK44yN/oOYxBX/joSbUnQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:49:02 2026 by rpki-client