$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: 4S7fMeq9xj3C47Q5av+ghDJ3BHZLWZuHYb5CMxHhJRY= Subject key identifier: C0:89:F2:E8:F7:74:94:4B:CB:E1:31:00:ED:C8:BC:6F:29:C3:C2:02 Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0D1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0D07 Signing time: Thu 16 Apr 2026 18:07:07 +0000 Manifest this update: Thu 16 Apr 2026 18:07:06 +0000 Manifest next update: Thu 23 Apr 2026 18:07:06 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: cBxqFBM6TpYAxHSAAvZnr+f37VCYJuAgWn2kXu2lDJs=) 2: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:07:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3359 (0xd1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Apr 16 18:07:06 2026 GMT Not After : Apr 23 18:07:06 2026 GMT Subject: CN=69e1254a-3f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d0:5d:6d:50:df:e4:5a:e4:4d:a3:66:0d:51: bb:2c:ba:9d:18:ca:6c:66:c7:9a:d3:99:e7:4d:92: 83:bd:98:58:39:19:d6:76:48:50:65:01:b3:42:47: a5:85:73:fd:8c:94:a5:cb:af:19:0c:aa:6e:c3:bb: f9:9a:65:de:e5:ff:4c:78:bf:1c:1b:46:16:9d:3c: 3e:6c:a8:0c:b1:55:68:62:a2:ef:61:dd:b0:ee:ce: 78:f9:81:71:06:bd:67:80:bd:4c:50:9a:48:58:b7: a9:e2:15:a7:56:97:a8:b6:34:1c:b4:78:d5:64:20: 72:3e:73:c6:0f:e7:1b:35:09:71:d5:aa:c2:3c:03: 92:67:51:9b:b4:17:84:bc:7d:0e:10:ee:c7:13:af: 8c:16:b5:05:77:46:bf:07:e3:15:58:85:0e:24:55: df:37:d9:38:aa:aa:dd:ec:df:b7:ec:7e:23:04:a0: 9a:0d:49:02:8d:2a:2a:81:e1:13:86:a3:7b:c3:6e: 7d:97:a2:02:9d:62:e1:b5:09:aa:78:22:da:8c:ff: 09:a2:5f:53:52:93:68:dc:81:0a:0f:df:70:ba:4d: 0a:4b:57:81:e6:4f:d0:bc:e3:e1:f9:c9:ec:31:a9: 53:43:92:91:96:e5:4a:29:9d:86:91:cd:f8:df:a7: a3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:89:F2:E8:F7:74:94:4B:CB:E1:31:00:ED:C8:BC:6F:29:C3:C2:02 X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:dd:dc:86:f2:3f:0a:1f:3d:40:bd:82:d3:b9:a9:48:52:95: 93:d0:af:ed:5b:f9:68:48:3e:c6:11:d1:82:c1:fc:73:48:bd: 7f:c3:57:67:b8:42:ae:8b:f6:9e:0a:2e:ee:d5:b6:c2:63:2b: 4d:6c:49:1f:0e:68:31:81:cc:b4:cc:b9:54:1c:45:5c:46:44: 1f:08:85:59:b8:58:ac:ec:fb:f5:5b:9a:55:2f:65:ad:16:96: b2:cd:c4:a0:9d:d1:30:79:0a:1f:f3:37:25:b6:6e:e5:a1:72: ea:23:eb:94:43:d7:9c:90:8e:e3:3b:a3:5d:b9:45:43:9b:25: b2:60:20:02:f0:cf:1a:2b:98:42:fa:bc:3a:bf:3f:6b:79:83: 52:0f:f0:4c:b1:52:33:f4:4c:c7:a4:0b:13:43:ed:07:52:89: 62:1d:0c:4d:ab:2e:ff:62:5a:de:85:1d:da:37:9c:1b:8e:e0: 00:dc:7b:57:1a:16:ed:04:38:ad:91:1d:f6:c4:2d:78:d2:c1: 9c:64:cd:27:3c:92:d8:c4:31:f7:3d:b0:30:40:bb:1a:15:f8: 6c:78:08:6e:ef:73:25:d2:70:35:b8:52:f6:18:01:56:50:62: e9:ee:c7:6b:82:0e:e8:9b:7c:1c:cb:ee:cb:48:8c:5c:75:34: fc:64:9d:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjYwNDE2MTgwNzA2WhcNMjYwNDIzMTgwNzA2WjAYMRYwFAYD VQQDEw02OWUxMjU0YS0zZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dBdbVDf5FrkTaNmDVG7LLqdGMpsZsea05nnTZKDvZhYORnWdkhQZQGzQkel hXP9jJSly68ZDKpuw7v5mmXe5f9MeL8cG0YWnTw+bKgMsVVoYqLvYd2w7s54+YFx Br1ngL1MUJpIWLep4hWnVpeotjQctHjVZCByPnPGD+cbNQlx1arCPAOSZ1GbtBeE vH0OEO7HE6+MFrUFd0a/B+MVWIUOJFXfN9k4qqrd7N+37H4jBKCaDUkCjSoqgeET hqN7w259l6ICnWLhtQmqeCLajP8Jol9TUpNo3IEKD99wuk0KS1eB5k/QvOPh+cns MalTQ5KRluVKKZ2Gkc3436ejAwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMCJ8uj3 dJRLy+ExAO3IvG8pw8ICMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgt3chvI/Ch89QL2C07mpSFKVk9Cv7Vv5aEg+xhHRgsH8c0i9f8NXZ7hCrov2 ngou7tW2wmMrTWxJHw5oMYHMtMy5VBxFXEZEHwiFWbhYrOz79VuaVS9lrRaWss3E oJ3RMHkKH/M3JbZu5aFy6iPrlEPXnJCO4zujXblFQ5slsmAgAvDPGiuYQvq8Or8/ a3mDUg/wTLFSM/RMx6QLE0PtB1KJYh0MTasu/2Ja3oUd2jecG47gANx7VxoW7QQ4 rZEd9sQteNLBnGTNJzyS2MQx9z2wMEC7GhX4bHgIbu9zJdJwNbhS9hgBVlBi6e7H a4IO6Jt8HMvuy0iMXHU0/GSdAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:28:30 2026 by rpki-client