$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: xqexoIv+MMAnILuWieUv8BRtId55ie+u4hS2EU0F1TE= Subject key identifier: 23:85:FC:C9:5F:30:A6:2D:5A:79:FB:D7:6F:F2:AF:09:D9:66:74:10 Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 271E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 25E8 Signing time: Thu 16 Apr 2026 15:43:22 +0000 Manifest this update: Thu 16 Apr 2026 15:43:22 +0000 Manifest next update: Thu 23 Apr 2026 15:43:22 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: Pk6Qw9e3twWa4lSFS25N7wXGYQpRZx6NfcfDPDjId1I=) 2: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: EsFL7ZLG4qzCWyTx81VJ4FIJ+vovxCZrLT1BVweKgqc=) 3: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: 1rZWgbUmjxQN06CeOuGX07QdWjTq8x0pS2P/AZOZPKA=) 4: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: AHfY7AUJpWe7BNWUNT/uLmoUme06v0hAUNHbmnBADSc=) 5: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: Spot7p9zSNAAsEMFmZpLPx1zmvfxVQZv9xfzDFvYL6o=) 6: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: Dg/YVoaAbQDeMOZ225L2eC6YXpKJAjiybrKz9YFG+0w=) 7: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: uifIApbHfV42HS+k8rHXkfR4eC5owLbdOciccVTBlF8=) 8: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: 8YUEuPh3TxbLBkrRsi2o2BfYfS5T4DERKvY1wpAF8Lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10014 (0x271e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Apr 16 15:43:22 2026 GMT Not After : Apr 23 15:43:22 2026 GMT Subject: CN=69e1039a-4242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:2c:36:11:e4:1b:3e:04:35:41:21:6f:ec:c8: 1c:a7:18:c1:66:cf:3b:47:0e:99:23:3c:c0:23:1b: 69:6f:05:07:7e:29:92:40:04:98:91:d3:bd:d2:10: 59:a6:8c:cc:a0:07:64:ab:a1:2d:73:b6:d3:9a:0c: 1c:a2:d3:f0:2b:4e:5c:b5:1a:4e:fb:cf:93:e3:3f: 5b:f6:a5:1a:97:09:d6:81:c7:c5:51:4e:7f:83:e3: fb:10:cf:75:28:f8:63:b9:0f:6e:e9:e1:61:3c:c1: 68:15:9e:5a:b7:50:ae:c1:48:5d:eb:f7:22:c1:5b: 88:1a:bf:5d:3b:76:60:2b:ca:20:d2:e2:45:ad:4d: f2:e6:96:c0:95:37:e0:89:a6:fa:d6:01:eb:fc:d7: 9d:4f:03:41:c0:73:a2:00:01:bd:dc:bf:97:d3:8c: 2e:a5:06:c1:30:dd:37:41:0e:57:14:fd:bc:4c:0e: 70:0f:69:5a:c8:5a:06:15:38:3e:a2:5d:03:67:9e: 0e:53:97:21:c2:48:78:39:bd:a2:3e:00:af:94:46: 70:c1:dd:b6:09:35:0b:2a:44:97:75:fd:62:8a:d0: 04:fc:9c:13:a7:f4:14:b4:9d:87:90:95:65:02:60: 40:8c:cd:08:ba:10:33:68:49:d4:12:7d:5f:82:62: 5c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:85:FC:C9:5F:30:A6:2D:5A:79:FB:D7:6F:F2:AF:09:D9:66:74:10 X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:f2:f0:bd:a4:6a:d2:9b:9d:cb:2c:e5:6c:1b:96:5d:80:6e: 6f:28:b4:c8:03:be:f9:a9:7c:5d:fd:dc:78:26:ed:bc:6f:5e: c6:5b:86:b2:54:a1:2c:bf:03:75:57:c0:b9:e6:b1:70:d6:e6: 0a:d4:5e:a3:48:bd:f7:91:63:01:56:06:74:6c:fd:d8:55:91: e6:8b:fc:f3:37:f0:6d:c3:71:f4:50:71:b0:7f:ee:88:8a:b5: b9:fa:90:8a:da:a3:58:35:08:07:56:a6:74:3c:b0:a7:5d:f2: aa:06:af:49:9f:49:e5:1d:57:05:d6:b2:1a:53:be:2b:4a:f0: 3a:0b:5f:eb:f8:6e:23:71:d3:24:46:1e:8b:42:bb:f8:23:d9: 17:2c:8d:0a:67:eb:0a:e5:f4:31:df:33:1c:d7:58:9f:75:de: 51:2b:c6:c7:58:f6:d2:f3:45:c3:bb:09:98:ab:20:c7:c7:f9: 41:00:d1:67:2c:37:62:4e:72:7b:b1:7c:34:9b:43:f0:48:74: 49:54:b5:31:d7:f2:4e:62:ed:54:58:9c:88:01:f9:ae:92:c5: aa:aa:66:e4:e1:74:7f:0f:d7:71:37:d2:99:bd:73:38:2f:87: 8a:05:8d:4d:d1:e9:aa:43:78:e9:60:03:84:e2:2b:f2:36:02: a1:9f:23:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwNDE2MTU0MzIyWhcNMjYwNDIzMTU0MzIyWjAYMRYwFAYD VQQDEw02OWUxMDM5YS00MjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Cw2EeQbPgQ1QSFv7MgcpxjBZs87Rw6ZIzzAIxtpbwUHfimSQASYkdO90hBZ pozMoAdkq6Etc7bTmgwcotPwK05ctRpO+8+T4z9b9qUalwnWgcfFUU5/g+P7EM91 KPhjuQ9u6eFhPMFoFZ5at1CuwUhd6/ciwVuIGr9dO3ZgK8og0uJFrU3y5pbAlTfg iab61gHr/NedTwNBwHOiAAG93L+X04wupQbBMN03QQ5XFP28TA5wD2layFoGFTg+ ol0DZ54OU5chwkh4Ob2iPgCvlEZwwd22CTULKkSXdf1iitAE/JwTp/QUtJ2HkJVl AmBAjM0IuhAzaEnUEn1fgmJcRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCOF/Mlf MKYtWnn712/yrwnZZnQQMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFfLwvaRq0pudyyzlbBuWXYBubyi0yAO++al8Xf3ceCbtvG9exluGslShLL8D dVfAueaxcNbmCtReo0i995FjAVYGdGz92FWR5ov88zfwbcNx9FBxsH/uiIq1ufqQ itqjWDUIB1amdDywp13yqgavSZ9J5R1XBdayGlO+K0rwOgtf6/huI3HTJEYei0K7 +CPZFyyNCmfrCuX0Md8zHNdYn3XeUSvGx1j20vNFw7sJmKsgx8f5QQDRZyw3Yk5y e7F8NJtD8Eh0SVS1MdfyTmLtVFiciAH5rpLFqqpm5OF0fw/XcTfSmb1zOC+HigWN TdHpqkN46WADhOIr8jYCoZ8jew== -----END CERTIFICATE-----Generated at Fri Apr 17 20:06:59 2026 by rpki-client