$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft File: 1fozYzT5muNj6lhn0o6KUCMeQiA.mft (raw, json) Hash identifier: QrYeDnz+8a8DpShnMO8FidighGr1+wCbVNRwVyChuhM= Subject key identifier: F2:EF:D3:A7:43:72:5B:72:F5:A4:AB:4E:D1:A8:1C:42:3D:3D:F6:45 Authority key identifier: D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20 Certificate issuer: /CN=A915F2B8/serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft Manifest number: 0240 Signing time: Fri 17 Apr 2026 02:15:00 +0000 Manifest this update: Fri 17 Apr 2026 02:15:00 +0000 Manifest next update: Fri 24 Apr 2026 02:15:00 +0000 Files and hashes: 1: 1fozYzT5muNj6lhn0o6KUCMeQiA.crl (hash: aRdHHI48PRUvpkgRxzaulfVf3nktrAm3vr8CLDDF7f0=) 2: 207C45B0CC2F11EDABE25F72C4F9AE02.roa (hash: 3Fmdi951WMlO5pIrJJT0qggVYSRtlXXjg5aoHRb8yfw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F2B8, serialNumber=D5FA336334F99AE363EA5867D28E8A50231E4220 Validity Not Before: Apr 17 02:15:00 2026 GMT Not After : Apr 24 02:15:00 2026 GMT Subject: CN=69e197a4-2b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:75:cc:20:fd:85:63:dd:b0:4d:cc:7b:00:07: 54:3b:52:65:f2:26:cc:b3:66:69:87:1e:65:77:9a: 7e:6d:de:46:2c:ce:9f:8d:b9:78:83:1f:b9:ef:72: 0f:38:3e:01:1c:3c:a4:53:8b:14:84:38:db:ae:f9: 53:5e:6a:3f:af:72:84:f5:4c:7a:ec:bc:ea:64:7d: 26:21:71:2b:b0:4b:dc:91:91:67:fe:eb:3b:ba:99: 00:f9:38:e8:cf:54:ca:48:e9:99:c6:be:21:52:55: cb:4e:e0:3f:59:1a:18:f6:dc:50:ba:0a:60:fe:d5: da:21:04:5f:a8:a0:64:0f:b7:5b:55:83:72:ca:4c: 65:c4:05:48:cc:d9:b7:ba:20:30:bc:e9:c7:61:f5: c2:c4:84:54:a4:41:f2:a5:4c:79:f1:cc:a4:13:9b: 1e:18:a1:f4:31:f9:c0:99:b3:60:26:12:b8:ea:84: a9:46:34:8e:d3:b4:c4:ad:fc:8e:d0:ed:86:69:bb: 70:0e:1d:18:e9:e7:34:4a:55:b8:11:3c:91:a5:65: 7c:2e:89:4d:6c:0b:d3:2b:7d:d6:10:a4:54:69:f1: ec:a3:3e:3f:f5:37:a7:45:de:74:18:37:76:54:a2: 52:a8:d0:a1:b2:36:ce:fb:cb:54:bc:f0:cd:f6:68: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:EF:D3:A7:43:72:5B:72:F5:A4:AB:4E:D1:A8:1C:42:3D:3D:F6:45 X509v3 Authority Key Identifier: keyid:D5:FA:33:63:34:F9:9A:E3:63:EA:58:67:D2:8E:8A:50:23:1E:42:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fozYzT5muNj6lhn0o6KUCMeQiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2B8/2F17608ACC2C11EDB9860571C4F9AE02/1fozYzT5muNj6lhn0o6KUCMeQiA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:90:dd:fb:b5:96:33:bd:69:a8:8c:5e:72:1e:9e:75:d2:a2: 8f:09:49:4f:f3:d2:fc:65:46:e1:19:50:49:00:19:67:a6:57: d4:b6:3f:7f:5e:bb:42:84:fc:00:f2:59:c5:aa:b1:74:9d:64: d8:0a:fa:d2:5d:e4:66:c3:d2:7b:c2:a2:f5:2f:78:96:59:f8: 62:3b:34:4d:65:d4:94:80:7e:ca:5a:a8:20:da:4b:6c:9b:d5: fb:27:62:4c:99:e0:b8:4c:c8:e7:6a:8b:d6:3b:1a:05:a4:56: 85:47:be:94:39:7f:57:a7:6e:8d:39:80:9f:08:36:27:b7:a3: 69:7b:c1:67:79:3c:97:e4:38:6e:72:75:3d:58:b6:c7:45:3a: a9:52:5d:a0:9c:5c:63:e7:64:b7:a9:f0:be:32:a8:5f:c8:9e: 41:b0:f1:2b:c0:f0:45:71:2b:d5:c4:39:c8:a4:44:bf:3b:dd: c0:5c:4f:f0:04:a1:a1:26:d5:26:8c:2e:05:10:67:74:d7:0d: 71:4a:92:32:97:c2:fb:08:a0:19:53:9c:4e:ff:e2:fe:bc:17: b2:7c:68:8e:87:a8:8f:b3:55:d3:fd:1d:2a:11:2a:22:ba:b7: cf:39:64:40:60:43:81:ee:36:54:8d:b4:72:66:94:2e:11:d4: c9:bb:67:bc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYyQjgxMTAvBgNVBAUTKEQ1RkEzMzYzMzRGOTlBRTM2M0VBNTg2N0QyOEU4QTUw MjMxRTQyMjAwHhcNMjYwNDE3MDIxNTAwWhcNMjYwNDI0MDIxNTAwWjAYMRYwFAYD VQQDEw02OWUxOTdhNC0yYjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXXMIP2FY92wTcx7AAdUO1Jl8ibMs2Zphx5ld5p+bd5GLM6fjbl4gx+573IP OD4BHDykU4sUhDjbrvlTXmo/r3KE9Ux67LzqZH0mIXErsEvckZFn/us7upkA+Tjo z1TKSOmZxr4hUlXLTuA/WRoY9txQugpg/tXaIQRfqKBkD7dbVYNyykxlxAVIzNm3 uiAwvOnHYfXCxIRUpEHypUx58cykE5seGKH0MfnAmbNgJhK46oSpRjSO07TErfyO 0O2GabtwDh0Y6ec0SlW4ETyRpWV8LolNbAvTK33WEKRUafHsoz4/9TenRd50GDd2 VKJSqNChsjbO+8tUvPDN9mjLyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPLv06dD clty9aSrTtGoHEI9PfZFMB8GA1UdIwQYMBaAFNX6M2M0+ZrjY+pYZ9KOilAjHkIg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjJCOC8yRjE3NjA4QUND MkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11Tmo2bGhuMG82S1VDTWVR aUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmb3pZelQ1bXVOajZsaG4wbzZLVUNNZVFpQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjJCOC8yRjE3NjA4QUNDMkMxMUVEQjk4NjA1NzFDNEY5QUUwMi8xZm96WXpUNW11 Tmo2bGhuMG82S1VDTWVRaUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEZDd+7WWM71pqIxech6eddKijwlJT/PS/GVG4RlQSQAZZ6ZX1LY/f167QoT8 APJZxaqxdJ1k2Ar60l3kZsPSe8Ki9S94lln4Yjs0TWXUlIB+ylqoINpLbJvV+ydi TJnguEzI52qL1jsaBaRWhUe+lDl/V6dujTmAnwg2J7ejaXvBZ3k8l+Q4bnJ1PVi2 x0U6qVJdoJxcY+dkt6nwvjKoX8ieQbDxK8DwRXEr1cQ5yKREvzvdwFxP8AShoSbV JowuBRBndNcNcUqSMpfC+wigGVOcTv/i/rwXsnxojoeoj7NV0/0dKhEqIrq3zzlk QGBDge42VI20cmaULhHUybtnvA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:06:07 2026 by rpki-client