$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft File: 1FLGfvaHRDivqZOoStCrwYUWkhs.mft (raw, json) Hash identifier: djUXmLyxz7F3rQKddkHzqsCbK4HQxTbF+WjII/oPV9A= Subject key identifier: D6:B7:39:EF:DD:66:99:E2:7B:BD:C0:72:85:24:37:E4:B9:99:74:04 Authority key identifier: D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B Certificate issuer: /CN=A915FD27/serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft Manifest number: 02C1 Signing time: Fri 17 Apr 2026 01:20:50 +0000 Manifest this update: Fri 17 Apr 2026 01:20:50 +0000 Manifest next update: Fri 24 Apr 2026 01:20:50 +0000 Files and hashes: 1: 1FLGfvaHRDivqZOoStCrwYUWkhs.crl (hash: /SqcxrTLUDS2m40NMhKDW7sPH6oEopSsYY5dhU2awzk=) 2: 9BDA59F69C8C11F0A27C535EC4F9AE02.roa (hash: 1AILx3io2TpfX7hUWzuL2pU58QXDn9h+uBSyFOkdjjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FD27, serialNumber=D452C67EF6874438AFA993A84AD0ABC18516921B Validity Not Before: Apr 17 01:20:50 2026 GMT Not After : Apr 24 01:20:50 2026 GMT Subject: CN=69e18af2-0f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:92:44:f5:e2:e8:2f:62:42:23:02:e4:1d:2b: b5:5d:99:5a:d5:21:b3:44:32:c5:f9:1f:cc:6d:e6: bd:c1:4b:26:bd:f6:87:5b:a0:44:a4:91:f4:46:09: 1a:7f:73:57:bf:72:0e:ae:cd:3d:8d:00:b6:67:6b: 8d:54:d8:fb:01:3f:cd:00:d9:00:ff:57:6b:ec:90: 8b:41:6a:29:86:bf:cc:eb:fa:0d:6e:7d:12:28:5b: 17:94:6a:73:76:a2:78:53:98:59:10:b1:e4:72:fd: 6e:19:3d:bc:db:9f:ad:be:78:1b:6b:2d:fc:6a:01: d7:2a:f5:80:49:9f:2c:31:6d:61:46:b2:e2:6d:48: c0:8b:d5:b7:47:1f:28:78:88:b7:4d:5f:70:0c:ca: 05:02:79:ba:fa:97:bd:ee:86:2d:1c:6b:c0:39:65: 19:45:13:f0:2e:a5:e2:13:bd:a5:2e:c4:62:77:ac: a8:3f:50:45:49:23:09:ce:ac:96:fd:97:9c:77:e3: 15:fe:35:60:37:2e:3e:db:c5:4d:3c:83:c8:00:38: 9b:f1:8b:c3:81:60:48:8b:21:c7:0b:97:63:d3:f5: c9:34:51:14:ff:63:46:7d:85:b9:44:dc:dc:92:9b: 1a:5a:44:7f:2f:1c:12:f4:ae:f5:e6:96:ed:f4:a6: 37:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:39:EF:DD:66:99:E2:7B:BD:C0:72:85:24:37:E4:B9:99:74:04 X509v3 Authority Key Identifier: keyid:D4:52:C6:7E:F6:87:44:38:AF:A9:93:A8:4A:D0:AB:C1:85:16:92:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FLGfvaHRDivqZOoStCrwYUWkhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD27/A80DB38235EF11ED8239AF2BC4F9AE02/1FLGfvaHRDivqZOoStCrwYUWkhs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:01:b8:4d:4e:ae:5e:5d:ed:17:8d:94:48:ed:6e:af:83:d1: 14:69:fb:ea:5b:c6:2f:57:fd:d7:3d:1e:28:57:b5:fc:82:7e: 4d:c2:3e:78:0a:cf:06:09:63:48:01:17:ea:c5:e8:80:74:cd: 96:f3:78:9f:31:fa:fc:ae:26:5d:bc:c0:34:ab:e6:36:b3:16: 0e:57:a8:80:64:b9:e2:03:3f:24:50:ae:24:16:b5:a3:6c:62: 8b:4d:fa:31:df:4f:92:ad:3f:a1:28:45:81:14:01:7b:cf:24: d6:69:ab:43:21:96:1e:18:dd:d0:3f:a1:2f:79:a5:79:2b:74: cf:8b:e1:ff:0d:28:13:aa:20:81:ed:14:40:87:aa:ae:8d:6e: 9c:32:73:6b:81:4b:3d:06:d9:01:7e:50:8c:9a:79:aa:99:d7: aa:31:38:ce:e7:6d:e1:93:4c:8e:db:a0:12:70:29:ef:10:7d: b5:8e:1e:4d:21:b3:57:2d:95:e6:3b:10:e9:eb:ae:c5:c6:92: 6e:aa:0d:c2:76:1c:b8:01:7b:cc:0d:0b:65:c5:a6:26:3e:1a: c3:04:1a:14:be:fb:d6:ea:70:19:87:37:6e:42:6a:81:23:d3: 17:28:1d:b3:83:e8:92:5f:73:14:01:d4:45:3f:2f:0f:fe:f8: c1:f5:fb:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZEMjcxMTAvBgNVBAUTKEQ0NTJDNjdFRjY4NzQ0MzhBRkE5OTNBODRBRDBBQkMx ODUxNjkyMUIwHhcNMjYwNDE3MDEyMDUwWhcNMjYwNDI0MDEyMDUwWjAYMRYwFAYD VQQDEw02OWUxOGFmMi0wZjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZJE9eLoL2JCIwLkHSu1XZla1SGzRDLF+R/Mbea9wUsmvfaHW6BEpJH0Rgka f3NXv3IOrs09jQC2Z2uNVNj7AT/NANkA/1dr7JCLQWophr/M6/oNbn0SKFsXlGpz dqJ4U5hZELHkcv1uGT2825+tvngbay38agHXKvWASZ8sMW1hRrLibUjAi9W3Rx8o eIi3TV9wDMoFAnm6+pe97oYtHGvAOWUZRRPwLqXiE72lLsRid6yoP1BFSSMJzqyW /Zecd+MV/jVgNy4+28VNPIPIADib8YvDgWBIiyHHC5dj0/XJNFEU/2NGfYW5RNzc kpsaWkR/LxwS9K715pbt9KY3iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNa3Oe/d Zpnie73AcoUkN+S5mXQEMB8GA1UdIwQYMBaAFNRSxn72h0Q4r6mTqErQq8GFFpIb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkQyNy9BODBEQjM4MjM1 RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJEaXZxWk9vU3RDcndZVVdr aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGTEdmdmFIUkRpdnFaT29TdENyd1lVV2tocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkQyNy9BODBEQjM4MjM1RUYxMUVEODIzOUFGMkJDNEY5QUUwMi8xRkxHZnZhSFJE aXZxWk9vU3RDcndZVVdraHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYwG4TU6uXl3tF42USO1ur4PRFGn76lvGL1f91z0eKFe1/IJ+TcI+eArPBglj SAEX6sXogHTNlvN4nzH6/K4mXbzANKvmNrMWDleogGS54gM/JFCuJBa1o2xii036 Md9Pkq0/oShFgRQBe88k1mmrQyGWHhjd0D+hL3mleSt0z4vh/w0oE6ogge0UQIeq ro1unDJza4FLPQbZAX5QjJp5qpnXqjE4zudt4ZNMjtugEnAp7xB9tY4eTSGzVy2V 5jsQ6euuxcaSbqoNwnYcuAF7zA0LZcWmJj4awwQaFL771upwGYc3bkJqgSPTFygd s4Pokl9zFAHURT8vD/74wfX7qg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:49:12 2026 by rpki-client