$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: wXmwm53+JUwYGgU1JCSTAJwpEZrCkXlhhazCfpezN+0= Subject key identifier: 21:7F:97:76:9F:39:3F:FB:36:D3:C0:10:BA:47:14:B0:31:00:1E:7B Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: 013D Signing time: Wed 15 Apr 2026 05:00:25 +0000 Manifest this update: Wed 15 Apr 2026 05:00:24 +0000 Manifest next update: Wed 22 Apr 2026 05:00:24 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: YX44hfqs/HQt1uN/PUrQ3hTI17ZWoI+/OwOel2QtiRE=) 2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: C0Cuj4295jMXddurmsuKdybi+VVlCTio/EAvQnqE+Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Apr 15 05:00:24 2026 GMT Not After : Apr 22 05:00:24 2026 GMT Subject: CN=69df1b68-6126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:1d:8e:b8:05:9d:c7:8a:96:88:10:61:d9: 04:5a:ba:01:72:2a:01:63:e5:60:a1:dd:34:ad:9f: 00:cb:2e:5b:36:ba:30:9b:1f:cc:42:04:90:46:b1: a5:9f:8b:af:4b:b7:6b:2e:92:31:6f:c0:4c:23:6a: c1:e2:5c:8e:91:7f:1b:3d:7e:51:4d:93:c7:d7:27: 5b:3e:f2:e8:9c:f8:a7:4f:67:2a:3f:89:1e:4f:30: 27:f6:9d:73:77:a5:73:b2:d7:33:fa:ca:2d:93:6f: e8:5b:5c:91:27:c9:94:44:c8:fd:a8:8a:21:6e:3d: 9a:5b:b5:11:ca:0e:5b:a6:a9:b3:30:15:e5:ff:ec: 3f:7c:67:04:cb:81:ea:ab:79:ed:5d:4a:c8:36:bf: 02:1f:2e:06:24:31:ef:85:8c:db:5b:f3:5c:34:42: 94:06:b6:52:b3:36:20:c7:42:e9:56:a5:57:6f:62: ff:2c:dc:98:81:cb:b0:cb:29:be:7c:73:2d:94:7f: 7c:f3:4e:ed:f8:3b:bf:7a:82:d3:85:90:0f:46:62: d8:55:d9:96:dc:6a:b1:09:ed:9f:8b:e3:35:bb:b2: 98:00:b8:3f:99:11:b3:f1:94:86:8a:93:c3:13:8b: 60:d9:5b:73:ff:93:12:75:93:77:23:42:69:f1:5b: 70:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:97:76:9F:39:3F:FB:36:D3:C0:10:BA:47:14:B0:31:00:1E:7B X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2a:32:ec:ec:38:ef:4c:13:35:2e:0b:bf:14:c4:95:aa:56: cb:63:43:86:a9:24:b7:d7:dd:44:c1:9f:5e:75:b1:75:24:96: 7b:01:ed:bd:7d:5a:8d:59:c5:17:f5:21:81:89:f4:fb:6a:77: 93:08:7c:da:91:d2:9e:61:b6:32:51:15:0d:89:34:df:e3:26: 04:3f:09:b3:bf:d5:0d:c6:1d:bb:e4:dd:48:32:46:19:7a:db: ec:3a:e2:f6:ec:ae:10:9b:48:0f:61:a5:e6:88:34:45:fb:c2: 2f:b5:5f:41:a9:a6:81:28:48:1b:69:f5:9b:78:6d:8c:16:e9: d2:fb:e0:55:dd:a1:d8:76:a5:32:0f:b3:ea:91:9a:73:59:a6: 55:a3:90:da:7a:57:8a:30:22:f2:d0:f2:cf:f4:7f:ff:71:4a: 3f:e1:fe:86:e2:54:62:77:8a:57:44:48:3b:fd:f0:3a:d1:37: 63:15:1b:d8:3f:10:37:c4:1e:0b:73:df:81:d3:08:f2:0e:2a: 95:a5:55:0a:de:46:88:ad:51:7e:91:b6:c5:24:03:10:5b:3f: a7:3f:b4:49:e0:e1:ab:ed:d6:a4:f6:a6:95:50:bf:00:b9:7f: 75:a6:1b:a4:18:50:7a:5f:ea:cc:b4:09:9f:cf:52:ac:2b:3e: c8:a8:48:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjYwNDE1MDUwMDI0WhcNMjYwNDIyMDUwMDI0WjAYMRYwFAYD VQQDEw02OWRmMWI2OC02MTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApE0djrgFnceKlogQYdkEWroBcioBY+Vgod00rZ8Ayy5bNrowmx/MQgSQRrGl n4uvS7drLpIxb8BMI2rB4lyOkX8bPX5RTZPH1ydbPvLonPinT2cqP4keTzAn9p1z d6Vzstcz+sotk2/oW1yRJ8mURMj9qIohbj2aW7URyg5bpqmzMBXl/+w/fGcEy4Hq q3ntXUrINr8CHy4GJDHvhYzbW/NcNEKUBrZSszYgx0LpVqVXb2L/LNyYgcuwyym+ fHMtlH98807t+Du/eoLThZAPRmLYVdmW3GqxCe2fi+M1u7KYALg/mRGz8ZSGipPD E4tg2Vtz/5MSdZN3I0Jp8VtwnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCF/l3af OT/7NtPAELpHFLAxAB57MB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACyoy7Ow470wTNS4LvxTElapWy2NDhqkkt9fdRMGfXnWxdSSWewHtvX1ajVnF F/UhgYn0+2p3kwh82pHSnmG2MlEVDYk03+MmBD8Js7/VDcYdu+TdSDJGGXrb7Dri 9uyuEJtID2Gl5og0RfvCL7VfQammgShIG2n1m3htjBbp0vvgVd2h2HalMg+z6pGa c1mmVaOQ2npXijAi8tDyz/R//3FKP+H+huJUYneKV0RIO/3wOtE3YxUb2D8QN8Qe C3PfgdMI8g4qlaVVCt5GiK1RfpG2xSQDEFs/pz+0SeDhq+3WpPamlVC/ALl/daYb pBhQel/qzLQJn89SrCs+yKhIkQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:44:56 2026 by rpki-client