$ rpki-client -vvf rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft File: P0e7neKxDwsgzWjFEgcuaZNlf7w.mft (raw, json) Hash identifier: vfX/H9dio6xOd8C3YpX98pSfT1l3mVb85eGVaOjSBYQ= Subject key identifier: 06:A0:5B:56:2F:D8:6A:A0:A9:F4:8F:D0:C8:D3:E9:8E:0A:29:58:E1 Authority key identifier: 3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC Certificate issuer: /CN=A916BA2B/serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Certificate serial: 0D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft Manifest number: 0D3B Signing time: Thu 16 Apr 2026 17:59:30 +0000 Manifest this update: Thu 16 Apr 2026 17:59:29 +0000 Manifest next update: Thu 23 Apr 2026 17:59:29 +0000 Files and hashes: 1: P0e7neKxDwsgzWjFEgcuaZNlf7w.crl (hash: Ta1DJUxH/+51dZBpiYriQwxCtf9sNBbkKt1oAsOBo/I=) 2: F1862B06642911EAA019224CC4F9AE02.roa (hash: 5wHGWPS/ql0EGPzvkqmdpvi1As4P2hhHL9FTJZaGswI=) 3: F058F664642911EAA019224CC4F9AE02.roa (hash: +gE/2Co0Ry7DC9gWx152lomjpfKNvlV8HTlqgxJeQ9I=) 4: 03D4EC14D82F11EBA454B918C4F9AE02.roa (hash: eQrowlB4q/EZz5BA/V3/5geuw2TBk4EspFPR1pHJVYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3429 (0xd65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916BA2B, serialNumber=3F47BB9DE2B10F0B20CD68C512072E6993657FBC Validity Not Before: Apr 16 17:59:29 2026 GMT Not After : Apr 23 17:59:29 2026 GMT Subject: CN=69e12382-bb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e6:ce:b6:ed:f1:8e:96:3f:39:7b:39:c8:40: 24:c6:bb:cd:2a:57:63:d5:18:a6:63:7a:6b:81:3a: 71:6d:e7:6d:c0:a0:91:68:0f:30:ab:13:2f:e3:e2: 8b:d6:bd:e1:4a:44:1e:14:8a:ed:b5:3a:a2:36:f8: c2:4d:7c:b5:9c:25:0f:b1:f3:f8:40:d9:73:c9:3e: 0c:20:57:ea:c4:9c:a1:89:66:6c:57:e3:f7:b2:0e: f9:46:7b:4e:c4:1e:f9:8b:3a:59:ff:95:97:0c:cb: f4:1f:2f:0f:6a:40:52:31:eb:ea:0b:9d:68:95:83: 75:53:9c:b7:95:13:1a:04:8e:87:77:ec:2d:ae:3d: df:80:5f:61:f1:c4:56:2e:32:a2:15:2d:fe:65:72: fc:e5:da:db:0a:1c:13:ee:82:a0:0e:d5:63:9a:b1: 27:78:dc:b2:88:84:13:e2:d4:4b:5c:06:8e:6d:d3: 46:93:90:0c:ad:a8:12:bb:81:89:5a:c7:fa:98:6e: 94:f8:4f:c1:b3:af:f4:27:7f:91:b9:f6:9a:c4:9e: 9c:af:c1:8c:5a:08:95:79:c2:bc:65:27:90:ff:fe: aa:01:a0:2f:dc:6d:d4:18:08:a0:11:34:f0:d2:1d: 42:7f:1c:f4:42:54:0e:63:fb:26:17:76:4c:80:d5: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A0:5B:56:2F:D8:6A:A0:A9:F4:8F:D0:C8:D3:E9:8E:0A:29:58:E1 X509v3 Authority Key Identifier: keyid:3F:47:BB:9D:E2:B1:0F:0B:20:CD:68:C5:12:07:2E:69:93:65:7F:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0e7neKxDwsgzWjFEgcuaZNlf7w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BA2B/C8082488F68711E980E59957C4F9AE02/P0e7neKxDwsgzWjFEgcuaZNlf7w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0d:43:f9:13:7d:81:65:57:67:c1:6e:96:82:9a:ad:f6:dd: 80:a0:c2:79:46:da:65:35:6c:cd:39:e1:93:87:96:15:82:51: f5:0e:66:89:0e:f0:f4:e0:a0:9a:8b:ef:e5:dc:53:9f:2c:aa: eb:ff:53:89:94:35:4c:61:ea:5a:b5:94:74:75:b0:4c:5e:16: a1:97:ef:f8:43:1b:7c:d6:3b:d3:62:5e:d7:3d:a1:08:7b:b2: 64:e1:be:93:90:58:41:7b:ed:45:a9:27:1a:ce:14:ea:ed:65: b6:39:0d:ad:47:5e:74:2c:6b:ac:0c:ad:b1:27:b5:ea:f8:e4: e5:10:df:2e:30:b1:ab:e3:68:9e:c9:ed:61:97:1a:cd:06:47: 19:35:39:43:a2:c2:c4:14:dc:91:a9:ce:df:3e:11:58:16:86: 13:0c:4a:21:94:80:24:2c:9f:77:f4:66:69:01:7d:c4:cb:ec: 09:c1:bc:18:62:19:5d:7a:f2:77:8f:ea:a4:89:4d:4b:93:9a: e4:a4:65:07:24:bb:c6:32:57:52:5c:9c:a1:14:cc:f8:4b:5d: 45:1a:c5:fd:55:80:61:28:3d:6e:f9:57:a1:13:ae:59:34:f3: 91:fb:1a:3d:40:01:78:2b:f9:e2:a2:d6:0a:3d:d9:35:f0:91: ba:a8:17:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkJBMkIxMTAvBgNVBAUTKDNGNDdCQjlERTJCMTBGMEIyMENENjhDNTEyMDcyRTY5 OTM2NTdGQkMwHhcNMjYwNDE2MTc1OTI5WhcNMjYwNDIzMTc1OTI5WjAYMRYwFAYD VQQDEw02OWUxMjM4Mi1iYjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6+bOtu3xjpY/OXs5yEAkxrvNKldj1RimY3prgTpxbedtwKCRaA8wqxMv4+KL 1r3hSkQeFIrttTqiNvjCTXy1nCUPsfP4QNlzyT4MIFfqxJyhiWZsV+P3sg75RntO xB75izpZ/5WXDMv0Hy8PakBSMevqC51olYN1U5y3lRMaBI6Hd+wtrj3fgF9h8cRW LjKiFS3+ZXL85drbChwT7oKgDtVjmrEneNyyiIQT4tRLXAaObdNGk5AMragSu4GJ Wsf6mG6U+E/Bs6/0J3+RufaaxJ6cr8GMWgiVecK8ZSeQ//6qAaAv3G3UGAigETTw 0h1Cfxz0QlQOY/smF3ZMgNXokQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAagW1Yv 2GqgqfSP0MjT6Y4KKVjhMB8GA1UdIwQYMBaAFD9Hu53isQ8LIM1oxRIHLmmTZX+8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QkEyQi9DODA4MjQ4OEY2 ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3c2d6V2pGRWdjdWFaTmxm N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AwZTduZUt4RHdzZ3pXakZFZ2N1YVpObGY3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QkEyQi9DODA4MjQ4OEY2ODcxMUU5ODBFNTk5NTdDNEY5QUUwMi9QMGU3bmVLeER3 c2d6V2pGRWdjdWFaTmxmN3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATw1D+RN9gWVXZ8FuloKarfbdgKDCeUbaZTVszTnhk4eWFYJR9Q5miQ7w9OCg movv5dxTnyyq6/9TiZQ1TGHqWrWUdHWwTF4WoZfv+EMbfNY702Je1z2hCHuyZOG+ k5BYQXvtRaknGs4U6u1ltjkNrUdedCxrrAytsSe16vjk5RDfLjCxq+NonsntYZca zQZHGTU5Q6LCxBTckanO3z4RWBaGEwxKIZSAJCyfd/RmaQF9xMvsCcG8GGIZXXry d4/qpIlNS5Oa5KRlByS7xjJXUlycoRTM+EtdRRrF/VWAYSg9bvlXoROuWTTzkfsa PUABeCv54qLWCj3ZNfCRuqgXsw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:21:12 2026 by rpki-client