$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft File: T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft (raw, json) Hash identifier: ZaHu2rezCDWIWmfrYSy/tRuXMebizckD4qmj7xGdYhI= Subject key identifier: 1E:6D:3A:1D:02:E7:11:44:39:95:33:8B:79:2B:3E:2E:D4:B8:59:6E Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 Certificate issuer: /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft Manifest number: 151B Signing time: Thu 16 Apr 2026 18:23:57 +0000 Manifest this update: Thu 16 Apr 2026 18:23:57 +0000 Manifest next update: Thu 23 Apr 2026 18:23:57 +0000 Files and hashes: 1: T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl (hash: uCjZmScoFXkuU4rDk+pDpmXHGVMkq2lv71+E/fWWSEo=) 2: 2F7267121DD411F18819F3DA0B3D8C67.roa (hash: sLJ4fmy8xpg9xcZG4Kb6Y42Da6yXwOsQcEnYcgYLtL4=) 3: C9C81E521D2911F18F7E6F37153D8C67.roa (hash: ScxJliUY4DXLrnnNNW8a6vPijrUn+5XUQ6gjXiYCSp8=) 4: F4075E7CF28611EF976CB83AC4F9AE02.roa (hash: 2XB9AUT5vQE1XXVh7JlV1lG+7wXXx67sWItW8OX0UI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737 Validity Not Before: Apr 16 18:23:57 2026 GMT Not After : Apr 23 18:23:57 2026 GMT Subject: CN=69e1293d-fe32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:76:02:bf:88:e8:04:e8:2b:62:1c:3c:97: 3b:62:dc:82:f4:d4:40:0a:75:a2:40:3e:bd:49:70: 5d:e1:0e:30:b7:73:b0:2d:a5:38:31:26:dd:34:db: 16:80:13:f6:fc:cd:56:69:f0:20:ec:3a:b2:54:ce: 20:5c:9c:79:25:cf:63:83:7c:d8:55:7d:ac:9c:32: 2c:63:17:14:4a:c1:17:79:66:3f:7c:a8:e0:f3:6a: 1f:12:aa:f9:52:80:73:98:16:28:3b:51:a2:16:5a: 89:cf:8f:da:a3:95:45:23:3f:8c:ca:18:1c:eb:5b: 5f:0c:ec:70:df:3f:2b:3d:a7:95:e0:d0:7f:f2:1f: d7:c5:15:ad:ab:b0:6a:66:b7:4b:b3:1f:ea:c9:1a: 5c:f6:74:55:1d:c0:ec:04:d4:47:b9:a7:ba:ab:c9: cb:bd:82:1e:bc:c3:e4:63:50:c4:ba:7b:a2:e3:a7: a1:80:2e:04:58:29:b9:be:2e:e0:aa:6d:39:f1:91: 63:e5:ce:bb:3c:38:08:23:84:92:16:90:c7:2e:0c: 6d:ad:93:4b:1a:87:3a:96:94:7e:4d:b5:fe:66:ae: 1e:11:35:9f:bf:86:31:20:e5:63:42:d5:c4:8a:0e: f4:b3:bd:ce:2e:aa:f7:97:f3:32:70:77:d7:da:61: ff:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6D:3A:1D:02:E7:11:44:39:95:33:8B:79:2B:3E:2E:D4:B8:59:6E X509v3 Authority Key Identifier: keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:de:fb:77:a0:26:c7:28:44:8e:f0:38:22:ed:61:33:03:3f: 5b:7e:aa:b6:30:92:38:dd:9d:62:92:40:cb:ac:a5:1d:4e:9e: 11:a9:0e:0f:e8:ab:8f:55:eb:23:b4:dc:5a:24:41:98:40:1f: a0:4d:33:46:ac:de:71:da:62:d2:ab:b3:67:fb:74:0e:b8:c5: 17:f3:30:e9:04:3b:24:6e:d3:0c:c5:2f:2b:c0:3f:72:2d:c2: fd:ef:e1:d1:8e:03:c2:96:69:bf:b8:05:d8:dd:25:13:7c:a5: a2:58:83:e8:bf:28:94:f0:f4:48:63:79:4c:ad:76:dc:dc:da: b6:b8:f3:61:a0:66:35:47:d6:a8:ee:99:55:9c:48:99:6e:ef: a1:c3:ff:bc:6c:d5:54:34:b8:bd:74:3b:c7:bd:ee:d8:c6:34: 72:71:82:18:84:3d:0a:8a:ec:0e:1e:36:72:12:49:f0:a5:5e: f7:31:8d:1b:a6:0d:37:88:49:77:fb:ea:c6:4e:4d:84:42:76: 93:c6:5a:aa:66:1e:77:3c:88:a4:bb:ec:40:63:f9:6e:ed:c6: 32:de:f8:c1:92:ec:28:a0:35:6c:5d:6b:dd:89:61:56:32:04: 51:c1:f6:36:c9:15:17:37:c5:b6:78:bc:1d:1e:31:5d:16:bf: fd:9d:d5:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkNEREYxMTAvBgNVBAUTKDRGRkE1MjhDNkU0NjdFRDQ1OEY1MzVGQzVDNkREOURC RUQwQ0U3MzcwHhcNMjYwNDE2MTgyMzU3WhcNMjYwNDIzMTgyMzU3WjAYMRYwFAYD VQQDEw02OWUxMjkzZC1mZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruF2Ar+I6AToK2IcPJc7YtyC9NRACnWiQD69SXBd4Q4wt3OwLaU4MSbdNNsW gBP2/M1WafAg7DqyVM4gXJx5Jc9jg3zYVX2snDIsYxcUSsEXeWY/fKjg82ofEqr5 UoBzmBYoO1GiFlqJz4/ao5VFIz+Myhgc61tfDOxw3z8rPaeV4NB/8h/XxRWtq7Bq ZrdLsx/qyRpc9nRVHcDsBNRHuae6q8nLvYIevMPkY1DEunui46ehgC4EWCm5vi7g qm058ZFj5c67PDgII4SSFpDHLgxtrZNLGoc6lpR+TbX+Zq4eETWfv4YxIOVjQtXE ig70s73OLqr3l/MycHfX2mH/zwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB5tOh0C 5xFEOZUzi3krPi7UuFluMB8GA1UdIwQYMBaAFE/6UoxuRn7UWPU1/Fxt2dvtDOc3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Q0RERi8yNjYwOEQ0NjEw NzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0Ulk5VFg4WEczWjItME01 emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfcFNqRzVHZnRSWTlUWDhYRzNaMi0wTTV6Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 Q0RERi8yNjYwOEQ0NjEwNzIxMUVBQUMwNkIwNzlDNEY5QUUwMi9UX3BTakc1R2Z0 Ulk5VFg4WEczWjItME01emMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ977d6AmxyhEjvA4Iu1hMwM/W36qtjCSON2dYpJAy6ylHU6eEakOD+irj1Xr I7TcWiRBmEAfoE0zRqzecdpi0quzZ/t0DrjFF/Mw6QQ7JG7TDMUvK8A/ci3C/e/h 0Y4DwpZpv7gF2N0lE3yloliD6L8olPD0SGN5TK123NzatrjzYaBmNUfWqO6ZVZxI mW7vocP/vGzVVDS4vXQ7x73u2MY0cnGCGIQ9CorsDh42chJJ8KVe9zGNG6YNN4hJ d/vqxk5NhEJ2k8ZaqmYedzyIpLvsQGP5bu3GMt74wZLsKKA1bF1r3YlhVjIEUcH2 NskVFzfFtni8HR4xXRa//Z3VkA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:57 2026 by rpki-client