$ rpki-client -vvf rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft File: D5qo3lPwhe6GWh490qI0TiEwrxQ.mft (raw, json) Hash identifier: 8eSLdPpPpMvE8vqX0RqWe0LB7b6jsspDv/qBQMr3+sQ= Subject key identifier: 1B:F1:F2:DC:E6:C4:D4:B1:32:C8:92:82:BE:BF:43:C6:36:DB:5E:FB Authority key identifier: 0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 Certificate issuer: /CN=A916F7BE/serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft Manifest number: 0112 Signing time: Fri 17 Apr 2026 05:38:59 +0000 Manifest this update: Fri 17 Apr 2026 05:38:59 +0000 Manifest next update: Fri 24 Apr 2026 05:38:59 +0000 Files and hashes: 1: D5qo3lPwhe6GWh490qI0TiEwrxQ.crl (hash: 7/fjkaT4XT9/oyvepwlZiTOLI6dCAw3d7AH/LN1ZbP4=) 2: 310E8C36A30A11EFB999C96CC4F9AE02.roa (hash: m8laUDI9Zve1KrkarzeEr1E6AJ5CS17om1cAY5y7GWU=) 3: 9AEE04EAA30C11EFB8323D14C4F9AE02.roa (hash: iPK+TPwB+YsNmbSno8QK/8aEGZdVfS6O1fIUEsLY2Vk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:38:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F7BE, serialNumber=0F9AA8DE53F085EE865A1E3DD2A2344E2130AF14 Validity Not Before: Apr 17 05:38:59 2026 GMT Not After : Apr 24 05:38:59 2026 GMT Subject: CN=69e1c773-3450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:b3:e4:ac:35:35:db:2a:ac:8e:9d:4f:c2: 6a:11:bf:a0:5e:2d:8b:f6:dc:26:16:d6:02:9b:d8: 9c:18:6b:10:51:ad:83:cb:d8:0e:91:18:f4:b9:29: c4:0f:72:a3:51:8e:80:df:54:50:12:3c:ea:c1:ed: ef:1c:6c:0e:34:21:d2:ec:b0:b0:86:c4:f1:64:f1: c3:7c:21:55:b9:d6:4c:99:d7:cb:d1:28:0c:fa:90: 7c:d1:20:38:1f:c8:16:3d:a2:cd:9c:95:31:04:69: d3:8e:f1:91:14:e5:b8:14:8a:be:55:6f:71:1c:0f: 58:a9:5f:4d:9d:b9:59:23:34:e7:52:46:76:67:30: 69:ed:c5:80:f4:fe:85:d0:13:bb:9f:cd:b9:f5:c6: 1e:3e:db:9f:e0:af:9e:d4:bc:45:e6:60:3c:5c:07: 3b:5c:de:8a:8b:7a:86:82:38:cd:c9:83:cc:c6:dd: 42:da:05:e2:2d:6f:f3:5f:a4:39:2a:44:f4:fe:ed: fd:c7:7c:52:d7:2e:5a:2b:67:76:1c:d7:99:ce:69: 88:73:2e:d1:a2:97:a4:ab:81:c4:37:44:2d:8d:dc: 33:d7:39:12:38:1e:d8:bf:63:de:7e:27:63:ae:b3: f7:b0:57:8e:17:e1:a8:7f:1b:56:d7:27:d1:eb:1a: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F1:F2:DC:E6:C4:D4:B1:32:C8:92:82:BE:BF:43:C6:36:DB:5E:FB X509v3 Authority Key Identifier: keyid:0F:9A:A8:DE:53:F0:85:EE:86:5A:1E:3D:D2:A2:34:4E:21:30:AF:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D5qo3lPwhe6GWh490qI0TiEwrxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F7BE/09CE32649CFE11EF8EEC904AC4F9AE02/D5qo3lPwhe6GWh490qI0TiEwrxQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:c0:a9:0f:b9:86:e3:02:7b:5e:32:90:3d:57:fd:e4:ec:ae: 37:a7:dc:95:3a:02:ff:8b:56:27:8d:41:68:ca:48:00:39:88: f4:dc:dc:99:5d:5b:4c:75:f8:af:54:10:64:19:9f:76:d4:00: 03:c2:d1:e0:da:ec:9c:7b:52:d4:02:05:82:1f:9b:63:30:7f: d1:15:7e:26:c0:d7:8a:5d:f2:9f:47:99:1e:97:88:98:00:31: b4:a0:c0:9d:1b:32:13:12:71:c9:f8:53:21:ea:e7:c3:75:51: ce:5c:9a:1f:54:7b:60:74:8b:80:f4:41:34:dc:7a:8c:ac:60: 83:35:aa:f9:45:fa:80:15:93:ed:d0:3f:c4:31:5c:83:cd:64: 66:d0:95:87:53:69:88:f9:7d:97:e4:97:98:1d:82:83:2c:3f: 22:8d:25:01:ae:fe:85:69:cb:53:f7:9c:18:92:c1:48:57:76: e3:3c:13:a0:77:b2:1a:d2:24:33:28:12:03:03:a6:7f:9f:49: 5e:b4:49:e3:23:91:7b:a5:c6:e4:c4:4b:61:94:f2:c3:87:04: 03:19:e6:31:1b:41:40:57:ef:81:53:02:79:54:98:bf:5f:df: df:ca:5b:57:9a:64:82:d3:1f:ab:b6:e3:91:b6:c4:10:8c:55: 2b:4f:31:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkY3QkUxMTAvBgNVBAUTKDBGOUFBOERFNTNGMDg1RUU4NjVBMUUzREQyQTIzNDRF MjEzMEFGMTQwHhcNMjYwNDE3MDUzODU5WhcNMjYwNDI0MDUzODU5WjAYMRYwFAYD VQQDEw02OWUxYzc3My0zNDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvI2z5Kw1NdsqrI6dT8JqEb+gXi2L9twmFtYCm9icGGsQUa2Dy9gOkRj0uSnE D3KjUY6A31RQEjzqwe3vHGwONCHS7LCwhsTxZPHDfCFVudZMmdfL0SgM+pB80SA4 H8gWPaLNnJUxBGnTjvGRFOW4FIq+VW9xHA9YqV9NnblZIzTnUkZ2ZzBp7cWA9P6F 0BO7n8259cYePtuf4K+e1LxF5mA8XAc7XN6Ki3qGgjjNyYPMxt1C2gXiLW/zX6Q5 KkT0/u39x3xS1y5aK2d2HNeZzmmIcy7Ropekq4HEN0Qtjdwz1zkSOB7Yv2Pefidj rrP3sFeOF+GofxtW1yfR6xrfYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBvx8tzm xNSxMsiSgr6/Q8Y22177MB8GA1UdIwQYMBaAFA+aqN5T8IXuhloePdKiNE4hMK8U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RjdCRS8wOUNFMzI2NDlD RkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hlNkdXaDQ5MHFJMFRpRXdy eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q1cW8zbFB3aGU2R1doNDkwcUkwVGlFd3J4US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RjdCRS8wOUNFMzI2NDlDRkUxMUVGOEVFQzkwNEFDNEY5QUUwMi9ENXFvM2xQd2hl NkdXaDQ5MHFJMFRpRXdyeFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhMCpD7mG4wJ7XjKQPVf95OyuN6fclToC/4tWJ41BaMpIADmI9NzcmV1bTHX4 r1QQZBmfdtQAA8LR4NrsnHtS1AIFgh+bYzB/0RV+JsDXil3yn0eZHpeImAAxtKDA nRsyExJxyfhTIernw3VRzlyaH1R7YHSLgPRBNNx6jKxggzWq+UX6gBWT7dA/xDFc g81kZtCVh1NpiPl9l+SXmB2Cgyw/Io0lAa7+hWnLU/ecGJLBSFd24zwToHeyGtIk MygSAwOmf59JXrRJ4yORe6XG5MRLYZTyw4cEAxnmMRtBQFfvgVMCeVSYv1/f38pb V5pkgtMfq7bjkbbEEIxVK08x1Q== -----END CERTIFICATE-----Generated at Fri Apr 17 14:34:50 2026 by rpki-client