$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: SOnwVZpX70y0qiOvwOfAsW0uzLoMwCFI3hzxV9yZ574= Subject key identifier: 0F:3A:EA:38:6E:42:E5:F1:08:F2:E2:88:84:0E:64:C4:01:79:49:C6 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 0895 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0881 Signing time: Sat 18 Apr 2026 20:32:51 +0000 Manifest this update: Sat 18 Apr 2026 20:32:50 +0000 Manifest next update: Sat 25 Apr 2026 20:32:50 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: kyeObbm1B8a/8TZWp17YLI+nfKjcQAedrbeBrHEDHQI=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 20:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2197 (0x895) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Apr 18 20:32:50 2026 GMT Not After : Apr 25 20:32:50 2026 GMT Subject: CN=69e3ea73-4e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:77:b5:08:40:a3:ae:c8:72:73:90:02:0b:7f: 5e:e7:cc:63:c5:7e:12:e1:e5:4a:2f:c1:d4:d6:66: c8:28:95:b0:5b:20:6f:3f:da:21:18:b6:93:76:5f: f9:d5:46:8f:5d:2b:de:32:fc:e6:57:09:d4:60:2c: 48:5c:a2:48:2b:0e:b5:62:90:0b:bb:13:51:44:12: d2:1c:e9:96:90:b0:3d:62:78:b5:1b:98:24:07:d0: 57:e5:7d:56:53:d3:99:fa:a3:be:e1:ba:ed:88:8c: 78:67:8b:13:23:7f:d8:1b:e1:50:98:da:3b:e9:24: 67:ce:25:ab:b5:ad:86:b4:fa:45:47:ca:0c:d9:f1: fe:97:4b:7d:ac:52:61:09:f8:dc:e4:fe:84:3b:56: a8:3b:4e:3a:a4:87:e1:ad:1c:ea:a5:43:e8:4b:32: 83:b3:d0:04:2a:08:b2:1e:62:55:d3:c0:f0:10:bb: 9a:a8:1b:81:30:85:cc:34:12:78:5b:d1:e5:39:0f: 72:57:09:24:58:c3:25:8e:a0:11:4e:4d:12:93:23: b5:56:db:3e:21:6f:e0:de:0f:a1:22:48:d9:cd:3f: e3:98:fb:34:93:58:68:b8:51:22:a2:10:a1:2f:3a: 33:38:c9:e4:af:aa:55:35:6d:77:bc:de:7d:da:ec: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3A:EA:38:6E:42:E5:F1:08:F2:E2:88:84:0E:64:C4:01:79:49:C6 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:44:15:0c:f9:35:f5:78:7f:23:66:16:9b:25:6b:13:ee:e5: 48:ab:e2:36:bf:79:68:19:75:54:fa:4f:45:35:3c:cf:5b:c5: 88:4e:fb:ad:fe:8d:43:0b:f1:f9:7d:0b:9c:05:30:29:d6:f3: 6b:91:5e:13:cd:79:cd:bc:f8:3c:e8:5c:cc:44:53:bb:9b:b7: 20:d6:27:e6:29:fa:3c:11:c6:6f:22:c3:e2:4d:f8:29:fd:b8: 7e:d4:3c:51:ae:1c:17:2b:b3:dd:67:9a:58:04:bb:18:8b:28: 7a:a3:59:84:5a:50:a1:60:b2:5b:68:df:3f:14:d6:24:eb:a1: f7:64:fd:93:28:ea:fe:be:e3:dc:8c:fb:51:cb:a4:d7:35:72: 56:56:58:87:e5:8a:4b:9f:f6:a5:bb:73:3f:91:25:42:8c:68: 75:60:a3:1b:1d:be:b1:2b:f1:28:a0:fd:48:ea:7c:1d:df:1f: e6:e5:d6:75:ca:e5:51:fa:13:5c:10:3f:67:5c:b7:a7:55:78: 1f:7c:c4:17:4d:20:6a:ce:35:6b:3f:af:00:84:e8:65:13:08: 64:ce:5d:e4:5c:ce:36:70:cf:8c:62:96:97:19:df:79:0f:d5: b8:c2:aa:9a:2b:f6:15:24:2d:c3:69:a5:ef:b4:05:b5:d6:92: 30:a0:ff:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjYwNDE4MjAzMjUwWhcNMjYwNDI1MjAzMjUwWjAYMRYwFAYD VQQDEw02OWUzZWE3My00ZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlXe1CECjrshyc5ACC39e58xjxX4S4eVKL8HU1mbIKJWwWyBvP9ohGLaTdl/5 1UaPXSveMvzmVwnUYCxIXKJIKw61YpALuxNRRBLSHOmWkLA9Yni1G5gkB9BX5X1W U9OZ+qO+4brtiIx4Z4sTI3/YG+FQmNo76SRnziWrta2GtPpFR8oM2fH+l0t9rFJh Cfjc5P6EO1aoO046pIfhrRzqpUPoSzKDs9AEKgiyHmJV08DwELuaqBuBMIXMNBJ4 W9HlOQ9yVwkkWMMljqARTk0SkyO1Vts+IW/g3g+hIkjZzT/jmPs0k1houFEiohCh LzozOMnkr6pVNW13vN592uyJfQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA866jhu QuXxCPLiiIQOZMQBeUnGMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjEQVDPk19Xh/I2YWmyVrE+7lSKviNr95aBl1VPpPRTU8z1vFiE77rf6NQwvx +X0LnAUwKdbza5FeE815zbz4POhczERTu5u3INYn5in6PBHGbyLD4k34Kf24ftQ8 Ua4cFyuz3WeaWAS7GIsoeqNZhFpQoWCyW2jfPxTWJOuh92T9kyjq/r7j3Iz7Ucuk 1zVyVlZYh+WKS5/2pbtzP5ElQoxodWCjGx2+sSvxKKD9SOp8Hd8f5uXWdcrlUfoT XBA/Z1y3p1V4H3zEF00gas41az+vAIToZRMIZM5d5FzONnDPjGKWlxnfeQ/VuMKq miv2FSQtw2ml77QFtdaSMKD/Sg== -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:10 2026 by rpki-client