$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: ZGHfdU6Qva320DqLGHzpPJHGYIeRLiZy70K0OpqOHKQ= Subject key identifier: DC:19:26:6A:7C:0D:9E:90:61:43:4F:DE:00:CC:FC:EF:1F:52:B8:AE Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 3563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 3541 Signing time: Sat 18 Apr 2026 14:44:05 +0000 Manifest this update: Sat 18 Apr 2026 14:44:05 +0000 Manifest next update: Sat 25 Apr 2026 14:44:05 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: K5l8mr7nCe1PZv6LWZYAXO7P8W4msZWyGd2lJcVlu1I=) 2: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: cbOF25KS3Ii1neQB3lO33xPaJIbgxTebcwnMlxfjqmE=) 3: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: wkiRfCu/XLYyXw4TOm6YezOpImuhMfUU+dENf0r96zI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 14:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13667 (0x3563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Apr 18 14:44:05 2026 GMT Not After : Apr 25 14:44:05 2026 GMT Subject: CN=69e398b5-0414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:c7:c6:61:d1:b1:68:94:bd:6c:03:93:a5: c2:07:32:e5:d7:1a:ff:78:62:2d:4d:2f:ae:d4:db: 02:79:7e:d8:6b:73:32:29:bd:0c:2c:6e:2c:0a:61: c1:85:82:4e:3c:97:c1:aa:6e:b1:7f:ec:4b:48:33: 1e:c1:55:b6:38:17:68:ae:14:81:d4:8a:f8:58:e7: d8:34:54:9a:b1:1b:a8:60:85:6a:d7:cc:2c:a5:a7: fd:dd:9e:37:b0:82:2f:f6:ec:66:b9:e3:40:b9:53: 6c:52:54:f1:5e:ef:eb:7d:b7:14:f2:82:f7:e0:d8: e3:2b:03:c6:a1:d4:a0:ac:bb:64:0f:1a:2d:c0:4d: be:52:db:3b:ea:e5:23:e6:6d:cb:b0:5c:8f:0a:aa: 07:73:04:ad:e1:d2:3c:b0:33:a7:40:d5:00:76:92: df:94:a1:0e:7d:e1:8a:6f:52:c8:c5:a9:f6:0a:07: 01:b6:96:9b:bb:85:c7:16:e8:52:a2:a2:34:5f:0c: be:d5:09:ee:26:9e:84:43:e2:1b:5f:5e:72:15:cd: fa:bc:75:4a:cf:d3:13:1e:a1:2a:76:a1:1a:66:60: 06:55:62:dc:be:c0:50:6f:46:f8:90:a9:84:a6:67: 13:39:5f:11:c8:80:81:72:e5:13:5d:7d:4a:04:81: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:19:26:6A:7C:0D:9E:90:61:43:4F:DE:00:CC:FC:EF:1F:52:B8:AE X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:f2:67:75:93:09:b5:fe:ff:db:b5:2d:0e:8f:fc:a9:ff:7a: 44:c2:74:a8:8e:9b:72:5d:7e:a5:39:67:66:8e:f4:a5:20:1a: 23:85:b5:37:95:3e:8f:88:99:dd:cc:dd:b5:88:42:bc:1d:ee: 65:b3:55:fb:f7:ec:ea:1e:c4:1d:60:19:62:f5:36:73:8a:26: 48:99:df:2d:9c:4f:84:90:19:b5:f4:21:59:19:d9:9e:f1:5c: eb:33:03:6d:0f:ee:70:dd:59:87:ae:0a:8a:01:79:ec:95:1d: 47:e8:49:43:76:fe:8f:84:fc:af:a6:42:c4:55:e7:bd:34:ae: 4d:9d:89:99:a7:09:9e:b2:f3:db:7c:57:8a:b8:3b:0b:29:ce: c2:cc:61:f2:69:fe:41:43:b4:25:f1:9c:fa:b1:59:42:81:78: 9e:4b:51:73:65:13:eb:28:27:a8:3c:e4:37:4f:c6:44:4d:b0: 49:fd:2f:ac:08:0f:19:84:74:87:c4:b8:83:d1:53:9e:db:4b: d4:3d:a4:73:aa:86:52:fb:c5:d3:85:40:19:d2:c3:4f:c7:e7: f3:69:d5:d7:8f:48:2d:cf:6a:f2:1f:a8:1e:88:33:55:eb:86: b8:45:06:e2:61:41:f3:50:f7:ff:ce:6d:0f:1d:ba:82:f3:5c: f8:52:11:7e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjYwNDE4MTQ0NDA1WhcNMjYwNDI1MTQ0NDA1WjAYMRYwFAYD VQQDEw02OWUzOThiNS0wNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwXHxmHRsWiUvWwDk6XCBzLl1xr/eGItTS+u1NsCeX7Ya3MyKb0MLG4sCmHB hYJOPJfBqm6xf+xLSDMewVW2OBdorhSB1Ir4WOfYNFSasRuoYIVq18wspaf93Z43 sIIv9uxmueNAuVNsUlTxXu/rfbcU8oL34NjjKwPGodSgrLtkDxotwE2+Uts76uUj 5m3LsFyPCqoHcwSt4dI8sDOnQNUAdpLflKEOfeGKb1LIxan2CgcBtpabu4XHFuhS oqI0Xwy+1QnuJp6EQ+IbX15yFc36vHVKz9MTHqEqdqEaZmAGVWLcvsBQb0b4kKmE pmcTOV8RyICBcuUTXX1KBIGPuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwZJmp8 DZ6QYUNP3gDM/O8fUriuMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY/JndZMJtf7/27UtDo/8qf96RMJ0qI6bcl1+pTlnZo70pSAaI4W1N5U+j4iZ 3czdtYhCvB3uZbNV+/fs6h7EHWAZYvU2c4omSJnfLZxPhJAZtfQhWRnZnvFc6zMD bQ/ucN1Zh64KigF57JUdR+hJQ3b+j4T8r6ZCxFXnvTSuTZ2JmacJnrLz23xXirg7 CynOwsxh8mn+QUO0JfGc+rFZQoF4nktRc2UT6ygnqDzkN0/GRE2wSf0vrAgPGYR0 h8S4g9FTnttL1D2kc6qGUvvF04VAGdLDT8fn82nV149ILc9q8h+oHogzVeuGuEUG 4mFB81D3/85tDx26gvNc+FIRfg== -----END CERTIFICATE-----Generated at Sun Apr 19 12:44:01 2026 by rpki-client