$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: Zi0+085QFsFNP4Xv0J4GtRR3i/GgM1aWe04PYT+eLSM= Subject key identifier: 79:BE:F5:C4:E3:43:4B:DA:54:DC:C8:FF:AE:8A:5D:D4:AB:84:14:36 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0FC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0FB7 Signing time: Thu 16 Apr 2026 17:26:39 +0000 Manifest this update: Thu 16 Apr 2026 17:26:39 +0000 Manifest next update: Thu 23 Apr 2026 17:26:39 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: G1+sFbAMaXOgQOgnrwB0Cfb2rOsC5dfw0XSHUZd8/EY=) 2: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: MRRSvyAs4nXdOy4NirT/FV+CCoUxnvEKIcU+qHvpGa8=) 3: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:26:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4038 (0xfc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Apr 16 17:26:39 2026 GMT Not After : Apr 23 17:26:39 2026 GMT Subject: CN=69e11bcf-cc12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:fa:73:4a:a1:cd:60:4c:99:57:c4:16:c5: 01:84:a1:7c:02:f9:c1:fe:1f:7d:88:0e:66:b1:9c: 93:82:6a:3d:5d:89:30:33:5e:47:5c:79:65:75:1c: 44:bb:8b:d4:ec:36:3f:65:a6:37:fc:c6:17:a0:8d: c6:8d:d4:3c:9a:cc:8c:2c:9f:59:d8:f2:ed:60:09: ff:03:ba:39:ec:0d:b3:24:4b:15:3a:98:23:6c:6e: f6:e2:a4:63:bd:d1:0a:45:cb:57:00:12:0a:b9:ff: ac:c0:72:d4:f9:25:0f:3b:8a:ca:22:da:08:14:a4: 42:9f:89:55:fc:14:04:52:34:63:d6:fc:5b:28:49: f8:d4:27:fa:a7:c5:cb:76:d2:a3:4c:f9:81:9b:3d: 16:34:b8:3d:bc:9b:63:8d:2e:f3:a6:f3:8a:ff:07: 01:22:43:02:4e:50:98:c3:ef:a8:4f:7b:fa:91:5a: 3b:2d:fc:41:76:22:c0:cd:be:76:a7:10:75:6e:68: 6f:66:e1:1e:d9:53:f3:e8:df:11:de:8b:93:87:4c: 95:fb:77:c4:55:eb:26:97:4a:ce:47:14:ad:7d:d0: fa:74:63:dd:ef:69:ca:94:74:d0:21:38:9d:ca:ae: 3d:4e:dc:07:f3:55:64:4a:be:2a:e5:3e:63:ea:56: 43:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:BE:F5:C4:E3:43:4B:DA:54:DC:C8:FF:AE:8A:5D:D4:AB:84:14:36 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:11:b4:48:f7:8d:b7:8a:06:04:c4:2e:c0:b8:4d:1e:07: a3:28:04:42:10:fe:48:21:cc:0b:4c:db:4d:a9:36:3d:02:e6: aa:f5:79:da:2c:13:99:3f:a9:8c:e6:15:0f:f9:c9:26:f3:18: ee:64:76:0f:a4:dc:0a:b8:bc:4f:ce:c1:b0:ff:33:8f:a8:a1: c4:da:4f:1f:dc:94:d6:c9:ca:67:cc:f9:df:da:57:a1:02:79: 64:2d:8a:c8:2f:2c:22:9f:80:5e:22:07:10:99:71:24:a3:3d: 11:da:aa:18:89:4a:a0:45:d5:d8:ae:1c:29:f3:59:8c:2b:f2: 61:d9:6c:12:ec:ba:d5:6b:d0:53:5b:91:9a:22:c4:52:b0:9b: c1:b5:06:9d:03:a3:f1:cf:9b:7b:f7:c9:33:b8:61:b9:72:ee: 0a:52:3b:37:6f:2d:51:11:5d:37:e5:f2:08:c8:44:58:c6:f4: ce:e1:2f:72:36:96:dc:49:70:ca:07:8e:24:c6:ed:14:ca:5b: 1e:01:e3:8d:58:5b:7f:df:3e:e9:a8:21:b6:bf:1b:fa:5d:f5: d4:b0:9a:80:43:28:ce:e7:4e:11:5e:4c:29:28:7d:d0:92:ba: 23:9d:be:bc:f4:d5:9b:37:e7:9c:8a:48:e0:01:9f:39:a3:5d: 11:4b:a5:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYwNDE2MTcyNjM5WhcNMjYwNDIzMTcyNjM5WjAYMRYwFAYD VQQDEw02OWUxMWJjZi1jYzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAb6c0qhzWBMmVfEFsUBhKF8AvnB/h99iA5msZyTgmo9XYkwM15HXHlldRxE u4vU7DY/ZaY3/MYXoI3GjdQ8msyMLJ9Z2PLtYAn/A7o57A2zJEsVOpgjbG724qRj vdEKRctXABIKuf+swHLU+SUPO4rKItoIFKRCn4lV/BQEUjRj1vxbKEn41Cf6p8XL dtKjTPmBmz0WNLg9vJtjjS7zpvOK/wcBIkMCTlCYw++oT3v6kVo7LfxBdiLAzb52 pxB1bmhvZuEe2VPz6N8R3ouTh0yV+3fEVesml0rORxStfdD6dGPd72nKlHTQITid yq49TtwH81VkSr4q5T5j6lZDTQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHm+9cTj Q0vaVNzI/66KXdSrhBQ2MB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASTsRtEj3jbeKBgTELsC4TR4HoygEQhD+SCHMC0zbTak2PQLmqvV52iwTmT+p jOYVD/nJJvMY7mR2D6TcCri8T87BsP8zj6ihxNpPH9yU1snKZ8z539pXoQJ5ZC2K yC8sIp+AXiIHEJlxJKM9EdqqGIlKoEXV2K4cKfNZjCvyYdlsEuy61WvQU1uRmiLE UrCbwbUGnQOj8c+be/fJM7hhuXLuClI7N28tURFdN+XyCMhEWMb0zuEvcjaW3Elw ygeOJMbtFMpbHgHjjVhbf98+6aghtr8b+l311LCagEMozudOEV5MKSh90JK6I52+ vPTVmzfnnIpI4AGfOaNdEUulhw== -----END CERTIFICATE-----Generated at Fri Apr 17 04:25:10 2026 by rpki-client