$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: Z2xrkmqn3evrvBS+4SlNadhQWtItCrEKd8zZ/ZzU45M= Subject key identifier: E0:5F:40:7C:7A:44:7A:8B:C4:1C:14:B8:3A:4E:85:ED:97:D7:56:0F Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0EAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E9F Signing time: Thu 16 Apr 2026 17:38:25 +0000 Manifest this update: Thu 16 Apr 2026 17:38:24 +0000 Manifest next update: Thu 23 Apr 2026 17:38:24 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: r3gjDgZ99ClbO33BAwhoSzlB8+KqQNIC75hbdmRGwE8=) 2: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: 0i79WpYlAZ9LIzXBaRHXpaEMFnxhq4fNWyYI1M5ojU4=) 3: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: 6kYz/jIqF4bH5D+CFSov74IZW+HxnNg38aTmon4kT+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:38:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3759 (0xeaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Apr 16 17:38:24 2026 GMT Not After : Apr 23 17:38:24 2026 GMT Subject: CN=69e11e90-5baa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:4e:45:e3:ad:f7:f8:8e:b2:f5:44:1e:a2: 2a:b6:88:66:32:26:0a:73:8e:fd:a5:7d:50:3a:fe: 64:8f:e7:0d:5f:8d:ee:fb:30:b2:7e:52:81:e8:98: 46:e4:51:5b:6e:8b:e0:be:b3:31:3b:ad:10:33:d8: 4e:64:26:87:ed:59:7b:43:69:37:b2:ed:0d:c3:ba: 94:e9:e8:00:82:79:4e:da:64:c6:50:fd:58:da:14: 89:ce:fc:05:07:45:7b:ac:7c:bd:3e:ef:51:6b:aa: 11:81:53:68:d4:e3:71:76:dc:df:67:bc:cc:d5:0c: 86:41:d6:c8:3e:29:47:f9:0c:f5:ec:cc:84:c8:0d: 2a:4a:43:93:23:b0:53:18:60:b6:b3:92:e3:bb:c3: cc:72:ad:bf:6c:3b:50:c5:89:5e:c4:ce:ab:31:c4: 58:5e:d8:55:04:9a:46:78:27:2a:8e:a7:f5:e1:81: 78:b7:07:16:7e:d9:46:64:a7:4b:c6:00:ea:b0:b8: ae:a2:44:38:91:43:bd:1c:1e:14:50:9e:c2:70:5a: be:b4:0b:1e:f3:d9:f6:4f:0c:ab:b2:e6:ad:49:02: be:ec:54:18:3e:52:89:29:ce:cf:45:91:5e:0b:1e: 40:ba:1e:9b:4f:c1:97:5f:9b:fc:9b:84:33:6e:d0: 65:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5F:40:7C:7A:44:7A:8B:C4:1C:14:B8:3A:4E:85:ED:97:D7:56:0F X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3f:81:98:28:8d:a5:15:80:5e:bd:95:a4:17:44:ad:ab:2d: 56:e1:bf:48:bd:4b:60:73:08:96:86:f3:90:b9:6b:4b:3c:bc: d4:eb:ca:a6:0f:bc:61:22:7c:f4:d5:26:a5:ad:e3:81:bd:96: 86:fc:02:61:27:9b:67:39:34:c4:97:82:ca:15:7c:20:7b:ec: b8:a0:07:b8:cb:4a:e6:1f:9d:f5:35:e2:42:6d:26:2f:84:05: 7f:42:37:89:53:b8:a3:f7:52:15:b8:24:e1:16:1f:ad:f4:fd: e1:72:ed:55:9c:11:9b:db:03:a1:f7:92:08:1c:b0:5c:2d:5f: 06:1a:f7:24:2a:b1:18:db:20:5e:56:c5:80:c6:e3:e1:97:1f: aa:8b:0f:93:3e:1b:0c:c8:f6:eb:71:5b:25:78:78:7b:1c:d0: ae:58:11:e9:bb:2b:26:56:b1:97:61:2e:e7:c8:cf:74:9b:66: db:66:58:4b:95:5f:0c:ec:35:3e:28:ec:df:c0:77:72:3b:42: 20:c4:59:53:de:4b:c4:22:ca:37:bd:90:91:e3:34:76:6f:d4: f6:b2:e1:62:11:e3:c1:52:a8:24:e6:55:35:ed:c4:cf:05:63: c9:67:d7:ef:fe:c9:0b:a1:31:7c:c5:46:27:cb:46:05:c5:a7: 45:cb:d7:1d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjYwNDE2MTczODI0WhcNMjYwNDIzMTczODI0WjAYMRYwFAYD VQQDEw02OWUxMWU5MC01YmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqdOReOt9/iOsvVEHqIqtohmMiYKc479pX1QOv5kj+cNX43u+zCyflKB6JhG 5FFbbovgvrMxO60QM9hOZCaH7Vl7Q2k3su0Nw7qU6egAgnlO2mTGUP1Y2hSJzvwF B0V7rHy9Pu9Ra6oRgVNo1ONxdtzfZ7zM1QyGQdbIPilH+Qz17MyEyA0qSkOTI7BT GGC2s5Lju8PMcq2/bDtQxYlexM6rMcRYXthVBJpGeCcqjqf14YF4twcWftlGZKdL xgDqsLiuokQ4kUO9HB4UUJ7CcFq+tAse89n2TwyrsuatSQK+7FQYPlKJKc7PRZFe Cx5Auh6bT8GXX5v8m4QzbtBlyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOBfQHx6 RHqLxBwUuDpOhe2X11YPMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIj+BmCiNpRWAXr2VpBdErastVuG/SL1LYHMIlobzkLlrSzy81OvKpg+8YSJ8 9NUmpa3jgb2WhvwCYSebZzk0xJeCyhV8IHvsuKAHuMtK5h+d9TXiQm0mL4QFf0I3 iVO4o/dSFbgk4RYfrfT94XLtVZwRm9sDofeSCBywXC1fBhr3JCqxGNsgXlbFgMbj 4ZcfqosPkz4bDMj263FbJXh4exzQrlgR6bsrJlaxl2Eu58jPdJtm22ZYS5VfDOw1 Pijs38B3cjtCIMRZU95LxCLKN72QkeM0dm/U9rLhYhHjwVKoJOZVNe3EzwVjyWfX 7/7JC6ExfMVGJ8tGBcWnRcvXHQ== -----END CERTIFICATE-----Generated at Fri Apr 17 15:42:51 2026 by rpki-client