$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json) Hash identifier: ss38y7D6C+IESS4XTdESK5MZsQbmczBZ3qAv5tixzAs= Subject key identifier: 78:4A:37:14:63:D2:ED:C6:BC:B6:C2:79:77:0A:34:C3:4C:20:E9:AB Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft Manifest number: 0678 Signing time: Thu 16 Apr 2026 22:29:58 +0000 Manifest this update: Thu 16 Apr 2026 22:29:57 +0000 Manifest next update: Thu 23 Apr 2026 22:29:57 +0000 Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: FYs6pXke5GTWUfgPih3wNMFtyttVGkwOQhkk8nZn5ew=) 2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: JOGvq1AD8Gg+4yY3ltKJTiWff0l41sfm7XWi5tngbn4=) 3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 5be7I0/+cwjNbyTqFfbMRK0sXrbNJNl+sPoUACjviPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Validity Not Before: Apr 16 22:29:57 2026 GMT Not After : Apr 23 22:29:57 2026 GMT Subject: CN=69e162e6-c40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:5a:a7:f1:77:6c:ac:93:a5:15:8e:5b:ee: e0:30:db:fe:1e:63:dc:0e:d9:ab:49:dd:02:03:02: 3f:76:a9:89:36:ea:9e:4b:d3:99:fa:3f:dc:8a:61: 7a:e1:d7:74:28:0e:37:d6:6b:ab:8f:84:8e:26:fa: 7c:bc:6d:dd:a5:96:3a:00:9d:5c:98:f1:7b:8b:dd: 08:fc:96:e1:fc:39:fc:57:06:5d:5b:54:ff:bd:16: 68:f1:27:9d:61:f8:d7:c2:c8:c6:7a:95:cf:6c:d0: 7a:f9:56:d6:88:98:0d:10:8c:c1:0a:2c:5d:b6:b8: 02:72:4e:a5:5f:58:1e:e8:52:4a:37:21:50:97:c3: 90:3e:1c:91:0f:b2:7a:a6:a8:ea:56:b0:26:0e:a9: 8e:82:9b:47:0f:e8:bb:ff:e7:7c:e1:b2:ba:40:66: ae:3f:df:47:c1:3d:95:60:28:76:61:74:3b:e3:53: 1c:64:d8:9b:c0:0a:63:28:4c:30:c3:a4:9a:82:39: 67:5d:80:af:e0:3e:2d:ed:6c:55:dc:fd:d5:f7:8f: 90:af:6a:5b:97:3d:0d:1f:3f:08:51:af:05:7a:18: 01:fb:2e:0b:ce:87:6e:aa:dc:58:70:a2:80:5a:65: 92:96:6c:17:03:96:22:16:0c:b3:44:96:7e:45:22: 57:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:37:14:63:D2:ED:C6:BC:B6:C2:79:77:0A:34:C3:4C:20:E9:AB X509v3 Authority Key Identifier: keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:4d:21:ca:b9:55:8f:41:56:f5:1e:30:d9:d0:12:29:3f:a6: ea:b1:57:68:cb:c7:9d:7d:8d:0a:31:f8:47:ac:f5:c2:ab:48: 6d:a7:0d:a5:c0:d6:a4:ad:7e:40:02:5d:f3:32:05:78:98:de: 76:81:70:81:b5:5b:1a:18:23:a5:28:4a:5d:8e:ae:20:3c:a1: 57:b1:e1:d0:52:c0:2d:2b:d8:1b:3c:6c:2b:d7:85:e6:55:36: 08:93:fd:03:bb:a7:66:64:a5:60:7f:d1:f7:44:58:06:de:91: 4a:b3:7c:2d:fb:ea:b9:d6:ef:31:6e:eb:eb:07:90:04:03:ce: bc:c5:78:21:f0:7f:3f:c4:83:7d:1a:5d:e9:e9:9c:9e:39:ec: c4:2f:c0:c0:82:8b:60:bc:6c:c6:0c:72:6f:c9:98:24:98:4b: a8:ca:09:e0:b0:34:fb:0f:b2:4b:49:81:16:3a:9d:10:f3:b7: ed:90:84:84:85:18:a9:b7:56:88:dd:17:15:21:f7:85:07:bf: 2b:eb:99:56:10:74:29:a1:d5:43:3f:76:47:8c:ff:f9:97:b2: 2c:26:bb:03:11:cd:01:52:43:e9:59:10:38:87:b5:22:8b:c5: 7c:18:cf:7b:4d:56:80:11:b9:c7:18:cc:ce:da:c0:68:4e:f9: 8b:54:47:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz NzRBNUM3MjIwHhcNMjYwNDE2MjIyOTU3WhcNMjYwNDIzMjIyOTU3WjAYMRYwFAYD VQQDEw02OWUxNjJlNi1jNDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlLJap/F3bKyTpRWOW+7gMNv+HmPcDtmrSd0CAwI/dqmJNuqeS9OZ+j/cimF6 4dd0KA431murj4SOJvp8vG3dpZY6AJ1cmPF7i90I/Jbh/Dn8VwZdW1T/vRZo8Sed YfjXwsjGepXPbNB6+VbWiJgNEIzBCixdtrgCck6lX1ge6FJKNyFQl8OQPhyRD7J6 pqjqVrAmDqmOgptHD+i7/+d84bK6QGauP99HwT2VYCh2YXQ741McZNibwApjKEww w6SagjlnXYCv4D4t7WxV3P3V94+Qr2pblz0NHz8IUa8FehgB+y4LzoduqtxYcKKA WmWSlmwXA5YiFgyzRJZ+RSJXQwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHhKNxRj 0u3GvLbCeXcKNMNMIOmrMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL blRBNHpnRTg4WVUzU2x4eUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIE0hyrlVj0FW9R4w2dASKT+m6rFXaMvHnX2NCjH4R6z1wqtIbacNpcDWpK1+ QAJd8zIFeJjedoFwgbVbGhgjpShKXY6uIDyhV7Hh0FLALSvYGzxsK9eF5lU2CJP9 A7unZmSlYH/R90RYBt6RSrN8LfvqudbvMW7r6weQBAPOvMV4IfB/P8SDfRpd6emc njnsxC/AwIKLYLxsxgxyb8mYJJhLqMoJ4LA0+w+yS0mBFjqdEPO37ZCEhIUYqbdW iN0XFSH3hQe/K+uZVhB0KaHVQz92R4z/+ZeyLCa7AxHNAVJD6VkQOIe1IovFfBjP e01WgBG5xxjMztrAaE75i1RHJQ== -----END CERTIFICATE-----Generated at Fri Apr 17 18:32:26 2026 by rpki-client