$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft File: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json) Hash identifier: DjD4gIrvPxH1wKZadCP7JBLdvz7ZNnntKCLTzKq0T8o= Subject key identifier: 61:D2:D7:6F:D8:91:96:8E:54:D9:2C:AA:3C:9A:C6:94:7F:BE:28:DC Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E Certificate issuer: /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Certificate serial: 21AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft Manifest number: 21AD Signing time: Sat 18 Apr 2026 15:50:43 +0000 Manifest this update: Sat 18 Apr 2026 15:50:42 +0000 Manifest next update: Sat 25 Apr 2026 15:50:42 +0000 Files and hashes: 1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: tbEBPqLXiLyNG5f+kq1xh4dFrb0JeeIDtym82+bbAw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 15:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8621 (0x21ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B936, serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E Validity Not Before: Apr 18 15:50:42 2026 GMT Not After : Apr 25 15:50:42 2026 GMT Subject: CN=69e3a852-1769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:46:35:5f:53:2c:4f:3a:70:58:fc:00:f6:89: a0:83:f2:04:bc:32:0b:82:67:ea:d9:a7:ba:0b:ac: 2d:90:42:52:64:56:23:28:b4:eb:8d:0c:5a:43:6f: 8b:59:b5:17:b0:1d:6d:a3:1b:63:ee:99:4c:5f:01: 01:9f:b6:72:92:30:69:e2:0d:cf:1e:f7:1c:94:b8: 67:69:26:8d:aa:a2:ca:4f:a3:2b:5c:7a:6e:77:bb: 7d:61:2f:6b:b4:34:74:87:0c:b1:d7:3f:f8:24:9d: b2:af:77:b6:ac:c1:ec:d1:dc:ab:89:b2:34:1b:00: ce:6b:11:a7:04:c7:35:50:44:85:c5:d8:74:c9:75: 00:42:15:a0:75:9d:6f:ac:88:da:3c:5c:74:e3:b0: ba:2b:c1:e9:fd:81:3e:eb:47:92:21:76:4a:7b:13: 6c:bc:ac:ce:6f:2f:a0:30:19:04:39:08:91:45:1f: 70:2e:73:b7:a3:d3:dc:7b:63:88:8d:fd:99:47:cb: 23:24:d1:6d:be:7b:fd:9f:e9:29:83:bc:44:75:67: ae:40:36:a9:b2:9b:f2:c6:df:3b:cd:e5:a0:de:4e: 1e:c2:00:19:11:09:05:33:b0:bd:df:b6:b4:c6:27: 94:7c:6a:3b:fe:d2:36:7c:4b:df:0a:24:72:66:ad: 55:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D2:D7:6F:D8:91:96:8E:54:D9:2C:AA:3C:9A:C6:94:7F:BE:28:DC X509v3 Authority Key Identifier: keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:4a:a9:fc:23:9b:d1:58:c5:9d:29:8f:14:53:7c:af:32:27: b1:2d:17:e9:a7:49:b8:5d:41:63:a0:e3:3b:d3:8f:64:1c:3e: 19:87:6b:13:69:52:e9:57:d1:8d:ae:13:38:38:46:9b:ed:f3: ce:fe:12:3c:83:00:97:21:1a:4f:ff:61:86:28:dd:3d:13:71: 7b:b2:e9:02:80:78:37:70:b7:a7:26:f3:19:cc:32:cf:fc:a0: 2e:3c:7b:a0:46:fa:42:52:e6:84:d2:6d:2d:95:4c:76:76:7c: 2b:21:51:18:1b:95:56:9b:66:a9:0f:81:de:8b:c3:99:50:a2: 69:e9:de:d7:8e:96:31:0f:71:7c:ff:02:d8:de:45:3c:1c:0f: f2:dc:65:7e:da:22:27:78:bd:a6:96:5b:47:20:c2:7d:3c:f0: 82:c5:8f:9c:07:9b:93:ee:b1:8f:18:6c:13:06:2c:6c:08:82: 91:dd:48:2b:e6:a6:79:a2:c0:4b:ec:4c:4a:15:f0:bc:b2:8d: 5a:e4:01:d4:80:d7:43:80:72:c3:d6:ba:86:6a:01:3f:8a:9e: 28:1d:18:ad:77:bf:54:e3:64:07:b4:bd:ef:15:9b:17:a9:10: 91:cb:41:36:5e:32:f4:dd:2a:b5:37:6f:85:5f:a4:dd:54:4f: f7:fb:0d:0c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICIa0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz MzJEOTU1NUUwHhcNMjYwNDE4MTU1MDQyWhcNMjYwNDI1MTU1MDQyWjAYMRYwFAYD VQQDEw02OWUzYTg1Mi0xNzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+EY1X1MsTzpwWPwA9omgg/IEvDILgmfq2ae6C6wtkEJSZFYjKLTrjQxaQ2+L WbUXsB1toxtj7plMXwEBn7ZykjBp4g3PHvcclLhnaSaNqqLKT6MrXHpud7t9YS9r tDR0hwyx1z/4JJ2yr3e2rMHs0dyribI0GwDOaxGnBMc1UESFxdh0yXUAQhWgdZ1v rIjaPFx047C6K8Hp/YE+60eSIXZKexNsvKzOby+gMBkEOQiRRR9wLnO3o9Pce2OI jf2ZR8sjJNFtvnv9n+kpg7xEdWeuQDapspvyxt87zeWg3k4ewgAZEQkFM7C937a0 xieUfGo7/tI2fEvfCiRyZq1VEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGHS12/Y kZaOVNksqjyaxpR/vijcMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK OFkwZmt3LWpNdFl6TFpWVjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdEqp/COb0VjFnSmPFFN8rzInsS0X6adJuF1BY6DjO9OPZBw+GYdrE2lS6VfR ja4TODhGm+3zzv4SPIMAlyEaT/9hhijdPRNxe7LpAoB4N3C3pybzGcwyz/ygLjx7 oEb6QlLmhNJtLZVMdnZ8KyFRGBuVVptmqQ+B3ovDmVCiaene146WMQ9xfP8C2N5F PBwP8txlftoiJ3i9ppZbRyDCfTzwgsWPnAebk+6xjxhsEwYsbAiCkd1IK+ameaLA S+xMShXwvLKNWuQB1IDXQ4Byw9a6hmoBP4qeKB0YrXe/VONkB7S97xWbF6kQkctB Nl4y9N0qtTdvhV+k3VRP9/sNDA== -----END CERTIFICATE-----Generated at Sun Apr 19 11:39:21 2026 by rpki-client