$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: PXCrg04Y2WTeCK3avvHpahlU7zqBeCtnbXfJUJpPZJw= Subject key identifier: 8B:F9:B7:6B:D8:8C:F3:EE:51:70:DD:C5:CC:A9:F4:67:34:9C:FA:54 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 01FB Signing time: Fri 17 Apr 2026 02:53:35 +0000 Manifest this update: Fri 17 Apr 2026 02:53:34 +0000 Manifest next update: Fri 24 Apr 2026 02:53:34 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: VrXgUlLuuLaIfVALahMw0v2mB4jxyZXo8dSjffkSTRk=) 2: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: Jy8XOiA0kN27oXJXLhTzYwQbS1Mw45QfiLEVZ4JMgEM=) 3: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: +VGb3DLO/rVhkz02/GwA3CkCqPb4QLi9bk86uPT+tR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Apr 17 02:53:34 2026 GMT Not After : Apr 24 02:53:34 2026 GMT Subject: CN=69e1a0af-7f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:4f:a4:9a:a6:d0:09:0b:ec:a8:2f:7d:7b: 9a:1b:67:30:ee:b9:0e:6a:d9:c0:45:35:d6:f1:2b: 26:d4:96:3d:8b:65:3e:0c:7a:3d:43:c1:1a:0e:cb: 93:ca:ea:8b:94:50:66:3e:88:88:74:29:ed:9e:5a: 43:e8:0a:4a:3b:e7:b4:11:ed:bb:39:4e:3a:a2:b7: fe:9f:c3:3a:2a:20:a2:94:d7:98:86:34:0a:c6:19: 3c:e6:42:90:67:6e:f7:7c:5e:69:2d:b2:66:6d:56: d6:96:b7:17:39:08:f5:46:1c:0a:a3:6a:19:ed:51: 75:a4:97:c8:84:1c:0d:ba:9d:c2:c6:65:f5:2d:8b: 65:ed:25:58:14:d7:1b:dc:5c:19:2f:37:cd:3d:48: 6c:f9:e3:0f:f4:4e:e0:58:4e:6c:20:13:af:f1:a2: bc:69:21:a7:39:ad:0a:81:bf:26:62:a6:e9:b0:7e: ab:61:ab:5f:50:42:ce:77:60:c8:24:4f:00:5b:f7: 82:10:b8:bb:da:43:86:98:db:4a:2a:a5:18:87:03: 45:8a:00:4a:09:b6:f8:0b:04:89:ca:d2:a1:2e:ed: 8c:b5:f3:dd:a8:3b:50:04:ee:d4:39:a2:23:4d:bf: 72:ba:35:a9:cf:94:f7:a5:fb:53:68:da:25:fd:aa: 17:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F9:B7:6B:D8:8C:F3:EE:51:70:DD:C5:CC:A9:F4:67:34:9C:FA:54 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:f6:b2:d7:c4:c5:90:2d:19:40:44:0d:c6:94:48:55:cc:06: 71:77:3c:1f:ff:f5:14:c1:47:af:17:37:cc:34:94:cc:34:fb: 9b:05:e6:fa:09:3d:d3:ca:b8:18:bc:fd:cf:1f:f9:c8:34:d1: 71:c4:9d:cc:70:ff:03:ef:d1:17:ac:e7:0f:a4:ae:2e:5b:24: 1b:ad:df:3b:b5:e7:2a:29:ae:57:02:9d:1e:cc:5f:da:46:48: e7:76:49:3a:c1:14:b1:41:be:f1:4b:97:15:17:a7:67:79:8d: 43:f7:79:08:01:49:d2:e1:18:18:63:5d:47:fe:97:f7:c4:00: 68:4b:97:c8:4e:58:1f:e4:b5:3b:f3:a2:7e:c4:7c:d4:f8:34: 9b:70:37:11:c6:59:8f:4f:ae:f2:a2:54:3f:1e:d3:e9:02:4f: de:09:6d:2d:1a:81:b5:68:7f:2f:45:a1:de:ec:dd:aa:19:cb: d8:e5:a2:96:49:e2:0a:ab:0c:f4:6d:a6:3f:1b:01:00:77:c8: b4:cd:9c:6a:ca:ec:3f:a8:57:59:89:1f:02:54:3f:eb:be:ae: 60:64:6f:7a:51:f6:42:19:d6:60:ff:b2:f7:d1:64:3a:a1:ac: 23:c5:3b:9f:ff:bb:19:26:e8:30:47:f2:22:a6:26:81:81:cd: c2:6f:cf:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwNDE3MDI1MzM0WhcNMjYwNDI0MDI1MzM0WjAYMRYwFAYD VQQDEw02OWUxYTBhZi03ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxddPpJqm0AkL7KgvfXuaG2cw7rkOatnARTXW8Ssm1JY9i2U+DHo9Q8EaDsuT yuqLlFBmPoiIdCntnlpD6ApKO+e0Ee27OU46orf+n8M6KiCilNeYhjQKxhk85kKQ Z273fF5pLbJmbVbWlrcXOQj1RhwKo2oZ7VF1pJfIhBwNup3CxmX1LYtl7SVYFNcb 3FwZLzfNPUhs+eMP9E7gWE5sIBOv8aK8aSGnOa0Kgb8mYqbpsH6rYatfUELOd2DI JE8AW/eCELi72kOGmNtKKqUYhwNFigBKCbb4CwSJytKhLu2MtfPdqDtQBO7UOaIj Tb9yujWpz5T3pftTaNol/aoXxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIv5t2vY jPPuUXDdxcyp9Gc0nPpUMB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASfay18TFkC0ZQEQNxpRIVcwGcXc8H//1FMFHrxc3zDSUzDT7mwXm+gk908q4 GLz9zx/5yDTRccSdzHD/A+/RF6znD6SuLlskG63fO7XnKimuVwKdHsxf2kZI53ZJ OsEUsUG+8UuXFRenZ3mNQ/d5CAFJ0uEYGGNdR/6X98QAaEuXyE5YH+S1O/OifsR8 1Pg0m3A3EcZZj0+u8qJUPx7T6QJP3gltLRqBtWh/L0Wh3uzdqhnL2OWilkniCqsM 9G2mPxsBAHfItM2casrsP6hXWYkfAlQ/676uYGRvelH2QhnWYP+y99FkOqGsI8U7 n/+7GSboMEfyIqYmgYHNwm/Pfw== -----END CERTIFICATE-----Generated at Fri Apr 17 13:44:19 2026 by rpki-client