$ rpki-client -vvf rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft File: vXIUPbev9hPoLqKQtMnCv_qIvCY.mft (raw, json) Hash identifier: j+oa0gaLfJDngtv2GfH40Nw03kRpBRSJMfoo0vtgx7I= Subject key identifier: 87:C0:D6:E7:87:7A:37:E5:82:DA:64:F5:85:6E:8C:DD:BF:1A:DE:79 Authority key identifier: BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 Certificate issuer: /CN=A918C287/serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft Manifest number: 19 Signing time: Fri 17 Apr 2026 08:40:05 +0000 Manifest this update: Fri 17 Apr 2026 08:40:05 +0000 Manifest next update: Fri 24 Apr 2026 08:40:05 +0000 Files and hashes: 1: vXIUPbev9hPoLqKQtMnCv_qIvCY.crl (hash: WSxCTyaYAHdM0XFRpO4T+BCibtIyjEjXGdsG25effYE=) 2: A90EFDD2184E11F1A5F3D04C283D8C67.roa (hash: GF/l2SZwknV/YN0h9ka4JnIB7U28JEFxozdko/6I8BY=) 3: F5841C74184E11F187DD6055283D8C67.roa (hash: 1eCvlfrhwMJgBVBc2wUYU+P7lRMVeJM21k0aMFZwo+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C287, serialNumber=BD72143DB7AFF613E82EA290B4C9C2BFFA88BC26 Validity Not Before: Apr 17 08:40:05 2026 GMT Not After : Apr 24 08:40:05 2026 GMT Subject: CN=69e1f1e5-4b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:f3:ab:0e:7e:02:82:3e:26:88:5f:06:39: ae:de:b2:19:02:ed:d2:66:97:7b:83:4f:7b:81:b9: ae:75:b7:b8:95:e4:b4:a5:5c:69:db:d6:07:ba:8f: 09:b7:93:9d:33:69:c9:5a:83:fd:a4:cb:77:55:52: 05:69:98:6b:4e:10:9d:a0:96:22:96:bc:11:8d:df: e4:b9:9c:d9:38:06:db:8b:0c:3e:7d:c2:55:63:80: ee:71:2d:ff:56:c7:2e:df:4c:e1:83:3e:0c:61:2a: 86:df:fb:7e:e7:2e:ae:df:69:46:7f:ac:09:93:d7: f2:2e:3e:a1:6f:a5:ec:c3:fb:98:7a:90:51:34:03: 5d:47:f3:40:aa:0c:fa:81:b2:45:9d:22:e2:58:07: a8:cc:44:3b:36:75:76:88:84:64:e5:f1:b8:57:80: 00:3f:89:a0:cb:e4:08:68:72:32:94:8f:c7:9c:03: 5f:59:67:34:dc:6b:ae:49:09:24:66:64:67:2f:1d: 01:37:f0:4d:84:da:be:f5:63:c5:9c:ab:49:7b:0c: 82:80:6e:ff:6d:14:42:84:56:a0:a7:13:ef:0d:1c: 64:73:22:a2:be:6b:f4:6a:8a:e7:55:da:d5:e0:6f: 84:51:5c:3a:80:19:cb:bf:a1:4c:aa:ca:6d:e6:8e: 77:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:D6:E7:87:7A:37:E5:82:DA:64:F5:85:6E:8C:DD:BF:1A:DE:79 X509v3 Authority Key Identifier: keyid:BD:72:14:3D:B7:AF:F6:13:E8:2E:A2:90:B4:C9:C2:BF:FA:88:BC:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXIUPbev9hPoLqKQtMnCv_qIvCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C287/63027DF6184D11F1B2F9B42D283D8C67/vXIUPbev9hPoLqKQtMnCv_qIvCY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:d2:07:cd:94:fb:69:19:85:aa:e5:31:30:38:66:c6:5a:69: dd:c7:3a:56:f4:15:2f:48:07:b1:5c:b3:f2:72:53:fa:19:57: e5:21:43:11:d7:9b:35:9f:56:2d:31:23:37:a0:f8:a0:58:e2: 33:be:13:db:29:4e:c4:79:c8:81:f4:67:12:31:33:8b:be:5c: 87:f3:90:b8:a2:c3:2c:92:2a:f3:53:b5:b2:40:1b:86:73:e8: 21:3c:f9:ce:88:b3:97:6e:d9:b1:9c:90:69:a8:c1:bf:fb:77: 23:70:67:41:c6:4c:43:de:53:1c:46:d8:d0:dc:e7:00:b7:cc: e7:36:20:57:54:9b:0e:a8:ed:01:7f:dd:c2:18:e4:10:73:db: 20:eb:6d:9e:e3:83:d9:ad:f9:4a:ed:4c:38:7b:45:2c:18:ac: 98:97:c4:6b:61:71:ba:2a:fb:47:04:71:c9:93:b3:c5:3a:1c: d0:ce:09:ab:12:17:0c:ec:8f:c3:77:e5:77:1a:ec:ce:21:6c: fc:36:f5:8d:94:ef:91:ec:61:f8:52:8d:dc:36:cd:28:78:9a: 24:6c:a2:81:f2:17:70:fc:56:92:e2:dd:75:c0:a1:03:fe:f6: 88:ee:3e:0c:ac:06:7f:7d:7e:fd:fe:3e:c8:46:96:1b:9b:b8: 01:57:c3:f3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzI4NzExMC8GA1UEBRMoQkQ3MjE0M0RCN0FGRjYxM0U4MkVBMjkwQjRDOUMyQkZG QTg4QkMyNjAeFw0yNjA0MTcwODQwMDVaFw0yNjA0MjQwODQwMDVaMBgxFjAUBgNV BAMTDTY5ZTFmMWU1LTRiOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQP/OrDn4Cgj4miF8GOa7eshkC7dJml3uDT3uBua51t7iV5LSlXGnb1ge6jwm3 k50zaclag/2ky3dVUgVpmGtOEJ2gliKWvBGN3+S5nNk4BtuLDD59wlVjgO5xLf9W xy7fTOGDPgxhKobf+37nLq7faUZ/rAmT1/IuPqFvpezD+5h6kFE0A11H80CqDPqB skWdIuJYB6jMRDs2dXaIhGTl8bhXgAA/iaDL5AhocjKUj8ecA19ZZzTca65JCSRm ZGcvHQE38E2E2r71Y8Wcq0l7DIKAbv9tFEKEVqCnE+8NHGRzIqK+a/RqiudV2tXg b4RRXDqAGcu/oUyqym3mjnfjAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUh8DW54d6 N+WC2mT1hW6M3b8a3nkwHwYDVR0jBBgwFoAUvXIUPbev9hPoLqKQtMnCv/qIvCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMjg3LzYzMDI3REY2MTg0 RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQb0xxS1F0TW5Ddl9xSXZD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdlhJVVBiZXY5aFBvTHFLUXRNbkN2X3FJdkNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD Mjg3LzYzMDI3REY2MTg0RDExRjFCMkY5QjQyRDI4M0Q4QzY3L3ZYSVVQYmV2OWhQ b0xxS1F0TW5Ddl9xSXZDWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBX0gfNlPtpGYWq5TEwOGbGWmndxzpW9BUvSAexXLPyclP6GVflIUMR15s1n1Yt MSM3oPigWOIzvhPbKU7EeciB9GcSMTOLvlyH85C4osMskirzU7WyQBuGc+ghPPnO iLOXbtmxnJBpqMG/+3cjcGdBxkxD3lMcRtjQ3OcAt8znNiBXVJsOqO0Bf93CGOQQ c9sg622e44PZrflK7Uw4e0UsGKyYl8RrYXG6KvtHBHHJk7PFOhzQzgmrEhcM7I/D d+V3GuzOIWz8NvWNlO+R7GH4Uo3cNs0oeJokbKKB8hdw/FaS4t11wKED/vaI7j4M rAZ/fX79/j7IRpYbm7gBV8Pz -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:46 2026 by rpki-client