$ rpki-client -vvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft File: BmIVgepjVqm4tbC9s26io0KBciU.mft (raw, json) Hash identifier: am0xBqH3gTIKxvuxCvYfNw1U7zFJ878rN+mA8P7o0nQ= Subject key identifier: FB:4A:E7:F5:CD:6C:BE:E7:5F:C7:15:19:8C:D7:B4:98:D5:6D:E2:FB Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 Certificate issuer: /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft Manifest number: 1A Signing time: Fri 17 Apr 2026 08:39:12 +0000 Manifest this update: Fri 17 Apr 2026 08:39:11 +0000 Manifest next update: Fri 24 Apr 2026 08:39:11 +0000 Files and hashes: 1: BmIVgepjVqm4tbC9s26io0KBciU.crl (hash: RX1zZWiLeu64ZEMkzMWv4x8Zn8MH2PG7+F4/muc0Rjg=) 2: 3829F376174D11F19A004491173D8C67.roa (hash: 0k0rXsYRdBQmrsruCwfnV2JmIIADeibhHxkfkqZPiGk=) 3: 0EEDB772174D11F193D7AA7E173D8C67.roa (hash: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:39:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Validity Not Before: Apr 17 08:39:11 2026 GMT Not After : Apr 24 08:39:11 2026 GMT Subject: CN=69e1f1b0-4528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a7:4c:0a:a4:e9:f2:a5:4e:b5:11:08:1e:ed: 7b:a4:36:07:c5:11:c4:0c:89:17:32:6e:ee:bb:89: 56:4c:1f:21:28:78:22:25:0e:9b:c2:f1:19:24:15: 42:3a:f2:53:4e:a6:ac:24:ab:9b:19:70:2a:64:7f: 70:85:e7:8b:4c:51:d2:6f:2e:cb:94:23:f6:8f:be: ac:62:d9:d8:33:80:8b:45:1c:ad:db:bb:4c:b3:23: ed:da:5f:7e:22:e9:6c:e4:b5:42:4e:76:11:d6:ef: d8:1b:c0:c8:4f:51:84:51:48:0f:a6:1e:d1:b3:7e: 5b:91:ea:af:9f:33:9c:cf:03:a8:fe:b4:7d:45:9d: 22:9d:4c:7d:05:40:ad:ec:ed:ed:c2:c4:b2:28:7d: db:54:13:96:89:64:3a:91:a4:09:5f:b9:ea:7a:64: eb:c7:52:e9:ef:36:bb:f4:cf:06:67:ed:e0:07:78: 79:74:49:8c:1a:14:3a:eb:07:7a:ee:fa:b4:dd:c4: 14:dc:a0:6c:f4:8b:9b:1b:25:97:eb:8e:ca:d3:91: 61:d6:2a:4c:5e:56:ea:6c:6e:b4:0b:1d:47:27:2a: b5:25:a0:6f:c8:c3:41:c2:f7:73:4b:a4:68:37:24: 91:ae:4e:1a:50:bc:64:79:6b:d9:c9:29:bf:ff:3e: 21:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:E7:F5:CD:6C:BE:E7:5F:C7:15:19:8C:D7:B4:98:D5:6D:E2:FB X509v3 Authority Key Identifier: keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:64:10:04:0c:f1:63:98:fa:7d:f9:c6:42:97:13:64:76:08: 19:b7:56:84:ae:a2:cb:45:63:a0:af:fd:20:0c:ad:f9:ab:a2: fe:62:b6:87:31:86:79:1e:43:a3:84:68:e6:7b:f2:47:bb:8b: 93:06:12:54:7b:31:27:d1:4f:5f:66:8d:79:6f:8c:9e:7e:31: 0c:2a:35:f6:e4:a9:ae:ed:48:07:48:a2:72:64:b3:95:55:ee: 96:fb:c7:62:fd:3e:e7:a3:6a:d4:5b:04:75:bb:6a:81:c5:af: dc:13:bf:5e:60:3c:50:3a:b6:a4:a1:01:72:e9:8b:fa:f8:d3: 24:05:9a:13:3b:f9:64:a0:3c:f3:3c:37:ea:85:27:52:2a:88: 73:51:c4:00:7e:eb:9b:8e:04:43:6b:68:40:91:ce:e7:6e:67: 75:db:3b:5d:46:b7:02:65:5c:99:38:5e:9a:dc:0f:05:d2:14: f3:cb:0c:19:a3:b3:86:50:22:51:5f:1a:c5:09:a0:74:78:f4: c9:a0:7e:96:c6:18:6b:cb:49:3d:ea:10:61:58:54:01:9b:d0: bf:21:ea:16:2f:98:19:75:c4:4d:7f:f3:39:6c:03:73:6f:5e: 1f:61:1d:c3:a3:67:ed:bb:c0:22:7c:ba:57:36:ce:32:97:6a: a7:be:35:d8 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDlFODExMC8GA1UEBRMoMDY2MjE1ODFFQTYzNTZBOUI4QjVCMEJEQjM2RUEyQTM0 MjgxNzIyNTAeFw0yNjA0MTcwODM5MTFaFw0yNjA0MjQwODM5MTFaMBgxFjAUBgNV BAMTDTY5ZTFmMWIwLTQ1MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRp0wKpOnypU61EQge7XukNgfFEcQMiRcybu67iVZMHyEoeCIlDpvC8RkkFUI6 8lNOpqwkq5sZcCpkf3CF54tMUdJvLsuUI/aPvqxi2dgzgItFHK3bu0yzI+3aX34i 6WzktUJOdhHW79gbwMhPUYRRSA+mHtGzfluR6q+fM5zPA6j+tH1FnSKdTH0FQK3s 7e3CxLIofdtUE5aJZDqRpAlfuep6ZOvHUunvNrv0zwZn7eAHeHl0SYwaFDrrB3ru +rTdxBTcoGz0i5sbJZfrjsrTkWHWKkxeVupsbrQLHUcnKrUloG/Iw0HC93NLpGg3 JJGuThpQvGR5a9nJKb//PiHbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+0rn9c1s vudfxxUZjNe0mNVt4vswHwYDVR0jBBgwFoAUBmIVgepjVqm4tbC9s26io0KBciUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEOUU4L0RBQTQ3N0U0MTc0 QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFtNHRiQzlzMjZpbzBLQmNp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm1JVmdlcGpWcW00dGJDOXMyNmlvMEtCY2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE OUU4L0RBQTQ3N0U0MTc0QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFt NHRiQzlzMjZpbzBLQmNpVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAuZBAEDPFjmPp9+cZClxNkdggZt1aErqLLRWOgr/0gDK35q6L+YraHMYZ5HkOj hGjme/JHu4uTBhJUezEn0U9fZo15b4yefjEMKjX25Kmu7UgHSKJyZLOVVe6W+8di /T7no2rUWwR1u2qBxa/cE79eYDxQOrakoQFy6Yv6+NMkBZoTO/lkoDzzPDfqhSdS KohzUcQAfuubjgRDa2hAkc7nbmd12ztdRrcCZVyZOF6a3A8F0hTzywwZo7OGUCJR XxrFCaB0ePTJoH6Wxhhry0k96hBhWFQBm9C/IeoWL5gZdcRNf/M5bANzb14fYR3D o2ftu8AifLpXNs4yl2qnvjXY -----END CERTIFICATE-----Generated at Fri Apr 17 18:49:53 2026 by rpki-client