$ rpki-client -vvf rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft File: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft (raw, json) Hash identifier: z2jV545HAQ34btB9hNCGgjjJO5eIBNOtxsXXw6UAxQM= Subject key identifier: 8D:19:B9:DE:D4:07:08:9F:20:22:7B:91:FA:47:06:DE:E7:69:43:31 Authority key identifier: D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 Certificate issuer: /CN=A918E308/serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Certificate serial: 0D18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft Manifest number: 0CFA Signing time: Thu 16 Apr 2026 18:13:55 +0000 Manifest this update: Thu 16 Apr 2026 18:13:54 +0000 Manifest next update: Thu 23 Apr 2026 18:13:54 +0000 Files and hashes: 1: 0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl (hash: SP+WdYwbqTGW/ojk36ruyDxx+Ekug4+y6QWVaF9Satc=) 2: B430443A324211EFB14FB614C4F9AE02.roa (hash: AzFqYClBcneb2uXCI+dnrAdcY2giqvGMeQmemVnunHc=) 3: FB170730324211EFA9B5F949C4F9AE02.roa (hash: HVckhDYyXfabBBTw5QKnMftqCm/CyMEWw6vhsSVFD98=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3352 (0xd18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E308, serialNumber=D2536918C18B6BC2D91042808BCADFCDB7347531 Validity Not Before: Apr 16 18:13:54 2026 GMT Not After : Apr 23 18:13:54 2026 GMT Subject: CN=69e126e2-4968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:72:cc:86:2d:06:48:03:2c:cd:89:a9:ce: 90:fe:66:92:1b:ee:0f:33:8b:07:50:aa:b4:56:db: 04:a0:88:65:4a:1a:a9:36:28:0d:f6:0a:81:d4:73: 5b:c8:f4:e9:21:44:6a:0e:58:ee:96:d2:09:cd:f5: 12:6a:bb:71:5d:a2:c3:79:75:d2:66:7a:30:37:c4: c6:95:e5:ba:d9:65:ed:e1:b5:df:3c:5f:4a:1b:6c: 87:2d:a8:b8:2e:cb:2a:ff:0b:98:64:05:2e:9c:87: 78:24:7f:42:8a:99:a8:c7:6c:bb:1e:c1:78:e6:bf: b5:29:20:41:08:ab:92:81:cf:bf:86:ce:28:ca:2f: 0c:a6:96:16:75:75:cf:4f:87:cb:98:f8:df:b9:c4: 92:0e:85:4c:de:ba:ec:48:5e:18:14:b7:30:26:54: ee:2d:79:40:81:ac:b5:c2:64:57:4d:98:ff:4c:74: 33:72:3d:c2:63:a7:63:18:3a:ce:ee:ca:81:0c:b8: 0a:1a:e0:f1:c7:65:78:08:ef:09:64:41:30:14:12: 32:6c:f6:b6:22:1e:15:f2:6e:07:64:2a:ef:bf:65: 6e:00:5c:c6:1f:4b:b1:e8:c4:56:17:64:4f:75:06: ca:5b:a6:df:7f:66:6c:c8:c1:63:fb:0e:c2:d4:03: fb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:19:B9:DE:D4:07:08:9F:20:22:7B:91:FA:47:06:DE:E7:69:43:31 X509v3 Authority Key Identifier: keyid:D2:53:69:18:C1:8B:6B:C2:D9:10:42:80:8B:CA:DF:CD:B7:34:75:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0lNpGMGLa8LZEEKAi8rfzbc0dTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E308/C77F7A1206D511EA8A897F4FC4F9AE02/0lNpGMGLa8LZEEKAi8rfzbc0dTE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:f7:5b:93:06:74:e5:36:96:2b:89:fe:a5:9c:f0:e2:e8: ef:41:34:d9:46:ec:bb:99:ad:d9:e5:7f:21:3e:75:b7:b1:8e: a2:b2:a6:1b:d0:d0:32:cc:4d:e7:4c:8d:b3:71:b5:08:55:ae: 45:00:ff:fd:f9:bc:ba:63:9f:0b:45:59:6a:1c:f2:94:a0:2e: fb:07:25:94:6d:4a:a7:d3:34:e6:90:12:78:10:fc:82:59:e6: 28:3c:b2:26:e7:53:31:89:15:de:46:43:15:82:61:1f:82:f3: ff:8a:f2:47:f0:28:22:9f:bd:cc:44:e4:6d:9b:eb:7d:ab:72: e3:62:ab:11:07:c7:3e:2a:5e:52:30:e2:c6:09:f2:68:06:95: 38:1e:66:44:44:57:06:76:5a:79:d9:9d:8f:a2:6f:3d:8b:1d: 4d:86:d8:ae:7e:2f:86:32:f1:54:d9:c9:be:63:98:e6:7b:90: bd:c3:92:1a:ba:2f:6f:36:8a:86:00:2c:b6:aa:7c:cd:3c:ae: 11:ef:63:11:16:3c:f4:00:60:0b:e3:4f:14:a9:2d:1a:b8:30: 5f:b9:42:1d:08:2e:e6:ae:60:ee:cc:24:5c:8f:33:16:c8:c2: e8:e8:af:1e:d1:15:0c:a1:db:3f:1e:ed:9e:20:5e:b9:67:4e: 21:05:02:d6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUzMDgxMTAvBgNVBAUTKEQyNTM2OTE4QzE4QjZCQzJEOTEwNDI4MDhCQ0FERkNE QjczNDc1MzEwHhcNMjYwNDE2MTgxMzU0WhcNMjYwNDIzMTgxMzU0WjAYMRYwFAYD VQQDEw02OWUxMjZlMi00OTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmKJyzIYtBkgDLM2Jqc6Q/maSG+4PM4sHUKq0VtsEoIhlShqpNigN9gqB1HNb yPTpIURqDljultIJzfUSartxXaLDeXXSZnowN8TGleW62WXt4bXfPF9KG2yHLai4 Lssq/wuYZAUunId4JH9Cipmox2y7HsF45r+1KSBBCKuSgc+/hs4oyi8MppYWdXXP T4fLmPjfucSSDoVM3rrsSF4YFLcwJlTuLXlAgay1wmRXTZj/THQzcj3CY6djGDrO 7sqBDLgKGuDxx2V4CO8JZEEwFBIybPa2Ih4V8m4HZCrvv2VuAFzGH0ux6MRWF2RP dQbKW6bff2ZsyMFj+w7C1AP7cQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI0Zud7U BwifICJ7kfpHBt7naUMxMB8GA1UdIwQYMBaAFNJTaRjBi2vC2RBCgIvK3823NHUx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTMwOC9DNzdGN0ExMjA2 RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4TFpFRUtBaThyZnpiYzBk VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBsTnBHTUdMYThMWkVFS0FpOHJmemJjMGRURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTMwOC9DNzdGN0ExMjA2RDUxMUVBOEE4OTdGNEZDNEY5QUUwMi8wbE5wR01HTGE4 TFpFRUtBaThyZnpiYzBkVEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtt/3W5MGdOU2liuJ/qWc8OLo70E02Ubsu5mt2eV/IT51t7GOorKmG9DQMsxN 50yNs3G1CFWuRQD//fm8umOfC0VZahzylKAu+wcllG1Kp9M05pASeBD8glnmKDyy JudTMYkV3kZDFYJhH4Lz/4ryR/AoIp+9zETkbZvrfaty42KrEQfHPipeUjDixgny aAaVOB5mRERXBnZaedmdj6JvPYsdTYbYrn4vhjLxVNnJvmOY5nuQvcOSGrovbzaK hgAstqp8zTyuEe9jERY89ABgC+NPFKktGrgwX7lCHQgu5q5g7swkXI8zFsjC6Oiv HtEVDKHbPx7tniBeuWdOIQUC1g== -----END CERTIFICATE-----Generated at Fri Apr 17 10:36:44 2026 by rpki-client