$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: 9uvO5HWku7eu3bN2YOtWZO2NFHgws3smF8m+mL5EzKU= Subject key identifier: EE:4F:B3:6C:7F:7B:8F:C3:FA:7B:74:F2:1D:1C:7A:6F:01:63:8D:C8 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 05D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 05A3 Signing time: Thu 16 Apr 2026 23:11:14 +0000 Manifest this update: Thu 16 Apr 2026 23:11:14 +0000 Manifest next update: Thu 23 Apr 2026 23:11:14 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: IH/79N8sOgRr8piZqQPp5aScZaheZSP1jggvzWFTyXs=) 2: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=) 3: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=) 4: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=) 5: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=) 6: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=) 7: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1496 (0x5d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Apr 16 23:11:14 2026 GMT Not After : Apr 23 23:11:14 2026 GMT Subject: CN=69e16c92-0268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:df:17:f4:31:da:09:ea:2f:20:81:d4:00: e6:aa:16:40:4f:73:5f:64:fc:a7:8d:35:53:68:9a: 97:4d:14:50:18:be:51:60:8a:bb:37:3d:64:20:a1: d6:33:cb:43:b1:17:7c:be:dc:9c:7d:67:13:1a:1a: b4:7f:29:77:80:bc:88:3b:cc:97:3d:75:17:b7:e2: c8:ed:79:07:b1:78:d4:1f:28:d3:f1:64:e5:40:51: de:3d:3f:8f:3f:60:ef:49:cc:6d:6f:6d:44:9c:a3: ca:df:24:96:ab:1b:db:a4:fe:c4:77:fc:e9:7a:1c: c7:ed:61:26:c0:dd:70:08:f1:5a:ec:34:1f:5a:9f: de:85:e5:0a:0a:38:f7:db:de:59:6b:9c:5d:3d:c9: e4:4f:4a:85:ba:99:aa:60:8f:63:46:8b:1b:9d:aa: fb:1d:c6:6a:fa:0d:45:7c:ff:5f:38:02:a6:b1:bc: 4c:2c:82:1a:01:66:4e:50:1a:a1:f9:da:33:ae:5d: 9f:32:d5:9c:ad:6e:68:d5:0c:43:13:1b:ae:69:82: 8c:41:eb:2b:05:04:93:44:b3:37:4a:52:7d:29:57: 2f:2e:fc:2a:1f:02:90:e1:72:2a:65:6a:b3:f6:69: a8:46:68:fc:79:e5:b7:76:e4:8d:12:e8:59:ca:63: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4F:B3:6C:7F:7B:8F:C3:FA:7B:74:F2:1D:1C:7A:6F:01:63:8D:C8 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ec:30:a7:15:48:5e:d6:d6:a7:50:a6:86:9e:9a:e4:d6:69: af:89:73:cd:e9:b2:08:ab:a1:40:f0:42:0a:4f:1c:2c:09:6e: 55:93:4d:28:62:91:6b:50:ae:09:69:d2:e1:16:1f:12:c9:bd: 3e:fb:87:6c:3d:43:e4:7f:5b:14:8a:2f:a4:5d:ea:3a:5b:1f: 23:6c:d9:20:f9:ad:cd:65:0a:5b:f2:16:a9:a1:1e:83:c1:72: f0:65:d3:b1:de:63:31:45:46:9a:f9:2e:0b:45:ee:e6:c1:d1: c8:2a:35:8f:1e:7d:2b:73:0a:33:af:36:04:35:e4:fe:a2:44: e7:36:34:67:0e:ae:1b:cd:c1:91:9e:4d:d3:a1:94:99:61:fd: 8d:11:a0:a0:19:49:41:db:64:f4:1a:6c:b6:1b:26:c3:e3:9d: a2:67:09:38:0a:38:f2:d1:6d:83:df:97:33:b7:7f:63:43:e7: 19:22:96:e3:7f:ac:7d:3f:36:24:c4:29:94:0e:b6:3f:af:0f: 2b:e6:71:5d:d6:e0:e6:83:6f:3a:3c:dc:34:5e:06:26:d7:ac: 3b:e8:ba:99:38:49:24:b0:52:be:d6:56:c2:be:b7:c4:ad:d5: db:ec:d3:6f:a3:d6:cd:ed:76:70:c4:ae:c1:e9:b6:2f:43:c1: 42:f6:4e:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwNDE2MjMxMTE0WhcNMjYwNDIzMjMxMTE0WjAYMRYwFAYD VQQDEw02OWUxNmM5Mi0wMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiQPfF/Qx2gnqLyCB1ADmqhZAT3NfZPynjTVTaJqXTRRQGL5RYIq7Nz1kIKHW M8tDsRd8vtycfWcTGhq0fyl3gLyIO8yXPXUXt+LI7XkHsXjUHyjT8WTlQFHePT+P P2DvScxtb21EnKPK3ySWqxvbpP7Ed/zpehzH7WEmwN1wCPFa7DQfWp/eheUKCjj3 295Za5xdPcnkT0qFupmqYI9jRosbnar7HcZq+g1FfP9fOAKmsbxMLIIaAWZOUBqh +dozrl2fMtWcrW5o1QxDExuuaYKMQesrBQSTRLM3SlJ9KVcvLvwqHwKQ4XIqZWqz 9mmoRmj8eeW3duSNEuhZymPaIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO5Ps2x/ e4/D+nt08h0cem8BY43IMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM+wwpxVIXtbWp1Cmhp6a5NZpr4lzzemyCKuhQPBCCk8cLAluVZNNKGKRa1Cu CWnS4RYfEsm9PvuHbD1D5H9bFIovpF3qOlsfI2zZIPmtzWUKW/IWqaEeg8Fy8GXT sd5jMUVGmvkuC0Xu5sHRyCo1jx59K3MKM682BDXk/qJE5zY0Zw6uG83BkZ5N06GU mWH9jRGgoBlJQdtk9Bpsthsmw+OdomcJOAo48tFtg9+XM7d/Y0PnGSKW43+sfT82 JMQplA62P68PK+ZxXdbg5oNvOjzcNF4GJtesO+i6mThJJLBSvtZWwr63xK3V2+zT b6PWze12cMSuwem2L0PBQvZOZA== -----END CERTIFICATE-----Generated at Fri Apr 17 11:19:28 2026 by rpki-client