$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json) Hash identifier: aoJVHBJ4Rhcw2Jsv3zYhXrjP6LfB489OhyXhlnR2v2g= Subject key identifier: 7B:3D:2E:9E:A0:FF:F6:3A:63:A7:38:DF:1E:C9:71:89:32:7B:5E:87 Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 046A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft Manifest number: 0454 Signing time: Fri 17 Apr 2026 00:06:58 +0000 Manifest this update: Fri 17 Apr 2026 00:06:57 +0000 Manifest next update: Fri 24 Apr 2026 00:06:57 +0000 Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: 6kmo7iL6xhOGhHK5aYTUWWPpVRjCvrxSM8mBk5uEhOA=) 2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=) 3: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=) 4: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1130 (0x46a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Apr 17 00:06:57 2026 GMT Not After : Apr 24 00:06:57 2026 GMT Subject: CN=69e179a2-b199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:f8:d8:02:19:0e:4f:3c:06:fd:35:4f:bb: a4:51:81:a5:c4:84:ed:a8:53:df:f4:d5:0e:59:41: d7:65:90:1e:b4:12:b3:f6:3b:43:41:c4:38:c1:1f: 52:5f:59:57:6c:99:dd:48:56:c0:e0:2f:e8:af:cc: b4:5a:7d:02:8e:4b:2f:3c:0b:92:44:0c:30:3a:8c: 3c:4c:eb:a5:49:57:28:28:2f:ca:58:7f:d8:3b:b6: 7b:4b:58:c6:0f:be:ba:54:1d:f2:82:44:b7:c8:7f: 62:06:f6:f3:86:83:f5:63:8b:ea:34:98:e7:c2:aa: 48:e6:5a:18:93:8e:c5:61:7f:78:6b:ab:de:f9:b4: 6c:6e:3e:73:c0:0a:ad:60:b6:02:92:3b:3e:d0:59: 42:d0:58:38:26:28:f9:47:9a:58:ae:1c:24:aa:29: f1:7b:36:2e:62:30:c6:17:c3:7b:97:9c:eb:04:d0: 1d:9b:cc:a9:2a:82:58:cf:4b:ce:47:39:8f:8e:45: f2:60:2e:1c:f3:d7:63:a0:f2:67:b3:f4:8c:16:73: b4:03:e5:5a:23:d0:38:fa:ca:dd:82:7d:1e:f2:41: 4b:5d:d3:25:58:7f:b7:f4:c7:2f:7d:39:2b:6d:00: 97:83:81:96:f9:06:19:d5:e8:20:be:d2:94:67:68: 91:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3D:2E:9E:A0:FF:F6:3A:63:A7:38:DF:1E:C9:71:89:32:7B:5E:87 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:7b:f9:2b:07:7b:e9:75:93:3c:73:03:6b:d7:2c:4f:47:ea: 0e:3c:f8:91:7c:97:96:c5:a1:7a:e4:a8:f4:72:9c:63:46:a5: 2a:da:ee:c2:ce:5f:cf:d7:f9:6a:f3:16:9e:46:b0:27:fb:9f: 5d:3d:b1:02:a9:dc:f5:80:fb:64:14:d1:f0:f6:d1:93:6f:f1: 20:c8:fa:4f:22:fe:48:4c:74:76:b0:2c:b9:f2:7b:b3:6f:71: 47:94:25:5e:74:39:ad:bc:4b:36:31:bb:c3:9b:84:cc:78:f3: 2c:de:d3:a4:e6:3f:44:1d:da:94:7b:35:c7:af:6b:f5:e8:5e: f7:37:83:93:65:af:b5:ca:2f:26:38:8c:f0:6b:30:8d:62:14: 57:ff:fc:6e:8f:34:83:7e:7c:33:9e:a8:66:c8:d8:99:e8:b8: 36:ec:ba:5e:80:91:80:21:24:b2:5b:3f:91:71:85:09:b8:f6: 57:10:6d:21:35:61:9a:f2:c1:63:80:8b:3a:cb:60:65:21:51: e6:07:cc:6a:29:ce:8a:51:f6:08:90:12:af:2d:77:3c:c4:dc: 03:5a:37:ac:0f:47:ea:09:fe:a4:60:85:1a:dd:ca:4a:2f:9f: 35:54:1f:cf:3c:75:e2:ba:88:26:a2:14:7b:fe:cc:c0:f9:69: 47:a1:5e:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjYwNDE3MDAwNjU3WhcNMjYwNDI0MDAwNjU3WjAYMRYwFAYD VQQDEw02OWUxNzlhMi1iMTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bv42AIZDk88Bv01T7ukUYGlxITtqFPf9NUOWUHXZZAetBKz9jtDQcQ4wR9S X1lXbJndSFbA4C/or8y0Wn0CjksvPAuSRAwwOow8TOulSVcoKC/KWH/YO7Z7S1jG D766VB3ygkS3yH9iBvbzhoP1Y4vqNJjnwqpI5loYk47FYX94a6ve+bRsbj5zwAqt YLYCkjs+0FlC0Fg4Jij5R5pYrhwkqinxezYuYjDGF8N7l5zrBNAdm8ypKoJYz0vO RzmPjkXyYC4c89djoPJns/SMFnO0A+VaI9A4+srdgn0e8kFLXdMlWH+39McvfTkr bQCXg4GW+QYZ1eggvtKUZ2iRXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHs9Lp6g //Y6Y6c43x7JcYkye16HMB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD RzluSW5yUEV2dGdYN1ZhdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABHv5Kwd76XWTPHMDa9csT0fqDjz4kXyXlsWheuSo9HKcY0alKtruws5fz9f5 avMWnkawJ/ufXT2xAqnc9YD7ZBTR8PbRk2/xIMj6TyL+SEx0drAsufJ7s29xR5Ql XnQ5rbxLNjG7w5uEzHjzLN7TpOY/RB3alHs1x69r9ehe9zeDk2WvtcovJjiM8Gsw jWIUV//8bo80g358M56oZsjYmei4Nuy6XoCRgCEksls/kXGFCbj2VxBtITVhmvLB Y4CLOstgZSFR5gfMainOilH2CJASry13PMTcA1o3rA9H6gn+pGCFGt3KSi+fNVQf zzx14rqIJqIUe/7MwPlpR6Fe+g== -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:21 2026 by rpki-client