$ rpki-client -vvf rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft File: tbP8PnYId-9PjY6EO91ozg9AVTA.mft (raw, json) Hash identifier: j7IyK6DH2dlLge/J7tvlrNahm2WFWAjcF4EdfkhLqWg= Subject key identifier: EB:16:7D:8C:67:56:C4:78:44:97:1B:80:F0:C1:AA:D5:B4:46:61:5E Authority key identifier: B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 Certificate issuer: /CN=A918F8B1/serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Certificate serial: 0EBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft Manifest number: 0E9F Signing time: Thu 16 Apr 2026 17:40:44 +0000 Manifest this update: Thu 16 Apr 2026 17:40:43 +0000 Manifest next update: Thu 23 Apr 2026 17:40:43 +0000 Files and hashes: 1: tbP8PnYId-9PjY6EO91ozg9AVTA.crl (hash: fDm761iolcuVNcpzA34DJrBWYPmTQA2jLs8E3Ilkvm0=) 2: AC549BBCD64C11F086D19BCFA9248E41.roa (hash: vvgoFlOLUvNpwk59Pxo0XUWthaxoz+rQXYsEb/78o8o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 17:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3771 (0xebb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F8B1, serialNumber=B5B3FC3E760877EF4F8D8E843BDD68CE0F405530 Validity Not Before: Apr 16 17:40:43 2026 GMT Not After : Apr 23 17:40:43 2026 GMT Subject: CN=69e11f1c-34e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9e:08:9a:23:a9:da:9d:8d:1d:80:6a:ab:48: 8c:9f:8e:10:95:e0:34:4b:82:46:3d:74:d7:28:63: 4f:aa:f9:34:5c:2e:7e:23:f7:3d:b8:90:d4:34:ec: d0:d6:2f:95:ef:3b:53:6b:8b:5e:da:6c:61:24:72: 38:9f:ad:c4:14:96:44:76:f5:6c:a1:c4:75:5d:42: 0f:37:c9:53:88:fc:eb:07:87:fa:98:e0:e0:ac:5b: 0b:0d:93:ec:58:2d:1b:cd:11:2e:ff:d6:dd:30:b0: 9d:ff:0c:e8:e3:8a:4e:6c:32:2c:4e:3a:7b:d8:ff: 7f:4c:44:24:d5:01:f3:ec:0e:3f:b6:c9:e6:4c:d5: 73:e2:fc:57:52:a5:f1:c9:c8:3b:e1:d0:56:87:20: 2c:aa:91:bf:05:d5:98:9f:b3:28:f9:10:91:5f:43: 64:2f:63:5e:b0:3b:5e:1f:55:b8:c4:cc:b5:68:6f: 17:d3:c7:56:e0:98:63:30:b7:23:e7:1a:c8:24:70: e7:79:a6:be:e5:25:7b:d1:e0:ec:61:0f:d4:c7:c3: ae:72:3b:80:58:44:3a:e2:7a:e1:c5:6a:f4:11:82: 05:db:4d:ee:39:54:9d:8d:6d:46:c7:41:cb:2f:f9: 1a:42:c8:fd:dc:63:30:0f:47:a8:97:0a:c9:58:6b: 83:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:16:7D:8C:67:56:C4:78:44:97:1B:80:F0:C1:AA:D5:B4:46:61:5E X509v3 Authority Key Identifier: keyid:B5:B3:FC:3E:76:08:77:EF:4F:8D:8E:84:3B:DD:68:CE:0F:40:55:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tbP8PnYId-9PjY6EO91ozg9AVTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F8B1/7D54A0CAB58611E9AA5F4D65C4F9AE02/tbP8PnYId-9PjY6EO91ozg9AVTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:df:c9:da:74:fa:69:30:e0:aa:99:c9:ba:bc:06:d6:38:13: a9:59:96:18:bd:d0:01:9e:43:5c:98:a5:56:d3:85:1a:af:56: 26:3d:09:42:bf:f0:a8:03:be:b4:fa:ad:76:57:37:62:5b:9e: 91:33:b4:80:04:82:b7:49:94:21:84:2e:f1:33:a4:7b:af:fd: 8f:67:77:21:cb:77:06:a3:20:39:32:9d:0a:3b:c3:bd:ad:e1: 4a:7c:d4:be:d1:25:2b:21:48:ff:2c:c5:30:2d:43:d6:e2:f4: 11:ef:fc:dc:10:1e:ee:03:90:ca:98:27:ae:d0:04:02:3a:60: 30:58:09:be:17:fc:f0:36:50:73:91:2c:8c:f5:54:5a:f5:44: a5:cf:c9:49:98:b3:ba:a0:3b:dd:05:6c:2c:cb:73:9a:e7:c8: 44:a1:01:cb:4b:de:6f:23:2e:78:11:33:af:f6:80:df:48:53: 24:04:73:10:3d:94:69:36:53:10:fd:d8:6f:b8:82:84:53:f1: 52:1a:b8:61:ed:3d:f6:f5:5b:45:d3:cd:4c:2a:9f:c6:6f:82: f8:df:52:25:81:5e:6c:8f:18:c1:e0:57:32:07:c9:72:26:06: d0:cb:73:41:5f:90:c1:32:29:a5:f8:16:44:06:f3:65:21:9f: ed:3f:6a:22 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4QjExMTAvBgNVBAUTKEI1QjNGQzNFNzYwODc3RUY0RjhEOEU4NDNCREQ2OENF MEY0MDU1MzAwHhcNMjYwNDE2MTc0MDQzWhcNMjYwNDIzMTc0MDQzWjAYMRYwFAYD VQQDEw02OWUxMWYxYy0zNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZ4ImiOp2p2NHYBqq0iMn44QleA0S4JGPXTXKGNPqvk0XC5+I/c9uJDUNOzQ 1i+V7ztTa4te2mxhJHI4n63EFJZEdvVsocR1XUIPN8lTiPzrB4f6mODgrFsLDZPs WC0bzREu/9bdMLCd/wzo44pObDIsTjp72P9/TEQk1QHz7A4/tsnmTNVz4vxXUqXx ycg74dBWhyAsqpG/BdWYn7Mo+RCRX0NkL2NesDteH1W4xMy1aG8X08dW4JhjMLcj 5xrIJHDneaa+5SV70eDsYQ/Ux8OucjuAWEQ64nrhxWr0EYIF203uOVSdjW1Gx0HL L/kaQsj93GMwD0eolwrJWGuDzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOsWfYxn VsR4RJcbgPDBqtW0RmFeMB8GA1UdIwQYMBaAFLWz/D52CHfvT42OhDvdaM4PQFUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjhCMS83RDU0QTBDQUI1 ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQtOVBqWTZFTzkxb3pnOUFW VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RiUDhQbllJZC05UGpZNkVPOTFvemc5QVZUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjhCMS83RDU0QTBDQUI1ODYxMUU5QUE1RjRENjVDNEY5QUUwMi90YlA4UG5ZSWQt OVBqWTZFTzkxb3pnOUFWVEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMd/J2nT6aTDgqpnJurwG1jgTqVmWGL3QAZ5DXJilVtOFGq9WJj0JQr/wqAO+ tPqtdlc3YluekTO0gASCt0mUIYQu8TOke6/9j2d3Ict3BqMgOTKdCjvDva3hSnzU vtElKyFI/yzFMC1D1uL0Ee/83BAe7gOQypgnrtAEAjpgMFgJvhf88DZQc5EsjPVU WvVEpc/JSZizuqA73QVsLMtzmufIRKEBy0vebyMueBEzr/aA30hTJARzED2UaTZT EP3Yb7iChFPxUhq4Ye099vVbRdPNTCqfxm+C+N9SJYFebI8YweBXMgfJciYG0Mtz QV+QwTIppfgWRAbzZSGf7T9qIg== -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:31 2026 by rpki-client