$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: k3RYyhsbGGILwptL0n1js4bHnUG6cQdRiHMZE+JkyGQ= Subject key identifier: 72:E9:BB:E4:85:95:42:88:AB:7A:DF:25:23:CA:CD:04:81:18:13:78 Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: D1 Signing time: Sun 19 Apr 2026 06:19:54 +0000 Manifest this update: Sun 19 Apr 2026 06:19:54 +0000 Manifest next update: Sun 26 Apr 2026 06:19:54 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: g1/e5mWmyDDp4h+SnaeG1HO2z3jrF2rq4voq0jKGV8c=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: XIXAdlf2Wapfr3aA+RYeScI/7J0gFTrDr34LwCofapU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Apr 2026 04:21:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: Apr 19 06:19:54 2026 GMT Not After : Apr 26 06:19:54 2026 GMT Subject: CN=69e4740a-accb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:e2:a0:18:bb:0c:88:04:e9:6c:df:9e:fb: e5:37:2f:40:90:95:4f:9a:38:a3:e7:89:b4:2f:ab: c9:71:6b:de:bb:d7:02:72:1f:74:b7:1b:01:6d:f7: 82:d2:45:d7:ca:c0:b2:61:16:e7:c6:fb:b9:95:e0: 70:0f:36:e0:ad:67:d4:11:55:c2:f6:31:39:93:31: 4a:3c:98:ac:6e:5a:75:b1:17:74:2b:9e:28:ec:88: ab:85:ff:fe:56:6b:06:2d:54:90:88:4e:09:9c:ab: 05:74:99:77:13:c7:00:df:b9:1d:10:f7:89:f5:2c: 7e:d8:9a:2f:93:e7:45:01:aa:7e:0c:89:65:0b:4e: 2a:b7:6d:11:4d:ae:2e:0f:74:c9:fc:5f:ba:0a:07: f9:8c:fb:49:14:81:44:7c:58:ea:d7:fd:1c:6e:39: 98:d1:ee:65:91:eb:b9:4a:6f:d7:e3:82:72:64:96: 02:09:50:e6:bc:ae:37:20:b8:c4:45:e0:e6:ac:6d: 0c:69:b1:8d:9f:8e:ba:af:58:6e:6a:66:5d:66:bc: 03:89:13:8d:ba:f2:f5:a0:6b:be:a1:28:31:c6:fb: 99:fd:fe:39:83:49:cd:cf:fb:e7:98:ea:ba:5d:cd: 10:e1:e4:f2:b3:a5:91:0d:79:13:67:bb:42:90:3f: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E9:BB:E4:85:95:42:88:AB:7A:DF:25:23:CA:CD:04:81:18:13:78 X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6d:82:e3:01:c2:a5:35:7b:92:8f:c9:78:17:ec:fd:a2:e3: 4f:5b:3a:aa:3a:fb:00:9c:60:0a:59:a1:f2:c5:c1:ef:a8:e9: ff:74:9a:ca:d4:a9:6e:06:a1:a2:66:6d:d6:1b:23:30:8c:21: 6d:fb:d4:85:8e:db:9c:22:19:92:a7:09:fc:14:b0:36:6a:47: 1b:f5:da:3e:eb:16:18:38:ac:da:1d:e1:6b:fe:77:b9:01:64: 7b:1e:79:d3:fa:14:0e:ff:e9:04:d2:6a:0a:c5:de:f6:c8:7b: 93:48:99:6c:0a:6d:e6:69:fb:b3:20:89:0c:e4:e5:86:b5:bc: d4:28:2c:a2:dc:49:a7:6f:e7:ef:fd:09:89:98:fb:72:49:86: d1:68:b9:c6:c7:94:82:0c:b1:ce:5f:c4:ea:34:4a:d6:b4:6a: fb:48:55:1e:be:f9:8f:e5:b5:6c:83:c2:08:89:6b:b9:d1:1a: fc:8e:fb:58:4d:f6:31:41:93:2a:db:a7:f2:bf:69:ff:09:d1: 5c:01:02:be:f2:23:37:1f:1f:01:64:0e:94:6b:7d:2e:e0:26: 5e:04:18:14:42:7d:6f:0c:42:7f:56:26:0e:2c:10:9f:79:ed: 8a:0a:a7:bb:35:53:2b:3d:1f:0e:69:6f:0b:07:70:56:a1:e5: 92:87:46:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY5NjExMTAvBgNVBAUTKDRCRUVDNzRGNDc2RkIxNzFEQzhFREFGOTQ5MUQ2Q0My N0JGODBFMkYwHhcNMjYwNDE5MDYxOTU0WhcNMjYwNDI2MDYxOTU0WjAYMRYwFAYD VQQDEw02OWU0NzQwYS1hY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmXioBi7DIgE6WzfnvvlNy9AkJVPmjij54m0L6vJcWveu9cCch90txsBbfeC 0kXXysCyYRbnxvu5leBwDzbgrWfUEVXC9jE5kzFKPJisblp1sRd0K54o7Iirhf/+ VmsGLVSQiE4JnKsFdJl3E8cA37kdEPeJ9Sx+2Jovk+dFAap+DIllC04qt20RTa4u D3TJ/F+6Cgf5jPtJFIFEfFjq1/0cbjmY0e5lkeu5Sm/X44JyZJYCCVDmvK43ILjE ReDmrG0MabGNn466r1huamZdZrwDiRONuvL1oGu+oSgxxvuZ/f45g0nNz/vnmOq6 Xc0Q4eTys6WRDXkTZ7tCkD8o+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLpu+SF lUKIq3rfJSPKzQSBGBN4MB8GA1UdIwQYMBaAFEvux09Hb7Fx3I7a+UkdbMJ7+A4v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjk2MS8wNUIyMUIxMEZC MEQxMUVGQjI0NjQzMjdDNEY5QUUwMi9TLTdIVDBkdnNYSGNqdHI1U1Ixc3dudjRE aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjk2MS8wNUIyMUIxMEZCMEQxMUVGQjI0NjQzMjdDNEY5QUUwMi9TLTdIVDBkdnNY SGNqdHI1U1Ixc3dudjREaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALW2C4wHCpTV7ko/JeBfs/aLjT1s6qjr7AJxgClmh8sXB76jp/3SaytSpbgah omZt1hsjMIwhbfvUhY7bnCIZkqcJ/BSwNmpHG/XaPusWGDis2h3ha/53uQFkex55 0/oUDv/pBNJqCsXe9sh7k0iZbApt5mn7syCJDOTlhrW81CgsotxJp2/n7/0JiZj7 ckmG0Wi5xseUggyxzl/E6jRK1rRq+0hVHr75j+W1bIPCCIlrudEa/I77WE32MUGT Ktun8r9p/wnRXAECvvIjNx8fAWQOlGt9LuAmXgQYFEJ9bwxCf1YmDiwQn3ntigqn uzVTKz0fDmlvCwdwVqHlkodGjA== -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:14 2026 by rpki-client