$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: VUlnBtBDEvVPpgaj9n0LUqhhkDcaTNyb+QUBUapP0LI= Subject key identifier: D3:99:82:70:D7:42:4E:1E:C1:DD:4B:B0:AF:9A:71:47:EF:C7:0E:5F Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: 013A Signing time: Wed 15 Apr 2026 05:00:17 +0000 Manifest this update: Wed 15 Apr 2026 05:00:17 +0000 Manifest next update: Wed 22 Apr 2026 05:00:17 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: O5yZYsH72eTt8ikCLwPB0bGvuqtSKdTUGSG8ND076ds=) 2: D93EF164ABF311F0BBF66516C4F9AE02.roa (hash: 2kOeP60myM1mAUly5SCWYSaPMPRSRG8lPF8mhNDgtQI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 05:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: Apr 15 05:00:17 2026 GMT Not After : Apr 22 05:00:17 2026 GMT Subject: CN=69df1b61-e90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:fd:a5:c0:58:51:50:38:97:ba:74:87:3d: a8:3c:46:2c:e9:6b:e9:e0:e7:e4:4f:c2:89:3d:b5: 7a:5d:58:16:75:a0:17:33:fe:f2:3b:42:17:49:9d: cd:57:39:27:25:fa:4d:fa:a2:92:3a:4a:ef:82:5c: 98:95:67:2e:1f:b2:4c:27:f2:57:c7:4b:a5:c6:c1: b8:e7:74:86:3c:15:51:21:8b:99:70:70:ca:90:31: 0a:41:4b:2f:62:52:b9:29:4b:6e:3a:e5:fa:7c:76: 6e:fc:8a:67:f2:50:a5:6c:58:08:a5:b8:59:7a:e7: cc:aa:ef:db:7d:2a:4d:99:f2:bf:18:60:da:87:a1: 3b:5f:f4:eb:22:13:bc:77:7c:9f:6e:f6:9f:49:4c: 9f:c8:d5:20:ee:85:2f:cb:97:a7:b0:d7:9c:8b:df: b1:90:8f:7a:de:e5:42:62:ee:67:fd:4a:6e:b1:fb: 87:58:a5:4b:ec:f1:57:9e:a6:31:52:43:d5:57:32: f8:10:07:22:e5:7e:69:43:90:ad:c9:77:69:5f:5c: d1:c0:58:86:cb:c4:da:32:9d:58:53:5f:16:d9:36: e2:42:cb:ee:a8:ac:88:7c:86:ae:5f:ae:7c:89:81: 31:ce:ea:50:c4:71:4d:e5:11:b7:26:f1:23:8a:c3: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:99:82:70:D7:42:4E:1E:C1:DD:4B:B0:AF:9A:71:47:EF:C7:0E:5F X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:73:c0:d9:e5:bb:27:d2:ac:3e:2d:bd:36:af:2d:08:dd:2e: 97:19:71:07:d3:36:bc:bc:e6:28:98:29:de:db:54:b3:7f:b9: d0:67:c4:ec:9e:57:8e:2b:fa:0d:fe:19:66:a2:c1:90:2c:1d: 24:cb:ab:fb:11:6e:fe:f7:78:d7:ea:91:d6:6c:8d:d0:41:14: d0:2a:3c:3b:35:e9:37:83:7c:b1:58:e8:6f:46:6f:1a:0a:62: 38:f8:0e:64:80:a1:a6:56:ac:68:64:16:45:59:61:30:d7:97: 2a:93:f2:00:07:ce:9a:27:ef:42:c7:e0:4a:0f:08:8e:e6:17: 10:5d:f6:cd:5d:5e:f8:1f:99:38:71:4f:75:64:76:0d:df:11: 34:a6:12:f6:1f:c8:ca:63:3e:e9:c0:13:55:ba:f5:6c:c2:2a: 63:90:7e:cc:1c:c5:1b:62:d6:49:16:b5:be:2b:c5:ca:66:d1: 46:75:1e:05:b0:4a:f9:be:9c:ed:00:c3:c4:84:d0:54:7c:de: f5:7b:04:75:a1:e4:4a:c4:54:d3:f2:ad:08:e1:81:ca:1f:40: 79:da:ce:35:3d:92:73:c1:30:cf:11:39:ae:bc:3d:58:05:9b: 54:6a:67:f2:65:f0:26:94:ce:4a:a4:ee:71:6f:63:39:87:91: 9c:35:41:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjYwNDE1MDUwMDE3WhcNMjYwNDIyMDUwMDE3WjAYMRYwFAYD VQQDEw02OWRmMWI2MS1lOTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+r9pcBYUVA4l7p0hz2oPEYs6Wvp4OfkT8KJPbV6XVgWdaAXM/7yO0IXSZ3N VzknJfpN+qKSOkrvglyYlWcuH7JMJ/JXx0ulxsG453SGPBVRIYuZcHDKkDEKQUsv YlK5KUtuOuX6fHZu/Ipn8lClbFgIpbhZeufMqu/bfSpNmfK/GGDah6E7X/TrIhO8 d3yfbvafSUyfyNUg7oUvy5ensNeci9+xkI963uVCYu5n/UpusfuHWKVL7PFXnqYx UkPVVzL4EAci5X5pQ5CtyXdpX1zRwFiGy8TaMp1YU18W2TbiQsvuqKyIfIauX658 iYExzupQxHFN5RG3JvEjisNysQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOZgnDX Qk4ewd1LsK+acUfvxw5fMB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuHPA2eW7J9KsPi29Nq8tCN0ulxlxB9M2vLzmKJgp3ttUs3+50GfE7J5Xjiv6 Df4ZZqLBkCwdJMur+xFu/vd41+qR1myN0EEU0Co8OzXpN4N8sVjob0ZvGgpiOPgO ZIChplasaGQWRVlhMNeXKpPyAAfOmifvQsfgSg8IjuYXEF32zV1e+B+ZOHFPdWR2 Dd8RNKYS9h/IymM+6cATVbr1bMIqY5B+zBzFG2LWSRa1vivFymbRRnUeBbBK+b6c 7QDDxITQVHze9XsEdaHkSsRU0/KtCOGByh9AedrONT2Sc8EwzxE5rrw9WAWbVGpn 8mXwJpTOSqTucW9jOYeRnDVBeQ== -----END CERTIFICATE-----Generated at Fri Apr 17 06:54:04 2026 by rpki-client