$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft File: CF4MUA89R900skS9OSnO_a3ZbD0.mft (raw, json) Hash identifier: atR8Jz0UBej7ItAM+As+4iDiEqD50ge39EDCaY71hho= Subject key identifier: 97:36:79:78:16:21:BC:62:54:C0:64:0C:C4:21:CD:8F:49:12:72:2D Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D Certificate issuer: /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Certificate serial: 0B36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft Manifest number: 0B1C Signing time: Thu 16 Apr 2026 19:14:19 +0000 Manifest this update: Thu 16 Apr 2026 19:14:19 +0000 Manifest next update: Thu 23 Apr 2026 19:14:19 +0000 Files and hashes: 1: CF4MUA89R900skS9OSnO_a3ZbD0.crl (hash: bhdxroJZPrT8HPUV1eJcT0nT3BXrbqhnh61E7K358kA=) 2: 676A2DE2564911F08353B443C4F9AE02.roa (hash: c28cC4DMpskKC8ZO1MiakEbwcuzM7xVA004jy7Yrf+Y=) 3: 5FFA4BEC3C0B11ED89AD755FC4F9AE02.roa (hash: ISIZBZoiPzZqPQa5Y9fslkpjFmhDQG+woT6OF2WUBHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2870 (0xb36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D Validity Not Before: Apr 16 19:14:19 2026 GMT Not After : Apr 23 19:14:19 2026 GMT Subject: CN=69e1350b-3fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:58:95:24:a1:91:de:80:00:b2:f4:a6:c5:a9: 8c:31:17:f6:c4:dc:4b:bf:30:43:98:18:51:c0:8a: b8:7f:0d:92:44:70:a1:ee:94:0e:41:6c:a1:0a:d5: 84:74:56:a5:15:90:4a:9a:c3:73:a0:05:b7:d7:c1: a4:b8:96:67:4e:5f:81:4b:2d:30:5b:01:85:72:48: 9f:2e:9e:6d:01:87:53:b0:5b:79:04:04:ad:06:90: f1:be:fb:95:d8:0e:2c:91:55:b9:8b:b8:99:27:3f: fa:45:84:44:33:66:ee:47:f4:40:f2:42:37:75:f1: d9:45:e1:ad:2d:c4:cc:b0:25:eb:8c:7d:b0:54:e2: f7:d7:87:f0:c2:32:20:d2:6a:e9:f8:ec:e8:5d:6d: 53:82:2d:58:45:d7:3d:60:42:f5:d8:4c:9a:69:c7: 24:16:ec:9a:58:b9:07:c6:fc:43:4f:f2:22:42:76: f6:ed:80:f3:ce:c9:70:22:fd:59:3a:1c:21:37:29: c0:71:a2:05:12:eb:b8:6d:74:67:86:a4:32:d9:98: 2c:70:ed:cc:a8:de:30:a1:23:f5:7a:e1:37:55:08: 27:38:33:af:62:5d:5f:41:cd:48:04:33:bb:76:51: 84:1b:1e:63:e5:cf:45:d8:d7:7f:62:78:1c:e5:b7: 7c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:36:79:78:16:21:BC:62:54:C0:64:0C:C4:21:CD:8F:49:12:72:2D X509v3 Authority Key Identifier: keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:af:1f:d7:b8:42:f8:29:1f:1e:7d:a2:a4:07:5a:fd:ed:42: c8:66:21:63:b1:67:38:a4:6c:f3:9d:9e:77:59:16:48:25:c3: e0:84:db:61:14:cc:14:0e:71:73:f6:0e:71:9b:ba:65:5e:10: 46:b7:73:b2:9d:db:31:0e:d7:b2:d0:66:8d:d4:c1:3a:7b:1a: 0f:d3:d7:da:0c:ae:98:d1:af:50:5f:60:32:d1:39:56:55:39: 73:02:4f:25:7e:00:68:bf:a0:d2:df:2c:71:91:3e:dd:60:53: 20:e0:8c:61:41:bd:4b:16:27:c8:bc:71:f5:44:ca:92:94:a2: 43:79:d2:f9:5b:fa:06:76:46:a3:69:35:c5:36:50:ca:d9:44: 99:01:c0:cd:f5:0a:4b:b1:03:7b:62:78:c9:15:7b:34:dd:ac: 19:4f:b9:9d:ea:c1:f3:5c:6f:64:2f:55:a0:24:e1:4b:87:48: 1a:51:46:82:8c:91:50:65:35:40:79:b4:f5:ec:7a:5c:ed:cd: c0:a8:b4:f1:06:ad:3a:64:a4:b6:f6:ae:e9:d2:ef:92:a5:98: ee:67:e2:45:42:d5:34:7e:7c:f5:05:ff:62:7f:b5:fa:4d:8b: be:52:5d:a6:29:b8:42:1b:81:e1:00:96:79:97:7b:2d:86:84: 03:07:0a:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQxMTgxMTAvBgNVBAUTKDA4NUUwQzUwMEYzRDQ3REQzNEIyNDRCRDM5MjlDRUZE QUREOTZDM0QwHhcNMjYwNDE2MTkxNDE5WhcNMjYwNDIzMTkxNDE5WjAYMRYwFAYD VQQDEw02OWUxMzUwYi0zZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvViVJKGR3oAAsvSmxamMMRf2xNxLvzBDmBhRwIq4fw2SRHCh7pQOQWyhCtWE dFalFZBKmsNzoAW318GkuJZnTl+BSy0wWwGFckifLp5tAYdTsFt5BAStBpDxvvuV 2A4skVW5i7iZJz/6RYREM2buR/RA8kI3dfHZReGtLcTMsCXrjH2wVOL314fwwjIg 0mrp+OzoXW1Tgi1YRdc9YEL12EyaacckFuyaWLkHxvxDT/IiQnb27YDzzslwIv1Z OhwhNynAcaIFEuu4bXRnhqQy2ZgscO3MqN4woSP1euE3VQgnODOvYl1fQc1IBDO7 dlGEGx5j5c9F2Nd/Yngc5bd8eQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJc2eXgW IbxiVMBkDMQhzY9JEnItMB8GA1UdIwQYMBaAFAheDFAPPUfdNLJEvTkpzv2t2Ww9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDExOC9CQjgxQTUxNDYy QkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5MDBza1M5T1NuT19hM1pi RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NGNE1VQTg5UjkwMHNrUzlPU25PX2EzWmJEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDExOC9CQjgxQTUxNDYyQkYxMUVBQUEzQTg5NDVDNEY5QUUwMi9DRjRNVUE4OVI5 MDBza1M5T1NuT19hM1piRDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGK8f17hC+CkfHn2ipAda/e1CyGYhY7FnOKRs852ed1kWSCXD4ITbYRTMFA5x c/YOcZu6ZV4QRrdzsp3bMQ7XstBmjdTBOnsaD9PX2gyumNGvUF9gMtE5VlU5cwJP JX4AaL+g0t8scZE+3WBTIOCMYUG9SxYnyLxx9UTKkpSiQ3nS+Vv6BnZGo2k1xTZQ ytlEmQHAzfUKS7EDe2J4yRV7NN2sGU+5nerB81xvZC9VoCThS4dIGlFGgoyRUGU1 QHm09ex6XO3NwKi08QatOmSktvau6dLvkqWY7mfiRULVNH589QX/Yn+1+k2LvlJd pim4QhuB4QCWeZd7LYaEAwcK4w== -----END CERTIFICATE-----Generated at Fri Apr 17 14:07:12 2026 by rpki-client