$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft File: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json) Hash identifier: wVoWQQZFu5KhRMHQQw9vHaAg8/578gBWXUuPRxSYfOU= Subject key identifier: C5:85:D9:C0:70:AD:87:F4:3E:93:B3:CA:86:8B:0E:5B:AE:CA:26:26 Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 Certificate issuer: /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft Manifest number: 8A Signing time: Fri 17 Apr 2026 07:18:58 +0000 Manifest this update: Fri 17 Apr 2026 07:18:58 +0000 Manifest next update: Fri 24 Apr 2026 07:18:58 +0000 Files and hashes: 1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: COvmEuPtwnbnrH6fiiMWAFenWO0bG774uKeM4oauSlM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 07:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44 Validity Not Before: Apr 17 07:18:58 2026 GMT Not After : Apr 24 07:18:58 2026 GMT Subject: CN=69e1dee2-73fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:1d:bd:f1:92:42:ff:d7:09:19:46:a4:86: 45:74:3a:f7:ac:62:9a:3f:b5:6d:cf:30:3c:a5:53: eb:10:e9:c7:23:b2:02:76:e6:d0:3f:ae:20:f8:6b: 42:47:74:13:d0:2c:db:11:ba:bd:b7:ed:0a:a2:c4: 55:9b:1d:4f:f8:35:74:1b:0a:b7:72:33:3b:ab:6c: e9:24:e1:1e:8b:08:8a:6f:a3:35:c1:9b:db:ee:a7: 8d:fe:f7:df:57:5d:da:2c:a6:00:17:70:4b:7b:3b: 0c:c9:6b:f9:97:c0:e4:c5:3a:a3:8d:ca:f3:f2:52: c8:bb:60:9f:3f:7d:be:5c:39:da:5e:29:d5:51:c9: 11:fb:b4:cf:94:60:2e:9e:4c:17:be:94:86:50:96: 1b:69:4b:f1:cb:35:d2:16:45:2e:21:b7:5e:02:4a: 7b:a4:c5:36:a7:52:c1:7a:8d:99:84:43:f0:2b:41: 99:b9:9d:2f:1e:54:0f:ee:63:d0:ca:d4:c2:1a:58: 5c:8f:8e:7d:6b:c1:d8:9a:90:13:cf:89:d4:38:4c: b2:3f:70:02:d5:15:74:6d:c1:df:c3:ba:1f:db:42: 73:8b:08:8a:a6:83:02:96:a3:c8:f1:5f:71:40:ca: 86:35:29:19:99:79:f3:03:2e:c5:03:52:7e:38:9c: e7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:D9:C0:70:AD:87:F4:3E:93:B3:CA:86:8B:0E:5B:AE:CA:26:26 X509v3 Authority Key Identifier: keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7b:c3:8d:11:cb:8c:c5:6e:36:9d:51:1b:98:d4:80:e7:82: f2:bb:c4:94:aa:8f:96:a4:53:7f:4e:ed:f2:08:88:f0:a3:33: 7b:8b:58:35:a4:f8:f5:d4:d0:a0:e7:26:f8:23:bc:34:bf:21: ad:63:9a:ce:cb:df:c3:0a:8e:cc:73:cd:da:1e:8c:21:3e:21: d7:15:37:25:e0:71:53:0e:b8:19:c7:d8:78:a2:f2:4c:40:93: 63:6e:47:f9:39:e4:8f:3a:f5:6e:b3:2b:b4:cf:ac:59:b3:7c: c7:0b:bf:6d:5e:8d:8f:00:fe:d5:e2:61:76:8a:c7:d9:42:8e: 04:48:d2:b2:ae:63:c3:e6:7b:b5:ec:f3:15:04:fe:a6:0f:64: d2:e8:74:2c:73:ee:ac:dc:ab:65:e4:c9:f6:9f:d0:17:8c:fa: 98:2e:12:88:26:71:f0:90:13:cd:55:25:e9:f2:fb:ed:3b:97: 47:dc:e5:7b:61:0f:18:53:c9:c7:de:ff:f9:0c:dc:7d:71:7c: 10:fe:94:d0:75:eb:48:ca:10:52:6d:4c:12:a5:0f:d1:79:37: f5:10:86:a8:b6:b8:a9:5a:3b:48:11:c3:da:d2:96:e8:57:63: 2c:32:f4:76:07:77:a3:fc:46:64:7a:c8:55:31:94:89:06:05: eb:99:8d:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZEQzAxMTAvBgNVBAUTKDExN0MwRDZEMTlCRkJBNDhCNUZBOUU1MTdEMEU2OTI2 NTVDOThDNDQwHhcNMjYwNDE3MDcxODU4WhcNMjYwNDI0MDcxODU4WjAYMRYwFAYD VQQDEw02OWUxZGVlMi03M2ZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqsdvfGSQv/XCRlGpIZFdDr3rGKaP7VtzzA8pVPrEOnHI7ICdubQP64g+GtC R3QT0CzbEbq9t+0KosRVmx1P+DV0Gwq3cjM7q2zpJOEeiwiKb6M1wZvb7qeN/vff V13aLKYAF3BLezsMyWv5l8DkxTqjjcrz8lLIu2CfP32+XDnaXinVUckR+7TPlGAu nkwXvpSGUJYbaUvxyzXSFkUuIbdeAkp7pMU2p1LBeo2ZhEPwK0GZuZ0vHlQP7mPQ ytTCGlhcj459a8HYmpATz4nUOEyyP3AC1RV0bcHfw7of20JziwiKpoMClqPI8V9x QMqGNSkZmXnzAy7FA1J+OJzniwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMWF2cBw rYf0PpOzyoaLDluuyiYmMB8GA1UdIwQYMBaAFBF8DW0Zv7pItfqeUX0OaSZVyYxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkRDMC8zMzExRjBFRTY5 RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3VraTEtcDVSZlE1cEpsWEpq RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VYd05iUm1fdWtpMS1wNVJmUTVwSmxYSmpFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkRDMC8zMzExRjBFRTY5RTkxMUYwODFCNjVCNjdDNEY5QUUwMi9FWHdOYlJtX3Vr aTEtcDVSZlE1cEpsWEpqRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS3vDjRHLjMVuNp1RG5jUgOeC8rvElKqPlqRTf07t8giI8KMze4tYNaT49dTQ oOcm+CO8NL8hrWOazsvfwwqOzHPN2h6MIT4h1xU3JeBxUw64GcfYeKLyTECTY25H +Tnkjzr1brMrtM+sWbN8xwu/bV6NjwD+1eJhdorH2UKOBEjSsq5jw+Z7tezzFQT+ pg9k0uh0LHPurNyrZeTJ9p/QF4z6mC4SiCZx8JATzVUl6fL77TuXR9zle2EPGFPJ x97/+QzcfXF8EP6U0HXrSMoQUm1MEqUP0Xk39RCGqLa4qVo7SBHD2tKW6FdjLDL0 dgd3o/xGZHrIVTGUiQYF65mNrA== -----END CERTIFICATE-----Generated at Fri Apr 17 14:09:25 2026 by rpki-client