$ rpki-client -vvf rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft File: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft (raw, json) Hash identifier: LYvc01dA94PloG0ddlWPQTq+KfElcMewgF4uHQX7vKs= Subject key identifier: 2E:8B:C5:D0:7A:7D:1C:A8:0D:3C:9A:27:80:65:C6:90:01:2A:BD:12 Authority key identifier: EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 Certificate issuer: /CN=A919FEA1/serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Certificate serial: 0F00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft Manifest number: 0EF5 Signing time: Sat 18 Apr 2026 17:31:26 +0000 Manifest this update: Sat 18 Apr 2026 17:31:25 +0000 Manifest next update: Sat 25 Apr 2026 17:31:25 +0000 Files and hashes: 1: 72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl (hash: 1ux1FehIXQXgbW14+DbYx0zztxoUbfu6bff0Og9IVQg=) 2: 0DFAD3529E1611E98059B049C4F9AE02.roa (hash: 6jkA83GPmT1sTdP9/+4bkkPNn9zJBgan8JssNW53vPg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 17:31:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FEA1, serialNumber=EF6C194BB2894D33E6DE0642232D94CE4E9EF194 Validity Not Before: Apr 18 17:31:25 2026 GMT Not After : Apr 25 17:31:25 2026 GMT Subject: CN=69e3bfed-008c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:ea:c8:3c:cf:87:98:fe:06:5b:6f:92:4a: b4:7c:bd:02:39:be:48:00:52:b1:b3:22:d5:ac:9a: a4:29:b4:ef:ca:0e:6f:4b:fa:71:17:3e:61:4e:5b: c8:c5:9b:06:19:2b:df:f4:85:13:a7:b0:63:d5:1b: 44:20:7e:5d:bc:7b:e3:0f:7b:02:da:56:a4:f0:29: 99:fe:89:37:45:97:96:84:d8:65:02:2d:ed:13:e0: eb:af:be:38:ed:70:1d:93:24:73:d9:4f:7c:03:d3: 0b:bf:ef:81:37:97:9f:b1:eb:cd:ed:d6:8e:c8:f7: eb:1b:48:5f:9e:bd:26:fe:ab:aa:21:3f:6e:5c:44: e8:20:3d:23:b9:81:e4:b6:fe:19:8b:a6:fa:c5:c4: 2f:b2:ec:95:08:b2:2e:28:29:a5:53:ff:b8:da:d8: af:4b:eb:e4:c8:dd:94:6f:88:d2:93:3c:68:ec:a2: 29:b6:2d:1c:67:b5:72:a5:53:7f:1b:ed:28:4e:1c: 64:60:0b:cf:da:8a:70:6e:70:07:a8:4d:4a:bd:de: 7a:75:e6:e9:1c:36:84:08:6d:17:da:18:b8:b6:3a: a5:97:66:53:68:43:0a:be:2c:a9:dd:93:40:3a:f1: 2d:77:e9:4d:78:52:37:87:9b:80:90:04:9d:b6:55: ad:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:C5:D0:7A:7D:1C:A8:0D:3C:9A:27:80:65:C6:90:01:2A:BD:12 X509v3 Authority Key Identifier: keyid:EF:6C:19:4B:B2:89:4D:33:E6:DE:06:42:23:2D:94:CE:4E:9E:F1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FEA1/BFCB85EC9E1411E9A2F6F946C4F9AE02/72wZS7KJTTPm3gZCIy2Uzk6e8ZQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:14:d1:ba:65:7c:69:9a:d8:cf:8e:d9:26:38:ae:91:74:d9: 65:3c:10:66:cc:2e:9f:46:26:4f:c8:2c:54:1a:7a:70:53:a9: de:eb:2b:3c:39:f9:ef:51:c8:02:bc:9f:62:83:8f:66:38:aa: 23:5a:b1:c8:a6:19:9d:6d:ba:25:c2:0c:93:f9:be:83:9c:c4: 2c:94:76:62:da:98:f9:ff:0a:26:21:b6:64:d0:6f:e6:f9:12: 51:d6:64:e3:5c:ae:13:ce:0d:ff:c2:c4:73:6b:aa:14:00:c9: 79:93:8f:7d:93:9e:88:6a:b2:3a:31:1b:6e:f7:85:9e:7e:f4: 16:98:40:0b:2c:71:fc:a3:2d:f9:3f:80:ab:9f:d0:24:34:87: da:67:bb:71:42:f8:5a:a0:fd:dd:6d:7d:52:4b:10:da:f4:c4: ee:5e:a9:1c:c3:ea:a7:b8:a4:98:71:8b:64:c6:d4:3e:40:0b: 2d:49:66:37:05:0d:3c:a6:6a:08:0f:52:5d:20:25:6b:d5:0e: 9d:75:c8:55:48:36:6d:95:dd:45:66:ca:ef:4b:24:f9:fd:0d: cd:5a:d3:4d:f1:fd:68:35:59:78:4f:e9:a9:92:16:6f:cd:ed: 9e:2e:5e:ae:ab:80:26:ce:f1:be:ed:6e:11:36:23:b4:e3:94: 22:07:3b:b1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZFQTExMTAvBgNVBAUTKEVGNkMxOTRCQjI4OTREMzNFNkRFMDY0MjIzMkQ5NENF NEU5RUYxOTQwHhcNMjYwNDE4MTczMTI1WhcNMjYwNDI1MTczMTI1WjAYMRYwFAYD VQQDEw02OWUzYmZlZC0wMDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCHqyDzPh5j+Bltvkkq0fL0COb5IAFKxsyLVrJqkKbTvyg5vS/pxFz5hTlvI xZsGGSvf9IUTp7Bj1RtEIH5dvHvjD3sC2lak8CmZ/ok3RZeWhNhlAi3tE+Drr744 7XAdkyRz2U98A9MLv++BN5efsevN7daOyPfrG0hfnr0m/quqIT9uXEToID0juYHk tv4Zi6b6xcQvsuyVCLIuKCmlU/+42tivS+vkyN2Ub4jSkzxo7KIpti0cZ7VypVN/ G+0oThxkYAvP2opwbnAHqE1Kvd56debpHDaECG0X2hi4tjqll2ZTaEMKviyp3ZNA OvEtd+lNeFI3h5uAkASdtlWtFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC6LxdB6 fRyoDTyaJ4BlxpABKr0SMB8GA1UdIwQYMBaAFO9sGUuyiU0z5t4GQiMtlM5OnvGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkVBMS9CRkNCODVFQzlF MTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRUUG0zZ1pDSXkyVXprNmU4 WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyd1pTN0tKVFRQbTNnWkNJeTJVems2ZThaUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkVBMS9CRkNCODVFQzlFMTQxMUU5QTJGNkY5NDZDNEY5QUUwMi83MndaUzdLSlRU UG0zZ1pDSXkyVXprNmU4WlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvBTRumV8aZrYz47ZJjiukXTZZTwQZswun0YmT8gsVBp6cFOp3usrPDn571HI AryfYoOPZjiqI1qxyKYZnW26JcIMk/m+g5zELJR2YtqY+f8KJiG2ZNBv5vkSUdZk 41yuE84N/8LEc2uqFADJeZOPfZOeiGqyOjEbbveFnn70FphACyxx/KMt+T+Aq5/Q JDSH2me7cUL4WqD93W19UksQ2vTE7l6pHMPqp7ikmHGLZMbUPkALLUlmNwUNPKZq CA9SXSAla9UOnXXIVUg2bZXdRWbK70sk+f0NzVrTTfH9aDVZeE/pqZIWb83tni5e rquAJs7xvu1uETYjtOOUIgc7sQ== -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:59 2026 by rpki-client