$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft File: f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json) Hash identifier: 7bu4n6jPlnMIhZssB5hV3Hq2SLkOZ0hj0PJbW4Vq3y0= Subject key identifier: 40:05:BA:D7:21:2C:28:62:A8:B1:24:A2:60:97:EF:D2:42:E2:EE:A2 Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD Certificate issuer: /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft Manifest number: 029C Signing time: Fri 17 Apr 2026 01:28:53 +0000 Manifest this update: Fri 17 Apr 2026 01:28:52 +0000 Manifest next update: Fri 24 Apr 2026 01:28:52 +0000 Files and hashes: 1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: 4NXEifZKeu8eMdEWQcE7n4TUj2rkAGEoxjvqcVdfsD0=) 2: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 10T57IR+PMdmV6j2kmrAkG4ca6NjWj+tRvDyWCCrDmA=) 3: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: UoPSD/sB882BUptuBl7wMhpHSR5jbx5b49dtZHebnaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 01:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD Validity Not Before: Apr 17 01:28:52 2026 GMT Not After : Apr 24 01:28:52 2026 GMT Subject: CN=69e18cd5-88d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:62:57:c3:6f:4b:db:68:9d:3f:26:dd:42:73: 28:43:92:8a:8f:bb:c4:af:ac:c1:18:93:22:8c:f0: 87:ff:7b:ea:78:c6:1f:55:84:e3:77:4b:01:b2:df: 8a:94:45:aa:4d:82:b3:a1:6b:85:9b:ce:e5:cc:f5: 63:80:02:03:dc:c5:6b:8c:8e:74:b1:c5:56:0b:ff: 59:58:93:02:9f:d1:b3:df:32:b7:87:7a:1d:62:0f: 98:0e:12:fc:6b:07:a2:a4:e3:ca:9f:ff:0a:bf:ab: da:36:70:b4:b9:0b:6c:44:28:33:db:dd:61:58:2a: 20:fc:37:7a:0e:73:cb:14:43:a2:06:85:e6:43:9c: 9a:b6:f1:48:96:ea:05:8b:52:57:43:56:92:f0:bf: 9a:e9:63:bd:0b:d5:dc:b4:04:36:6d:72:24:2f:9c: cf:18:3f:56:68:5e:c4:a6:f2:d1:9b:53:98:73:76: 54:52:64:1e:57:cf:4c:a9:a6:73:b9:4c:40:1d:85: cc:e3:c0:7b:5f:fd:95:c2:d1:93:a5:3e:ca:1f:81: 72:c2:3a:85:ef:26:07:bc:86:3c:45:34:8d:81:5d: bf:4a:7e:6e:a8:f6:fd:a9:cd:17:50:df:c6:09:67: 4c:1a:fb:69:96:8d:c6:61:d1:f7:1d:ee:4e:f6:d1: f3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:BA:D7:21:2C:28:62:A8:B1:24:A2:60:97:EF:D2:42:E2:EE:A2 X509v3 Authority Key Identifier: keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:99:e3:76:be:d5:87:e8:0e:0b:21:4d:11:d3:5c:87:6b:24: eb:b6:10:a2:f3:bf:55:2e:04:7d:2c:c6:b1:12:56:f3:d8:23: f5:ce:ab:90:ea:ee:12:e1:db:c4:e4:9f:d0:ba:47:b9:45:79: 15:95:2e:ec:15:0a:1a:f4:46:af:c7:ba:2f:81:e1:5f:1e:40: d4:3c:78:1a:e9:16:0d:5c:ca:19:aa:c1:3a:de:19:f6:ed:91: cd:64:b3:ff:22:3b:78:de:cb:ad:7f:1a:26:de:00:7b:50:1a: f5:21:3f:35:b8:30:ac:bd:ea:9d:54:90:38:95:d5:89:54:dc: f9:11:09:25:15:c6:5e:ba:cc:8c:2f:e3:8f:4f:53:81:05:3d: 49:94:2e:d2:3a:64:d6:aa:81:e1:30:de:ae:81:9f:57:07:d1: 38:c5:37:b9:25:cb:f6:c5:dd:d0:a3:75:3c:ca:b4:0d:7d:73: 07:97:28:78:6f:5a:88:1c:ae:6d:42:8e:df:89:ee:49:1f:56: 39:ca:7c:9b:91:f8:fe:c2:c0:a7:57:fb:13:6f:9c:0a:47:3a: 01:d1:86:71:a4:fb:2d:fd:be:6d:50:27:e4:e4:c9:ed:97:b8: 3b:af:d0:d6:f3:03:d4:76:b3:6d:79:6b:c1:9b:cc:e0:57:cb: 7c:2d:c9:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1 M0EwNEMzQkQwHhcNMjYwNDE3MDEyODUyWhcNMjYwNDI0MDEyODUyWjAYMRYwFAYD VQQDEw02OWUxOGNkNS04OGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GJXw29L22idPybdQnMoQ5KKj7vEr6zBGJMijPCH/3vqeMYfVYTjd0sBst+K lEWqTYKzoWuFm87lzPVjgAID3MVrjI50scVWC/9ZWJMCn9Gz3zK3h3odYg+YDhL8 aweipOPKn/8Kv6vaNnC0uQtsRCgz291hWCog/Dd6DnPLFEOiBoXmQ5yatvFIluoF i1JXQ1aS8L+a6WO9C9XctAQ2bXIkL5zPGD9WaF7EpvLRm1OYc3ZUUmQeV89MqaZz uUxAHYXM48B7X/2VwtGTpT7KH4FywjqF7yYHvIY8RTSNgV2/Sn5uqPb9qc0XUN/G CWdMGvtplo3GYdH3He5O9tHzSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAFutch LChiqLEkomCX79JC4u6iMB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3 NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOpnjdr7Vh+gOCyFNEdNch2sk67YQovO/VS4EfSzGsRJW89gj9c6rkOruEuHb xOSf0LpHuUV5FZUu7BUKGvRGr8e6L4HhXx5A1Dx4GukWDVzKGarBOt4Z9u2RzWSz /yI7eN7LrX8aJt4Ae1Aa9SE/NbgwrL3qnVSQOJXViVTc+REJJRXGXrrMjC/jj09T gQU9SZQu0jpk1qqB4TDeroGfVwfROMU3uSXL9sXd0KN1PMq0DX1zB5coeG9aiByu bUKO34nuSR9WOcp8m5H4/sLAp1f7E2+cCkc6AdGGcaT7Lf2+bVAn5OTJ7Ze4O6/Q 1vMD1HazbXlrwZvM4FfLfC3JXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 07:33:18 2026 by rpki-client