$ rpki-client -vvf rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft File: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft (raw, json) Hash identifier: dJSss8bZzRNLJxMqsSxSUiWeUQvEeCV5gBXa02ID/0o= Subject key identifier: 8B:AE:53:08:40:5E:D2:FF:78:D2:F3:81:D5:AE:C5:6D:10:E6:1A:44 Authority key identifier: 6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A Certificate issuer: /CN=A9111F72/serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Certificate serial: 124C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft Manifest number: 1241 Signing time: Sat 04 Apr 2026 17:00:33 +0000 Manifest this update: Sat 04 Apr 2026 17:00:33 +0000 Manifest next update: Sat 11 Apr 2026 17:00:33 +0000 Files and hashes: 1: bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl (hash: Ncwq0z1xCdP1RUVZJ0QnziWrExNTppqhwlO89SUCHTM=) 2: DB056F0C688011F09D2C9A15C4F9AE02.roa (hash: 1FdqXdOFWWUo+KdLUHGDbep6dZHGEbAaO0icxl7Y07Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4684 (0x124c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111F72, serialNumber=6C49B9537C26701EDA7C03B536AD7F52E6C9D51A Validity Not Before: Apr 4 17:00:33 2026 GMT Not After : Apr 11 17:00:33 2026 GMT Subject: CN=69d143b1-98dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:b5:c6:b9:45:91:ab:e2:ed:a3:00:e6:cd: 80:51:0b:16:53:b7:11:6a:11:f5:93:41:23:a4:67: 9e:db:6d:38:5c:72:15:1c:b1:c6:fa:a4:1a:f2:42: 2c:d5:4b:fc:c4:d2:bc:66:c0:d9:43:a5:93:03:1b: 35:cb:cb:35:41:81:64:98:7e:1d:84:00:38:3c:99: a5:d0:86:d6:9b:46:e0:07:d6:50:ee:5f:46:98:44: 91:80:04:84:4e:70:23:9d:e7:f1:3b:66:70:bd:84: 1c:f2:28:fc:cf:1b:6a:57:9c:f8:98:b2:6c:4c:83: 85:08:54:bc:70:9f:8a:2a:af:f0:bf:3d:b9:d5:9b: 89:e6:0f:7f:ff:58:02:cf:7d:41:28:d0:44:ed:71: ef:57:de:0e:08:af:e5:6c:21:95:e7:b8:60:bd:09: fc:18:7d:6c:a0:0d:4c:ad:35:74:66:95:e9:b4:05: 8f:03:25:3b:3a:e0:55:90:73:97:20:11:13:82:b0: db:75:43:fc:1e:40:b5:f1:0c:b4:21:6d:9e:50:6f: 7c:1d:ff:27:6c:15:ff:54:15:21:13:0e:d5:0f:b6: ee:14:da:ec:81:d9:7a:03:6b:8f:14:c6:b1:42:aa: d3:be:44:bc:9f:97:e1:9f:01:12:19:13:4f:d8:36: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:AE:53:08:40:5E:D2:FF:78:D2:F3:81:D5:AE:C5:6D:10:E6:1A:44 X509v3 Authority Key Identifier: keyid:6C:49:B9:53:7C:26:70:1E:DA:7C:03:B5:36:AD:7F:52:E6:C9:D5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111F72/6F4293D4F8D511E883631D7AC4F9AE02/bEm5U3wmcB7afAO1Nq1_UubJ1Ro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:1d:dd:c4:8d:27:c7:69:7d:42:62:34:a3:05:e7:45:70:b6: 06:56:f0:62:f1:2d:79:d9:c5:6b:47:33:57:80:6f:4f:0a:2a: e6:d2:ab:24:d1:42:6f:64:0c:a1:c9:bc:84:c6:fd:86:4f:c8: 84:1f:fe:15:8f:1a:a1:9e:95:71:86:8b:19:56:eb:c4:03:e5: b8:bb:ab:f1:8f:3c:51:c5:42:fd:5b:89:14:e2:e0:90:68:85: 1e:1e:0f:8e:0a:e3:97:60:ad:4c:e5:21:e0:63:40:c2:b1:45: 5a:f2:16:65:86:45:b8:51:4f:80:59:6f:49:94:76:1c:b6:89: b3:df:26:c0:06:4c:76:d5:ab:77:fc:7c:b7:35:eb:e2:c1:a6: 19:18:79:c5:f8:cd:8c:42:5d:39:0e:54:11:57:12:86:72:70: 3b:7a:89:d6:48:1e:52:a8:7a:14:c6:ca:15:79:d3:54:0f:23: ec:8e:3f:57:84:9a:33:04:43:4c:65:e8:b7:a0:f6:64:fb:8d: da:5d:22:0d:12:b1:27:74:73:98:a2:d9:8f:9d:a4:98:da:7d: 70:6b:89:ea:02:80:8c:0d:44:42:b3:51:af:8e:6c:39:ce:9f: a4:fe:b3:47:52:63:c3:cc:7a:99:f3:7c:68:83:d8:fd:73:3d: 7e:15:a0:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTFGNzIxMTAvBgNVBAUTKDZDNDlCOTUzN0MyNjcwMUVEQTdDMDNCNTM2QUQ3RjUy RTZDOUQ1MUEwHhcNMjYwNDA0MTcwMDMzWhcNMjYwNDExMTcwMDMzWjAYMRYwFAYD VQQDEw02OWQxNDNiMS05OGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYG1xrlFkavi7aMA5s2AUQsWU7cRahH1k0EjpGee2204XHIVHLHG+qQa8kIs 1Uv8xNK8ZsDZQ6WTAxs1y8s1QYFkmH4dhAA4PJml0IbWm0bgB9ZQ7l9GmESRgASE TnAjnefxO2ZwvYQc8ij8zxtqV5z4mLJsTIOFCFS8cJ+KKq/wvz251ZuJ5g9//1gC z31BKNBE7XHvV94OCK/lbCGV57hgvQn8GH1soA1MrTV0ZpXptAWPAyU7OuBVkHOX IBETgrDbdUP8HkC18Qy0IW2eUG98Hf8nbBX/VBUhEw7VD7buFNrsgdl6A2uPFMax QqrTvkS8n5fhnwESGRNP2DZHYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIuuUwhA XtL/eNLzgdWuxW0Q5hpEMB8GA1UdIwQYMBaAFGxJuVN8JnAe2nwDtTatf1LmydUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUY3Mi82RjQyOTNENEY4 RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNCN2FmQU8xTnExX1V1Ykox Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JFbTVVM3dtY0I3YWZBTzFOcTFfVXViSjFSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MUY3Mi82RjQyOTNENEY4RDUxMUU4ODM2MzFEN0FDNEY5QUUwMi9iRW01VTN3bWNC N2FmQU8xTnExX1V1YkoxUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANR3dxI0nx2l9QmI0owXnRXC2BlbwYvEtednFa0czV4BvTwoq5tKrJNFCb2QM ocm8hMb9hk/IhB/+FY8aoZ6VcYaLGVbrxAPluLur8Y88UcVC/VuJFOLgkGiFHh4P jgrjl2CtTOUh4GNAwrFFWvIWZYZFuFFPgFlvSZR2HLaJs98mwAZMdtWrd/x8tzXr 4sGmGRh5xfjNjEJdOQ5UEVcShnJwO3qJ1kgeUqh6FMbKFXnTVA8j7I4/V4SaMwRD TGXot6D2ZPuN2l0iDRKxJ3RzmKLZj52kmNp9cGuJ6gKAjA1EQrNRr45sOc6fpP6z R1Jjw8x6mfN8aIPY/XM9fhWg1Q== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:45 2026 by rpki-client