$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft File: gaChhLnGJZNg6jO7KDyhtDIbsDU.mft (raw, json) Hash identifier: CPk2rB7Ug2ezIQ41MtygqkzSxGzbQ/2e6/nfeMPjcGU= Subject key identifier: 08:FE:EA:BB:D4:AA:F5:FF:5A:1B:B1:3D:C3:89:0A:36:E2:91:D2:E1 Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 Certificate issuer: /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft Manifest number: 01D9 Signing time: Sun 05 Apr 2026 03:03:18 +0000 Manifest this update: Sun 05 Apr 2026 03:03:17 +0000 Manifest next update: Sun 12 Apr 2026 03:03:17 +0000 Files and hashes: 1: gaChhLnGJZNg6jO7KDyhtDIbsDU.crl (hash: 0A/FabeT9uIBX4dMvm4tc4sic/Vq7OtZmP3nrxzugqg=) 2: 0DAF90D261C011EEAEFEBD43C4F9AE02.roa (hash: twSw+RR5YJhUK7zdzJjyiAPiKNch3ekXRfdXFnqlnCY=) 3: F800BA84626111EE82BA5C5DC4F9AE02.roa (hash: s9+YWsztN5fKoye0utKQzos//1NTZxc4+dar/T6RiPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:03:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114814, serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035 Validity Not Before: Apr 5 03:03:17 2026 GMT Not After : Apr 12 03:03:17 2026 GMT Subject: CN=69d1d0f5-c244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:80:46:4c:05:81:d6:f3:2e:42:0c:ec:7e: f3:2a:13:3b:ba:56:92:27:5f:02:07:ae:23:48:54: c8:65:9a:1e:a5:48:e7:63:c2:0a:4e:e3:f4:cb:a9: bc:f0:89:46:d6:d3:4f:c8:f1:ad:46:ec:4a:6e:88: a6:15:0b:9f:47:9a:a9:e9:91:5f:d2:50:40:c9:95: 08:5b:7c:d4:77:25:d4:a5:89:4c:1c:96:6a:69:7c: 44:f2:84:c5:e7:bf:66:df:43:06:cd:65:52:84:94: ce:4e:1c:9a:e1:13:d6:39:df:5f:de:58:69:bb:1b: ce:ce:ad:1a:d1:e7:50:b5:f6:49:a8:1b:86:82:e5: 1c:a4:fb:06:24:18:af:17:9d:1f:47:52:61:3c:d5: c5:98:5e:cb:48:ea:47:7f:25:93:e1:e3:a6:e2:a7: 65:81:4a:e0:58:5a:0e:da:b9:3a:97:96:71:3f:d6: d7:c6:75:48:9b:1a:f5:ea:53:49:3a:50:b3:f8:bc: 7e:b4:73:99:9d:de:25:44:b9:49:43:c6:11:06:97: 69:23:33:0c:f7:a7:a6:60:47:9f:53:4f:38:33:b0: bb:18:7a:bf:a3:9d:0e:2e:d0:d9:55:9a:a5:97:d0: 26:c2:02:11:ba:52:20:ba:d7:fa:69:8f:d3:13:00: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FE:EA:BB:D4:AA:F5:FF:5A:1B:B1:3D:C3:89:0A:36:E2:91:D2:E1 X509v3 Authority Key Identifier: keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d8:f1:77:7a:03:6f:08:80:3d:14:09:48:00:05:68:d0:84: 40:33:86:b5:81:ef:80:96:4e:cd:a8:d3:f3:ce:0b:c0:7e:86: 45:39:a6:0b:51:33:03:5a:fb:cb:c6:a0:cf:d3:92:4a:3f:9f: 07:f7:7e:df:52:05:9d:ca:06:00:bc:c5:6d:bd:80:30:33:e5: fa:6d:1b:83:fb:78:c9:37:de:1d:79:c8:76:58:ff:8e:23:e3: 09:85:b5:69:22:92:b2:33:2d:e4:20:fd:73:51:e9:bb:0b:3d: 2f:3f:ff:a4:70:d9:30:5b:7e:9d:d4:df:06:64:47:98:2d:70: 0d:7d:83:94:d3:dd:e6:71:e4:91:3a:97:48:f3:63:e7:14:fe: 5c:33:2a:fc:ad:85:ed:39:18:cc:92:a1:e2:35:75:8d:41:20: c4:e3:ed:71:6c:3e:fe:02:b1:86:6d:4f:a8:2b:d3:5d:eb:93: 01:0c:7b:82:80:eb:6b:43:3f:5c:5a:d5:75:da:75:5b:35:89: 2e:c9:83:ad:7c:cb:f2:00:60:27:23:8d:cd:85:80:7d:2e:4e: 65:07:7a:8b:07:a4:7c:b7:22:e2:a6:ea:f0:5f:98:ba:e9:e6: 70:95:55:91:65:f5:d1:e5:90:b6:30:a8:f6:f9:02:43:5a:3a: 79:35:d0:89 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQ4MTQxMTAvBgNVBAUTKDgxQTBBMTg0QjlDNjI1OTM2MEVBMzNCQjI4M0NBMUI0 MzIxQkIwMzUwHhcNMjYwNDA1MDMwMzE3WhcNMjYwNDEyMDMwMzE3WjAYMRYwFAYD VQQDEw02OWQxZDBmNS1jMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXSARkwFgdbzLkIM7H7zKhM7ulaSJ18CB64jSFTIZZoepUjnY8IKTuP0y6m8 8IlG1tNPyPGtRuxKboimFQufR5qp6ZFf0lBAyZUIW3zUdyXUpYlMHJZqaXxE8oTF 579m30MGzWVShJTOThya4RPWOd9f3lhpuxvOzq0a0edQtfZJqBuGguUcpPsGJBiv F50fR1JhPNXFmF7LSOpHfyWT4eOm4qdlgUrgWFoO2rk6l5ZxP9bXxnVImxr16lNJ OlCz+Lx+tHOZnd4lRLlJQ8YRBpdpIzMM96emYEefU084M7C7GHq/o50OLtDZVZql l9AmwgIRulIgutf6aY/TEwArZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAj+6rvU qvX/WhuxPcOJCjbikdLhMB8GA1UdIwQYMBaAFIGgoYS5xiWTYOozuyg8obQyG7A1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDgxNC8xMDE2ODkyNjYx QkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0paTmc2ak83S0R5aHRESWJz RFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhQ2hoTG5HSlpOZzZqTzdLRHlodERJYnNEVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDgxNC8xMDE2ODkyNjYxQkYxMUVFODYwMjRGM0ZDNEY5QUUwMi9nYUNoaExuR0pa Tmc2ak83S0R5aHRESWJzRFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAStjxd3oDbwiAPRQJSAAFaNCEQDOGtYHvgJZOzajT884LwH6GRTmmC1EzA1r7 y8agz9OSSj+fB/d+31IFncoGALzFbb2AMDPl+m0bg/t4yTfeHXnIdlj/jiPjCYW1 aSKSsjMt5CD9c1Hpuws9Lz//pHDZMFt+ndTfBmRHmC1wDX2DlNPd5nHkkTqXSPNj 5xT+XDMq/K2F7TkYzJKh4jV1jUEgxOPtcWw+/gKxhm1PqCvTXeuTAQx7goDra0M/ XFrVddp1WzWJLsmDrXzL8gBgJyONzYWAfS5OZQd6iwekfLci4qbq8F+YuunmcJVV kWX10eWQtjCo9vkCQ1o6eTXQiQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:48 2026 by rpki-client