$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: CzK5nSnbabRZonMNCXDzbREmUGWa7yY0zeVakPkP3FM= Subject key identifier: D2:25:EC:8C:78:02:CD:C6:4B:23:24:FC:5A:C6:46:70:DF:A7:A8:92 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0B66 Signing time: Mon 06 Apr 2026 19:00:03 +0000 Manifest this update: Mon 06 Apr 2026 19:00:03 +0000 Manifest next update: Mon 13 Apr 2026 19:00:03 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: 5nRW4aY+Zcf+U9FFfyg2jqcCb1tJ2i1LSQ+KMgd3mzQ=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: qJFLmW+cXJRTYpRYhxmf/kfGb1OFH5gs6tcdRPh5wTs=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 19:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2938 (0xb7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Apr 6 19:00:03 2026 GMT Not After : Apr 13 19:00:03 2026 GMT Subject: CN=69d402b3-fcc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:23:de:d5:38:73:89:d3:29:d5:c8:be:a4: a8:9c:1a:7d:8b:43:5b:10:9a:8b:3e:42:23:03:f3: 29:21:cc:81:ae:04:04:71:3c:ee:17:d4:6c:05:a7: d4:73:63:52:e5:58:b9:89:a0:9a:40:8b:90:7f:bb: 38:35:67:1e:5d:dc:40:f2:11:e6:32:c9:05:a1:66: 98:69:35:c2:96:40:0f:d6:e2:28:83:0c:c9:cf:99: cc:d0:74:f1:66:f7:b2:c5:dd:b3:d9:69:fb:94:cd: d5:d5:8c:86:8d:ed:41:76:29:bb:3b:2b:ca:c1:e6: f7:64:6e:eb:92:7c:63:12:1d:ab:af:79:40:b3:f7: 2d:f7:b0:ee:2e:de:49:f8:8a:9a:83:49:c4:d0:0e: 10:46:5a:e3:23:ea:83:f3:49:1f:53:ae:b4:df:4f: 93:6e:12:35:b4:db:4e:55:2a:5a:45:d3:44:b3:07: ca:6d:dd:2e:4a:c5:2f:5a:86:07:99:6b:ec:06:68: 42:91:3b:e2:69:3c:52:8b:59:56:6d:60:b4:12:ff: 6e:c8:49:8f:08:3f:91:e0:a3:cd:4c:60:47:92:11: 7e:89:73:86:f7:1a:0d:3a:6c:31:dd:4c:cf:fc:15: 87:d2:50:5c:3c:b8:ea:b6:c8:5c:c8:ad:14:13:4e: 18:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:EC:8C:78:02:CD:C6:4B:23:24:FC:5A:C6:46:70:DF:A7:A8:92 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c8:08:77:05:94:03:b9:57:b8:d4:e5:7d:bf:1a:a6:db:27: ea:6c:98:3d:b9:41:bb:33:5a:29:79:cc:da:2f:76:83:af:45: dc:75:fc:ef:32:78:68:e9:d4:07:40:32:14:95:ae:28:2a:20: 51:95:eb:92:a8:7e:d9:40:9d:14:d9:74:65:48:04:88:3d:50: 7b:2e:a7:6d:99:37:40:d9:d7:73:99:82:f5:71:73:15:4f:ef: 4b:9e:9f:6c:f6:5c:4f:4f:96:cd:2d:e4:d8:e2:e9:5e:aa:fa: 1d:49:05:8c:e9:e7:cd:f8:4f:d3:97:f2:02:93:02:20:07:75: fc:84:51:78:d3:5e:ec:52:18:19:1c:d5:73:5f:57:df:8d:d7: 1f:66:ae:6a:bd:79:be:b6:88:9d:41:d9:a0:dd:8f:6e:0c:f0: 13:88:5f:96:cf:c3:da:bd:c3:08:1d:38:b5:b6:51:17:00:8e: 9e:8c:43:00:19:bc:99:2f:b1:a1:b0:89:38:51:d5:62:4a:3c: 19:99:4f:f3:52:c7:ed:1c:40:3e:24:a2:8b:dd:a9:a1:eb:85: d7:c5:98:e0:6a:33:4f:5b:fb:37:b9:12:ce:a5:01:40:cf:97: 23:31:d7:88:f7:f5:75:e7:01:85:f0:ea:4b:2d:ad:15:74:3f: 44:49:7d:40 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjYwNDA2MTkwMDAzWhcNMjYwNDEzMTkwMDAzWjAYMRYwFAYD VQQDEw02OWQ0MDJiMy1mY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuN4j3tU4c4nTKdXIvqSonBp9i0NbEJqLPkIjA/MpIcyBrgQEcTzuF9RsBafU c2NS5Vi5iaCaQIuQf7s4NWceXdxA8hHmMskFoWaYaTXClkAP1uIogwzJz5nM0HTx Zveyxd2z2Wn7lM3V1YyGje1Bdim7OyvKweb3ZG7rknxjEh2rr3lAs/ct97DuLt5J +Iqag0nE0A4QRlrjI+qD80kfU66030+TbhI1tNtOVSpaRdNEswfKbd0uSsUvWoYH mWvsBmhCkTviaTxSi1lWbWC0Ev9uyEmPCD+R4KPNTGBHkhF+iXOG9xoNOmwx3UzP /BWH0lBcPLjqtshcyK0UE04YrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNIl7Ix4 As3GSyMk/FrGRnDfp6iSMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABsgIdwWUA7lXuNTlfb8aptsn6myYPblBuzNaKXnM2i92g69F3HX87zJ4aOnU B0AyFJWuKCogUZXrkqh+2UCdFNl0ZUgEiD1Qey6nbZk3QNnXc5mC9XFzFU/vS56f bPZcT0+WzS3k2OLpXqr6HUkFjOnnzfhP05fyApMCIAd1/IRReNNe7FIYGRzVc19X 343XH2auar15vraInUHZoN2PbgzwE4hfls/D2r3DCB04tbZRFwCOnoxDABm8mS+x obCJOFHVYko8GZlP81LH7RxAPiSii92poeuF18WY4GozT1v7N7kSzqUBQM+XIzHX iPf1decBhfDqSy2tFXQ/REl9QA== -----END CERTIFICATE-----Generated at Tue Apr 7 21:06:29 2026 by rpki-client