$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: IHQGuRTtCvA1NHXNSzIJDdnlR5ZveDwP4M9G4fKGx/w= Subject key identifier: 7C:C8:EA:D4:54:5D:14:A5:BF:60:DC:07:86:F7:C5:33:D2:FF:3F:C1 Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 08CE Signing time: Sat 04 Apr 2026 20:11:59 +0000 Manifest this update: Sat 04 Apr 2026 20:11:59 +0000 Manifest next update: Sat 11 Apr 2026 20:11:59 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: gbwPZsjak1I7UrGt8Z7lERflw+fW/kU4E2ZqVrRqfL8=) 2: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: 9utKPxoH2n6Lt3z3yPm91op8vGhWDr2B1tZqqN/7b1Q=) 3: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: cdnSLxMfhuwZ6Et2fzD+gihlVu8L05hih+WXS+qI80c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Apr 4 20:11:59 2026 GMT Not After : Apr 11 20:11:59 2026 GMT Subject: CN=69d1708f-5bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:05:e9:b5:1e:8d:f3:eb:43:91:c5:94:4d: 03:01:1c:0e:56:d1:b9:b2:ee:9e:1e:bc:ed:5a:e3: 18:f7:c4:57:d9:da:f5:d5:5a:b5:69:9a:33:f0:b8: 63:29:fd:6d:d0:8c:02:24:1e:a8:3e:3a:2f:4c:c1: c3:a3:50:2f:b7:6b:34:03:8e:e3:0f:bc:cf:24:b0: b7:a9:0b:75:2e:45:4d:fc:ef:09:b1:88:c8:5e:86: e9:a0:6b:d6:1c:fe:cb:ed:cc:8c:6b:52:ba:c6:42: 47:40:41:97:ab:25:a3:8a:1b:f2:96:74:05:86:3d: 54:7a:48:dc:86:b9:96:b5:4c:9a:f4:b5:62:a4:0f: 16:2b:6d:ab:7e:d6:57:38:e0:c4:70:75:3d:9b:49: a7:8c:bb:8b:c2:75:0e:10:8b:98:93:c9:58:07:0a: 1b:70:86:b9:7d:dc:be:3e:3b:7c:f3:24:fa:ee:d1: 31:e9:2b:34:a9:87:80:0d:50:53:5a:84:02:d8:a6: 19:9c:11:5d:5c:c2:68:1a:e6:29:16:1d:b5:6f:0f: 28:26:fa:10:e6:c2:0a:20:5f:af:45:b3:37:34:26: 3a:ab:8f:41:49:f9:2c:4e:20:c1:b1:74:af:e7:8a: 88:6d:f2:62:2d:6b:c3:d1:a8:6b:43:e2:65:7f:37: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C8:EA:D4:54:5D:14:A5:BF:60:DC:07:86:F7:C5:33:D2:FF:3F:C1 X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:c6:84:8d:bc:c2:a1:01:90:eb:18:ec:ad:b0:bd:7a:26:6f: d6:4d:22:df:bf:24:bc:b3:b1:65:99:cf:0d:7e:e0:0f:85:55: 49:4b:6d:61:e6:a5:98:28:50:98:c0:38:e1:71:ea:f3:b1:9f: 6f:b5:03:8d:3a:7a:a5:bf:16:cf:fd:6f:12:21:96:c7:e1:f0: 45:f0:47:97:c3:55:33:92:8e:bf:bd:6f:22:7b:dd:8c:32:c0: 61:7d:8e:c0:25:9e:b8:2e:30:5c:e3:f1:7c:4b:56:e3:fd:d1: 29:2d:a3:e5:6c:97:ec:fc:93:00:eb:c9:e4:c1:a4:e5:bc:ca: 73:d9:2f:e8:fb:1c:0b:22:b0:0b:a5:4d:9f:84:ea:7d:c9:a4: 56:f9:e6:c5:58:f8:d8:46:b0:8c:a8:24:67:a9:a0:b6:92:2e: 2c:01:42:12:54:8c:62:d1:13:75:28:48:89:95:28:55:6c:6d: 91:3e:46:dd:d8:3f:24:dd:4e:47:60:9a:a3:2a:a1:2b:6d:38: 6f:0d:fc:bb:b2:26:74:0e:7c:a5:25:c4:0d:03:b0:8d:7b:e8: bf:fb:a0:96:56:26:7e:14:8d:e6:e9:ee:c4:d1:ec:6b:7e:fa: a7:d9:75:0e:6b:13:34:83:b4:a9:db:c4:ae:0c:ae:b4:7f:1f: d9:c2:87:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjYwNDA0MjAxMTU5WhcNMjYwNDExMjAxMTU5WjAYMRYwFAYD VQQDEw02OWQxNzA4Zi01YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5wF6bUejfPrQ5HFlE0DARwOVtG5su6eHrztWuMY98RX2dr11Vq1aZoz8Lhj Kf1t0IwCJB6oPjovTMHDo1Avt2s0A47jD7zPJLC3qQt1LkVN/O8JsYjIXobpoGvW HP7L7cyMa1K6xkJHQEGXqyWjihvylnQFhj1UekjchrmWtUya9LVipA8WK22rftZX OODEcHU9m0mnjLuLwnUOEIuYk8lYBwobcIa5fdy+Pjt88yT67tEx6Ss0qYeADVBT WoQC2KYZnBFdXMJoGuYpFh21bw8oJvoQ5sIKIF+vRbM3NCY6q49BSfksTiDBsXSv 54qIbfJiLWvD0ahrQ+JlfzfEXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHzI6tRU XRSlv2DcB4b3xTPS/z/BMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJMaEjbzCoQGQ6xjsrbC9eiZv1k0i378kvLOxZZnPDX7gD4VVSUttYealmChQ mMA44XHq87Gfb7UDjTp6pb8Wz/1vEiGWx+HwRfBHl8NVM5KOv71vInvdjDLAYX2O wCWeuC4wXOPxfEtW4/3RKS2j5WyX7PyTAOvJ5MGk5bzKc9kv6PscCyKwC6VNn4Tq fcmkVvnmxVj42EawjKgkZ6mgtpIuLAFCElSMYtETdShIiZUoVWxtkT5G3dg/JN1O R2CaoyqhK204bw38u7ImdA58pSXEDQOwjXvov/ugllYmfhSN5unuxNHsa376p9l1 DmsTNIO0qdvErgyutH8f2cKHWg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:40:08 2026 by rpki-client