$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: oReEhw75p/oAak8aGNPAqOi64FxlBCOEkv+AlyjXnqI= Subject key identifier: CB:B0:91:D7:C8:0B:AA:CC:24:28:5F:62:94:B9:AD:F6:75:5D:13:F3 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 0334 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 032A Signing time: Sun 05 Apr 2026 00:49:46 +0000 Manifest this update: Sun 05 Apr 2026 00:49:45 +0000 Manifest next update: Sun 12 Apr 2026 00:49:45 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: acL7Qu1Jnvq2wT0WSEtZb4go/4tU76TfNB5EOQ2ZS5Y=) 2: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: te2pLoJZYO3JYrW3CAq/cTYGshKCIgPSrs/rQNrttpI=) 3: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: zJhTBwWvG8hmDhtzVqHYpoi7kDNMPWyue7YoZZ3MSOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 820 (0x334) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Apr 5 00:49:45 2026 GMT Not After : Apr 12 00:49:45 2026 GMT Subject: CN=69d1b1aa-907a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:dd:e2:c3:9f:d5:1d:ac:33:6e:f3:86:1a: 2d:ff:53:f6:0c:1b:45:44:d4:1b:d1:9b:1e:85:b3: f3:1d:df:79:bd:1d:29:70:d2:3f:6c:2b:a7:b0:00: d6:9c:19:1e:1c:d4:6c:88:1d:ab:30:27:e1:2d:85: de:e0:a5:d5:29:6f:2d:d7:70:99:10:a9:46:96:e4: 01:14:df:0f:b5:8b:b9:04:02:ad:ac:5d:66:4e:1f: 06:b5:ff:97:d0:03:80:00:48:75:22:63:9f:5c:a4: 8b:45:f3:e6:1d:af:c7:57:d4:08:89:a0:79:51:93: 9e:8f:b8:c4:67:83:8a:a6:5d:b4:69:e3:38:21:c5: da:7d:84:d7:c1:43:f1:5e:73:2f:6b:1a:6e:b5:c5: 98:1b:4b:23:29:de:cb:de:25:a1:ac:39:f0:63:63: f8:47:54:53:3c:2f:62:57:be:2b:44:67:74:28:9d: d1:64:55:a1:f3:69:3f:79:da:ab:44:5c:56:6a:50: 06:07:4c:b6:25:5a:eb:f4:32:bb:aa:d3:dd:96:6e: 26:ae:bf:77:3b:a0:5a:5d:b8:ca:a3:9f:6d:31:0c: 0d:79:14:35:ae:7f:f1:01:de:95:8d:55:3f:e4:7d: 20:be:9f:26:ce:d8:e1:d5:de:d9:29:f5:ed:7d:f1: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B0:91:D7:C8:0B:AA:CC:24:28:5F:62:94:B9:AD:F6:75:5D:13:F3 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6a:ba:0d:7d:7c:fe:51:68:0a:89:79:20:2b:7d:44:0c:5c: 89:a5:ce:54:b6:79:fc:88:cd:c6:d0:ba:9a:6a:9c:c2:0c:eb: 6a:68:c0:1c:10:12:8e:a2:e1:89:70:5e:e7:ad:cb:4c:f1:1a: 15:8d:42:a9:f2:87:0e:79:92:54:b9:dd:a9:18:22:92:b5:d5: e5:85:c0:38:4b:ef:43:a9:49:8b:2a:87:e4:62:fd:2a:e7:9b: a8:84:ef:9c:50:d5:d1:0e:e8:1e:6d:0f:51:92:e5:d8:4f:15: ad:a7:27:4e:77:c2:97:25:f2:58:56:b9:b8:2e:04:1a:2a:15: 85:bd:26:0a:57:24:18:a8:eb:ae:4c:53:9e:e1:56:5b:9c:4b: 1f:99:5a:cd:6f:9b:d7:2d:b2:a0:57:34:71:49:15:de:b9:8e: 2f:40:c9:7d:72:dd:70:72:f5:ae:c7:76:5e:a6:c6:ef:60:a4: 06:17:f4:f1:99:4b:94:c9:a8:d6:ee:58:33:c2:12:32:f5:3b: 7c:35:c0:2e:5e:03:44:02:c4:f4:66:45:47:b2:e9:2b:4a:8f: e7:37:05:42:55:8c:f7:a0:30:ec:1f:9d:a0:bd:20:e2:2b:19: 99:47:3e:a6:fd:1b:9c:59:7f:e4:5d:e1:22:6d:e4:95:bb:00: 5b:ce:01:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwNDA1MDA0OTQ1WhcNMjYwNDEyMDA0OTQ1WjAYMRYwFAYD VQQDEw02OWQxYjFhYS05MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoTzd4sOf1R2sM27zhhot/1P2DBtFRNQb0ZsehbPzHd95vR0pcNI/bCunsADW nBkeHNRsiB2rMCfhLYXe4KXVKW8t13CZEKlGluQBFN8PtYu5BAKtrF1mTh8Gtf+X 0AOAAEh1ImOfXKSLRfPmHa/HV9QIiaB5UZOej7jEZ4OKpl20aeM4IcXafYTXwUPx XnMvaxputcWYG0sjKd7L3iWhrDnwY2P4R1RTPC9iV74rRGd0KJ3RZFWh82k/edqr RFxWalAGB0y2JVrr9DK7qtPdlm4mrr93O6BaXbjKo59tMQwNeRQ1rn/xAd6VjVU/ 5H0gvp8mztjh1d7ZKfXtffE5wQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMuwkdfI C6rMJChfYpS5rfZ1XRPzMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAC2q6DX18/lFoCol5ICt9RAxciaXOVLZ5/IjNxtC6mmqcwgzramjAHBASjqLh iXBe563LTPEaFY1CqfKHDnmSVLndqRgikrXV5YXAOEvvQ6lJiyqH5GL9KuebqITv nFDV0Q7oHm0PUZLl2E8VracnTnfClyXyWFa5uC4EGioVhb0mClckGKjrrkxTnuFW W5xLH5lazW+b1y2yoFc0cUkV3rmOL0DJfXLdcHL1rsd2XqbG72CkBhf08ZlLlMmo 1u5YM8ISMvU7fDXALl4DRALE9GZFR7LpK0qP5zcFQlWM96Aw7B+doL0g4isZmUc+ pv0bnFl/5F3hIm3klbsAW84Bqw== -----END CERTIFICATE-----Generated at Sun Apr 5 19:58:27 2026 by rpki-client