$ rpki-client -vvf rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft File: fCqWpakDTN8qeG9kvfJ_2KxRySs.mft (raw, json) Hash identifier: xH4DHJxMgpqJ2dw39MDmO3kTkWoa/x1bRCMUvNI+oYE= Subject key identifier: 27:1E:17:8A:22:25:0A:CC:D0:59:F4:D7:E2:C6:EA:C7:7E:CE:0D:DD Authority key identifier: 7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B Certificate issuer: /CN=A9125E89/serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Certificate serial: 0695 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft Manifest number: 068D Signing time: Sat 04 Apr 2026 22:16:29 +0000 Manifest this update: Sat 04 Apr 2026 22:16:28 +0000 Manifest next update: Sat 11 Apr 2026 22:16:28 +0000 Files and hashes: 1: fCqWpakDTN8qeG9kvfJ_2KxRySs.crl (hash: DRNoCYUoZlhMf0NPC7glDUOnfho+s9mKI1Q8+c+LHqA=) 2: 12CC9D1857A711EDB284106DC4F9AE02.roa (hash: BveT190IYa4IZx/c6x7to7FKf5iRH7eeNb+xgKFxkXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 22:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1685 (0x695) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125E89, serialNumber=7C2A96A5A9034CDF2A786F64BDF27FD8AC51C92B Validity Not Before: Apr 4 22:16:28 2026 GMT Not After : Apr 11 22:16:28 2026 GMT Subject: CN=69d18dbd-e766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:28:96:5d:ea:4c:95:7e:86:c3:09:ac:1b:cd: e6:a0:50:64:29:4b:2a:8f:ef:53:35:91:47:c3:4a: cc:96:00:4a:54:4e:54:a5:ed:0f:89:5a:cc:3b:91: 3a:36:85:b9:b0:3e:ea:90:f4:16:f7:2a:9d:35:2d: 02:d6:05:c3:76:ef:a7:85:fc:c2:a0:73:f3:b3:e8: d8:98:a9:fb:0a:bc:f3:27:ba:9c:48:d4:e8:b8:5b: d3:8d:37:a6:b9:57:32:0a:9b:cb:9c:cc:28:e6:77: ff:a8:ec:12:d9:cc:3f:df:31:c7:d3:b0:c9:21:ff: 0b:ed:72:48:fa:b5:e2:eb:29:c0:43:98:a3:12:b8: 44:63:6f:67:2f:af:af:47:07:48:ab:be:c3:57:ae: f8:57:d6:f7:71:00:ce:2a:b3:8d:ca:52:3b:e3:ac: 6e:88:6f:f2:47:67:fa:df:fb:cf:f2:01:ef:f6:7a: 03:a7:60:51:73:e0:31:9a:52:52:4b:11:e8:68:7b: f7:0e:69:a5:3c:73:c1:49:bc:27:e2:b0:78:19:1f: 7d:0d:4f:c9:5c:af:18:5d:12:ac:bf:ba:0d:44:f7: 1e:66:a5:ca:1e:ea:41:06:22:56:26:a7:71:c1:43: 52:8a:bb:59:49:2c:d3:81:d5:4b:2a:bd:40:39:f6: 20:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1E:17:8A:22:25:0A:CC:D0:59:F4:D7:E2:C6:EA:C7:7E:CE:0D:DD X509v3 Authority Key Identifier: keyid:7C:2A:96:A5:A9:03:4C:DF:2A:78:6F:64:BD:F2:7F:D8:AC:51:C9:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fCqWpakDTN8qeG9kvfJ_2KxRySs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125E89/76010778B24111EB99DAE928C4F9AE02/fCqWpakDTN8qeG9kvfJ_2KxRySs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f5:53:60:bc:ef:47:d8:ec:af:f5:bf:30:39:96:b3:07:38: cd:8b:a0:01:0c:45:24:15:9f:45:6d:e5:db:ad:10:cf:25:28: 71:ce:22:9d:bd:f9:14:94:c8:37:9d:ae:fb:a8:49:13:ab:a8: be:97:73:91:f4:35:65:88:fa:30:d2:29:af:37:89:58:76:0c: 73:8e:30:4a:df:53:9d:af:97:48:1f:69:d9:4d:d3:fd:a4:e0: a9:3e:77:3f:5d:a5:cd:2d:78:50:4e:83:6b:c4:e9:97:62:be: 1d:c4:7b:4d:0e:32:0d:4e:76:bb:7d:ec:83:67:6c:31:51:df: 2f:11:23:1b:1a:97:65:43:a5:f3:00:fc:33:19:04:b7:95:d4: 01:ae:f4:87:b6:f8:11:c6:8f:8b:cb:5b:2c:fe:c1:96:ab:f7: 50:63:17:4d:58:14:ee:4c:60:00:91:bc:07:5e:38:5f:ff:f4: 93:75:1b:39:31:31:21:06:9d:0e:c3:b7:f9:bc:ef:e4:ff:ad: f5:90:44:32:ce:d1:d5:05:bf:b1:a3:46:51:c1:40:39:5d:e6: 73:cb:78:cb:69:30:db:5a:62:4e:cf:9d:e9:dd:c2:87:8b:93: 18:f7:a6:85:fc:d5:a1:07:60:ff:f5:83:ba:b2:70:ff:a5:d3: 3b:39:f1:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVFODkxMTAvBgNVBAUTKDdDMkE5NkE1QTkwMzRDREYyQTc4NkY2NEJERjI3RkQ4 QUM1MUM5MkIwHhcNMjYwNDA0MjIxNjI4WhcNMjYwNDExMjIxNjI4WjAYMRYwFAYD VQQDEw02OWQxOGRiZC1lNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCiWXepMlX6GwwmsG83moFBkKUsqj+9TNZFHw0rMlgBKVE5Upe0PiVrMO5E6 NoW5sD7qkPQW9yqdNS0C1gXDdu+nhfzCoHPzs+jYmKn7CrzzJ7qcSNTouFvTjTem uVcyCpvLnMwo5nf/qOwS2cw/3zHH07DJIf8L7XJI+rXi6ynAQ5ijErhEY29nL6+v RwdIq77DV674V9b3cQDOKrONylI746xuiG/yR2f63/vP8gHv9noDp2BRc+AxmlJS SxHoaHv3DmmlPHPBSbwn4rB4GR99DU/JXK8YXRKsv7oNRPceZqXKHupBBiJWJqdx wUNSirtZSSzTgdVLKr1AOfYgHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCceF4oi JQrM0Fn01+LG6sd+zg3dMB8GA1UdIwQYMBaAFHwqlqWpA0zfKnhvZL3yf9isUckr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUU4OS83NjAxMDc3OEIy NDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFROOHFlRzlrdmZKXzJLeFJ5 U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZDcVdwYWtEVE44cWVHOWt2ZkpfMkt4UnlTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUU4OS83NjAxMDc3OEIyNDExMUVCOTlEQUU5MjhDNEY5QUUwMi9mQ3FXcGFrRFRO OHFlRzlrdmZKXzJLeFJ5U3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcPVTYLzvR9jsr/W/MDmWswc4zYugAQxFJBWfRW3l260QzyUocc4inb35FJTI N52u+6hJE6uovpdzkfQ1ZYj6MNIprzeJWHYMc44wSt9Tna+XSB9p2U3T/aTgqT53 P12lzS14UE6Da8Tpl2K+HcR7TQ4yDU52u33sg2dsMVHfLxEjGxqXZUOl8wD8MxkE t5XUAa70h7b4EcaPi8tbLP7Blqv3UGMXTVgU7kxgAJG8B144X//0k3UbOTExIQad DsO3+bzv5P+t9ZBEMs7R1QW/saNGUcFAOV3mc8t4y2kw21piTs+d6d3Ch4uTGPem hfzVoQdg//WDurJw/6XTOznx0g== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:47 2026 by rpki-client