$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json) Hash identifier: SX7sJuflbFMJqIUClpkKWBee52mtJ3w4RNatgOVeUO8= Subject key identifier: 97:B2:82:3F:A4:6F:AF:07:42:07:23:7B:EF:E9:98:91:16:0E:52:D8 Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 034E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft Manifest number: 0347 Signing time: Sun 05 Apr 2026 00:44:36 +0000 Manifest this update: Sun 05 Apr 2026 00:44:35 +0000 Manifest next update: Sun 12 Apr 2026 00:44:35 +0000 Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: 4yu8xd7BkxWs5h/BKOEAi2bd/wTDHy5QOxu5+DS6MPw=) 2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 846 (0x34e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Apr 5 00:44:35 2026 GMT Not After : Apr 12 00:44:35 2026 GMT Subject: CN=69d1b074-468a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:87:0b:37:3e:f1:f5:6c:52:69:17:a6:00: a7:4f:34:b1:a3:b1:c4:fe:99:f0:b1:8c:b7:a7:b9: cb:b2:5a:a0:df:d7:3a:0a:5b:8e:73:e7:9a:6d:7b: 5f:42:5f:ee:ff:a4:33:11:50:d2:e1:98:d6:c9:db: 1e:db:ac:40:89:fb:bf:88:43:49:c6:ce:e3:2f:7a: 24:2f:c7:bb:ba:68:ab:79:a4:c8:e2:d2:60:57:9d: 7a:01:e6:f2:2b:60:11:51:13:82:25:d8:39:87:97: 5c:ff:f6:7c:5a:e2:75:3a:12:f5:09:eb:5b:52:f1: 4f:16:0e:31:e8:35:d3:42:89:b9:0d:4f:91:20:5c: da:6b:bc:af:4d:09:d5:c1:76:52:8e:9b:e2:77:87: 7e:32:b7:bc:c8:32:70:8f:b8:cc:76:2f:0e:0c:ee: 70:9c:6a:00:8d:69:1f:31:b6:9f:f9:65:4e:c5:9b: aa:73:56:d6:db:0e:f2:ec:de:6a:36:5a:72:d3:47: 93:78:87:01:4b:9b:2f:95:56:43:96:00:39:cc:2b: 44:40:f0:21:fb:bc:82:59:09:b2:46:52:53:56:aa: 57:96:d8:ac:00:f9:f3:a0:1c:3f:da:83:6e:1c:ba: 9d:be:ab:62:00:8a:09:2c:55:2c:e7:aa:33:21:4e: 67:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B2:82:3F:A4:6F:AF:07:42:07:23:7B:EF:E9:98:91:16:0E:52:D8 X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:8b:18:92:fc:e8:0e:02:ba:33:78:68:25:f8:63:23:75:ba: 9b:aa:9b:ee:8c:a7:1d:b7:30:0d:f4:0b:58:b3:a3:bd:bf:e5: 21:bc:93:ce:72:ab:8a:37:6a:b3:76:87:7b:bd:4c:6a:db:c9: 80:d3:b1:da:bd:ef:d0:84:00:fb:63:25:ff:1e:85:b6:46:04: 22:78:99:d9:55:5f:54:55:b2:78:87:a7:7b:8a:3b:89:2f:ee: ab:70:c2:69:e6:e6:d8:09:49:de:69:08:0a:0a:98:b0:2a:3a: ec:44:c8:c0:b5:31:ad:5a:05:dd:22:51:34:50:62:64:d3:b5: 08:17:2c:05:24:a5:24:98:83:4a:fb:80:2f:52:ba:d5:28:6e: c5:cc:e1:06:b0:f2:ac:54:8c:f8:87:1f:bf:92:62:6a:a3:b4: 86:52:14:8e:12:a4:e7:1c:fc:d4:ca:b6:7c:97:dd:58:9b:36: 27:5a:c9:e6:a5:3e:d0:48:93:4d:9d:b6:d7:58:d2:e2:fa:95: bf:fa:2a:99:f5:00:7d:96:2f:ff:05:0d:fc:ed:f7:e4:eb:90: 64:91:a1:0c:ae:94:5f:54:64:be:b0:d5:ed:63:54:ed:1f:ef: ca:0b:df:dd:f7:48:50:13:6f:65:c2:eb:09:f4:68:17:35:8a: cb:f4:8c:81 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjYwNDA1MDA0NDM1WhcNMjYwNDEyMDA0NDM1WjAYMRYwFAYD VQQDEw02OWQxYjA3NC00NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6lqHCzc+8fVsUmkXpgCnTzSxo7HE/pnwsYy3p7nLslqg39c6CluOc+eabXtf Ql/u/6QzEVDS4ZjWydse26xAifu/iENJxs7jL3okL8e7umireaTI4tJgV516Aeby K2ARUROCJdg5h5dc//Z8WuJ1OhL1CetbUvFPFg4x6DXTQom5DU+RIFzaa7yvTQnV wXZSjpvid4d+Mre8yDJwj7jMdi8ODO5wnGoAjWkfMbaf+WVOxZuqc1bW2w7y7N5q Nlpy00eTeIcBS5svlVZDlgA5zCtEQPAh+7yCWQmyRlJTVqpXltisAPnzoBw/2oNu HLqdvqtiAIoJLFUs56ozIU5nLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJeygj+k b68HQgcje+/pmJEWDlLYMB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX OUh0NGI5MC1lb2plUXJCN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVIsYkvzoDgK6M3hoJfhjI3W6m6qb7oynHbcwDfQLWLOjvb/lIbyTznKrijdq s3aHe71MatvJgNOx2r3v0IQA+2Ml/x6FtkYEIniZ2VVfVFWyeIene4o7iS/uq3DC aebm2AlJ3mkICgqYsCo67ETIwLUxrVoF3SJRNFBiZNO1CBcsBSSlJJiDSvuAL1K6 1ShuxczhBrDyrFSM+Icfv5JiaqO0hlIUjhKk5xz81Mq2fJfdWJs2J1rJ5qU+0EiT TZ2211jS4vqVv/oqmfUAfZYv/wUN/O335OuQZJGhDK6UX1RkvrDV7WNU7R/vygvf 3fdIUBNvZcLrCfRoFzWKy/SMgQ== -----END CERTIFICATE-----Generated at Sun Apr 5 23:51:05 2026 by rpki-client