$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft File: 84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json) Hash identifier: /ask0RpwljBd7mpw0/DMdkCkkx6eAL0TjSqX+xKoHTc= Subject key identifier: D0:B6:85:5A:AE:C3:F9:6E:CE:A1:60:21:29:BB:50:A3:2E:EF:AA:85 Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Certificate serial: 04F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft Manifest number: 04EC Signing time: Sat 04 Apr 2026 23:31:35 +0000 Manifest this update: Sat 04 Apr 2026 23:31:35 +0000 Manifest next update: Sat 11 Apr 2026 23:31:35 +0000 Files and hashes: 1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: eVX1vkJvVBzVC/g+9Yk6Q1JRU5l5vMPnvQMZzgfC3e8=) 2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 9TiMPZCiPjXqHR9KYA2Vwop1NQpu2NZ+fmkYgv1k0eQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1266 (0x4f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F Validity Not Before: Apr 4 23:31:35 2026 GMT Not After : Apr 11 23:31:35 2026 GMT Subject: CN=69d19f57-5507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:7d:9a:42:aa:04:d3:92:9e:ab:3c:e9:77: c5:92:e6:74:84:1e:9b:d4:36:57:21:21:5d:03:64: 86:7f:6c:e9:28:37:0f:9e:d0:74:58:df:d9:03:cd: 09:89:57:fe:d1:4a:ff:e6:8a:35:db:13:cd:3a:64: fc:02:de:c5:6a:d0:22:31:43:8e:f9:a7:d0:05:44: 42:e2:7f:28:96:86:55:c6:38:ee:28:df:04:1d:87: 83:3a:f0:da:33:c5:88:95:44:fd:58:a7:be:12:a5: 26:4b:78:d4:a6:3e:bf:ab:45:34:5b:23:9e:15:2e: 77:57:a3:2f:f4:86:de:70:4d:cd:a7:4c:8e:b6:2f: 87:12:f9:a8:65:12:ed:ed:38:79:f8:d3:83:3b:57: e0:c9:c1:c6:de:ad:9d:5b:e8:62:fd:3d:75:20:f7: f9:f4:5f:5e:aa:09:61:21:bb:d5:0a:1e:2c:b7:b3: f4:f3:95:63:96:0a:c1:c0:e4:2f:e7:65:e6:e8:21: 64:5c:68:24:27:ac:2f:67:99:e4:a7:03:f9:0b:51: 09:bd:3c:1e:76:06:52:93:46:86:75:4d:3b:a4:c0: e7:ad:f4:a3:f4:55:3e:1b:dc:fd:0a:2b:83:cd:02: a5:85:1f:b2:1c:5e:a8:9f:e1:98:82:67:85:d7:7c: 05:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B6:85:5A:AE:C3:F9:6E:CE:A1:60:21:29:BB:50:A3:2E:EF:AA:85 X509v3 Authority Key Identifier: keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:b6:5c:99:6f:72:24:d0:b0:09:2e:e3:1c:89:3f:a9:8b:ed: 29:46:4a:ec:ca:63:17:4f:21:f3:95:66:7e:cd:0a:1e:64:4a: ed:97:f5:d5:92:e4:16:db:c1:6e:0c:85:2e:3d:23:fd:93:7b: 36:25:84:9f:ea:71:fc:97:53:91:35:8d:4e:7a:cd:a4:84:16: be:ba:df:9d:3b:6a:ae:a1:c8:0d:16:74:6b:50:b2:32:57:e4: 74:2d:67:3a:d3:eb:b0:d7:06:33:dd:87:19:cc:62:89:57:1f: 5a:37:30:d0:c8:45:64:30:f4:2d:dc:cc:46:91:07:c5:3b:45: f0:fa:ce:bb:30:92:a8:47:c4:83:03:64:8a:68:98:fa:99:96: 82:c8:21:0e:47:95:6f:61:4b:d3:ec:03:a3:69:14:b1:1d:df: 45:79:3c:a0:f4:27:e8:62:f0:9f:ad:6a:0b:9c:73:e8:48:4e: 91:58:de:3e:7e:1e:28:26:42:8a:08:ec:d7:cc:9f:2f:92:51: b6:9c:60:da:82:39:72:df:43:91:90:ce:9a:fe:51:95:c7:c7: 90:29:43:c5:eb:00:02:e5:b4:a8:b5:4a:ba:c1:f8:c2:a4:3f: 30:a0:ab:ae:73:f6:b6:92:31:5b:92:ca:97:11:d6:18:45:1d: e5:b9:6c:64 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhBNTAxMTAvBgNVBAUTKEYzODgyMDlDQUNCMkM2QjgxNENBQzU3ODVENEJGNEQz NkNDNDk3MUYwHhcNMjYwNDA0MjMzMTM1WhcNMjYwNDExMjMzMTM1WjAYMRYwFAYD VQQDEw02OWQxOWY1Ny01NTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZl9mkKqBNOSnqs86XfFkuZ0hB6b1DZXISFdA2SGf2zpKDcPntB0WN/ZA80J iVf+0Ur/5oo12xPNOmT8At7FatAiMUOO+afQBURC4n8oloZVxjjuKN8EHYeDOvDa M8WIlUT9WKe+EqUmS3jUpj6/q0U0WyOeFS53V6Mv9IbecE3Np0yOti+HEvmoZRLt 7Th5+NODO1fgycHG3q2dW+hi/T11IPf59F9eqglhIbvVCh4st7P085VjlgrBwOQv 52Xm6CFkXGgkJ6wvZ5nkpwP5C1EJvTwedgZSk0aGdU07pMDnrfSj9FU+G9z9CiuD zQKlhR+yHF6on+GYgmeF13wFOwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNC2hVqu w/luzqFgISm7UKMu76qFMB8GA1UdIwQYMBaAFPOIIJysssa4FMrFeF1L9NNsxJcf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEE1MC9DOUE3QTQzODU2 RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhyZ1V5c1Y0WFV2MDAyekVs eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0Z2duS3l5eHJnVXlzVjRYVXYwMDJ6RWx4OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEE1MC9DOUE3QTQzODU2RjkxMUVDODM2RTkxMERDNEY5QUUwMi84NGdnbkt5eXhy Z1V5c1Y0WFV2MDAyekVseDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXbZcmW9yJNCwCS7jHIk/qYvtKUZK7MpjF08h85Vmfs0KHmRK7Zf11ZLkFtvB bgyFLj0j/ZN7NiWEn+px/JdTkTWNTnrNpIQWvrrfnTtqrqHIDRZ0a1CyMlfkdC1n OtPrsNcGM92HGcxiiVcfWjcw0MhFZDD0LdzMRpEHxTtF8PrOuzCSqEfEgwNkimiY +pmWgsghDkeVb2FL0+wDo2kUsR3fRXk8oPQn6GLwn61qC5xz6EhOkVjePn4eKCZC igjs18yfL5JRtpxg2oI5ct9DkZDOmv5RlcfHkClDxesAAuW0qLVKusH4wqQ/MKCr rnP2tpIxW5LKlxHWGEUd5blsZA== -----END CERTIFICATE-----Generated at Sun Apr 5 20:01:22 2026 by rpki-client