$ rpki-client -vvf rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft File: rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft (raw, json) Hash identifier: ovQNrALVfWtL/Ra9uFkTaoHFuNCGK7770f+mOGaUeQc= Subject key identifier: 85:3E:F5:A9:90:56:61:A2:3E:86:1F:C0:B4:A3:5B:51:FA:43:E4:21 Authority key identifier: AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 Certificate issuer: /CN=A9141BAE/serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft Manifest number: 7C Signing time: Sun 05 Apr 2026 07:09:09 +0000 Manifest this update: Sun 05 Apr 2026 07:09:09 +0000 Manifest next update: Sun 12 Apr 2026 07:09:09 +0000 Files and hashes: 1: rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl (hash: wF21ML9/KVuc4Z+POPX2aCgUoZgvZZ2EbSEkfZXvtKM=) 2: 802EA36AE88B11F09D8DF0484F6F56BC.roa (hash: CjISRCjOn0m+5030aubSSBLk5SCQO1cBM9gnCnW5SlI=) 3: B752BBF0EF0811F098A4972A416F56BC.roa (hash: rSx6SG/CH+Eqp7hGNaOrkPucM6ELj4c471xwycPS5Rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141BAE, serialNumber=AC6A05C19DE377FAFEADA8870C90E43DDDE82D32 Validity Not Before: Apr 5 07:09:09 2026 GMT Not After : Apr 12 07:09:09 2026 GMT Subject: CN=69d20a95-3d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:20:11:8e:94:59:df:59:cf:a5:50:9f:ae: 47:e3:42:7e:3e:db:de:27:69:6b:e6:14:04:c1:f5: f8:e9:57:ae:d1:9f:92:b7:ec:e0:3d:06:8c:2c:0a: d9:20:7b:21:21:f7:a4:20:da:40:40:fa:c7:3f:4c: 13:e0:d3:c0:0b:fc:c2:83:f9:03:6d:db:61:48:d0: d4:34:36:9d:ab:23:a0:84:d1:9e:d4:75:9d:83:73: aa:1e:16:96:e7:54:5a:d4:85:69:dd:73:c3:20:eb: 0b:9a:1e:d9:e8:d5:49:9f:6e:6a:52:8f:a1:fe:ff: a0:91:a8:7b:9e:14:2a:94:92:8d:51:f6:6e:32:98: 5f:6e:1f:05:0b:e6:e7:85:4a:c5:2b:d1:7e:c7:65: 92:de:33:e6:65:51:51:a4:43:8c:2f:4b:0d:a8:55: 66:df:0f:2a:0e:df:d1:95:e4:a2:25:ee:af:da:87: 9b:dc:6e:33:ff:e6:76:fe:9a:f5:28:b2:7b:70:89: 3a:5e:65:f9:b8:8c:1d:4a:fb:34:3d:48:a2:a6:f1: 61:f0:c1:6e:bd:e8:c0:26:96:29:13:73:1b:a9:46: 23:0a:c6:32:f3:34:7e:3b:6d:6d:51:02:28:6d:39: 08:7b:3a:14:88:dd:4e:92:9c:e3:bb:5a:e7:09:e6: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3E:F5:A9:90:56:61:A2:3E:86:1F:C0:B4:A3:5B:51:FA:43:E4:21 X509v3 Authority Key Identifier: keyid:AC:6A:05:C1:9D:E3:77:FA:FE:AD:A8:87:0C:90:E4:3D:DD:E8:2D:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGoFwZ3jd_r-raiHDJDkPd3oLTI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141BAE/720379A2814111F088D0513FC4F9AE02/rGoFwZ3jd_r-raiHDJDkPd3oLTI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:62:0c:5c:d0:bf:e5:49:70:e1:c0:bf:41:56:a0:70:e2:67: 90:7e:37:7d:53:46:53:5c:99:1c:4d:8d:0e:1d:22:d6:ab:6b: 97:c9:f5:28:50:90:d4:23:81:ee:ec:8c:de:78:51:e6:69:53: 3f:9c:a4:7a:42:13:78:2b:cb:3c:98:1c:0f:ff:bf:f4:02:50: 70:16:49:cc:e6:2f:e7:41:a7:53:de:bb:77:85:61:cf:81:1f: 81:fe:90:d3:2b:c7:a1:13:4c:f8:03:10:bd:af:3b:81:be:1e: 7c:c7:36:04:f3:8f:f0:be:18:91:79:19:5a:ef:22:f8:59:43: 76:85:e9:f0:1d:7d:d1:62:9b:66:74:d3:e2:ef:dd:bf:2f:64: d2:61:9d:ca:9a:f9:54:62:e4:d3:e8:50:27:7b:3e:4b:3b:de: 31:cb:6e:0a:51:e0:ac:81:1a:84:2d:e1:3e:4a:8d:4d:8f:5a: 8a:29:f4:7e:d3:d8:d1:c8:d6:a9:a9:10:cb:99:b4:f1:55:5d: 2b:ff:d2:af:10:11:22:8d:1e:ac:08:a7:67:59:7e:5d:d3:17: 1e:d6:a8:ae:7b:ac:6e:b0:11:dc:90:46:86:e0:71:e5:9c:0c: 53:88:3b:22:50:20:0d:ad:a6:cf:35:c9:5a:e8:d2:a5:8f:3a: fd:e8:b3:86 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFCQUUxMTAvBgNVBAUTKEFDNkEwNUMxOURFMzc3RkFGRUFEQTg4NzBDOTBFNDNE RERFODJEMzIwHhcNMjYwNDA1MDcwOTA5WhcNMjYwNDEyMDcwOTA5WjAYMRYwFAYD VQQDEw02OWQyMGE5NS0zZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAooUgEY6UWd9Zz6VQn65H40J+PtveJ2lr5hQEwfX46Veu0Z+St+zgPQaMLArZ IHshIfekINpAQPrHP0wT4NPAC/zCg/kDbdthSNDUNDadqyOghNGe1HWdg3OqHhaW 51Ra1IVp3XPDIOsLmh7Z6NVJn25qUo+h/v+gkah7nhQqlJKNUfZuMphfbh8FC+bn hUrFK9F+x2WS3jPmZVFRpEOML0sNqFVm3w8qDt/RleSiJe6v2oeb3G4z/+Z2/pr1 KLJ7cIk6XmX5uIwdSvs0PUiipvFh8MFuvejAJpYpE3MbqUYjCsYy8zR+O21tUQIo bTkIezoUiN1Okpzju1rnCeaCwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIU+9amQ VmGiPoYfwLSjW1H6Q+QhMB8GA1UdIwQYMBaAFKxqBcGd43f6/q2ohwyQ5D3d6C0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUJBRS83MjAzNzlBMjgx NDExMUYwODhEMDUxM0ZDNEY5QUUwMi9yR29Gd1ozamRfci1yYWlIREpEa1BkM29M VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHb0Z3WjNqZF9yLXJhaUhESkRrUGQzb0xUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUJBRS83MjAzNzlBMjgxNDExMUYwODhEMDUxM0ZDNEY5QUUwMi9yR29Gd1ozamRf ci1yYWlIREpEa1BkM29MVEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAImIMXNC/5Ulw4cC/QVagcOJnkH43fVNGU1yZHE2NDh0i1qtrl8n1KFCQ1COB 7uyM3nhR5mlTP5ykekITeCvLPJgcD/+/9AJQcBZJzOYv50GnU967d4Vhz4Efgf6Q 0yvHoRNM+AMQva87gb4efMc2BPOP8L4YkXkZWu8i+FlDdoXp8B190WKbZnTT4u/d vy9k0mGdypr5VGLk0+hQJ3s+SzveMctuClHgrIEahC3hPkqNTY9aiin0ftPY0cjW qakQy5m08VVdK//SrxARIo0erAinZ1l+XdMXHtaornusbrAR3JBGhuBx5ZwMU4g7 IlAgDa2mzzXJWujSpY86/eizhg== -----END CERTIFICATE-----Generated at Sun Apr 5 22:24:32 2026 by rpki-client