$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: Sr2tWSAVx5zHQvp8vDNZxjCxVYuWt2UZpv9p0gblvQU= Subject key identifier: 59:2B:FA:2B:0D:05:3B:A0:43:4E:20:3E:DF:04:4D:FC:F8:F7:C1:20 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 0496 Signing time: Sat 04 Apr 2026 23:46:31 +0000 Manifest this update: Sat 04 Apr 2026 23:46:30 +0000 Manifest next update: Sat 11 Apr 2026 23:46:30 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: WHV+dnI4s9ftiCpYkhgywQ42gncewgCfCF0YQrEtAoo=) 2: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: Q/WW69HDFqBmPazKy9CWTwg7ADAfQr3xucgCfcoGH6o=) 3: 4B167396E74111EC80E35542C4F9AE02.roa (hash: s3LCy4JitIxrk8TrdHNnZ3pFI/mZ0+J3BlkxeqJMpVg=) 4: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: Jq67A+F4rIfzW8WwGVI/74n9tCcPV6PLGYDBFsxh/v4=) 5: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: 3jewHBb77PCvairN2996ZvKaBpoln62DoJ8FtmWYmYo=) 6: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: woJiUlfh+5rrMBDG7PnsvNBeiKjiLhLTkpDWmy2sy4w=) 7: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: W6dMaUqeZUZ5yl2vrB4kDnmuCp2AkA9688MbXMn1Iu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Apr 4 23:46:30 2026 GMT Not After : Apr 11 23:46:30 2026 GMT Subject: CN=69d1a2d7-e297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:e4:1c:82:9c:c2:74:55:0e:78:54:b9:97: 63:71:15:54:39:61:f7:a7:0f:cb:4f:5d:ea:5f:a7: 45:45:d1:c0:4f:17:a0:3c:0b:9a:81:0c:5c:28:19: 35:f6:90:a1:2c:c2:e8:f7:3f:2c:72:40:95:5d:0b: 85:ea:be:95:c3:6f:1e:22:e8:46:a4:64:ac:79:2f: ad:ae:0f:c8:92:bf:df:8a:29:14:6b:30:65:40:cf: 44:03:05:48:34:bc:a6:f7:97:25:8e:7f:51:db:8a: e4:e2:d5:9e:8c:7a:b5:49:45:b0:ca:26:34:ac:0a: e3:3f:75:0b:c7:7c:75:a6:11:bd:1e:f7:9d:bb:35: 8e:46:1a:8f:33:1d:ac:99:d2:c7:9b:52:40:a5:1e: cc:58:f4:b3:27:3c:34:66:bf:2d:d7:1e:78:32:2c: d7:e1:35:ce:eb:d5:73:55:c8:37:f5:41:5f:63:1d: 36:c2:81:71:7d:d4:af:bf:09:f5:ec:2c:5d:54:7d: b1:80:e2:3d:75:03:90:5a:75:6d:55:62:26:3c:d9: 70:ee:b9:27:5f:fb:7f:7f:1f:6f:c3:47:cc:93:00: d2:af:ee:e4:6e:dc:62:81:2b:66:7f:bd:02:3b:b2: c9:6f:67:25:d7:f1:a7:2b:a0:53:d1:68:b1:2c:5e: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2B:FA:2B:0D:05:3B:A0:43:4E:20:3E:DF:04:4D:FC:F8:F7:C1:20 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:e2:ca:dc:a7:51:ab:9a:e9:63:88:8b:c3:d6:57:fd:1a:cd: f2:2d:ab:76:65:5b:94:80:5b:90:a7:06:07:f5:5d:bc:f6:8b: ed:61:80:9f:6b:13:5a:f5:c0:55:9a:35:af:91:b9:68:ae:aa: e1:39:48:bd:fe:f8:59:00:b7:d8:f6:7d:f5:15:7b:1e:b9:30: 77:c4:7e:da:23:15:24:a6:e3:32:4a:b7:7e:a2:fe:89:9f:49: 1c:0b:d4:81:72:65:5a:1a:e3:6b:13:5a:d3:e4:2a:1e:66:d2: 4b:96:46:a9:d4:08:ab:e6:5a:3c:ea:5e:d6:1e:a1:37:1f:88: dd:86:20:0a:be:74:89:14:23:df:06:ce:f3:08:38:50:da:cd: f1:5f:97:09:57:47:bf:01:f1:99:f2:16:2d:24:b8:9e:be:82: 62:f1:0e:5d:b8:72:84:11:30:36:77:85:6a:6f:93:ca:6b:a3: 42:60:03:91:27:39:16:06:ca:e0:c3:ee:97:0b:43:9b:07:50: 74:21:00:0b:a0:74:cc:59:a5:fd:13:a0:bf:5c:f2:46:93:77: 86:f4:ea:77:bf:7a:85:b0:90:8a:86:45:59:f3:23:77:4b:21: 97:6a:b5:91:31:e6:58:0a:35:88:d5:a0:10:3a:fa:20:ee:30: 7a:f9:54:76 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwNDA0MjM0NjMwWhcNMjYwNDExMjM0NjMwWjAYMRYwFAYD VQQDEw02OWQxYTJkNy1lMjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7XkHIKcwnRVDnhUuZdjcRVUOWH3pw/LT13qX6dFRdHATxegPAuagQxcKBk1 9pChLMLo9z8sckCVXQuF6r6Vw28eIuhGpGSseS+trg/Ikr/fiikUazBlQM9EAwVI NLym95cljn9R24rk4tWejHq1SUWwyiY0rArjP3ULx3x1phG9HveduzWORhqPMx2s mdLHm1JApR7MWPSzJzw0Zr8t1x54MizX4TXO69VzVcg39UFfYx02woFxfdSvvwn1 7CxdVH2xgOI9dQOQWnVtVWImPNlw7rknX/t/fx9vw0fMkwDSr+7kbtxigStmf70C O7LJb2cl1/GnK6BT0WixLF4ibQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFkr+isN BTugQ04gPt8ETfz498EgMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHOLK3KdRq5rpY4iLw9ZX/RrN8i2rdmVblIBbkKcGB/VdvPaL7WGAn2sTWvXA VZo1r5G5aK6q4TlIvf74WQC32PZ99RV7Hrkwd8R+2iMVJKbjMkq3fqL+iZ9JHAvU gXJlWhrjaxNa0+QqHmbSS5ZGqdQIq+ZaPOpe1h6hNx+I3YYgCr50iRQj3wbO8wg4 UNrN8V+XCVdHvwHxmfIWLSS4nr6CYvEOXbhyhBEwNneFam+TymujQmADkSc5FgbK 4MPulwtDmwdQdCEAC6B0zFml/ROgv1zyRpN3hvTqd796hbCQioZFWfMjd0shl2q1 kTHmWAo1iNWgEDr6IO4wevlUdg== -----END CERTIFICATE-----Generated at Sun Apr 5 19:51:16 2026 by rpki-client