$ rpki-client -vvf rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft File: gOPDrlGaTxg3WsakP1N6hf96KoI.mft (raw, json) Hash identifier: DT7dO/RFyezvTifAW1vNbu3+8ShAO4ktHJ3EU/K5Yu4= Subject key identifier: FA:61:50:09:D6:E7:85:23:75:BD:D9:E2:97:82:3B:75:5D:E6:5D:AE Authority key identifier: 80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 Certificate issuer: /CN=A9177358/serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Certificate serial: 12F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft Manifest number: 12DB Signing time: Sat 04 Apr 2026 16:56:42 +0000 Manifest this update: Sat 04 Apr 2026 16:56:42 +0000 Manifest next update: Sat 11 Apr 2026 16:56:42 +0000 Files and hashes: 1: gOPDrlGaTxg3WsakP1N6hf96KoI.crl (hash: eHkco937NkHfANQv9LN++OJTHd5bSTbtlKWx5LCnf8o=) 2: 54EA0F76D36B11EBADF6AD2CC4F9AE02.roa (hash: 67lyQNjbiYHBIBW9WpGHspfkkZM/Tc9EOPndYw2IyM0=) 3: FCE4373ECAA011F0BE834809C4F9AE02.roa (hash: tZukN75APhSScUoC/I4H/NT8GRXX5KYKrXgWcXFLnoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4852 (0x12f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9177358, serialNumber=80E3C3AE519A4F18375AC6A43F537A85FF7A2A82 Validity Not Before: Apr 4 16:56:42 2026 GMT Not After : Apr 11 16:56:42 2026 GMT Subject: CN=69d142ca-ab4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:d1:3c:90:43:cc:4d:4c:95:67:1b:36:45: 9f:17:d6:fe:88:6b:92:00:61:6e:ae:3f:b7:8b:8b: 1c:e5:64:b0:5a:dd:07:5d:fd:45:85:79:71:d5:22: 2d:04:5f:71:e2:ae:b9:82:ae:d9:39:26:47:d5:81: 61:f9:36:9a:8e:33:25:2c:7b:f6:b8:be:27:7d:b2: ed:1c:b3:c4:e0:d0:f0:2e:2b:3d:6e:75:08:93:dc: 25:dd:53:bd:c6:95:ae:18:84:6a:e1:d6:fe:a7:1e: 61:7c:e4:f7:66:3d:6a:dc:99:f2:2f:2b:2d:68:93: fa:d3:70:3f:c6:08:96:d6:0c:60:e8:6d:df:44:70: 75:00:00:7e:29:7e:7b:59:b6:20:e1:6d:84:a4:a2: db:e0:12:8e:6d:9c:a6:07:50:5b:2b:fc:94:33:54: f6:1b:cb:8a:22:7e:06:2b:54:3e:48:d1:5f:40:ff: 46:a4:f6:5a:45:23:0d:de:70:f0:2b:92:23:5e:d3: a5:25:8e:bd:7e:e5:fb:17:88:16:e7:89:86:da:72: de:a0:b0:2d:78:e3:ec:fb:75:ec:27:8d:a6:17:bf: 98:66:94:03:0b:7b:2b:82:8b:10:86:c5:74:7e:1d: 8d:b5:34:dc:e2:64:0a:32:ba:48:84:28:ff:4a:04: d7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:61:50:09:D6:E7:85:23:75:BD:D9:E2:97:82:3B:75:5D:E6:5D:AE X509v3 Authority Key Identifier: keyid:80:E3:C3:AE:51:9A:4F:18:37:5A:C6:A4:3F:53:7A:85:FF:7A:2A:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gOPDrlGaTxg3WsakP1N6hf96KoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177358/BE84F094DD0B11E885449A40C4F9AE02/gOPDrlGaTxg3WsakP1N6hf96KoI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:46:68:22:be:14:2c:ce:93:c8:83:01:93:01:7e:01:81:d7: 2b:27:53:25:b4:1e:74:8f:19:bc:3e:d8:16:b4:cd:7a:97:a1: c0:12:e5:26:c7:41:18:ca:07:df:1f:cf:13:18:4d:bc:29:5c: dc:f5:83:20:28:1c:b7:ac:a4:64:a2:f9:d5:67:53:70:c7:2e: b1:2b:d7:84:47:f8:c5:9c:03:22:90:12:a0:1a:03:10:d5:96: d8:47:78:a1:24:e8:32:2f:26:b9:68:c3:6f:88:ac:67:5d:e6: f3:cf:a8:eb:3a:31:2a:33:6d:77:ba:53:24:4c:c7:95:10:94: d5:74:67:79:7e:a0:56:86:59:1f:cb:68:e0:a9:71:76:bf:e3: 10:e2:3c:78:25:5f:4a:49:3e:0d:ce:1c:7f:d5:89:91:c1:77: 5e:89:f1:ec:cb:55:99:f2:06:c1:d0:1e:d3:23:e4:7c:2f:32: 29:5c:dc:42:5b:9e:15:59:f9:14:47:94:b6:d2:9e:92:c6:59: 55:14:c2:32:f2:6a:fc:4d:dd:f6:8e:76:03:f6:7e:01:3c:5f: 74:23:1c:63:93:99:a2:f0:10:22:83:f9:2a:08:72:f1:d5:3a: f0:2a:e1:55:8f:52:41:f9:fb:d9:e9:83:7e:8c:7c:fa:a8:6f: 8c:b3:aa:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzczNTgxMTAvBgNVBAUTKDgwRTNDM0FFNTE5QTRGMTgzNzVBQzZBNDNGNTM3QTg1 RkY3QTJBODIwHhcNMjYwNDA0MTY1NjQyWhcNMjYwNDExMTY1NjQyWjAYMRYwFAYD VQQDEw02OWQxNDJjYS1hYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymPRPJBDzE1MlWcbNkWfF9b+iGuSAGFurj+3i4sc5WSwWt0HXf1FhXlx1SIt BF9x4q65gq7ZOSZH1YFh+TaajjMlLHv2uL4nfbLtHLPE4NDwLis9bnUIk9wl3VO9 xpWuGIRq4db+px5hfOT3Zj1q3JnyLystaJP603A/xgiW1gxg6G3fRHB1AAB+KX57 WbYg4W2EpKLb4BKObZymB1BbK/yUM1T2G8uKIn4GK1Q+SNFfQP9GpPZaRSMN3nDw K5IjXtOlJY69fuX7F4gW54mG2nLeoLAteOPs+3XsJ42mF7+YZpQDC3srgosQhsV0 fh2NtTTc4mQKMrpIhCj/SgTXGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPphUAnW 54Ujdb3Z4peCO3Vd5l2uMB8GA1UdIwQYMBaAFIDjw65Rmk8YN1rGpD9TeoX/eiqC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzM1OC9CRTg0RjA5NERE MEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4ZzNXc2FrUDFONmhmOTZL b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPUERybEdhVHhnM1dzYWtQMU42aGY5NktvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzM1OC9CRTg0RjA5NEREMEIxMUU4ODU0NDlBNDBDNEY5QUUwMi9nT1BEcmxHYVR4 ZzNXc2FrUDFONmhmOTZLb0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm0ZoIr4ULM6TyIMBkwF+AYHXKydTJbQedI8ZvD7YFrTNepehwBLlJsdBGMoH 3x/PExhNvClc3PWDICgct6ykZKL51WdTcMcusSvXhEf4xZwDIpASoBoDENWW2Ed4 oSToMi8muWjDb4isZ13m88+o6zoxKjNtd7pTJEzHlRCU1XRneX6gVoZZH8to4Klx dr/jEOI8eCVfSkk+Dc4cf9WJkcF3Xonx7MtVmfIGwdAe0yPkfC8yKVzcQlueFVn5 FEeUttKeksZZVRTCMvJq/E3d9o52A/Z+ATxfdCMcY5OZovAQIoP5Kghy8dU68Crh VY9SQfn72emDfox8+qhvjLOqpQ== -----END CERTIFICATE-----Generated at Sun Apr 5 19:42:33 2026 by rpki-client