$ rpki-client -vvf rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft File: 84XzeRdwIPCIv3TaLANG2HnCKh0.mft (raw, json) Hash identifier: gAYupWOUuA5RqfEIuXAG3OTeiO+OV80CiIgP8FeKNY0= Subject key identifier: CE:92:85:F7:AF:18:FA:B6:14:7C:04:4B:27:87:AF:4C:B3:EF:0A:07 Authority key identifier: F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D Certificate issuer: /CN=A9112AD5/serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Certificate serial: 04D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft Manifest number: 04CA Signing time: Sat 04 Apr 2026 23:40:05 +0000 Manifest this update: Sat 04 Apr 2026 23:40:04 +0000 Manifest next update: Sat 11 Apr 2026 23:40:04 +0000 Files and hashes: 1: 84XzeRdwIPCIv3TaLANG2HnCKh0.crl (hash: h8PrjazxP+UlX2YjoPfGrDyeqG+2+0sFEfWRVyvyHMg=) 2: 3C09B1A2640F11ECBC536111C4F9AE02.roa (hash: 0nH+hJmdQg+dXDI9GR9IsbqvDX01ufb4T3K76L+VbGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:40:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112AD5, serialNumber=F385F379177020F088BF74DA2C0346D879C22A1D Validity Not Before: Apr 4 23:40:04 2026 GMT Not After : Apr 11 23:40:04 2026 GMT Subject: CN=69d1a154-c08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:55:8b:a5:5c:74:9f:eb:b0:d1:41:98:02: b6:f5:e3:f6:2c:64:ed:1d:50:45:51:6b:2c:7f:99: 86:b1:38:f3:20:27:5f:6d:e2:64:b1:1f:fa:70:72: b5:e1:47:14:37:7b:9e:50:37:29:52:e4:9f:6f:9b: 07:6b:4f:1f:a2:e4:40:59:9b:5d:b3:63:ab:26:4a: c7:1a:61:47:6e:49:83:4e:a2:21:dc:75:63:eb:b2: 4d:cf:f5:2b:63:73:cb:b2:b9:ab:62:25:8b:74:71: a2:7c:7e:ad:d3:39:12:df:5b:a5:8e:88:fb:52:9e: 88:1e:51:69:50:6b:a0:60:ad:34:e4:a4:0a:09:9e: 5d:37:ae:16:7d:4e:22:bf:23:d3:70:40:1e:06:30: ad:97:42:6f:5e:dc:ef:3a:80:a1:8e:23:6f:11:3a: 26:58:19:07:44:ba:60:b6:e6:c3:1d:11:cc:2c:01: 65:c5:a1:54:f2:c1:eb:d6:34:99:8f:a9:4e:32:e9: 47:c9:f3:11:6a:ce:d9:17:47:80:a9:fc:65:10:f1: cd:7b:af:a2:3c:78:94:fb:f3:8c:f7:a3:2c:eb:44: f1:b9:7d:e3:af:b8:40:7a:a8:d4:55:8d:bd:f2:c6: a0:e7:db:06:90:17:17:45:7a:18:0c:f2:49:91:6a: 82:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:92:85:F7:AF:18:FA:B6:14:7C:04:4B:27:87:AF:4C:B3:EF:0A:07 X509v3 Authority Key Identifier: keyid:F3:85:F3:79:17:70:20:F0:88:BF:74:DA:2C:03:46:D8:79:C2:2A:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84XzeRdwIPCIv3TaLANG2HnCKh0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112AD5/F479580E640B11ECAA22100BC4F9AE02/84XzeRdwIPCIv3TaLANG2HnCKh0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:d1:56:bd:0d:06:53:2c:45:b2:ee:a6:22:18:7f:d9:85:bc: 28:e7:3f:ac:ed:49:9d:f5:7b:26:28:79:dd:18:e7:ed:85:47: 59:25:53:16:4b:3e:8a:17:81:ff:4d:b6:72:c3:bf:28:09:a5: 26:dc:79:0b:9b:87:d0:d7:2f:c4:f7:aa:93:4a:f7:9b:73:4d: 69:73:e0:6e:01:c2:74:30:d0:5f:35:f4:eb:10:e1:53:38:53: 8d:27:95:8e:f2:25:5e:90:9a:ab:e5:6f:91:c8:71:58:fa:bb: 60:d7:5e:7e:85:26:a4:03:fc:5c:18:2e:88:6b:27:e3:71:3c: 4c:5b:64:68:0e:aa:12:29:be:36:14:de:75:9f:58:9f:68:d9: 37:71:26:4a:cd:87:02:05:8b:b1:38:8e:57:7c:fa:b8:5f:eb: f6:97:8e:bb:5b:47:c5:3a:c0:f6:a8:be:e7:63:64:5d:45:e4: f5:ac:2b:e5:b7:69:fb:0d:27:ec:b1:42:34:da:c9:d1:8d:40: 3a:65:0b:c3:ae:4e:53:34:a9:4c:cd:e1:f1:5f:12:de:11:51: fe:8e:93:74:c5:ef:12:2f:00:2b:a7:d0:56:bb:66:b6:79:13: ea:2a:63:f9:eb:d1:9d:a1:8e:b0:3c:b4:84:34:14:dc:70:d1: cc:54:8e:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTJBRDUxMTAvBgNVBAUTKEYzODVGMzc5MTc3MDIwRjA4OEJGNzREQTJDMDM0NkQ4 NzlDMjJBMUQwHhcNMjYwNDA0MjM0MDA0WhcNMjYwNDExMjM0MDA0WjAYMRYwFAYD VQQDEw02OWQxYTE1NC1jMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16NVi6VcdJ/rsNFBmAK29eP2LGTtHVBFUWssf5mGsTjzICdfbeJksR/6cHK1 4UcUN3ueUDcpUuSfb5sHa08fouRAWZtds2OrJkrHGmFHbkmDTqIh3HVj67JNz/Ur Y3PLsrmrYiWLdHGifH6t0zkS31uljoj7Up6IHlFpUGugYK005KQKCZ5dN64WfU4i vyPTcEAeBjCtl0JvXtzvOoChjiNvETomWBkHRLpgtubDHRHMLAFlxaFU8sHr1jSZ j6lOMulHyfMRas7ZF0eAqfxlEPHNe6+iPHiU+/OM96Ms60TxuX3jr7hAeqjUVY29 8sag59sGkBcXRXoYDPJJkWqCVQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6Shfev GPq2FHwESyeHr0yz7woHMB8GA1UdIwQYMBaAFPOF83kXcCDwiL902iwDRth5wiod MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMkFENS9GNDc5NTgwRTY0 MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQQ0l2M1RhTEFORzJIbkNL aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzg0WHplUmR3SVBDSXYzVGFMQU5HMkhuQ0toMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MkFENS9GNDc5NTgwRTY0MEIxMUVDQUEyMjEwMEJDNEY5QUUwMi84NFh6ZVJkd0lQ Q0l2M1RhTEFORzJIbkNLaDAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqtFWvQ0GUyxFsu6mIhh/2YW8KOc/rO1JnfV7Jih53Rjn7YVHWSVTFks+iheB /022csO/KAmlJtx5C5uH0NcvxPeqk0r3m3NNaXPgbgHCdDDQXzX06xDhUzhTjSeV jvIlXpCaq+VvkchxWPq7YNdefoUmpAP8XBguiGsn43E8TFtkaA6qEim+NhTedZ9Y n2jZN3EmSs2HAgWLsTiOV3z6uF/r9peOu1tHxTrA9qi+52NkXUXk9awr5bdp+w0n 7LFCNNrJ0Y1AOmULw65OUzSpTM3h8V8S3hFR/o6TdMXvEi8AK6fQVrtmtnkT6ipj +evRnaGOsDy0hDQU3HDRzFSO0g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:54:04 2026 by rpki-client