$ rpki-client -vvf rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft File: doh0adZBC-RoB3WHhH7qoIC0InI.mft (raw, json) Hash identifier: xMmnIrbgzagPQ0vG/w9uoBLmkdY+RgmY/AOsuKkO4xc= Subject key identifier: B3:95:35:C1:7B:58:CE:CD:87:0B:15:86:1E:37:1F:78:B4:92:35:53 Authority key identifier: 76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 Certificate issuer: /CN=A9114382/serialNumber=76887469D6410BE468077587847EEAA080B42272 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft Manifest number: D4 Signing time: Sun 05 Apr 2026 06:20:12 +0000 Manifest this update: Sun 05 Apr 2026 06:20:12 +0000 Manifest next update: Sun 12 Apr 2026 06:20:12 +0000 Files and hashes: 1: doh0adZBC-RoB3WHhH7qoIC0InI.crl (hash: TmjCUQKDgQT6IFxk0rLalK1ncbtSrt+IHbLk4J+JfyE=) 2: 59136C26FFB911F09F6B6297696F56BC.roa (hash: EyLL/BGOQAGGEgblkUBcmKFPwNqXfxTW10K2iPnlz68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:20:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114382, serialNumber=76887469D6410BE468077587847EEAA080B42272 Validity Not Before: Apr 5 06:20:12 2026 GMT Not After : Apr 12 06:20:12 2026 GMT Subject: CN=69d1ff1c-9fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:38:b5:1b:04:8d:ec:b3:0d:18:3d:b0:1b: f5:78:36:ae:bb:29:8b:c9:6f:e5:00:01:a1:e8:aa: e2:5e:2e:fd:d1:58:b9:d7:fa:da:8f:de:fa:24:6f: 52:f4:77:84:81:2b:37:2c:1f:eb:e7:a6:b1:66:50: 84:d9:cb:d8:f5:e6:b0:b9:67:fa:62:f4:77:1a:a4: 7d:b2:6a:1e:8d:2f:a2:87:c2:7a:1d:42:c6:7e:d5: 5c:c8:a5:22:ac:d5:4a:b3:28:7c:11:90:27:68:59: b1:e4:aa:c1:46:9d:d0:51:dd:11:d5:13:b6:f3:4b: fc:8e:f3:c4:2e:e3:5f:1f:35:37:be:ca:37:b4:38: d9:b3:26:22:3c:1a:86:3a:70:86:b1:d9:dd:74:b1: 01:76:9c:36:a3:6a:80:1f:42:66:df:45:d8:18:42: 83:d1:5e:2b:19:e1:26:53:78:39:c4:d1:20:80:30: 3c:35:e6:44:f8:68:f9:d1:e0:ab:76:10:a2:70:c4: 70:53:a0:c7:1b:cf:fa:52:ac:71:05:c8:e2:ff:1f: 36:92:68:74:28:4b:a2:0d:88:57:0b:89:89:ec:ca: 10:c3:0d:13:d7:06:a4:ac:2f:a2:60:02:6c:ac:18: b2:51:49:48:d0:49:68:6d:8d:68:b5:24:34:c5:77: 42:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:95:35:C1:7B:58:CE:CD:87:0B:15:86:1E:37:1F:78:B4:92:35:53 X509v3 Authority Key Identifier: keyid:76:88:74:69:D6:41:0B:E4:68:07:75:87:84:7E:EA:A0:80:B4:22:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/doh0adZBC-RoB3WHhH7qoIC0InI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114382/44B5FA1C0AC011F0B58F8247C4F9AE02/doh0adZBC-RoB3WHhH7qoIC0InI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:74:10:ef:74:0f:ce:f2:8a:99:f8:02:1e:62:0f:6d:87:36: f9:69:04:66:ee:cd:b2:e2:7f:ec:90:55:8c:03:1e:d7:fc:3c: 51:24:e5:01:da:51:31:e5:11:d5:28:1e:25:d7:9a:40:f9:4a: ad:51:83:9f:ac:8c:77:e8:69:40:79:df:4b:2b:25:10:0c:05: 84:49:ec:0c:93:1b:f2:5f:37:f9:b8:a5:d3:6c:86:91:de:44: 2a:30:a1:af:0d:44:99:44:93:04:d0:2c:00:b3:5f:06:ef:95: da:74:b3:e3:dd:e4:66:d1:28:de:a7:1f:f4:66:ed:2f:2e:a6: 92:6f:f7:e8:fb:45:f2:b7:bf:15:f2:7a:d2:73:a6:a0:29:9d: 06:e5:ff:bd:22:3f:a7:dd:8e:05:ba:0c:f6:33:25:01:4e:f6: 03:70:75:29:db:da:8f:59:3f:19:52:80:32:c1:f9:d0:11:64: d5:57:e5:75:61:d6:4d:4a:5b:fd:42:01:53:8e:ee:4f:9a:4c: cd:2d:db:35:71:2d:df:fe:4d:fe:36:1e:53:a2:e1:16:63:2c: 7c:a4:68:33:ba:a5:78:ff:90:bd:f6:21:b7:0e:66:d8:c0:57: 62:3d:5f:df:44:ca:15:0f:cc:83:ca:d1:05:fd:07:1a:33:42: 9e:10:b8:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTQzODIxMTAvBgNVBAUTKDc2ODg3NDY5RDY0MTBCRTQ2ODA3NzU4Nzg0N0VFQUEw ODBCNDIyNzIwHhcNMjYwNDA1MDYyMDEyWhcNMjYwNDEyMDYyMDEyWjAYMRYwFAYD VQQDEw02OWQxZmYxYy05ZmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArT84tRsEjeyzDRg9sBv1eDauuymLyW/lAAGh6KriXi790Vi51/raj976JG9S 9HeEgSs3LB/r56axZlCE2cvY9eawuWf6YvR3GqR9smoejS+ih8J6HULGftVcyKUi rNVKsyh8EZAnaFmx5KrBRp3QUd0R1RO280v8jvPELuNfHzU3vso3tDjZsyYiPBqG OnCGsdnddLEBdpw2o2qAH0Jm30XYGEKD0V4rGeEmU3g5xNEggDA8NeZE+Gj50eCr dhCicMRwU6DHG8/6UqxxBcji/x82kmh0KEuiDYhXC4mJ7MoQww0T1wakrC+iYAJs rBiyUUlI0ElobY1otSQ0xXdC8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLOVNcF7 WM7NhwsVhh43H3i0kjVTMB8GA1UdIwQYMBaAFHaIdGnWQQvkaAd1h4R+6qCAtCJy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDM4Mi80NEI1RkExQzBB QzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMtUm9CM1dIaEg3cW9JQzBJ bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RvaDBhZFpCQy1Sb0IzV0hoSDdxb0lDMEluSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NDM4Mi80NEI1RkExQzBBQzAxMUYwQjU4RjgyNDdDNEY5QUUwMi9kb2gwYWRaQkMt Um9CM1dIaEg3cW9JQzBJbkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhXQQ73QPzvKKmfgCHmIPbYc2+WkEZu7NsuJ/7JBVjAMe1/w8USTlAdpRMeUR 1SgeJdeaQPlKrVGDn6yMd+hpQHnfSyslEAwFhEnsDJMb8l83+bil02yGkd5EKjCh rw1EmUSTBNAsALNfBu+V2nSz493kZtEo3qcf9GbtLy6mkm/36PtF8re/FfJ60nOm oCmdBuX/vSI/p92OBboM9jMlAU72A3B1Kdvaj1k/GVKAMsH50BFk1VfldWHWTUpb /UIBU47uT5pMzS3bNXEt3/5N/jYeU6LhFmMsfKRoM7qleP+QvfYhtw5m2MBXYj1f 30TKFQ/Mg8rRBf0HGjNCnhC43Q== -----END CERTIFICATE-----Generated at Mon Apr 6 09:54:53 2026 by rpki-client