$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: oNHH9CQ8Ft6IdTNkX2hMfqiMoD3TpqDEKan1csXdm/o= Subject key identifier: 64:3A:8B:F3:96:D3:21:5D:32:7D:6B:04:AF:F7:74:DF:AD:FD:1A:7B Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 03B3 Signing time: Sun 05 Apr 2026 00:28:37 +0000 Manifest this update: Sun 05 Apr 2026 00:28:37 +0000 Manifest next update: Sun 12 Apr 2026 00:28:37 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: ckQEHaXBg52fPAhyb7loEuvcRwU6KoKBXJDIA6f9nas=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: D8m13spLSM0y5GB/4qATdHzlSdpaWUvX2eUbzxTPsS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 00:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Apr 5 00:28:37 2026 GMT Not After : Apr 12 00:28:37 2026 GMT Subject: CN=69d1acb5-f4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:b0:65:0c:2a:a7:6a:18:90:50:8b:5a:fe: fe:44:7c:ec:99:a0:d5:53:13:f7:ac:00:d7:77:dc: 50:90:a1:42:ff:87:ef:a4:7c:a8:45:30:11:8e:80: 5f:0f:ed:8a:2b:0e:01:ab:b5:09:f0:a3:61:fe:3a: aa:eb:84:1d:5d:d3:2c:ac:9c:12:20:33:4b:52:ca: dd:02:61:32:50:e4:89:ad:70:84:d5:ac:f1:b2:96: e5:e2:6a:6b:dc:5b:cf:d0:25:9a:06:dd:99:32:2c: 1a:a4:ad:19:e3:b0:7f:19:da:9a:16:68:06:95:61: 8f:12:aa:1b:75:8d:1c:20:55:75:11:12:45:ef:d9: 23:9a:04:94:da:b0:a1:12:0a:d3:9c:d1:82:57:48: e3:39:76:7d:1f:8e:cd:60:5a:61:53:a2:82:1a:4b: e2:6c:28:04:6a:52:cf:96:d2:40:00:2c:36:74:b9: 11:53:0a:33:55:5e:c1:f3:99:3c:c3:1a:04:3c:2c: 5a:6a:a2:fe:6e:9d:3c:ba:78:a0:49:1d:24:06:29: 05:62:7a:a8:55:19:4a:1c:ef:1d:1a:10:14:9c:8c: 60:fd:da:bd:aa:b1:f1:d4:86:9f:78:aa:a1:9e:45: 7a:cd:d5:73:3b:2c:69:b7:9e:3a:d4:6b:f7:e8:49: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:8B:F3:96:D3:21:5D:32:7D:6B:04:AF:F7:74:DF:AD:FD:1A:7B X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ed:83:bb:d5:b1:2d:58:f2:c5:9b:af:06:43:ae:e1:73:e4: f1:91:c7:45:50:71:9c:f1:ed:2e:91:5d:21:08:3d:ef:9f:c4: de:7a:b8:05:f3:fe:11:f4:83:c6:7f:22:20:7c:1d:5f:62:c7: 73:46:59:65:aa:d1:29:39:c3:66:8a:f0:74:27:e0:7a:1f:d5: 0d:13:b4:43:af:31:3c:ba:c3:0f:c6:a8:3f:8e:84:9b:c3:76: 34:d9:a3:a0:34:02:4f:00:5d:85:05:22:7e:cb:78:04:80:0b: d6:48:bd:85:ae:89:18:ab:7c:f7:2f:ce:69:49:9c:fd:87:ff: a2:87:69:7f:04:9b:a7:39:67:b2:1c:e5:b6:53:c8:5c:ea:c7: 9e:fa:0b:85:0b:f7:17:4e:ef:2f:52:a4:3f:7d:cd:51:88:e4: 1a:d8:c7:dc:91:a2:72:67:16:ec:b1:4f:ff:6c:47:05:03:8d: 03:3b:b1:0a:ff:6e:89:a7:16:70:74:f8:7a:a2:fb:8c:ed:a9: 07:cd:2b:ee:ce:53:13:28:06:14:a1:5c:6e:45:f1:c1:83:57: 73:a6:32:7e:48:50:bc:5b:57:4d:1f:1e:cc:b4:a3:09:80:0c: c5:57:09:bc:3d:ba:88:81:4c:9f:dd:92:7d:da:dd:45:99:e9: b6:81:0c:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjYwNDA1MDAyODM3WhcNMjYwNDEyMDAyODM3WjAYMRYwFAYD VQQDEw02OWQxYWNiNS1mNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YWwZQwqp2oYkFCLWv7+RHzsmaDVUxP3rADXd9xQkKFC/4fvpHyoRTARjoBf D+2KKw4Bq7UJ8KNh/jqq64QdXdMsrJwSIDNLUsrdAmEyUOSJrXCE1azxspbl4mpr 3FvP0CWaBt2ZMiwapK0Z47B/GdqaFmgGlWGPEqobdY0cIFV1ERJF79kjmgSU2rCh EgrTnNGCV0jjOXZ9H47NYFphU6KCGkvibCgEalLPltJAACw2dLkRUwozVV7B85k8 wxoEPCxaaqL+bp08unigSR0kBikFYnqoVRlKHO8dGhAUnIxg/dq9qrHx1IafeKqh nkV6zdVzOyxpt5461Gv36ElYkwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQ6i/OW 0yFdMn1rBK/3dN+t/Rp7MB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY+2Du9WxLVjyxZuvBkOu4XPk8ZHHRVBxnPHtLpFdIQg975/E3nq4BfP+EfSD xn8iIHwdX2LHc0ZZZarRKTnDZorwdCfgeh/VDRO0Q68xPLrDD8aoP46Em8N2NNmj oDQCTwBdhQUifst4BIAL1ki9ha6JGKt89y/OaUmc/Yf/oodpfwSbpzlnshzltlPI XOrHnvoLhQv3F07vL1KkP33NUYjkGtjH3JGicmcW7LFP/2xHBQONAzuxCv9uiacW cHT4eqL7jO2pB80r7s5TEygGFKFcbkXxwYNXc6YyfkhQvFtXTR8ezLSjCYAMxVcJ vD26iIFMn92SfdrdRZnptoEMDg== -----END CERTIFICATE-----Generated at Mon Apr 6 09:55:04 2026 by rpki-client