$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft File: keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft (raw, json) Hash identifier: d+eIB+SR3Erme6wHXLWVBtUw7gEK9HSo5oElT9RZHQs= Subject key identifier: 6C:89:AF:93:75:F6:49:95:76:74:7A:DC:42:85:04:4E:86:5B:AB:04 Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft Manifest number: 0555 Signing time: Sat 04 Apr 2026 23:14:41 +0000 Manifest this update: Sat 04 Apr 2026 23:14:41 +0000 Manifest next update: Sat 11 Apr 2026 23:14:41 +0000 Files and hashes: 1: keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl (hash: CYQAUag5fl/ip7dpUfuLMLwSCj48pyIQBScF5g49LCk=) 2: 1295B5943FA611EF94664041C4F9AE02.roa (hash: hapzzVKt9oxlCLEwYHK4MTLp4PI8BfiasqodqBtyfb4=) 3: C52B4E0A3FE011EF88794913C4F9AE02.roa (hash: ly19W/Muv8BDmpRPmS2Fe3o0q7TToeFH9ObD8f2QW9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A Validity Not Before: Apr 4 23:14:41 2026 GMT Not After : Apr 11 23:14:41 2026 GMT Subject: CN=69d19b61-4dc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:2a:3f:19:7e:56:74:34:a5:38:9f:d5:89: 34:28:00:a8:cf:99:56:a2:47:b5:0b:a9:ac:fe:02: 47:ab:73:f5:81:ee:8f:2b:49:4e:44:91:6d:79:6e: 62:c6:e6:26:e8:3b:85:02:69:48:be:93:09:4d:be: 4c:6d:57:fe:95:d8:5f:4b:33:c2:cf:82:a5:b8:bd: c7:72:32:37:e5:ef:c0:5d:67:d2:40:a6:c7:35:51: 63:90:e3:ed:dc:11:8c:5e:78:62:23:fa:ff:1c:9d: 87:22:d5:05:40:6c:62:0e:c4:5c:d9:7b:74:86:fa: f8:0d:17:dd:8b:11:db:16:b5:02:f1:0b:46:10:c4: b6:fc:d1:d1:e9:c3:86:93:43:66:21:46:45:05:5d: 15:a8:89:c9:f8:43:3f:f3:af:da:56:6a:56:36:63: d8:56:38:48:0e:a0:57:ed:83:9c:cc:3a:66:8f:5d: 27:d3:a0:b4:47:80:78:34:1b:84:76:4f:3e:c6:b3: fc:44:a7:dd:0e:dc:26:d2:4d:fe:34:7a:74:4d:7a: a9:41:03:d4:e0:39:e9:57:6c:88:7b:76:77:7f:f0: 65:71:0b:08:1d:73:3d:e6:b3:27:17:7b:c3:bd:8a: bc:c3:f6:23:4f:f9:e4:ca:d3:ac:1a:0f:c9:72:49: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:89:AF:93:75:F6:49:95:76:74:7A:DC:42:85:04:4E:86:5B:AB:04 X509v3 Authority Key Identifier: keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:80:3e:4a:70:15:c9:0f:95:2f:58:b4:5f:08:de:9e:90:72: 31:ef:a9:69:27:15:21:7e:b9:14:87:86:2d:03:06:81:7d:96: 65:99:e6:7e:d2:ee:ae:9e:c2:ec:cd:8a:00:7c:b2:b6:b4:db: 66:04:56:fd:3e:7c:3b:c1:08:cf:39:3b:ae:77:67:87:70:5d: e3:a6:46:16:cc:55:a2:a6:17:c4:79:1d:a5:40:8c:64:f3:7b: 37:8d:12:6e:84:6a:0c:e0:da:e6:d3:25:43:e8:3a:fc:47:0b: 31:c9:9b:ad:b2:b2:e7:84:38:85:d9:5c:f2:c8:eb:99:c5:48: 28:20:d5:e4:c0:8d:5d:12:1e:66:b9:3a:76:d0:cb:6a:5b:e0: 9b:21:f9:b6:f5:c2:11:d3:a6:b5:2f:c1:65:64:66:f1:73:d9: 74:8e:86:b6:db:23:a0:34:bb:e9:14:35:1f:98:53:d6:b3:98: be:a5:71:d6:7b:d3:4a:45:93:32:a7:59:90:dd:22:f0:bc:89: 52:e1:dc:8d:2b:c1:98:f7:c7:7b:40:b2:7b:3e:cb:c9:73:7a: 1e:8c:5a:53:70:82:d2:8c:0e:d3:35:24:b8:99:85:21:bb:98: 8b:64:fa:db:56:83:4b:20:24:43:65:61:d9:76:26:af:b0:1f: af:7c:82:11 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE MjM5MzU5MkEwHhcNMjYwNDA0MjMxNDQxWhcNMjYwNDExMjMxNDQxWjAYMRYwFAYD VQQDEw02OWQxOWI2MS00ZGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqS0qPxl+VnQ0pTif1Yk0KACoz5lWoke1C6ms/gJHq3P1ge6PK0lORJFteW5i xuYm6DuFAmlIvpMJTb5MbVf+ldhfSzPCz4KluL3HcjI35e/AXWfSQKbHNVFjkOPt 3BGMXnhiI/r/HJ2HItUFQGxiDsRc2Xt0hvr4DRfdixHbFrUC8QtGEMS2/NHR6cOG k0NmIUZFBV0VqInJ+EM/86/aVmpWNmPYVjhIDqBX7YOczDpmj10n06C0R4B4NBuE dk8+xrP8RKfdDtwm0k3+NHp0TXqpQQPU4DnpV2yIe3Z3f/BlcQsIHXM95rMnF3vD vYq8w/YjT/nkytOsGg/Jckl97QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGyJr5N1 9kmVdnR63EKFBE6GW6sEMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUNBQy9CM0JEQTU2NDMxRDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRK Si11MzVHSElCWURTT1RXU28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfoA+SnAVyQ+VL1i0XwjenpByMe+paScVIX65FIeGLQMGgX2WZZnmftLurp7C 7M2KAHyytrTbZgRW/T58O8EIzzk7rndnh3Bd46ZGFsxVoqYXxHkdpUCMZPN7N40S boRqDODa5tMlQ+g6/EcLMcmbrbKy54Q4hdlc8sjrmcVIKCDV5MCNXRIeZrk6dtDL alvgmyH5tvXCEdOmtS/BZWRm8XPZdI6GttsjoDS76RQ1H5hT1rOYvqVx1nvTSkWT MqdZkN0i8LyJUuHcjSvBmPfHe0Cyez7LyXN6HoxaU3CC0owO0zUkuJmFIbuYi2T6 21aDSyAkQ2Vh2XYmr7Afr3yCEQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:00:41 2026 by rpki-client