$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: j6mF9xdpqPITCVYHyKQP7pF34vQsAEEQ2HV6xnnGMrw= Subject key identifier: EF:DC:6C:C8:E2:30:BE:34:F7:B3:CD:8D:B7:AE:A6:1F:8B:0F:2F:6A Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0DB9 Signing time: Sun 26 Apr 2026 17:50:20 +0000 Manifest this update: Sun 26 Apr 2026 17:50:20 +0000 Manifest next update: Sun 03 May 2026 17:50:20 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: UqI3dGutxa86xbYTuIkuxcXxi6qglIJH5ruUmqcRX5U=) 2: AD727D903F8111F1AAE343DCAF833773.roa (hash: Iqc0IgAmJNB6VXjCORCRruuoNfj02aOsq9++fLh62zc=) 3: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 21I1lPOhCB6OoTCDKwmnVs4XWHIQNSrXN0TNGGcuqdQ=) 4: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: ygQB2y8hsTLzbf5SF7WCvYfKunhmdLdBTxW0WpljHeM=) 5: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: GtQoqjQUirpvjAYOKzxLFZEEug+qoArWCD33oXD/Vgw=) 6: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: wI1y6ntLsUWaWyufcxzOljo2NrfksupJylZSnJ7IKS8=) 7: 677F3316E02711E9AB669750C4F9AE02.roa (hash: ULb7MnuSpC+RNv8YH7wBDdLNbPZxB2oAuIx44Pnr+I8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 03 May 2026 17:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3547 (0xddb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Apr 26 17:50:20 2026 GMT Not After : May 3 17:50:20 2026 GMT Subject: CN=69ee505c-63f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b8:ea:c0:52:45:e5:11:57:98:cf:e9:59:b8: d0:08:e9:ab:82:72:b2:67:19:f6:32:34:0f:c1:fe: 29:b7:cb:ee:d2:ac:1b:81:0d:ad:cc:e1:8f:9d:8a: 3f:34:58:43:44:e0:fe:c1:c8:2f:49:c1:ad:7c:42: 87:b5:d6:2a:73:8b:c6:02:eb:6f:33:81:50:8f:37: fd:06:cd:b9:f9:1a:bb:5d:36:2d:16:bc:26:d6:2f: 86:77:c2:ed:17:ae:4b:8b:38:56:96:f1:6b:3b:37: 8a:a7:2f:37:9c:1c:7d:16:4f:2c:73:bb:49:d2:4d: 45:76:fe:70:34:d7:85:39:20:e9:92:ad:1e:5b:ad: 05:2e:1b:f7:c6:5d:9e:41:92:2c:b3:1a:e6:dc:8a: 8d:7b:98:3c:9e:c8:2b:28:3e:05:cb:4d:b0:69:5b: 28:bf:6b:27:72:2a:dd:5e:53:8f:ee:6c:04:a3:89: 0f:48:9b:d6:80:80:b4:df:27:29:3f:b7:f0:d5:d3: d8:f9:91:31:a9:51:a7:ee:4c:fc:3a:01:7b:69:9a: 85:00:8e:d8:5f:f5:8e:d7:3f:a6:b7:01:f0:7a:e8: 29:c4:ae:f9:83:c0:17:ae:dc:ee:6f:e9:ff:1f:0f: e5:f3:8e:10:8a:16:4f:1e:ab:fd:a3:20:54:b8:9f: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:6C:C8:E2:30:BE:34:F7:B3:CD:8D:B7:AE:A6:1F:8B:0F:2F:6A X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f5:4e:8f:bc:b0:ba:14:03:fa:af:c7:be:a5:35:9a:06:bc: 1b:90:0d:d7:74:44:89:ab:86:0b:e1:aa:a3:cf:81:6b:b5:cf: 3d:dc:76:d8:c8:08:08:f7:a4:48:0b:6a:75:a9:5b:ae:a5:4d: 76:72:7e:fb:72:6f:09:b6:90:61:c4:06:40:a9:91:bc:68:b3: fb:17:24:9b:4d:e9:88:b5:a2:06:04:89:2b:cc:f1:9a:72:9b: 0e:e4:8f:3e:e0:9c:08:88:ba:33:db:b9:d4:b2:55:a3:5e:d0: ce:b6:e1:7a:b2:a5:b3:40:1a:67:2e:42:fd:67:f6:0d:58:5a: 23:15:a7:5a:32:33:be:d6:34:da:d6:28:d1:5d:8c:bd:bf:98: d9:ae:5c:7e:28:63:02:e1:6b:7e:d2:4d:82:57:db:61:f6:8c: cf:81:bb:7d:eb:82:1d:40:fe:e6:94:43:90:8c:85:a4:01:4f: 3a:bd:ce:2c:9d:6a:60:f1:f8:68:95:09:ea:c0:e3:a4:03:83: 91:f2:bc:0a:29:ef:74:0d:c2:3e:8b:b7:85:d8:43:0d:91:7f: 59:e5:7d:40:f9:0e:03:ad:0d:41:7a:88:36:74:e5:e8:0b:f4: 43:42:89:73:44:6c:0b:d2:57:fa:e1:60:a0:54:e1:2f:84:78: a6:75:a4:28 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwNDI2MTc1MDIwWhcNMjYwNTAzMTc1MDIwWjAYMRYwFAYD VQQDEw02OWVlNTA1Yy02M2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rjqwFJF5RFXmM/pWbjQCOmrgnKyZxn2MjQPwf4pt8vu0qwbgQ2tzOGPnYo/ NFhDROD+wcgvScGtfEKHtdYqc4vGAutvM4FQjzf9Bs25+Rq7XTYtFrwm1i+Gd8Lt F65LizhWlvFrOzeKpy83nBx9Fk8sc7tJ0k1Fdv5wNNeFOSDpkq0eW60FLhv3xl2e QZIssxrm3IqNe5g8nsgrKD4Fy02waVsov2sncirdXlOP7mwEo4kPSJvWgIC03ycp P7fw1dPY+ZExqVGn7kz8OgF7aZqFAI7YX/WO1z+mtwHweugpxK75g8AXrtzub+n/ Hw/l844QihZPHqv9oyBUuJ+2iQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO/cbMji ML4097PNjbeuph+LDy9qMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAS/VOj7ywuhQD+q/HvqU1mga8G5AN13REiauGC+Gqo8+Ba7XPPdx22MgICPek SAtqdalbrqVNdnJ++3JvCbaQYcQGQKmRvGiz+xckm03piLWiBgSJK8zxmnKbDuSP PuCcCIi6M9u51LJVo17QzrbherKls0AaZy5C/Wf2DVhaIxWnWjIzvtY02tYo0V2M vb+Y2a5cfihjAuFrftJNglfbYfaMz4G7feuCHUD+5pRDkIyFpAFPOr3OLJ1qYPH4 aJUJ6sDjpAODkfK8CinvdA3CPou3hdhDDZF/WeV9QPkOA60NQXqINnTl6Av0Q0KJ c0RsC9JX+uFgoFThL4R4pnWkKA== -----END CERTIFICATE-----Generated at Mon Apr 27 07:17:56 2026 by rpki-client