$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: RdDa+W0J/QrhZ3mlfcAeYtcnGBs8PGrdYdKUEEMlpZM= Subject key identifier: 3F:CF:5E:F6:D8:18:62:9D:26:38:43:90:01:60:F6:3D:FC:99:7E:5F Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 0285 Signing time: Sun 05 Apr 2026 01:26:16 +0000 Manifest this update: Sun 05 Apr 2026 01:26:16 +0000 Manifest next update: Sun 12 Apr 2026 01:26:16 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: VA6Zsh/qWfRw+OtHSF1g6EMoV8RWPzJoK1vhr1kYvvY=) 2: 5D4A59E22A9F11F1B6C16D449B833773.roa (hash: h/Anwhdw8hYIXbU00WYyYBTDgfVMK1vj6+wTY2GDHw4=) 3: 748DB0E603F711F18E6BFAB3133D8C67.roa (hash: 5yXcCvusSroRDCFFg1R3qeA96L5dbXS1rgIr2rg2kIE=) 4: C41C3B7C2A9F11F1AEE17D7A9B833773.roa (hash: YVtrYDGmd8yOfEjEDc3TwfWzgRK6gay3J+4YbDTK/QU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Apr 5 01:26:16 2026 GMT Not After : Apr 12 01:26:16 2026 GMT Subject: CN=69d1ba38-0daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:82:6a:d9:26:f8:c6:f6:15:fa:90:cd:ef:93: 73:e3:9e:13:a3:74:02:4c:15:b5:2c:9a:8a:81:86: a4:52:41:bf:61:65:ad:2b:d0:58:f1:a3:8d:a8:db: f2:1f:92:98:b8:d4:1a:69:95:b6:96:d7:3f:53:7c: 37:d0:ad:7b:3d:06:54:1a:52:08:1c:be:b3:1d:1a: 58:30:44:1c:d6:24:78:2c:6f:60:d6:be:89:57:f6: e3:05:5f:33:34:89:f3:3b:c2:43:d7:63:a9:ce:d1: 04:67:07:ac:22:ad:dd:26:b8:69:2f:14:d3:91:d7: d2:f7:4a:3a:98:1a:80:6f:21:c6:2d:a3:cd:3e:9b: 93:5f:e8:5e:31:76:d1:8c:b5:a2:3d:81:70:98:e7: 23:26:d5:50:7f:21:fa:cf:23:f5:ff:89:66:e4:21: 76:96:f6:59:4b:b3:f4:dc:9d:4a:cf:1b:25:a3:87: d5:98:82:10:e5:0e:f4:5d:64:37:f1:c9:26:10:30: 14:1d:8f:22:35:ec:31:54:af:4e:5c:a6:ba:d6:11: f0:b1:ea:1d:9d:e7:ba:29:1f:f7:4c:eb:c6:70:b7: 39:9e:df:7e:bf:1d:00:a5:30:45:d5:64:22:17:97: 22:73:d2:ee:25:64:df:18:44:26:bb:fe:8b:c3:97: 78:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:5E:F6:D8:18:62:9D:26:38:43:90:01:60:F6:3D:FC:99:7E:5F X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b5:3b:7d:de:01:9a:8f:ab:ed:0c:7f:e0:00:f0:54:a2:36: 44:c5:72:03:8e:7d:2c:d0:60:e6:15:df:62:44:c9:34:13:fc: 7e:6b:df:75:26:3b:39:23:ec:ed:42:73:3e:34:d3:8c:69:de: a4:b7:a8:0f:c5:93:f8:9b:e3:f1:37:64:f5:7c:0a:28:3a:15: ef:15:b2:22:f2:3a:8c:e2:3b:f3:6a:48:82:51:db:a2:23:a9: d1:4d:ed:87:dd:c9:9f:0c:3a:5c:a1:d5:e1:29:a9:03:2e:e3: 52:ad:a8:1c:ad:eb:03:1e:03:e8:4c:5e:07:85:65:fb:62:f9: ca:6a:02:1f:a3:fe:d5:cd:d9:5d:51:27:ce:c4:d6:4b:f7:e1: cc:5e:57:9e:58:4b:4b:88:51:b8:bd:ef:f2:51:db:98:3e:ae: ae:33:30:a3:30:ce:b2:cd:e1:71:9b:24:d5:0a:5c:42:e5:a4: 45:3c:47:db:12:18:20:c5:6f:1c:f0:42:86:f8:49:83:e8:73: 03:fe:6c:79:e8:ca:8d:f1:24:35:7e:bf:18:df:53:bc:40:be: 26:3e:b3:8c:2d:ee:8d:7f:f8:a0:fb:85:df:82:bf:6a:15:15: 8c:21:bd:44:24:5f:c4:52:89:df:8f:f1:f5:24:a2:c2:97:60: e4:df:ba:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjYwNDA1MDEyNjE2WhcNMjYwNDEyMDEyNjE2WjAYMRYwFAYD VQQDEw02OWQxYmEzOC0wZGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIJq2Sb4xvYV+pDN75Nz454To3QCTBW1LJqKgYakUkG/YWWtK9BY8aONqNvy H5KYuNQaaZW2ltc/U3w30K17PQZUGlIIHL6zHRpYMEQc1iR4LG9g1r6JV/bjBV8z NInzO8JD12OpztEEZwesIq3dJrhpLxTTkdfS90o6mBqAbyHGLaPNPpuTX+heMXbR jLWiPYFwmOcjJtVQfyH6zyP1/4lm5CF2lvZZS7P03J1Kzxslo4fVmIIQ5Q70XWQ3 8ckmEDAUHY8iNewxVK9OXKa61hHwseodnee6KR/3TOvGcLc5nt9+vx0ApTBF1WQi F5cic9LuJWTfGEQmu/6Lw5d4VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD/PXvbY GGKdJjhDkAFg9j38mX5fMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg7U7fd4Bmo+r7Qx/4ADwVKI2RMVyA459LNBg5hXfYkTJNBP8fmvfdSY7OSPs 7UJzPjTTjGnepLeoD8WT+Jvj8Tdk9XwKKDoV7xWyIvI6jOI782pIglHboiOp0U3t h93Jnww6XKHV4SmpAy7jUq2oHK3rAx4D6ExeB4Vl+2L5ymoCH6P+1c3ZXVEnzsTW S/fhzF5XnlhLS4hRuL3v8lHbmD6urjMwozDOss3hcZsk1QpcQuWkRTxH2xIYIMVv HPBChvhJg+hzA/5seejKjfEkNX6/GN9TvEC+Jj6zjC3ujX/4oPuF34K/ahUVjCG9 RCRfxFKJ34/x9SSiwpdg5N+6BA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:52:00 2026 by rpki-client