$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: qDcaWlnjmFp3bgU0G+Y3cKEkdXfbJri+fIuiYi7Lytw= Subject key identifier: 9E:DB:1F:12:CB:65:AB:BB:C5:A0:9F:29:40:BB:45:97:3E:9D:77:A4 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 63 Signing time: Sun 05 Apr 2026 07:20:58 +0000 Manifest this update: Sun 05 Apr 2026 07:20:58 +0000 Manifest next update: Sun 12 Apr 2026 07:20:58 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: ZELBAYy31LBUi4+SAHHZ6ISST9CtLgjPaASRzNSTGMA=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Apr 5 07:20:58 2026 GMT Not After : Apr 12 07:20:58 2026 GMT Subject: CN=69d20d5a-c63d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:93:58:11:7e:cd:de:2c:25:8f:05:c8:b7: 50:0e:94:0a:e8:97:a9:e9:3e:98:43:52:55:8e:a7: 02:a6:67:ce:82:b6:c3:c1:79:25:31:2b:92:91:62: cf:93:c1:df:d6:d8:98:78:f9:2d:51:86:b6:14:02: 98:8a:9d:1d:d8:65:37:05:c3:6c:f4:5f:a8:cc:cb: e5:46:36:a4:9a:e3:f6:e5:9f:2e:a7:de:67:2a:d2: 56:91:bb:9c:a1:6c:bd:d5:2b:5d:f1:ff:89:c1:e7: b5:8d:79:5f:d0:e1:bb:fc:eb:56:b7:be:db:5d:11: 47:58:e6:42:da:ae:50:d3:df:ec:15:6d:55:d2:c5: 56:b6:78:78:81:ec:e8:24:64:fe:ea:ab:08:d5:7b: 90:ea:53:3e:a6:73:42:60:a6:68:ef:05:e9:ce:92: a8:3a:98:27:4b:0f:7c:f3:95:9a:f2:09:01:ed:10: a9:2f:ef:31:e8:5d:10:09:91:14:35:91:a3:d0:f5: df:d1:39:01:78:70:e9:e8:40:16:ee:9d:37:53:3b: 2f:b6:fe:04:f6:d3:c9:f3:ca:57:85:c9:ce:e7:ee: b3:f6:85:29:42:e3:f2:a9:f0:8b:70:56:63:1b:c9: 2c:f0:5a:93:2a:d4:a8:c3:0b:0d:34:36:d3:6f:69: 43:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DB:1F:12:CB:65:AB:BB:C5:A0:9F:29:40:BB:45:97:3E:9D:77:A4 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ca:71:2f:9a:39:4c:50:24:e7:f2:18:11:72:fb:30:d7:a4: 1c:c3:a5:97:cc:2b:dd:82:c7:63:0a:89:a5:64:87:1f:11:e7: 2a:8a:fc:c1:3b:72:14:95:d5:56:97:5b:4e:1c:e2:a4:f3:dc: c6:11:92:ac:d0:74:95:46:c0:79:75:22:bb:2e:22:a2:11:12: 00:4f:dd:b9:0b:01:d0:2e:58:18:7c:7b:b2:03:fa:60:43:99: 7c:85:18:f1:85:90:9f:db:3a:6e:aa:cb:c4:f0:ed:77:5c:66: a4:c9:e3:30:24:e9:50:b2:16:9a:7e:d6:ea:56:4b:7f:67:f3: 31:00:7f:7f:59:66:37:4b:38:15:1d:81:30:99:ff:ab:be:e0: 50:90:7b:fd:e3:68:38:27:92:c9:f1:92:3a:8b:1a:84:ef:5d: 7a:fb:4b:fb:a8:2d:02:20:c4:e6:e7:aa:d0:fc:e4:8b:d3:90: 91:ba:f1:93:70:f6:26:ee:90:90:4b:e2:ca:b6:1d:79:dc:9e: c2:de:0a:1e:6c:39:e2:f9:e8:86:77:2f:a5:a5:35:b8:8c:14: b7:94:9e:23:0c:e4:67:b4:f2:95:20:ab:bf:c5:44:0f:fd:19: dc:87:56:a6:d7:00:00:7d:6e:23:37:50:02:24:92:da:78:d1: 79:42:d2:54 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNjA0MDUwNzIwNThaFw0yNjA0MTIwNzIwNThaMBgxFjAUBgNV BAMTDTY5ZDIwZDVhLWM2M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWW5NYEX7N3iwljwXIt1AOlArol6npPphDUlWOpwKmZ86CtsPBeSUxK5KRYs+T wd/W2Jh4+S1RhrYUApiKnR3YZTcFw2z0X6jMy+VGNqSa4/blny6n3mcq0laRu5yh bL3VK13x/4nB57WNeV/Q4bv861a3vttdEUdY5kLarlDT3+wVbVXSxVa2eHiB7Ogk ZP7qqwjVe5DqUz6mc0JgpmjvBenOkqg6mCdLD3zzlZryCQHtEKkv7zHoXRAJkRQ1 kaPQ9d/ROQF4cOnoQBbunTdTOy+2/gT208nzyleFyc7n7rP2hSlC4/Kp8ItwVmMb ySzwWpMq1KjDCw00NtNvaUOpAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUntsfEstl q7vFoJ8pQLtFlz6dd6QwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQC0ynEvmjlMUCTn8hgRcvsw16Qcw6WXzCvdgsdjComlZIcfEecqivzBO3IUldVW l1tOHOKk89zGEZKs0HSVRsB5dSK7LiKiERIAT925CwHQLlgYfHuyA/pgQ5l8hRjx hZCf2zpuqsvE8O13XGakyeMwJOlQshaaftbqVkt/Z/MxAH9/WWY3SzgVHYEwmf+r vuBQkHv942g4J5LJ8ZI6ixqE7116+0v7qC0CIMTm56rQ/OSL05CRuvGTcPYm7pCQ S+LKth153J7C3goebDni+eiGdy+lpTW4jBS3lJ4jDORntPKVIKu/xUQP/Rnch1am 1wAAfW4jN1ACJJLaeNF5QtJU -----END CERTIFICATE-----Generated at Mon Apr 6 08:59:18 2026 by rpki-client