$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: UN9mtcRGKRHToBaZaVjfl9piSJ7A2D23pYLA1NJ1vUc= Subject key identifier: 5A:09:98:B9:F7:0E:2B:37:FE:B2:F4:1F:5D:F6:73:EF:D4:B0:1E:4B Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0D86 Signing time: Sat 04 Apr 2026 19:00:22 +0000 Manifest this update: Sat 04 Apr 2026 19:00:22 +0000 Manifest next update: Sat 11 Apr 2026 19:00:22 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: cEk4qju0/W2r+HK+wajJiVAujbWfz70jqnSese9y5sI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 19:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2921 (0xb69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Apr 4 19:00:22 2026 GMT Not After : Apr 11 19:00:22 2026 GMT Subject: CN=69d15fc6-9bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:23:94:72:2a:1e:46:df:3d:88:c9:4b:fb: d0:bb:16:7e:13:24:8a:c9:d5:3e:48:87:c6:f9:58: ae:0d:f2:e9:d9:82:c1:93:63:80:85:f2:cf:d5:62: 4c:73:23:4c:43:6a:18:a9:c9:20:72:80:6e:fa:af: 84:e5:80:66:ce:07:3c:3f:f1:c9:c4:30:c0:d8:b4: c9:8d:3c:83:e6:59:ac:26:e5:0d:80:3a:1c:5f:a4: 38:27:00:57:79:4e:a9:74:c3:6c:e3:a1:47:5a:d1: d3:c8:30:d1:b7:31:38:28:5a:4d:13:53:01:b4:a7: 11:43:4a:72:19:c2:74:91:66:d1:17:7b:c4:b6:8f: f0:25:a5:6c:a9:67:0b:1b:49:ad:f0:80:a1:26:80: 1b:82:98:26:c4:dd:06:88:e5:85:ab:26:15:51:79: a9:16:70:3d:b5:02:a6:5b:24:95:20:60:08:66:a7: fb:9a:9c:13:81:9c:21:33:60:c6:1e:54:6d:19:a6: 69:f6:8d:ab:85:07:6e:20:28:34:0b:a5:57:fd:d1: 12:95:22:b7:45:d4:c7:a4:dc:b2:11:fc:7f:2a:82: 7e:19:96:4c:0c:a0:a5:b4:b4:f6:8e:64:22:cf:1f: 69:b0:ff:45:ef:1a:a7:e0:ec:d7:16:8a:74:44:f3: aa:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:09:98:B9:F7:0E:2B:37:FE:B2:F4:1F:5D:F6:73:EF:D4:B0:1E:4B X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:83:2c:29:69:8c:1b:9f:29:4c:ee:11:92:83:94:ac:f4:59: dc:c6:38:10:e6:68:07:5c:62:33:75:aa:7b:e5:ed:29:63:62: ec:23:fd:30:f2:63:aa:12:87:ad:3a:90:58:7b:bb:f6:1d:e3: 4b:9f:53:c9:a0:cb:3e:1d:27:3f:64:7e:42:f9:d2:05:fa:ce: 83:67:d0:6d:f9:fa:df:7a:3f:7f:53:93:60:2e:57:fe:67:e7: 7e:f1:32:32:c4:fe:f9:94:13:fe:52:a0:a4:33:a3:05:f1:bc: 15:0c:4d:b7:08:74:64:2a:7e:cc:5a:cd:c7:c7:2d:ac:7c:38: 5f:ef:3a:f7:41:c2:81:c2:24:9f:33:7c:46:7d:57:ae:6f:36: 0e:2d:3a:3f:39:43:4d:73:55:58:e4:1c:45:d3:01:a6:12:dd: 5a:f6:63:19:7a:3f:25:99:8c:0c:de:39:e1:dc:30:a2:2f:cd: c4:10:a3:44:f9:ee:98:f9:b1:9c:9a:de:6b:a0:99:6d:f6:93: e9:f6:4f:5a:0d:59:d7:08:35:e3:75:01:42:02:2e:27:e2:10: c4:ea:72:81:ce:97:07:d7:6f:22:15:f5:e3:28:c6:c6:3c:9f: 67:2f:d7:4f:2c:87:97:b4:93:03:fe:25:72:b4:8b:bf:ec:da: 44:f3:cb:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjYwNDA0MTkwMDIyWhcNMjYwNDExMTkwMDIyWjAYMRYwFAYD VQQDEw02OWQxNWZjNi05YmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoa8jlHIqHkbfPYjJS/vQuxZ+EySKydU+SIfG+ViuDfLp2YLBk2OAhfLP1WJM cyNMQ2oYqckgcoBu+q+E5YBmzgc8P/HJxDDA2LTJjTyD5lmsJuUNgDocX6Q4JwBX eU6pdMNs46FHWtHTyDDRtzE4KFpNE1MBtKcRQ0pyGcJ0kWbRF3vEto/wJaVsqWcL G0mt8IChJoAbgpgmxN0GiOWFqyYVUXmpFnA9tQKmWySVIGAIZqf7mpwTgZwhM2DG HlRtGaZp9o2rhQduICg0C6VX/dESlSK3RdTHpNyyEfx/KoJ+GZZMDKCltLT2jmQi zx9psP9F7xqn4OzXFop0RPOqBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFoJmLn3 Dis3/rL0H132c+/UsB5LMB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL4MsKWmMG58pTO4RkoOUrPRZ3MY4EOZoB1xiM3Wqe+XtKWNi7CP9MPJjqhKH rTqQWHu79h3jS59TyaDLPh0nP2R+QvnSBfrOg2fQbfn633o/f1OTYC5X/mfnfvEy MsT++ZQT/lKgpDOjBfG8FQxNtwh0ZCp+zFrNx8ctrHw4X+8690HCgcIknzN8Rn1X rm82Di06PzlDTXNVWOQcRdMBphLdWvZjGXo/JZmMDN454dwwoi/NxBCjRPnumPmx nJrea6CZbfaT6fZPWg1Z1wg143UBQgIuJ+IQxOpygc6XB9dvIhX14yjGxjyfZy/X TyyHl7STA/4lcrSLv+zaRPPL2g== -----END CERTIFICATE-----Generated at Mon Apr 6 08:51:34 2026 by rpki-client