$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: xpR2fBrnPsTFFOC/wVMWdOgacA1QAEH8Z/CXahjiajY= Subject key identifier: 81:81:42:61:E7:EC:81:BC:1E:79:27:04:B3:B0:32:4E:73:FA:95:03 Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 04DF Signing time: Sat 04 Apr 2026 23:35:05 +0000 Manifest this update: Sat 04 Apr 2026 23:35:05 +0000 Manifest next update: Sat 11 Apr 2026 23:35:05 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: YFYVHYJLy/VRWejPnPyu81psuXvKu8iRoVVdR9HZq+k=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 6u8EDQPeHd1f5myvUPvFnltCBejoVUEG20zIQZJhOPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Apr 4 23:35:05 2026 GMT Not After : Apr 11 23:35:05 2026 GMT Subject: CN=69d1a029-c93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:e1:f1:31:27:fa:72:d1:b5:21:4e:32:2c: 45:6d:83:21:6b:e6:73:87:75:3d:27:35:67:6a:e7: 8d:6d:a5:bb:03:b4:32:42:3c:fd:4a:01:32:db:2e: 64:91:db:b2:7a:f9:8e:66:79:c1:21:4c:a4:08:2d: e4:55:e0:c4:9d:21:d5:e9:9d:25:d0:04:56:b4:c5: d9:e2:00:fa:a6:9a:b3:63:a8:d8:1c:77:bc:94:2a: 5d:4b:39:11:e2:5b:e5:f2:7d:10:fe:41:cf:9d:79: 45:dd:a5:8b:8e:26:52:d2:6e:62:3a:e6:3c:46:f7: ce:4b:a1:40:aa:fe:74:3f:8f:68:08:60:43:cf:ea: d8:61:4b:ec:f9:46:87:38:c5:9c:89:09:f2:b4:fc: 97:b2:4b:33:44:70:12:1a:dd:63:3d:31:6e:fb:90: 18:65:cb:ef:8e:fe:38:cd:fe:a7:ea:7a:90:07:41: 40:36:9a:92:10:b4:a3:d5:24:3f:96:8a:b0:1a:8e: e3:e0:c0:af:c8:a5:5d:35:fb:f8:3d:f2:76:2e:c1: ec:6f:a3:3f:39:2a:0e:19:82:cd:86:bd:43:32:95: c9:5a:c4:70:ab:76:7c:b4:5e:9f:22:a6:7b:5c:00: 69:a6:35:f3:a0:b5:71:2d:0c:77:36:09:d6:f1:f1: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:42:61:E7:EC:81:BC:1E:79:27:04:B3:B0:32:4E:73:FA:95:03 X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:cd:5d:74:16:de:f2:d1:39:af:73:5a:ab:6a:6d:fe:8c:ec: 38:27:94:86:5b:6d:48:69:58:5b:23:7b:af:ed:4b:0a:e5:e3: d1:7c:89:e4:75:c4:6e:b6:83:45:ac:1d:d4:12:81:21:ef:52: 7e:14:db:dc:61:96:ea:d0:f8:07:46:e0:fc:94:e6:e8:41:42: 0e:49:da:82:58:11:40:40:0b:b9:65:00:80:a2:f4:b2:84:20: d6:63:6d:4e:d1:d5:90:d9:28:d7:7b:38:23:4c:48:e1:72:78: b7:d5:ba:24:70:c3:9f:44:08:a9:64:03:17:fe:06:9d:5c:7d: ab:7a:08:53:f6:8c:ff:06:b1:47:83:c5:c8:72:51:d6:80:c7: f6:4f:6b:6f:a0:ec:58:41:ba:a7:ba:6e:16:23:c4:10:e3:87: df:27:7f:ed:9f:46:39:ec:69:07:38:5d:be:53:6f:07:57:96: d4:e8:73:89:3e:13:a6:20:33:49:f5:7d:3b:df:53:8b:ef:1a: 2c:46:02:f8:d7:cb:d4:13:a8:21:30:a1:e9:24:6f:b6:dd:a0: 43:37:8d:e1:3e:23:d9:6b:9f:a0:a3:d2:1a:f6:35:17:09:31: ed:4e:2c:24:da:32:49:e8:8a:99:75:f2:4b:35:b8:4e:86:56: 48:83:3d:a8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjYwNDA0MjMzNTA1WhcNMjYwNDExMjMzNTA1WjAYMRYwFAYD VQQDEw02OWQxYTAyOS1jOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Arh8TEn+nLRtSFOMixFbYMha+Zzh3U9JzVnaueNbaW7A7QyQjz9SgEy2y5k kduyevmOZnnBIUykCC3kVeDEnSHV6Z0l0ARWtMXZ4gD6ppqzY6jYHHe8lCpdSzkR 4lvl8n0Q/kHPnXlF3aWLjiZS0m5iOuY8RvfOS6FAqv50P49oCGBDz+rYYUvs+UaH OMWciQnytPyXskszRHASGt1jPTFu+5AYZcvvjv44zf6n6nqQB0FANpqSELSj1SQ/ loqwGo7j4MCvyKVdNfv4PfJ2LsHsb6M/OSoOGYLNhr1DMpXJWsRwq3Z8tF6fIqZ7 XABppjXzoLVxLQx3NgnW8fFVPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIGBQmHn 7IG8HnknBLOwMk5z+pUDMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEs1ddBbe8tE5r3Naq2pt/ozsOCeUhlttSGlYWyN7r+1LCuXj0XyJ5HXEbraD Rawd1BKBIe9SfhTb3GGW6tD4B0bg/JTm6EFCDknaglgRQEALuWUAgKL0soQg1mNt TtHVkNko13s4I0xI4XJ4t9W6JHDDn0QIqWQDF/4GnVx9q3oIU/aM/waxR4PFyHJR 1oDH9k9rb6DsWEG6p7puFiPEEOOH3yd/7Z9GOexpBzhdvlNvB1eW1OhziT4TpiAz SfV9O99Ti+8aLEYC+NfL1BOoITCh6SRvtt2gQzeN4T4j2WufoKPSGvY1Fwkx7U4s JNoySeiKmXXySzW4ToZWSIM9qA== -----END CERTIFICATE-----Generated at Mon Apr 6 11:19:23 2026 by rpki-client