$ rpki-client -vvf rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft File: rN673IrqemETaTGDOGOx454Bfic.mft (raw, json) Hash identifier: 8ceqhhK8CFPgCfF7OzClbTM9F4h32PAMPvziDL+4/WI= Subject key identifier: 47:35:F4:22:54:67:9C:10:4B:70:E2:D4:EE:40:AF:46:17:EC:71:41 Authority key identifier: AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 Certificate issuer: /CN=A911FD55/serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft Manifest number: 0B9F Signing time: Sat 04 Apr 2026 18:55:17 +0000 Manifest this update: Sat 04 Apr 2026 18:55:17 +0000 Manifest next update: Sat 11 Apr 2026 18:55:17 +0000 Files and hashes: 1: rN673IrqemETaTGDOGOx454Bfic.crl (hash: W+7tTm/uS0Ob9h1ry0DwuH4EdXfkeOgZgS0Gd7v5lh0=) 2: C8A09F34F11C11EA83A6D247C4F9AE02.roa (hash: Tt+/ZFDCBvQEpgRT0vX9Jm9igfEF7EehekjpgCR5Fbg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 18:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FD55, serialNumber=ACDEBBDC8AEA7A61136931833863B1E39E017E27 Validity Not Before: Apr 4 18:55:17 2026 GMT Not After : Apr 11 18:55:17 2026 GMT Subject: CN=69d15e95-a62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1f:47:24:85:47:08:91:5c:41:3d:2b:33:c5: 7d:84:66:a8:9c:9e:f1:dc:16:a7:3c:80:5e:87:ff: fb:6c:15:1c:66:a1:ec:d4:c1:23:96:12:01:4b:c3: aa:91:eb:aa:48:f8:4e:41:08:a1:ae:54:e2:c9:25: 22:68:04:e1:dc:63:ec:d9:4e:32:1b:26:8d:49:c8: 6e:e8:ec:8e:4d:bd:1c:a1:0a:83:13:d1:e2:ae:03: e6:4e:67:8b:ca:fd:ac:1e:56:57:83:fe:96:08:8c: 20:87:98:f5:fa:2e:4b:29:52:c6:54:3f:7a:1e:81: e2:d3:49:87:d5:dd:22:03:30:ef:a7:fc:43:c7:d5: 70:bd:05:ad:36:02:f7:14:36:4f:34:30:b5:d0:86: bb:b1:b5:ee:3a:69:db:5d:d5:2b:bd:ab:a5:c7:05: a4:ae:fc:9b:da:ba:8d:c6:92:b0:99:d0:53:ba:c5: 07:57:4d:4a:cb:e0:70:39:f7:a8:86:40:05:d1:38: 31:0a:77:53:a1:df:90:b1:76:78:19:52:cf:35:84: 3a:22:b3:3d:ba:24:b6:4e:71:e6:99:23:60:38:82: ed:be:8e:38:68:34:c2:86:d6:ff:40:f9:85:06:5b: b3:cf:65:5f:15:a0:a6:5d:a0:a4:1b:ed:b6:42:89: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:35:F4:22:54:67:9C:10:4B:70:E2:D4:EE:40:AF:46:17:EC:71:41 X509v3 Authority Key Identifier: keyid:AC:DE:BB:DC:8A:EA:7A:61:13:69:31:83:38:63:B1:E3:9E:01:7E:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rN673IrqemETaTGDOGOx454Bfic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FD55/E78FD2AA473211EA810B5042C4F9AE02/rN673IrqemETaTGDOGOx454Bfic.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:d8:0b:bd:a3:fc:94:c3:16:64:6c:3f:b9:d5:9e:88:2d:51: 9f:42:a7:7d:79:f6:ec:3f:db:4e:61:57:3c:2c:6f:88:96:29: 69:a6:da:d5:ce:3d:0d:df:f7:a4:07:63:87:cc:76:26:ab:8b: 90:11:30:40:75:d1:ca:3a:66:c5:11:4e:35:0b:fb:2f:4f:db: 35:83:2c:b3:7b:2c:78:25:e7:ff:3b:c0:90:bd:5e:9d:41:b0: 0a:a6:69:e3:94:f5:57:7e:b7:08:c9:23:7a:d6:ed:2b:6f:9e: 41:56:fd:0e:e1:1e:18:c0:5b:1e:6e:f2:ca:1b:47:36:b3:1a: e0:9f:a2:c4:cd:71:01:d1:0c:28:b6:4a:bd:1d:b5:48:6d:6a: 8c:29:a7:0b:63:78:0b:6d:24:32:5a:cc:3a:c5:cc:ff:d7:05: 98:bc:0b:fe:99:3b:2e:bd:a4:30:b9:5e:0d:2a:e4:00:ee:00: 1d:32:55:7b:ea:61:83:77:b0:11:b4:a2:ae:a8:df:e2:1f:be: 1a:0c:3c:6d:66:19:9a:f6:10:59:bb:8e:c3:8f:e6:d7:c0:b9: 27:7a:c0:7f:61:85:6d:2b:0e:11:e4:5a:e5:e7:6d:a0:9a:ac: 57:05:ca:db:2f:34:af:94:ba:7b:bd:e0:aa:d9:6d:0a:76:49: a6:1d:2f:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZENTUxMTAvBgNVBAUTKEFDREVCQkRDOEFFQTdBNjExMzY5MzE4MzM4NjNCMUUz OUUwMTdFMjcwHhcNMjYwNDA0MTg1NTE3WhcNMjYwNDExMTg1NTE3WjAYMRYwFAYD VQQDEw02OWQxNWU5NS1hNjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6R9HJIVHCJFcQT0rM8V9hGaonJ7x3BanPIBeh//7bBUcZqHs1MEjlhIBS8Oq keuqSPhOQQihrlTiySUiaATh3GPs2U4yGyaNSchu6OyOTb0coQqDE9HirgPmTmeL yv2sHlZXg/6WCIwgh5j1+i5LKVLGVD96HoHi00mH1d0iAzDvp/xDx9VwvQWtNgL3 FDZPNDC10Ia7sbXuOmnbXdUrvaulxwWkrvyb2rqNxpKwmdBTusUHV01Ky+BwOfeo hkAF0TgxCndTod+QsXZ4GVLPNYQ6IrM9uiS2TnHmmSNgOILtvo44aDTChtb/QPmF Bluzz2VfFaCmXaCkG+22QomXNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEc19CJU Z5wQS3Di1O5Ar0YX7HFBMB8GA1UdIwQYMBaAFKzeu9yK6nphE2kxgzhjseOeAX4n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkQ1NS9FNzhGRDJBQTQ3 MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVtRVRhVEdET0dPeDQ1NEJm aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JONjczSXJxZW1FVGFUR0RPR094NDU0QmZpYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkQ1NS9FNzhGRDJBQTQ3MzIxMUVBODEwQjUwNDJDNEY5QUUwMi9yTjY3M0lycWVt RVRhVEdET0dPeDQ1NEJmaWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAp9gLvaP8lMMWZGw/udWeiC1Rn0KnfXn27D/bTmFXPCxviJYpaaba1c49Dd/3 pAdjh8x2JquLkBEwQHXRyjpmxRFONQv7L0/bNYMss3sseCXn/zvAkL1enUGwCqZp 45T1V363CMkjetbtK2+eQVb9DuEeGMBbHm7yyhtHNrMa4J+ixM1xAdEMKLZKvR21 SG1qjCmnC2N4C20kMlrMOsXM/9cFmLwL/pk7Lr2kMLleDSrkAO4AHTJVe+phg3ew EbSirqjf4h++Ggw8bWYZmvYQWbuOw4/m18C5J3rAf2GFbSsOEeRa5edtoJqsVwXK 2y80r5S6e73gqtltCnZJph0v8A== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:07 2026 by rpki-client