$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: +FltRgGM5xASXSbjw08AbG87QEkb+EUcYthlCmlxbdI= Subject key identifier: C2:57:FF:B0:98:97:D5:47:31:65:C6:7F:D5:EC:04:5F:4A:65:E9:64 Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 01DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 01DA Signing time: Sun 05 Apr 2026 03:01:26 +0000 Manifest this update: Sun 05 Apr 2026 03:01:26 +0000 Manifest next update: Sun 12 Apr 2026 03:01:26 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: IsH8A6l/8szO9HPL96i6esMm7CbwqwJ/UpvQnVzoMiQ=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: qK+khHCIuI//dPRwyz9oPvFPdzHoY4nUbkit8bRPNhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Apr 5 03:01:26 2026 GMT Not After : Apr 12 03:01:26 2026 GMT Subject: CN=69d1d086-5ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e5:5c:d3:1f:d6:f2:b3:cb:4e:d8:3f:69:bc: 7f:af:38:d2:a3:f8:19:34:08:40:71:40:4e:7b:ad: 57:9c:0c:b9:53:9e:60:45:71:b3:b7:96:b6:fe:04: 44:c8:91:29:57:fc:b0:a1:7e:8c:56:05:d6:c8:49: 67:68:90:8f:48:11:e0:e9:11:e3:3c:0e:68:b8:96: 55:4e:b6:05:cc:82:79:82:12:22:ba:ae:57:d9:c7: 74:47:27:7f:ce:94:a9:86:1c:b2:ff:c3:33:fe:51: 54:89:21:b7:19:21:45:f9:8c:41:72:47:9b:d7:df: 9d:d2:d3:7d:ab:0d:a0:24:a7:68:34:7d:7b:96:9d: 0c:42:00:8b:10:5c:1f:d3:3c:d9:fd:cf:24:9d:23: 66:81:3f:94:b9:b6:b3:95:10:50:5d:82:b3:0e:7e: 08:64:41:5e:38:40:0f:75:20:25:e9:81:7e:f8:50: 13:70:9c:06:06:98:16:97:f4:c2:bc:cc:11:29:a5: 75:2d:57:3e:a7:4d:f3:93:84:61:32:61:2d:4d:89: 23:07:d3:84:ea:6a:1b:99:29:a1:5d:a6:d7:f9:60: 61:3b:fd:c1:db:c9:9f:a3:78:2e:1a:e0:ee:20:cf: 65:54:24:78:19:aa:c0:87:ea:d4:9f:99:55:b7:b9: fe:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:57:FF:B0:98:97:D5:47:31:65:C6:7F:D5:EC:04:5F:4A:65:E9:64 X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:20:88:66:df:c1:31:f4:7e:9b:3e:88:31:6a:5a:af:34:b3: a5:a1:36:e9:bb:6b:c7:81:73:9d:30:1a:e0:b7:02:e6:9a:7d: 14:da:d3:61:8a:32:05:13:1e:8d:50:0c:a3:f1:48:7f:1c:82: 61:73:38:3d:d3:02:db:d9:66:6c:4e:9d:f1:67:b0:1e:0c:20: f3:be:78:44:b0:7a:b6:c8:44:64:be:d9:7d:66:9a:b0:a1:83: dd:e8:4a:1e:b1:99:02:c1:dc:a2:d3:e4:29:ab:96:ad:4e:6c: 6f:3b:c4:94:ac:06:33:c1:4f:d9:e1:cf:cb:33:bc:56:f2:38: 52:aa:8b:9b:44:b3:2e:16:58:e8:40:85:61:6e:6b:e6:2b:f6: 29:64:8c:97:2b:50:65:f5:49:5c:fd:60:8b:5d:95:e5:da:80: 6d:08:fa:d0:33:d0:07:4e:63:4b:91:48:b3:d5:12:2d:2d:a1: 19:0d:fa:38:60:1c:21:0e:a7:6a:65:4d:59:a8:6a:90:db:1a: 3c:57:a5:76:e3:73:6e:db:ea:16:33:1d:21:9f:af:be:63:83: cb:ff:6b:5e:84:90:1f:2e:5f:37:e1:01:3f:b1:5a:a6:37:b0: ac:3b:1d:f6:e9:7d:37:10:e8:d8:e8:93:ed:27:88:ec:5f:e8: ea:aa:bd:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjYwNDA1MDMwMTI2WhcNMjYwNDEyMDMwMTI2WjAYMRYwFAYD VQQDEw02OWQxZDA4Ni01YmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+Vc0x/W8rPLTtg/abx/rzjSo/gZNAhAcUBOe61XnAy5U55gRXGzt5a2/gRE yJEpV/ywoX6MVgXWyElnaJCPSBHg6RHjPA5ouJZVTrYFzIJ5ghIiuq5X2cd0Ryd/ zpSphhyy/8Mz/lFUiSG3GSFF+YxBckeb19+d0tN9qw2gJKdoNH17lp0MQgCLEFwf 0zzZ/c8knSNmgT+UubazlRBQXYKzDn4IZEFeOEAPdSAl6YF++FATcJwGBpgWl/TC vMwRKaV1LVc+p03zk4RhMmEtTYkjB9OE6mobmSmhXabX+WBhO/3B28mfo3guGuDu IM9lVCR4GarAh+rUn5lVt7n+sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMJX/7CY l9VHMWXGf9XsBF9KZelkMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYCCIZt/BMfR+mz6IMWparzSzpaE26btrx4FznTAa4LcC5pp9FNrTYYoyBRMe jVAMo/FIfxyCYXM4PdMC29lmbE6d8WewHgwg8754RLB6tshEZL7ZfWaasKGD3ehK HrGZAsHcotPkKauWrU5sbzvElKwGM8FP2eHPyzO8VvI4UqqLm0SzLhZY6ECFYW5r 5iv2KWSMlytQZfVJXP1gi12V5dqAbQj60DPQB05jS5FIs9USLS2hGQ36OGAcIQ6n amVNWahqkNsaPFelduNzbtvqFjMdIZ+vvmODy/9rXoSQHy5fN+EBP7FapjewrDsd 9ul9NxDo2OiT7SeI7F/o6qq9KQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:33:36 2026 by rpki-client