$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: oiWQEAzgV/7715T7Bz7Cg7xaqsvj4cDfZneGyMrfcS0= Subject key identifier: 5C:F0:6A:A8:3C:87:9D:AF:EF:1C:B4:73:4D:8D:C5:6A:A7:A5:75:7D Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 0553 Signing time: Sat 04 Apr 2026 23:12:39 +0000 Manifest this update: Sat 04 Apr 2026 23:12:39 +0000 Manifest next update: Sat 11 Apr 2026 23:12:39 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: Wy7WCMC35w96Q/ZBkE3HuqVfEGOn6HH50LaLlS+QYck=) 2: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=) 3: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=) 4: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Apr 4 23:12:39 2026 GMT Not After : Apr 11 23:12:39 2026 GMT Subject: CN=69d19ae7-66bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:b3:d6:f8:52:49:e3:4a:0d:14:ee:0b:e6: a4:e7:4d:41:cf:e6:45:1f:46:d4:7f:7e:40:11:93: 1d:53:ed:82:08:50:8b:97:7e:23:fe:bb:d8:36:45: 6a:2d:0b:e2:3c:35:5b:8a:e2:9b:2a:30:b7:d8:bd: 42:0e:2f:46:f5:f8:12:3e:80:4c:51:10:ea:5b:6c: 99:4f:0b:7e:5c:4e:9f:dd:84:49:01:28:0e:41:77: 71:1d:51:91:8b:99:28:c4:61:e0:ed:ca:28:f2:00: 79:c9:fe:99:a8:9b:7a:42:80:a6:dd:b5:67:6c:2e: 84:ed:2a:43:a5:fc:26:50:26:41:8e:61:bb:5c:29: 1e:60:0d:7f:b9:b9:ea:12:a3:f6:88:91:7b:5b:df: 08:6e:45:79:27:61:7b:ab:32:c2:27:21:8c:21:30: db:53:8b:97:aa:cd:b5:86:e8:48:fa:ff:88:86:0e: b4:d9:bd:5d:fc:96:59:a4:f1:5c:0b:1c:e7:e6:47: e1:b8:48:aa:4b:b2:b0:40:d7:50:3a:a0:6b:e0:8a: 1f:1b:15:25:01:61:77:f3:65:22:e8:7b:57:f0:89: 4d:77:33:24:1c:6e:dc:80:c9:6f:71:5f:80:46:59: c7:62:05:71:f9:42:58:8e:84:06:ed:9f:49:ef:54: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F0:6A:A8:3C:87:9D:AF:EF:1C:B4:73:4D:8D:C5:6A:A7:A5:75:7D X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:ff:6d:0b:a1:e1:31:15:67:5b:aa:e3:e6:04:bc:b0:ef:da: 33:dd:18:bb:80:b0:fa:a1:a9:e7:40:66:aa:05:0f:3a:8c:c3: d5:a8:e0:3a:c4:8c:92:bb:5f:e0:fc:1b:03:b9:8c:90:ca:e8: cb:11:a9:72:cf:ae:bb:95:ac:18:f2:0d:ed:a3:ea:58:f9:97: 79:bb:ad:4c:63:7c:a1:ec:35:a6:ce:4a:5b:ff:bb:ec:4f:3e: fa:23:81:ae:46:91:8d:d9:e8:79:71:1c:d3:d6:c1:31:f5:39: e5:1e:54:78:31:69:e7:ca:dc:09:98:4f:8d:cb:30:de:d0:7d: ed:8e:38:a6:b4:8c:25:bb:75:39:03:59:f6:a7:80:be:27:ab: 3b:4c:23:a1:e4:c5:c4:1b:76:ce:f4:67:2c:67:a8:b3:3e:17: cc:e7:2c:4f:9e:8f:20:b0:ff:a5:98:f7:57:6e:1b:a3:c9:10: 12:b3:94:9e:bb:e0:ad:42:e2:16:cc:1e:db:62:31:db:07:e0: e2:e6:06:f9:65:0a:a5:a9:5e:07:ff:5c:28:21:31:9a:7f:55: 7e:36:57:88:05:cd:00:2c:a6:0e:9d:6a:9c:d6:14:28:f3:05: de:93:5a:86:c0:c8:88:d9:34:40:ca:fb:09:1c:02:db:d7:44: c1:78:65:56 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYwNDA0MjMxMjM5WhcNMjYwNDExMjMxMjM5WjAYMRYwFAYD VQQDEw02OWQxOWFlNy02NmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtymz1vhSSeNKDRTuC+ak501Bz+ZFH0bUf35AEZMdU+2CCFCLl34j/rvYNkVq LQviPDVbiuKbKjC32L1CDi9G9fgSPoBMURDqW2yZTwt+XE6f3YRJASgOQXdxHVGR i5koxGHg7coo8gB5yf6ZqJt6QoCm3bVnbC6E7SpDpfwmUCZBjmG7XCkeYA1/ubnq EqP2iJF7W98IbkV5J2F7qzLCJyGMITDbU4uXqs21huhI+v+Ihg602b1d/JZZpPFc Cxzn5kfhuEiqS7KwQNdQOqBr4IofGxUlAWF382Ui6HtX8IlNdzMkHG7cgMlvcV+A RlnHYgVx+UJYjoQG7Z9J71RY4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzwaqg8 h52v7xy0c02NxWqnpXV9MB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM/9tC6HhMRVnW6rj5gS8sO/aM90Yu4Cw+qGp50BmqgUPOozD1ajgOsSMkrtf 4PwbA7mMkMroyxGpcs+uu5WsGPIN7aPqWPmXebutTGN8oew1ps5KW/+77E8++iOB rkaRjdnoeXEc09bBMfU55R5UeDFp58rcCZhPjcsw3tB97Y44prSMJbt1OQNZ9qeA vierO0wjoeTFxBt2zvRnLGeosz4XzOcsT56PILD/pZj3V24bo8kQErOUnrvgrULi Fswe22Ix2wfg4uYG+WUKpaleB/9cKCExmn9VfjZXiAXNACymDp1qnNYUKPMF3pNa hsDIiNk0QMr7CRwC29dEwXhlVg== -----END CERTIFICATE-----Generated at Mon Apr 6 14:53:32 2026 by rpki-client