$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: pcW/gogEV+OyHNR0//HjUdxSvLNVFvfcNqC6kl2VU5c= Subject key identifier: 67:03:40:6F:43:0D:C3:27:15:FA:86:AC:E8:D7:A2:E3:F1:8E:88:B5 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0E4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0E2F Signing time: Sat 04 Apr 2026 17:40:55 +0000 Manifest this update: Sat 04 Apr 2026 17:40:54 +0000 Manifest next update: Sat 11 Apr 2026 17:40:54 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: BU+oXXEOa7TpU6a0753Gh3VrbOGStz/Lmk8G4V4fTpk=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 17:40:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3658 (0xe4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Apr 4 17:40:54 2026 GMT Not After : Apr 11 17:40:54 2026 GMT Subject: CN=69d14d27-f014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:39:28:fa:31:be:c9:fa:47:eb:f3:ea:e5:02: 79:24:5e:7f:2b:a8:02:38:6a:bc:96:61:2b:0e:81: dd:88:19:cb:13:8c:27:aa:40:a5:44:33:f7:ca:de: a2:c2:af:66:4f:79:02:ba:aa:03:b4:bf:26:b2:a9: 82:90:a7:b9:20:fa:30:df:1f:39:c5:7c:98:91:79: 3d:73:52:01:7d:c9:4b:27:52:11:c5:4b:49:94:d2: e5:c9:8f:5b:77:7a:dc:88:4f:5e:e6:9a:8c:c9:3a: e5:c9:e2:a1:f7:00:1d:c8:30:27:ac:f6:67:a0:92: 25:ae:69:61:6a:4c:29:3a:4f:c9:b3:37:59:1b:19: fc:d7:56:e5:c6:9d:dd:a9:44:19:20:d5:84:e9:29: 19:e2:49:ac:dd:0e:dc:54:b6:00:40:47:ae:2b:ce: 2f:88:d7:8e:28:4f:e1:e2:72:38:04:f7:8c:7d:5b: ca:1c:25:d9:b5:53:bc:19:20:87:72:5d:38:cf:18: bd:f8:e9:65:02:aa:36:c3:bf:5b:30:a2:3f:43:ca: e5:97:b9:b2:75:f0:2f:86:34:c7:04:f3:d9:d2:14: 72:df:78:8a:65:29:eb:70:10:6d:8e:2a:cb:3b:f8: f2:df:54:1a:6c:53:d8:13:0c:13:d6:11:51:d1:2b: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:40:6F:43:0D:C3:27:15:FA:86:AC:E8:D7:A2:E3:F1:8E:88:B5 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:10:4f:92:5e:0b:af:a2:b1:07:ea:0d:89:9b:ea:d8:ea:14: 57:4a:f3:bf:50:5d:41:b6:a1:9a:3e:dd:c1:e9:5d:c9:af:d4: c3:50:59:30:b2:6b:bc:c8:f6:7c:d9:e1:be:61:81:f8:4d:f9: 2a:44:ed:11:59:82:ab:5a:69:6b:18:0d:72:f9:b2:32:b8:e3: 58:31:81:60:b2:09:fd:99:d2:74:09:26:7d:9b:5c:5c:44:a3: 2f:ff:48:63:7a:f2:92:9d:42:8a:b4:2a:c5:8a:d5:ec:df:b3: ba:0d:fa:31:7a:26:e2:8d:87:1b:de:23:fd:6e:57:9f:79:32: 45:19:87:bf:aa:ca:53:6f:85:6f:64:02:a5:b7:19:08:65:b0: 87:4a:9b:28:14:64:33:19:56:e7:ff:91:b1:42:6c:cb:03:3d: f3:5f:07:2c:90:b7:51:66:7e:32:60:33:f7:3a:9c:bd:d7:96: 51:a4:16:1b:b9:8e:01:53:09:e4:d2:a5:6d:a3:04:b2:05:18: d2:a0:5d:56:82:94:b3:4b:58:90:6d:63:a1:65:a9:6e:01:46: 2c:46:17:d8:48:9f:dc:d4:6c:14:4f:bd:7c:cb:0e:31:97:c4: 6f:6b:30:69:c5:17:f9:9e:3b:ea:a3:53:43:6a:ac:90:6f:8f: f4:8a:64:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjYwNDA0MTc0MDU0WhcNMjYwNDExMTc0MDU0WjAYMRYwFAYD VQQDEw02OWQxNGQyNy1mMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAhDko+jG+yfpH6/Pq5QJ5JF5/K6gCOGq8lmErDoHdiBnLE4wnqkClRDP3yt6i wq9mT3kCuqoDtL8msqmCkKe5IPow3x85xXyYkXk9c1IBfclLJ1IRxUtJlNLlyY9b d3rciE9e5pqMyTrlyeKh9wAdyDAnrPZnoJIlrmlhakwpOk/JszdZGxn811blxp3d qUQZINWE6SkZ4kms3Q7cVLYAQEeuK84viNeOKE/h4nI4BPeMfVvKHCXZtVO8GSCH cl04zxi9+OllAqo2w79bMKI/Q8rll7mydfAvhjTHBPPZ0hRy33iKZSnrcBBtjirL O/jy31QabFPYEwwT1hFR0SvKzwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcDQG9D DcMnFfqGrOjXouPxjoi1MB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaxBPkl4Lr6KxB+oNiZvq2OoUV0rzv1BdQbahmj7dweldya/Uw1BZMLJrvMj2 fNnhvmGB+E35KkTtEVmCq1ppaxgNcvmyMrjjWDGBYLIJ/ZnSdAkmfZtcXESjL/9I Y3rykp1CirQqxYrV7N+zug36MXom4o2HG94j/W5Xn3kyRRmHv6rKU2+Fb2QCpbcZ CGWwh0qbKBRkMxlW5/+RsUJsywM9818HLJC3UWZ+MmAz9zqcvdeWUaQWG7mOAVMJ 5NKlbaMEsgUY0qBdVoKUs0tYkG1joWWpbgFGLEYX2Eif3NRsFE+9fMsOMZfEb2sw acUX+Z476qNTQ2qskG+P9Ipkcw== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:20 2026 by rpki-client