$ rpki-client -vvf rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft File: _fz0IvXEZi3h5GQ6JxwEax4hxK0.mft (raw, json) Hash identifier: ZY5OeHkMBOCQg79F4OYBtjXkDxdszkIStbobbPV+pRU= Subject key identifier: 3F:7D:4D:F1:FE:5F:01:8D:6A:98:FE:D8:F3:4D:64:8A:18:02:5F:40 Authority key identifier: FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD Certificate issuer: /CN=A9125A95/serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Certificate serial: 04D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft Manifest number: 04D1 Signing time: Sat 04 Apr 2026 23:38:05 +0000 Manifest this update: Sat 04 Apr 2026 23:38:05 +0000 Manifest next update: Sat 11 Apr 2026 23:38:05 +0000 Files and hashes: 1: _fz0IvXEZi3h5GQ6JxwEax4hxK0.crl (hash: IxIpKFxOwycGrMIDTuWWE+ZRmuFu/YL8uTkjzXd85j8=) 2: AF506F14630811EC97879243C4F9AE02.roa (hash: 957JN3cduwRqZhBkt9zySk9smfI+Ua9et4xDRT3DRKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:38:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1240 (0x4d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125A95, serialNumber=FDFCF422F5C4662DE1E4643A271C046B1E21C4AD Validity Not Before: Apr 4 23:38:05 2026 GMT Not After : Apr 11 23:38:05 2026 GMT Subject: CN=69d1a0dd-187c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c7:f7:6c:c6:17:e2:8e:b0:49:6b:70:90:a8: 5b:01:80:8e:a3:0a:84:ab:e4:56:02:4c:84:d7:25: f2:24:58:bd:fd:da:5a:27:23:b2:b3:d0:20:9a:e9: 25:bb:98:87:e3:d6:6b:21:4f:ed:47:9e:16:d9:38: 8f:62:f8:6c:62:6f:d9:98:06:41:f2:77:b3:0a:77: 91:4c:82:7c:a3:2a:49:1c:ff:f5:87:e5:63:27:26: 7b:c1:ee:70:a6:10:dc:80:b4:05:c3:91:0a:04:22: c2:68:2d:50:1b:ea:26:fb:4f:d8:4f:f5:bc:8d:0f: 31:5b:c9:9c:f2:9a:cb:05:6d:af:32:ef:e4:54:cc: f1:ec:c9:15:40:7b:e5:7d:20:c4:74:41:35:c5:eb: 56:37:06:d8:ea:38:55:24:e4:6d:b7:fd:13:a4:fd: ce:97:27:54:6d:17:b9:86:88:f2:f8:4a:3a:6b:49: 77:9f:72:b3:ea:66:95:52:43:b7:27:61:01:ac:e0: 34:82:af:0f:2f:b6:71:62:24:f7:d1:93:9b:25:4d: e6:8a:46:64:af:57:39:55:9f:8e:64:18:dd:4b:52: eb:7b:24:23:cf:63:2a:c8:cc:64:ee:7b:7c:25:27: d7:3b:a5:35:bf:2e:ec:1d:cf:74:c6:87:65:f3:05: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7D:4D:F1:FE:5F:01:8D:6A:98:FE:D8:F3:4D:64:8A:18:02:5F:40 X509v3 Authority Key Identifier: keyid:FD:FC:F4:22:F5:C4:66:2D:E1:E4:64:3A:27:1C:04:6B:1E:21:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_fz0IvXEZi3h5GQ6JxwEax4hxK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125A95/AA60C8EC617211ECA3172086C4F9AE02/_fz0IvXEZi3h5GQ6JxwEax4hxK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7f:02:4a:72:fa:9c:4f:df:bd:28:eb:3a:fc:b6:68:3f:a7: 48:36:8a:3d:61:b4:bd:f8:0a:cb:73:43:f9:9b:65:5c:9d:8c: 28:39:2c:f8:ec:7e:36:ff:b0:11:05:3a:88:e7:8c:28:8b:ee: 1c:f6:0a:4c:5d:35:7f:78:a7:d6:c3:64:2e:1b:97:6e:25:07: b3:7c:62:55:82:97:40:a5:97:b2:48:ca:17:15:5f:e1:7c:6d: 37:a1:3f:1b:33:f5:e5:bd:19:8b:60:e1:ad:e2:1a:d9:42:cb: 40:00:b7:40:f8:46:a2:0a:22:1b:53:cf:41:71:75:5e:f6:d4: 7b:0c:5a:a8:11:65:6c:94:c5:fb:57:b1:b8:8c:5d:b3:ae:b3: 4d:85:4e:99:19:ea:83:32:4a:c2:b8:b5:90:96:09:85:7e:d1: b9:4a:84:02:e5:08:f7:e2:76:9e:17:3d:f8:ef:eb:b7:8b:bd: ba:aa:af:8c:eb:19:dd:0e:61:b7:c8:08:84:63:bd:b6:cb:e2: 40:7a:b1:38:94:8e:7e:d7:cc:6e:9b:fd:d3:d3:4b:59:38:74: 06:4b:e6:f3:ba:db:93:d7:43:57:ce:76:ca:9b:13:ac:2f:36: d2:d6:91:e2:fc:f1:0d:86:e4:54:4f:ab:78:9d:85:4c:26:08: a3:29:7b:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBOTUxMTAvBgNVBAUTKEZERkNGNDIyRjVDNDY2MkRFMUU0NjQzQTI3MUMwNDZC MUUyMUM0QUQwHhcNMjYwNDA0MjMzODA1WhcNMjYwNDExMjMzODA1WjAYMRYwFAYD VQQDEw02OWQxYTBkZC0xODdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqcf3bMYX4o6wSWtwkKhbAYCOowqEq+RWAkyE1yXyJFi9/dpaJyOys9Agmukl u5iH49ZrIU/tR54W2TiPYvhsYm/ZmAZB8nezCneRTIJ8oypJHP/1h+VjJyZ7we5w phDcgLQFw5EKBCLCaC1QG+om+0/YT/W8jQ8xW8mc8prLBW2vMu/kVMzx7MkVQHvl fSDEdEE1xetWNwbY6jhVJORtt/0TpP3OlydUbRe5hojy+Eo6a0l3n3Kz6maVUkO3 J2EBrOA0gq8PL7ZxYiT30ZObJU3mikZkr1c5VZ+OZBjdS1LreyQjz2MqyMxk7nt8 JSfXO6U1vy7sHc90xodl8wVV7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD99TfH+ XwGNapj+2PNNZIoYAl9AMB8GA1UdIwQYMBaAFP389CL1xGYt4eRkOiccBGseIcSt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUE5NS9BQTYwQzhFQzYx NzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVppM2g1R1E2Snh3RWF4NGh4 SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19mejBJdlhFWmkzaDVHUTZKeHdFYXg0aHhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUE5NS9BQTYwQzhFQzYxNzIxMUVDQTMxNzIwODZDNEY5QUUwMi9fZnowSXZYRVpp M2g1R1E2Snh3RWF4NGh4SzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi38CSnL6nE/fvSjrOvy2aD+nSDaKPWG0vfgKy3ND+ZtlXJ2MKDks+Ox+Nv+w EQU6iOeMKIvuHPYKTF01f3in1sNkLhuXbiUHs3xiVYKXQKWXskjKFxVf4XxtN6E/ GzP15b0Zi2DhreIa2ULLQAC3QPhGogoiG1PPQXF1XvbUewxaqBFlbJTF+1exuIxd s66zTYVOmRnqgzJKwri1kJYJhX7RuUqEAuUI9+J2nhc9+O/rt4u9uqqvjOsZ3Q5h t8gIhGO9tsviQHqxOJSOftfMbpv909NLWTh0Bkvm87rbk9dDV852ypsTrC820taR 4vzxDYbkVE+reJ2FTCYIoyl7ZQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:32:16 2026 by rpki-client