$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: haMXj8PizoTYpQ5Sis6HKMakOYMbQlfYb9zWS1EXBKQ= Subject key identifier: 4E:16:2F:24:D1:BC:11:32:8A:7C:7C:46:57:D6:9C:A2:51:04:65:CB Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 0201 Signing time: Tue 07 Apr 2026 02:42:03 +0000 Manifest this update: Tue 07 Apr 2026 02:42:03 +0000 Manifest next update: Tue 14 Apr 2026 02:42:03 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: yIFzajCzaqQAle7w+hTvOCTaOOO0wd9bjE8QDDoRsds=) 2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=) 3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 02:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Apr 7 02:42:03 2026 GMT Not After : Apr 14 02:42:03 2026 GMT Subject: CN=69d46efb-5a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b3:4c:01:09:c7:1b:75:7f:c9:23:f0:32:a0: f1:06:be:6a:04:34:b8:35:65:6c:54:57:bc:b4:df: 6b:6e:de:39:cd:a8:d5:a8:3a:a8:fd:5a:a4:d6:12: e6:b5:4c:05:20:67:17:6d:37:fc:02:56:76:e1:ba: e6:bc:01:e3:1b:c8:d3:8b:b9:c8:d7:cf:ca:f2:27: 9b:d9:98:0e:7f:d7:5d:8c:cd:f5:57:f9:0b:eb:9a: b7:cc:30:83:7a:98:e0:67:25:6b:00:d8:ff:26:38: 95:f3:d0:29:d5:59:09:16:fa:33:e6:9a:14:d7:d3: e4:b5:d9:8f:0d:dc:54:f7:4d:9b:57:5a:36:10:84: 14:e7:15:02:b0:26:d2:78:0f:f3:c4:86:6c:0e:cd: 91:b7:5e:7b:d1:90:02:5b:a6:d3:ba:cd:f3:ba:31: f8:b2:cc:f3:9a:fa:b2:aa:b0:46:ad:06:b8:8b:77: 31:00:f3:1b:0d:35:93:d7:1c:e5:ae:f1:6e:3f:ee: 28:62:e2:80:a7:89:1e:83:10:ab:c0:9b:e4:44:95: 8e:06:fb:7d:fb:b8:80:0a:11:22:e2:8e:b7:e6:94: c2:9a:aa:23:8c:0e:e1:65:30:cc:34:bc:ac:05:b2: 22:d9:7d:a6:70:fd:4e:a5:6a:df:f1:5d:eb:b0:69: da:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:16:2F:24:D1:BC:11:32:8A:7C:7C:46:57:D6:9C:A2:51:04:65:CB X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ce:ad:3d:26:84:e7:c4:94:9f:fd:23:f2:35:06:c2:3c:3d: c4:b4:af:44:41:4d:21:71:23:8e:9f:5d:f5:8e:cc:59:65:2a: 7a:9f:5d:a1:8d:37:8a:2d:9e:8b:74:63:ae:1e:03:76:cf:58: 2a:5d:5c:35:59:3f:32:14:fc:84:0b:88:b5:bd:73:9e:de:ce: 51:a4:87:92:5e:aa:08:90:f6:ff:69:ff:3f:15:cc:a8:67:71: 1b:ff:0c:40:67:22:31:a2:51:84:51:e8:5f:ce:dd:ba:6d:6b: f2:92:8a:5e:37:f4:44:5e:0f:a8:32:90:53:ac:02:1b:4b:96: 0f:79:0a:6f:b4:19:00:11:93:b9:6d:3f:a6:bc:85:e4:12:57: 76:b2:6b:31:95:df:83:30:2b:81:e6:31:5c:46:75:59:31:30: 28:55:64:73:bc:ab:12:3c:cf:07:18:f7:b0:4d:ba:1d:c9:0a: 78:c6:b9:c4:f4:99:22:d5:7c:c1:76:6f:a5:b2:b7:61:c1:71: 2f:2f:8d:c1:db:b4:0f:49:ef:b3:28:2a:57:33:48:e8:5e:66: f4:8d:ce:0c:f6:20:19:8e:38:33:e5:ff:42:fb:f6:24:af:51: 61:ad:8e:89:cb:28:9c:d8:6e:93:a5:0e:d0:2b:93:b4:ba:54: bd:1b:f7:e1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjYwNDA3MDI0MjAzWhcNMjYwNDE0MDI0MjAzWjAYMRYwFAYD VQQDEw02OWQ0NmVmYi01YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA47NMAQnHG3V/ySPwMqDxBr5qBDS4NWVsVFe8tN9rbt45zajVqDqo/Vqk1hLm tUwFIGcXbTf8AlZ24brmvAHjG8jTi7nI18/K8ieb2ZgOf9ddjM31V/kL65q3zDCD epjgZyVrANj/JjiV89Ap1VkJFvoz5poU19PktdmPDdxU902bV1o2EIQU5xUCsCbS eA/zxIZsDs2Rt1570ZACW6bTus3zujH4sszzmvqyqrBGrQa4i3cxAPMbDTWT1xzl rvFuP+4oYuKAp4kegxCrwJvkRJWOBvt9+7iAChEi4o635pTCmqojjA7hZTDMNLys BbIi2X2mcP1OpWrf8V3rsGnaJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE4WLyTR vBEyinx8RlfWnKJRBGXLMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZM6tPSaE58SUn/0j8jUGwjw9xLSvREFNIXEjjp9d9Y7MWWUqep9doY03ii2e i3Rjrh4Dds9YKl1cNVk/MhT8hAuItb1znt7OUaSHkl6qCJD2/2n/PxXMqGdxG/8M QGciMaJRhFHoX87dum1r8pKKXjf0RF4PqDKQU6wCG0uWD3kKb7QZABGTuW0/pryF 5BJXdrJrMZXfgzArgeYxXEZ1WTEwKFVkc7yrEjzPBxj3sE26HckKeMa5xPSZItV8 wXZvpbK3YcFxLy+Nwdu0D0nvsygqVzNI6F5m9I3ODPYgGY44M+X/Qvv2JK9RYa2O icsonNhuk6UO0CuTtLpUvRv34Q== -----END CERTIFICATE-----Generated at Thu Apr 9 03:48:34 2026 by rpki-client