$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: 8ERwIUWcIbDg91spFIoAzdZi6H5USTn6d4SZDDp2x6k= Subject key identifier: B0:5D:99:55:D9:14:FC:8A:35:63:97:3B:1C:E6:DC:9D:EE:B4:0F:24 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 08B4 Signing time: Sat 04 Apr 2026 20:15:51 +0000 Manifest this update: Sat 04 Apr 2026 20:15:51 +0000 Manifest next update: Sat 11 Apr 2026 20:15:51 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: j5llhZoorTI7eF/xNbry1MnEaX5AZ7+TegxswcIx6EQ=) 2: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: Z5cniwYpcysrYSbmGVe8lhrLrM0kQoHeBRyDzZhCjRY=) 3: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: 5Bf508KFyPOHiXUPlJ5Lt2YhRIk2soZom9mW0lTXFhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 20:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Apr 4 20:15:51 2026 GMT Not After : Apr 11 20:15:51 2026 GMT Subject: CN=69d17177-28d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:59:f3:df:34:dd:4b:97:b4:83:88:ee:2f: eb:cb:ba:90:e4:c8:b0:bf:11:4d:3d:83:8f:bd:93: 38:d0:3a:07:32:d7:7f:da:8b:5b:41:f4:c4:86:98: 7a:b5:d7:4e:a1:8c:84:1e:6a:e5:d5:b5:66:65:e3: 5d:0e:be:f9:26:70:e9:7d:58:8a:18:10:f2:d0:6a: 81:1c:30:a6:a2:01:e6:ba:27:ef:22:35:3c:96:1f: 34:89:c8:48:89:17:f3:15:4c:cd:da:c2:b8:a7:c7: b5:ac:b9:81:09:75:1b:0a:7f:7a:b9:f9:fb:33:42: 0e:e0:c5:c8:8f:62:8d:c7:42:34:31:c3:3a:61:51: 39:ed:a9:c7:02:dc:1a:30:35:92:99:73:e5:7d:d9: b6:ed:a4:d4:20:ec:bd:0b:00:3d:66:1a:be:7c:d0: 0d:af:f0:26:7a:85:dc:b1:c3:6d:eb:aa:af:97:cb: 7c:b5:7b:94:fb:be:cb:57:2e:8c:e5:7b:02:5d:60: e9:a5:a9:ac:d8:8c:b9:31:a4:00:ea:4f:02:a9:ce: 9f:8a:6d:01:f2:21:fd:49:20:61:f2:65:f9:0e:2b: 76:71:9c:67:f2:28:37:a4:4d:ee:f0:ec:f6:36:63: f3:f7:82:47:7d:95:63:0f:46:80:03:65:c3:08:47: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:99:55:D9:14:FC:8A:35:63:97:3B:1C:E6:DC:9D:EE:B4:0F:24 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a4:3f:4c:be:c4:71:dc:bd:bd:2b:85:27:94:25:e5:d2:95: ef:37:2f:20:79:ef:03:46:3d:47:63:da:e0:e5:6a:87:b8:a1: a7:b4:82:57:b8:0d:94:86:ae:60:16:8a:4f:c5:e0:d6:ac:b4: 56:6d:dd:bc:89:1a:19:06:06:58:73:d2:46:05:6e:48:2c:3e: 25:5b:1c:4f:b8:58:16:a2:42:45:a3:6b:c5:c4:1c:f0:98:67: 50:12:ad:66:60:08:ec:cf:22:cb:74:39:07:5b:8e:49:a8:27: 4f:17:c3:79:0c:3b:4a:42:85:e5:5d:65:f8:f0:16:3a:f1:05: 09:4c:ce:aa:0d:fb:5c:35:85:38:c6:f5:ea:1b:83:20:a8:01: e0:80:dd:50:fc:69:5a:ad:22:e2:12:e3:80:0f:cc:da:dd:e3: c8:07:f7:79:53:b6:50:d1:63:03:d7:75:14:83:2e:96:5b:38: 56:1c:ff:b2:74:c9:dd:3c:84:d0:73:81:7e:e5:1d:40:ab:8e: a8:c5:38:cf:3f:0d:0a:0b:83:c9:d3:a6:e4:66:ee:c7:8d:bc: 8d:02:04:f0:65:53:9b:31:6d:1f:f4:7f:c9:56:82:e0:98:02: db:27:5c:4d:c0:b2:86:a0:44:61:38:15:d0:cf:62:3a:a5:53: c9:18:a8:62 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjYwNDA0MjAxNTUxWhcNMjYwNDExMjAxNTUxWjAYMRYwFAYD VQQDEw02OWQxNzE3Ny0yOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1ZZ89803UuXtIOI7i/ry7qQ5MiwvxFNPYOPvZM40DoHMtd/2otbQfTEhph6 tddOoYyEHmrl1bVmZeNdDr75JnDpfViKGBDy0GqBHDCmogHmuifvIjU8lh80ichI iRfzFUzN2sK4p8e1rLmBCXUbCn96ufn7M0IO4MXIj2KNx0I0McM6YVE57anHAtwa MDWSmXPlfdm27aTUIOy9CwA9Zhq+fNANr/AmeoXcscNt66qvl8t8tXuU+77LVy6M 5XsCXWDppams2Iy5MaQA6k8Cqc6fim0B8iH9SSBh8mX5Dit2cZxn8ig3pE3u8Oz2 NmPz94JHfZVjD0aAA2XDCEfQMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLBdmVXZ FPyKNWOXOxzm3J3utA8kMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATqQ/TL7Ecdy9vSuFJ5Ql5dKV7zcvIHnvA0Y9R2Pa4OVqh7ihp7SCV7gNlIau YBaKT8Xg1qy0Vm3dvIkaGQYGWHPSRgVuSCw+JVscT7hYFqJCRaNrxcQc8JhnUBKt ZmAI7M8iy3Q5B1uOSagnTxfDeQw7SkKF5V1l+PAWOvEFCUzOqg37XDWFOMb16huD IKgB4IDdUPxpWq0i4hLjgA/M2t3jyAf3eVO2UNFjA9d1FIMulls4Vhz/snTJ3TyE 0HOBfuUdQKuOqMU4zz8NCguDydOm5Gbux428jQIE8GVTmzFtH/R/yVaC4JgC2ydc TcCyhqBEYTgV0M9iOqVTyRioYg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:05 2026 by rpki-client