$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: vfTT4bYkhjEvV4asuHNhy2R61aPgo40sPwnZCKCCtj8= Subject key identifier: 07:AF:35:63:F1:1B:90:70:3B:C2:34:5B:4C:31:00:8D:F7:E4:7B:62 Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 352E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 352E Signing time: Sat 04 Apr 2026 14:40:25 +0000 Manifest this update: Sat 04 Apr 2026 14:40:24 +0000 Manifest next update: Sat 11 Apr 2026 14:40:24 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: jSFcPVyokYFvdlo80fKYxYBwa6JZ9J00izFbAbA4FrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13614 (0x352e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Apr 4 14:40:24 2026 GMT Not After : Apr 11 14:40:24 2026 GMT Subject: CN=69d122d9-7ccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:fa:70:cb:50:c6:4b:ae:2f:b9:88:04:6f: ce:eb:66:19:b6:a7:57:30:88:09:b2:8a:8a:c9:98: ba:99:ff:86:8f:17:3b:c2:f0:fb:71:3d:14:4c:34: 51:4a:9f:5c:b9:58:88:f0:61:b5:fc:d2:76:a6:e0: 0b:43:1c:00:63:f5:93:a8:6d:5c:f6:01:47:5f:67: b1:b0:f0:95:35:83:0f:38:d4:7f:40:70:2c:76:4b: 5b:ef:68:a9:b4:a5:33:b1:42:d0:b1:cb:13:8f:6a: d6:58:b1:9b:08:90:5d:79:19:c1:aa:11:fb:c1:6d: 07:7d:50:2b:fa:d2:a4:f7:99:6b:db:67:8e:c5:cb: 3a:d9:07:d9:ea:c8:9d:f6:03:24:80:8c:36:9e:84: 95:2d:02:de:48:7b:de:4b:13:eb:9c:7b:91:19:a8: fb:67:74:d8:de:cc:df:24:1b:44:cc:a0:7e:79:4d: 92:6a:13:d0:e9:2d:ea:b8:21:a4:18:ad:fa:f2:e7: d2:75:2a:20:0e:b9:ac:b6:5a:d1:02:45:7b:ad:e2: ad:5b:8c:cb:fc:9b:0e:1b:93:b2:da:dd:7c:df:69: 19:62:81:6a:05:65:1b:a1:69:b0:48:44:c7:43:66: 87:89:b7:62:b9:ea:1c:af:5f:1d:1b:33:10:ff:10: 94:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AF:35:63:F1:1B:90:70:3B:C2:34:5B:4C:31:00:8D:F7:E4:7B:62 X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ab:7a:10:3d:70:2c:23:8f:a1:ba:7a:3f:24:9f:a3:21:2b: e6:a9:5d:46:d9:5d:b6:97:23:0b:97:bc:bf:5a:4a:d4:80:63: 92:ab:bf:31:4e:f9:14:4a:49:d9:89:aa:da:cc:9f:81:e5:d2: e8:1c:ee:24:41:7f:ab:e8:41:e4:25:f6:19:27:c4:84:ce:8a: cd:1f:c7:bf:6b:61:a9:cd:48:c3:76:2f:d7:e8:eb:f9:09:4e: 29:03:02:6a:9e:ab:ae:f5:8e:d1:3f:94:59:23:ca:dd:bc:d4: 9a:83:9f:be:0f:d8:10:2c:0c:e2:1e:46:8a:cf:4c:ad:9c:be: d5:72:62:6a:e4:0c:64:18:f0:81:69:7c:14:ef:31:c0:46:2f: 94:b1:4e:09:86:3d:18:70:f6:be:76:3e:1b:3c:3b:a2:7d:19: 14:43:5a:6b:c9:ae:3c:c2:87:59:f9:78:14:c5:09:2e:3c:5d: 0a:06:31:d7:2b:0d:80:df:66:60:f1:d0:4b:35:54:55:6e:bf: 5b:58:76:0f:d2:52:c8:93:7b:bb:10:9a:4c:e6:eb:98:ea:67: e9:f6:e5:26:e0:db:3f:df:8d:77:a8:73:02:3c:dd:d6:0e:65: 78:74:00:d5:ff:44:96:a7:23:bc:1a:7a:58:ea:1e:22:22:ae: 99:bf:5a:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjYwNDA0MTQ0MDI0WhcNMjYwNDExMTQ0MDI0WjAYMRYwFAYD VQQDEw02OWQxMjJkOS03Y2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApPj6cMtQxkuuL7mIBG/O62YZtqdXMIgJsoqKyZi6mf+Gjxc7wvD7cT0UTDRR Sp9cuViI8GG1/NJ2puALQxwAY/WTqG1c9gFHX2exsPCVNYMPONR/QHAsdktb72ip tKUzsULQscsTj2rWWLGbCJBdeRnBqhH7wW0HfVAr+tKk95lr22eOxcs62QfZ6sid 9gMkgIw2noSVLQLeSHveSxPrnHuRGaj7Z3TY3szfJBtEzKB+eU2SahPQ6S3quCGk GK368ufSdSogDrmstlrRAkV7reKtW4zL/JsOG5Oy2t1832kZYoFqBWUboWmwSETH Q2aHibdiueocr18dGzMQ/xCUtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAevNWPx G5BwO8I0W0wxAI335HtiMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAi6t6ED1wLCOPobp6PySfoyEr5qldRtldtpcjC5e8v1pK1IBjkqu/MU75FEpJ 2Ymq2syfgeXS6BzuJEF/q+hB5CX2GSfEhM6KzR/Hv2thqc1Iw3Yv1+jr+QlOKQMC ap6rrvWO0T+UWSPK3bzUmoOfvg/YECwM4h5Gis9MrZy+1XJiauQMZBjwgWl8FO8x wEYvlLFOCYY9GHD2vnY+Gzw7on0ZFENaa8muPMKHWfl4FMUJLjxdCgYx1ysNgN9m YPHQSzVUVW6/W1h2D9JSyJN7uxCaTObrmOpn6fblJuDbP9+Nd6hzAjzd1g5leHQA 1f9ElqcjvBp6WOoeIiKumb9a/w== -----END CERTIFICATE-----Generated at Mon Apr 6 08:29:04 2026 by rpki-client