$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft File: vHDzdLcox7cRwkpoJ_dHekKyKk0.mft (raw, json) Hash identifier: bvmhQeaLDU54AcWTd+xmW+ClKF/YY47o/NAy3O6im34= Subject key identifier: E9:0A:DE:84:55:87:36:48:6F:D1:EA:8A:5D:63:4D:19:97:D0:5C:F5 Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D Certificate issuer: /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Certificate serial: E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft Manifest number: D7 Signing time: Sun 05 Apr 2026 06:08:20 +0000 Manifest this update: Sun 05 Apr 2026 06:08:20 +0000 Manifest next update: Sun 12 Apr 2026 06:08:20 +0000 Files and hashes: 1: vHDzdLcox7cRwkpoJ_dHekKyKk0.crl (hash: 2sB9p0RQYmksunj64rOw2Q6im4SkqDfqwZbhs5/Tfko=) 2: F25DC9C8288411F19363B461A9833773.roa (hash: f8nTmJngREHF+Tyal/8UmF8eD+wG+XF24t9/tA3xKk4=) 3: 6BD4BB16F83111EFBA64911FC4F9AE02.roa (hash: 6s9v+4to3xQAtqSl3C8OB5mvof4ZuN1zgnPAVV1Aeng=) 4: 3B69BCFAF53A11EF907A433EC4F9AE02.roa (hash: Xqw+x7r7bC27aVdNoYea8uBLYJxQdLwBzYjKVZNCTmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 06:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D Validity Not Before: Apr 5 06:08:20 2026 GMT Not After : Apr 12 06:08:20 2026 GMT Subject: CN=69d1fc54-c8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:bb:cd:cc:88:7f:d5:c3:e7:bb:dc:43:2d: 17:33:93:47:58:c4:13:49:ff:08:a4:8c:58:f7:dc: 5e:30:e6:cd:77:9f:9a:33:98:af:e1:bc:95:0d:b7: eb:71:89:9c:26:b9:03:3f:e2:57:6b:09:24:62:39: f4:78:b8:70:b8:6e:50:60:0b:60:a2:96:83:e0:2b: 97:78:16:a6:a1:ea:a7:7a:11:45:91:24:83:6e:ad: 47:87:50:4e:03:56:87:32:a3:a4:96:25:5d:a9:fb: b8:fe:23:e4:b6:2e:a6:f5:85:6c:ea:6c:f4:b2:ca: ba:66:74:bb:39:11:22:a5:a6:f4:9e:28:00:12:50: d0:89:8e:71:e3:e0:a0:df:86:b0:98:9a:49:69:6c: 81:56:f5:52:3d:f5:52:ba:d9:c5:4d:7a:20:50:37: 53:68:3f:37:b7:d0:7e:61:51:fc:8b:5b:25:ff:7d: 61:3b:7a:97:74:f7:3b:c7:3b:fe:39:ba:ae:c1:1e: 49:a9:1c:c0:3b:f2:61:d7:67:0f:c1:81:64:cd:62: 45:c3:27:ac:af:26:d6:5c:d8:ef:a4:1b:86:fd:4b: 34:36:52:40:64:8c:0c:7d:16:af:84:e5:80:ff:ea: c6:e2:06:e2:22:bb:32:14:55:c9:b6:00:31:d4:3d: ea:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0A:DE:84:55:87:36:48:6F:D1:EA:8A:5D:63:4D:19:97:D0:5C:F5 X509v3 Authority Key Identifier: keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:80:a2:41:5a:51:19:3a:8f:87:b8:82:2c:ff:eb:a0:e7:68: 2b:48:fd:2b:26:0e:2f:e9:13:84:15:7c:83:f2:ec:a9:16:5d: 1b:d7:a2:d0:1c:9d:f1:26:3c:0f:4b:76:a7:e2:9c:09:28:33: 5f:11:8c:2b:9d:6c:03:7d:f2:99:73:c9:a4:e6:29:e8:fc:98: ee:e1:ca:e6:cc:7b:4a:bc:3c:24:ef:31:76:67:99:85:6e:48: 15:e8:01:b6:9f:7f:ff:d5:ef:16:64:87:6f:51:f8:99:0c:e0: bb:2e:12:de:04:b2:70:4d:c3:81:aa:28:00:b2:20:74:a3:91: 52:a8:61:1d:cc:a1:0b:9c:a4:74:26:9c:e1:fc:41:97:90:05: 89:41:67:7c:1e:d4:37:1e:cd:a6:0a:f1:3d:19:3c:e4:bf:ec: cd:de:53:9e:d6:34:d6:36:27:03:28:65:0a:e9:ab:bf:e1:ad: d7:bc:00:0f:dc:ae:74:45:9d:6e:e6:d9:b1:7f:d4:a0:11:d8: c7:e3:61:35:ab:60:ef:59:97:e7:05:d9:11:61:79:e9:ee:61: ae:30:53:b5:01:ad:82:76:dd:11:3a:f4:cd:1b:83:e3:60:43: a3:77:9d:98:7f:4a:62:60:01:25:a5:4c:3c:1a:05:a3:ab:ac: c2:03:d7:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBNzUxMTAvBgNVBAUTKEJDNzBGMzc0QjcyOEM3QjcxMUMyNEE2ODI3Rjc0NzdB NDJCMjJBNEQwHhcNMjYwNDA1MDYwODIwWhcNMjYwNDEyMDYwODIwWjAYMRYwFAYD VQQDEw02OWQxZmM1NC1jOGJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0la7zcyIf9XD57vcQy0XM5NHWMQTSf8IpIxY99xeMObNd5+aM5iv4byVDbfr cYmcJrkDP+JXawkkYjn0eLhwuG5QYAtgopaD4CuXeBamoeqnehFFkSSDbq1Hh1BO A1aHMqOkliVdqfu4/iPkti6m9YVs6mz0ssq6ZnS7OREipab0nigAElDQiY5x4+Cg 34awmJpJaWyBVvVSPfVSutnFTXogUDdTaD83t9B+YVH8i1sl/31hO3qXdPc7xzv+ ObquwR5JqRzAO/Jh12cPwYFkzWJFwyesrybWXNjvpBuG/Us0NlJAZIwMfRavhOWA /+rG4gbiIrsyFFXJtgAx1D3qyQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOkK3oRV hzZIb9Hqil1jTRmX0Fz1MB8GA1UdIwQYMBaAFLxw83S3KMe3EcJKaCf3R3pCsipN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkE3NS9FRjVDRDZEQUY1 MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi92SER6ZExjb3g3Y1J3a3BvSl9kSGVrS3lL azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkE3NS9FRjVDRDZEQUY1MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi92SER6ZExjb3g3 Y1J3a3BvSl9kSGVrS3lLazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf4CiQVpRGTqPh7iCLP/roOdoK0j9KyYOL+kThBV8g/LsqRZdG9ei0Byd8SY8 D0t2p+KcCSgzXxGMK51sA33ymXPJpOYp6PyY7uHK5sx7Srw8JO8xdmeZhW5IFegB tp9//9XvFmSHb1H4mQzguy4S3gSycE3DgaooALIgdKORUqhhHcyhC5ykdCac4fxB l5AFiUFnfB7UNx7NpgrxPRk85L/szd5TntY01jYnAyhlCumrv+Gt17wAD9yudEWd bubZsX/UoBHYx+NhNatg71mX5wXZEWF56e5hrjBTtQGtgnbdETr0zRuD42BDo3ed mH9KYmABJaVMPBoFo6uswgPXPQ== -----END CERTIFICATE-----Generated at Mon Apr 6 13:35:31 2026 by rpki-client