$ rpki-client -vvf rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft File: D96C0nlIVMmvzdhe-37-ScR9Lu4.mft (raw, json) Hash identifier: Qj3z2gEZ7T6KNd2mqMk+7M6QJBToK8JDnQI7+t5/8Uo= Subject key identifier: 12:37:4E:09:9E:64:FB:CA:62:DB:9C:A2:4A:C1:A5:6D:21:C8:C8:99 Authority key identifier: 0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE Certificate issuer: /CN=A914C33A/serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Certificate serial: 0D8B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft Manifest number: 0D7D Signing time: Sat 04 Apr 2026 15:30:34 +0000 Manifest this update: Sat 04 Apr 2026 15:30:34 +0000 Manifest next update: Sat 11 Apr 2026 15:30:34 +0000 Files and hashes: 1: D96C0nlIVMmvzdhe-37-ScR9Lu4.crl (hash: KkxfVxmE+ZLb8tBg48AF6aFCk3SuKCJqHLP8KUpjLhg=) 2: 0DF331C28F9411EAA5E7B573C4F9AE02.roa (hash: KN/qO3b9F5dp3gvVSi/2Av1F8gy5I+kWuZVNLBkzY6g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3467 (0xd8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C33A, serialNumber=0FDE82D2794854C9AFCDD85EFB7EFE49C47D2EEE Validity Not Before: Apr 4 15:30:34 2026 GMT Not After : Apr 11 15:30:34 2026 GMT Subject: CN=69d12e9a-e74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:d9:d4:13:34:d4:40:3b:8f:40:43:3d:50: 63:7b:a8:07:f6:d0:4d:53:80:f0:9b:ef:c0:8c:73: d9:e9:7a:06:21:35:23:2d:48:82:ea:fe:0b:1e:ff: 4c:b7:1b:54:40:36:d4:6d:22:56:02:f9:11:c5:62: ab:06:47:b3:e6:a2:bb:0b:7a:ba:07:a3:0f:2b:bb: 61:ca:3c:7f:28:4d:e9:fe:9f:c8:f2:40:1f:a5:c5: 29:d5:c7:ca:a0:c8:80:d6:34:30:cb:03:f9:f3:e9: 38:c8:0b:68:0c:f9:96:9e:ee:4c:65:90:db:f9:ab: bc:0f:8c:91:64:41:2c:7a:1f:a0:9f:ca:19:ee:ae: e1:89:73:f5:d1:9d:21:0b:79:91:38:96:6c:c9:8b: b6:97:bf:17:ff:30:34:cb:54:ce:2d:4d:01:af:70: a5:7d:ef:92:30:13:15:f3:70:17:8d:7f:95:f6:b1: 68:95:5f:c8:69:01:b4:f0:2d:12:66:8e:10:5f:f1: 4e:5c:ab:51:c8:14:3a:91:b5:6a:53:1d:d1:8e:fa: cc:44:e7:b3:39:96:af:86:0f:ff:a8:f6:b4:1d:87: f0:9e:ab:94:b8:26:5a:dd:cc:8a:57:81:1c:81:9a: 9c:c2:41:8e:33:49:71:42:8b:8e:be:c6:fb:88:a4: 7e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:4E:09:9E:64:FB:CA:62:DB:9C:A2:4A:C1:A5:6D:21:C8:C8:99 X509v3 Authority Key Identifier: keyid:0F:DE:82:D2:79:48:54:C9:AF:CD:D8:5E:FB:7E:FE:49:C4:7D:2E:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D96C0nlIVMmvzdhe-37-ScR9Lu4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/8F47A9FAE97D11E9A9DB5E52C4F9AE02/D96C0nlIVMmvzdhe-37-ScR9Lu4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:85:b9:00:99:cf:47:58:ef:0f:65:1d:a3:71:09:b6:0f:70: 51:e8:d4:b2:cd:a2:6a:68:76:dd:e5:95:2b:d9:c4:47:5d:8e: a5:0f:44:ae:f2:bf:97:9e:ae:5f:23:b7:74:b1:7e:2a:89:29: 0d:69:c5:6c:6d:e4:94:83:3a:87:7d:4d:28:2b:a8:98:ef:06: d5:b8:c8:46:a8:56:fb:a5:cd:fa:18:96:0b:c0:7e:5a:1d:2a: bf:ca:e0:a9:34:44:3e:b7:11:46:dd:e7:56:c3:43:69:26:43: 14:95:89:e2:0a:67:5c:cc:5c:ea:37:78:12:05:aa:fd:61:fa: f6:0e:08:d3:6f:06:8c:fc:e1:58:e0:a8:44:c4:91:cb:3f:36: 67:97:0b:ba:0b:4a:e3:c5:32:2b:88:59:2d:9f:38:25:58:3d: d3:19:cc:31:22:ea:dc:19:e8:df:12:a4:d7:96:98:1b:51:21: 26:c9:8c:0a:60:65:08:26:60:3d:d5:6b:91:3b:77:b4:be:a9: 4c:1e:2d:25:de:d1:cb:b6:aa:32:c4:24:20:7f:13:50:e5:b5: 9f:f4:3a:1c:af:9a:74:e1:70:41:28:9e:43:4a:d4:92:2b:db: bf:b9:44:b2:96:e4:4a:a1:5f:e9:7c:ec:30:72:e4:fa:0f:21: b7:f5:64:fd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMzM0ExMTAvBgNVBAUTKDBGREU4MkQyNzk0ODU0QzlBRkNERDg1RUZCN0VGRTQ5 QzQ3RDJFRUUwHhcNMjYwNDA0MTUzMDM0WhcNMjYwNDExMTUzMDM0WjAYMRYwFAYD VQQDEw02OWQxMmU5YS1lNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+7Z1BM01EA7j0BDPVBje6gH9tBNU4Dwm+/AjHPZ6XoGITUjLUiC6v4LHv9M txtUQDbUbSJWAvkRxWKrBkez5qK7C3q6B6MPK7thyjx/KE3p/p/I8kAfpcUp1cfK oMiA1jQwywP58+k4yAtoDPmWnu5MZZDb+au8D4yRZEEseh+gn8oZ7q7hiXP10Z0h C3mROJZsyYu2l78X/zA0y1TOLU0Br3Clfe+SMBMV83AXjX+V9rFolV/IaQG08C0S Zo4QX/FOXKtRyBQ6kbVqUx3RjvrMROezOZavhg//qPa0HYfwnquUuCZa3cyKV4Ec gZqcwkGOM0lxQouOvsb7iKR+TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBI3Tgme ZPvKYtucokrBpW0hyMiZMB8GA1UdIwQYMBaAFA/egtJ5SFTJr83YXvt+/knEfS7u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzMzQS84RjQ3QTlGQUU5 N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZNbXZ6ZGhlLTM3LVNjUjlM dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q5NkMwbmxJVk1tdnpkaGUtMzctU2NSOUx1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzMzQS84RjQ3QTlGQUU5N0QxMUU5QTlEQjVFNTJDNEY5QUUwMi9EOTZDMG5sSVZN bXZ6ZGhlLTM3LVNjUjlMdTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnIW5AJnPR1jvD2Udo3EJtg9wUejUss2iamh23eWVK9nER12OpQ9ErvK/l56u XyO3dLF+KokpDWnFbG3klIM6h31NKCuomO8G1bjIRqhW+6XN+hiWC8B+Wh0qv8rg qTREPrcRRt3nVsNDaSZDFJWJ4gpnXMxc6jd4EgWq/WH69g4I028GjPzhWOCoRMSR yz82Z5cLugtK48UyK4hZLZ84JVg90xnMMSLq3Bno3xKk15aYG1EhJsmMCmBlCCZg PdVrkTt3tL6pTB4tJd7Ry7aqMsQkIH8TUOW1n/Q6HK+adOFwQSieQ0rUkivbv7lE spbkSqFf6XzsMHLk+g8ht/Vk/Q== -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:01 2026 by rpki-client