$ rpki-client -vvf rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft File: rGOF7VY-H9amaz5LUQ3MaTDNSww.mft (raw, json) Hash identifier: TFdkoWWPr6OCWYzK/DgdTGJ0sG57bnYVPPCORx37aGA= Subject key identifier: 90:78:51:18:52:64:95:77:06:E1:02:98:2A:87:39:71:87:34:2E:EC Authority key identifier: AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C Certificate issuer: /CN=A9160D0A/serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft Manifest number: 0246 Signing time: Sun 05 Apr 2026 02:09:16 +0000 Manifest this update: Sun 05 Apr 2026 02:09:16 +0000 Manifest next update: Sun 12 Apr 2026 02:09:16 +0000 Files and hashes: 1: rGOF7VY-H9amaz5LUQ3MaTDNSww.crl (hash: iwOhYYSPF3/+8MPnq714fZigOoL1yspYcdE4E/qzViA=) 2: 096A1DB6D2BA11ED8E06CC13C4F9AE02.roa (hash: xjJh+3SCJ/mrp3JYArjRvZVJMzUf7HfzNFOkj330dzY=) 3: 42EC5F02D2B711EDAF6DC017C4F9AE02.roa (hash: pkC+D8p7TNYzPBnocLkHTaXfdgtNXvj2i4jRd1Gl3NY=) 4: D1EAA18CD2BC11ED9E7A9A1BC4F9AE02.roa (hash: s27t8mzFE7pAO+YQ8b7HEZWkopZAKcG8DRX9E1bRajo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160D0A, serialNumber=AC6385ED563E1FD6A66B3E4B510DCC6930CD4B0C Validity Not Before: Apr 5 02:09:16 2026 GMT Not After : Apr 12 02:09:16 2026 GMT Subject: CN=69d1c44c-d7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f0:0e:7a:0b:f8:04:8b:d9:0e:6d:4d:f6:99: a1:08:03:b6:a4:ab:99:41:c8:9a:92:9a:54:0b:03: b8:67:b0:94:a3:be:94:f7:68:42:84:31:9a:1e:23: 74:50:7c:e1:11:cc:a8:66:b4:c7:fc:6f:d1:2d:d8: 1d:d4:a6:8c:17:22:73:62:6d:64:05:44:38:b9:76: 03:61:08:04:35:e1:9c:d0:db:c2:46:06:50:f3:4b: 0d:e3:b1:31:97:eb:74:52:28:72:51:f0:4f:79:7e: f9:da:6f:7c:6e:c5:17:18:0a:38:0f:2f:77:18:33: d6:6c:1e:88:7a:3a:8c:44:88:48:9e:03:c4:92:09: 6f:32:9f:63:e4:cc:fb:10:c2:e4:21:d8:3b:78:aa: cc:8e:75:8f:ab:a4:50:d1:47:5d:2a:40:a0:8a:ab: 3e:3c:62:70:e6:cf:95:0d:34:bd:a2:20:dc:7d:bd: e6:3f:19:ec:35:4c:36:9e:32:30:6e:aa:49:55:67: 50:fc:7c:17:29:3e:ad:7e:f1:54:0f:e0:fe:57:dd: 56:9b:10:3a:36:31:b2:5b:95:a0:7c:14:1b:0b:10: af:87:0b:c5:36:39:19:02:ea:54:58:f4:db:24:20: 9e:a0:12:a6:d6:4d:41:1f:fd:24:e3:e8:a8:a2:dd: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:78:51:18:52:64:95:77:06:E1:02:98:2A:87:39:71:87:34:2E:EC X509v3 Authority Key Identifier: keyid:AC:63:85:ED:56:3E:1F:D6:A6:6B:3E:4B:51:0D:CC:69:30:CD:4B:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rGOF7VY-H9amaz5LUQ3MaTDNSww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160D0A/564A135ED22211ED9A206C46C4F9AE02/rGOF7VY-H9amaz5LUQ3MaTDNSww.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:aa:70:b7:34:70:c1:c6:2a:ac:9f:57:3d:89:04:d8:7b:21: 20:1b:21:69:5a:44:d5:18:4b:59:d1:ed:cd:56:7d:dd:b6:d6: a8:f1:19:08:74:5f:64:53:2e:6c:05:98:4c:db:3d:d1:d3:49: fb:68:1d:1b:b2:ec:d4:59:5a:1a:9c:76:7d:59:0f:67:d2:dc: 2f:2e:d1:57:a9:ba:55:e7:df:3d:3e:83:70:0c:25:11:a6:f8: 94:88:9b:8f:1b:ce:f7:47:b0:d2:dc:46:c2:cc:f0:26:02:b7: c4:07:af:7f:ac:53:68:5d:c3:15:0f:74:f5:fe:19:39:15:44: f0:b2:6e:e6:2b:db:12:8d:a4:29:a5:b8:ed:dc:c1:1f:ab:dc: 9d:2f:cb:01:d5:0b:a8:55:e6:17:42:13:3f:64:12:f5:89:59: bd:ed:3c:ae:ca:a6:ce:68:ad:88:35:fc:bf:8c:52:31:57:3b: 4a:64:80:9a:47:a9:bd:15:1e:f8:a0:54:d7:71:3a:5a:d4:dd: b0:4c:00:42:89:76:c0:e5:78:e8:dc:d1:2b:5e:d3:cc:cf:23: 23:71:4b:8c:d3:2b:9d:aa:2c:38:e5:92:60:07:e1:15:c2:1c: 6b:51:5a:4a:a1:84:53:56:99:90:36:13:a3:64:fd:ec:4d:e2: 80:fe:57:07 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBEMEExMTAvBgNVBAUTKEFDNjM4NUVENTYzRTFGRDZBNjZCM0U0QjUxMERDQzY5 MzBDRDRCMEMwHhcNMjYwNDA1MDIwOTE2WhcNMjYwNDEyMDIwOTE2WjAYMRYwFAYD VQQDEw02OWQxYzQ0Yy1kN2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvAOegv4BIvZDm1N9pmhCAO2pKuZQciakppUCwO4Z7CUo76U92hChDGaHiN0 UHzhEcyoZrTH/G/RLdgd1KaMFyJzYm1kBUQ4uXYDYQgENeGc0NvCRgZQ80sN47Ex l+t0UihyUfBPeX752m98bsUXGAo4Dy93GDPWbB6IejqMRIhIngPEkglvMp9j5Mz7 EMLkIdg7eKrMjnWPq6RQ0UddKkCgiqs+PGJw5s+VDTS9oiDcfb3mPxnsNUw2njIw bqpJVWdQ/HwXKT6tfvFUD+D+V91WmxA6NjGyW5WgfBQbCxCvhwvFNjkZAupUWPTb JCCeoBKm1k1BH/0k4+ioot2kEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJB4URhS ZJV3BuECmCqHOXGHNC7sMB8GA1UdIwQYMBaAFKxjhe1WPh/Wpms+S1ENzGkwzUsM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEQwQS81NjRBMTM1RUQy MjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5YW1hejVMVVEzTWFURE5T d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JHT0Y3VlktSDlhbWF6NUxVUTNNYVRETlN3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEQwQS81NjRBMTM1RUQyMjIxMUVEOUEyMDZDNDZDNEY5QUUwMi9yR09GN1ZZLUg5 YW1hejVMVVEzTWFURE5Td3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlapwtzRwwcYqrJ9XPYkE2HshIBshaVpE1RhLWdHtzVZ93bbWqPEZCHRfZFMu bAWYTNs90dNJ+2gdG7Ls1FlaGpx2fVkPZ9LcLy7RV6m6VeffPT6DcAwlEab4lIib jxvO90ew0txGwszwJgK3xAevf6xTaF3DFQ909f4ZORVE8LJu5ivbEo2kKaW47dzB H6vcnS/LAdULqFXmF0ITP2QS9YlZve08rsqmzmitiDX8v4xSMVc7SmSAmkepvRUe +KBU13E6WtTdsEwAQol2wOV46NzRK17TzM8jI3FLjNMrnaosOOWSYAfhFcIca1Fa SqGEU1aZkDYTo2T97E3igP5XBw== -----END CERTIFICATE-----Generated at Mon Apr 6 10:11:38 2026 by rpki-client