$ rpki-client -vvf rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft File: BRxkf9n6kgFgZoaDhn19Oovl2cE.mft (raw, json) Hash identifier: X8MH4Lpm51rhSW6BtFJIfvVWG3UAbEN4X+qFUpsbsn4= Subject key identifier: F0:3E:D1:10:BA:6E:AF:44:F9:6B:43:74:75:6E:6A:CE:53:25:2C:2E Authority key identifier: 05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1 Certificate issuer: /CN=A9176682/serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1 Certificate serial: 3525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft Manifest number: 3524 Signing time: Sat 04 Apr 2026 15:11:32 +0000 Manifest this update: Sat 04 Apr 2026 15:11:31 +0000 Manifest next update: Sat 11 Apr 2026 15:11:31 +0000 Files and hashes: 1: BRxkf9n6kgFgZoaDhn19Oovl2cE.crl (hash: 5MTWwAI77VE6bcEhPNJig5TG72wfF7+/Rtgutz+Ucy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 15:11:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13605 (0x3525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176682, serialNumber=051C647FD9FA920160668683867D7D3A8BE5D9C1 Validity Not Before: Apr 4 15:11:31 2026 GMT Not After : Apr 11 15:11:31 2026 GMT Subject: CN=69d12a24-586a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:53:eb:b5:2a:df:65:67:48:2e:70:62:18:fa: 87:af:e3:49:45:3e:01:66:32:5b:09:f5:34:c9:53: ce:11:41:97:d6:eb:64:a7:e2:e0:d4:18:b8:7a:ec: c2:20:72:ea:bd:af:9a:c7:b7:fb:1d:49:53:5b:25: 08:50:f7:2a:a5:82:29:65:b0:bb:f1:71:50:5b:21: 09:6d:5f:09:c6:01:44:7f:71:a9:ed:be:9e:4a:06: 9f:2c:ee:68:6f:85:6d:35:f4:68:10:d6:fe:ad:b8: ff:29:04:42:7f:69:08:5b:d1:1a:8b:4c:96:c7:f8: 4e:65:0c:86:59:9e:e4:e4:8a:d2:72:a4:17:f5:a0: 09:f8:18:70:a3:42:6d:91:3b:ed:38:16:33:37:8c: 8a:db:eb:1c:5f:19:77:29:65:43:42:c1:2f:4f:29: 89:7b:f5:0d:b4:64:a1:29:6d:0c:8f:bd:8a:fd:cf: 3a:7b:15:4b:56:26:54:ca:06:d7:1f:91:cf:6d:7b: d5:7c:16:f2:5b:22:7e:74:8b:6b:20:5e:b5:09:aa: 61:1f:a2:02:fb:94:fb:40:dd:98:f5:87:2a:6d:ad: 4d:cd:42:63:43:c1:a2:af:e6:b1:0b:6c:68:f8:98: 8f:3f:4d:47:62:0c:93:45:0d:c1:97:f5:1b:92:6f: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3E:D1:10:BA:6E:AF:44:F9:6B:43:74:75:6E:6A:CE:53:25:2C:2E X509v3 Authority Key Identifier: keyid:05:1C:64:7F:D9:FA:92:01:60:66:86:83:86:7D:7D:3A:8B:E5:D9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BRxkf9n6kgFgZoaDhn19Oovl2cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176682/7585E00C1DA811E28D87E3A208B02CD2/BRxkf9n6kgFgZoaDhn19Oovl2cE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:ed:c2:fe:c1:02:7d:11:6a:9e:17:15:dc:4b:e0:e2:64:52: e5:3f:f5:76:04:a0:6b:b9:f0:a2:cd:97:05:19:94:10:60:36: 03:2a:bd:be:09:ea:ff:43:c7:77:f1:0d:0a:b7:9e:5a:10:1f: e8:9f:25:a7:9a:28:04:86:c8:91:7d:d2:1b:5d:5e:14:b0:de: 56:4f:1a:6f:78:07:4a:39:64:68:66:a8:82:14:8f:da:aa:e7: ef:e1:df:7c:41:c6:9b:5d:61:f0:5c:2b:59:76:bd:08:76:d9: 1c:1f:dc:c2:47:8e:21:69:7a:d5:6b:66:80:91:dc:a2:fb:98: 64:ea:94:64:ee:5e:62:32:47:b3:d3:5a:6e:eb:91:b8:4e:1d: b4:95:70:59:a2:70:e9:bf:59:d4:f9:34:15:5b:b9:33:cd:8f: 0a:5d:d6:8f:5d:ad:b9:74:6f:f9:b8:94:fe:95:8c:e6:21:6d: 22:8a:e5:f3:99:01:68:98:ab:b6:d3:44:93:ae:c8:55:04:92: 9f:20:3b:a4:f8:be:a7:0b:14:0f:3c:2e:52:c4:c1:44:49:0d: a6:b0:38:2d:45:99:6f:03:43:9f:a0:fb:a5:45:2c:3e:d2:9f: 93:44:c6:eb:a6:c4:0d:d8:c6:fd:97:6c:9e:32:46:bb:59:6f: 01:dc:e2:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY2ODIxMTAvBgNVBAUTKDA1MUM2NDdGRDlGQTkyMDE2MDY2ODY4Mzg2N0Q3RDNB OEJFNUQ5QzEwHhcNMjYwNDA0MTUxMTMxWhcNMjYwNDExMTUxMTMxWjAYMRYwFAYD VQQDEw02OWQxMmEyNC01ODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAolPrtSrfZWdILnBiGPqHr+NJRT4BZjJbCfU0yVPOEUGX1utkp+Lg1Bi4euzC IHLqva+ax7f7HUlTWyUIUPcqpYIpZbC78XFQWyEJbV8JxgFEf3Gp7b6eSgafLO5o b4VtNfRoENb+rbj/KQRCf2kIW9Eai0yWx/hOZQyGWZ7k5IrScqQX9aAJ+Bhwo0Jt kTvtOBYzN4yK2+scXxl3KWVDQsEvTymJe/UNtGShKW0Mj72K/c86exVLViZUygbX H5HPbXvVfBbyWyJ+dItrIF61CaphH6IC+5T7QN2Y9Ycqba1NzUJjQ8Gir+axC2xo +JiPP01HYgyTRQ3Bl/Ubkm82EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPA+0RC6 bq9E+WtDdHVuas5TJSwuMB8GA1UdIwQYMBaAFAUcZH/Z+pIBYGaGg4Z9fTqL5dnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjY4Mi83NTg1RTAwQzFE QTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtnRmdab2FEaG4xOU9vdmwy Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JSeGtmOW42a2dGZ1pvYURobjE5T292bDJjRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjY4Mi83NTg1RTAwQzFEQTgxMUUyOEQ4N0UzQTIwOEIwMkNEMi9CUnhrZjluNmtn Rmdab2FEaG4xOU9vdmwyY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwu3C/sECfRFqnhcV3Evg4mRS5T/1dgSga7nwos2XBRmUEGA2Ayq9vgnq/0PH d/ENCreeWhAf6J8lp5ooBIbIkX3SG11eFLDeVk8ab3gHSjlkaGaoghSP2qrn7+Hf fEHGm11h8FwrWXa9CHbZHB/cwkeOIWl61WtmgJHcovuYZOqUZO5eYjJHs9NabuuR uE4dtJVwWaJw6b9Z1Pk0FVu5M82PCl3Wj12tuXRv+biU/pWM5iFtIorl85kBaJir ttNEk67IVQSSnyA7pPi+pwsUDzwuUsTBREkNprA4LUWZbwNDn6D7pUUsPtKfk0TG 66bEDdjG/ZdsnjJGu1lvAdziAg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:42:25 2026 by rpki-client