$ rpki-client -vvf rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft File: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft (raw, json) Hash identifier: KrJd+GmaDWE/TPXs/gRKTu0TjLnnyzQ/ByNDE4V5jrA= Subject key identifier: 23:3B:C8:87:5C:8C:27:A0:FA:97:CD:04:EA:25:FF:EB:C0:69:F1:9E Authority key identifier: 1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 Certificate issuer: /CN=A9184017/serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Certificate serial: 0568 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft Manifest number: 0558 Signing time: Sat 04 Apr 2026 23:11:34 +0000 Manifest this update: Sat 04 Apr 2026 23:11:33 +0000 Manifest next update: Sat 11 Apr 2026 23:11:33 +0000 Files and hashes: 1: Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl (hash: AcA6Ec4ypYDqqRhQPTV5LcRTvXSjCzUx0ikfv+cwvwA=) 2: 0F8709542D6E11EC8327E321C4F9AE02.roa (hash: 0x9cH1BXF1oCzflKPF1qlRUnA1ksucVxQM/2AaZ9hhM=) 3: A6DC22C63C7D11ECB08DFD13C4F9AE02.roa (hash: ikBL+n1I4lTln4IeZuN3wg5X+cHKMnhhuxIqhkGyMPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 23:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1384 (0x568) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184017, serialNumber=1A9F2BBEA522F1EE2592359B4B52FA2B41A3CDC4 Validity Not Before: Apr 4 23:11:33 2026 GMT Not After : Apr 11 23:11:33 2026 GMT Subject: CN=69d19aa6-7ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:19:0e:eb:d9:af:f3:05:4e:80:eb:86:cf: 7b:da:b6:e7:43:c6:ba:27:ae:2e:cf:fc:9a:0c:3a: 39:07:53:7a:aa:2c:88:d9:1b:da:51:b4:7a:6d:3b: 18:22:9b:14:f9:50:ea:c0:57:96:cc:f4:b4:f9:2a: b5:74:a1:ad:79:fc:68:76:1b:55:70:9d:89:79:e3: 82:8f:53:1d:f6:86:7b:7a:fa:a5:a5:94:c1:7f:0d: f0:12:64:ff:c3:be:bd:08:be:49:56:de:2b:b7:46: b6:0d:33:f6:aa:4e:96:df:1e:3d:92:3c:b5:7a:ed: 31:f6:24:48:0a:61:38:27:cf:b4:df:64:68:0f:63: 83:df:45:06:b4:0d:35:c5:a3:49:25:91:04:bf:7c: dc:23:7e:56:d2:5e:de:56:1a:c9:0a:60:a0:e0:2d: 12:8c:4d:3a:6c:f8:7f:d1:4a:bd:35:9c:8b:ff:e9: ec:c1:e3:3e:81:9f:98:f8:29:d4:21:91:67:50:f2: 9f:b0:0b:c6:ac:f5:32:a3:58:8a:ac:b4:6c:de:d5: bc:71:ba:ce:5f:70:77:ba:f9:2a:e1:26:35:6b:f4: 87:c8:d7:e5:56:b4:ab:70:e5:6e:d5:2b:1c:6c:a5: 7f:66:16:e3:30:54:ae:bc:b1:25:dc:54:74:87:f7: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3B:C8:87:5C:8C:27:A0:FA:97:CD:04:EA:25:FF:EB:C0:69:F1:9E X509v3 Authority Key Identifier: keyid:1A:9F:2B:BE:A5:22:F1:EE:25:92:35:9B:4B:52:FA:2B:41:A3:CD:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184017/7F12281C2D6411EC85D68B80C4F9AE02/Gp8rvqUi8e4lkjWbS1L6K0GjzcQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:8c:5c:55:d3:9b:de:25:2c:a9:0a:32:f2:f7:5a:bc:22:aa: 8f:b2:d9:7b:48:a8:ea:9c:b3:b4:06:a9:07:55:41:22:ec:a2: 88:93:fe:99:8d:44:ca:5b:6c:8b:1b:90:0b:6a:9d:10:cc:02: 77:34:18:c8:6c:51:4f:a9:03:dd:ca:71:1c:85:71:9f:cc:4d: 11:f2:bf:0d:24:8c:b0:b2:69:2d:6a:27:b0:3c:85:13:60:67: 5e:81:0b:36:aa:c5:ad:58:05:d4:fa:b1:ff:68:07:54:6c:40: 90:94:40:28:23:e0:3b:29:7b:57:59:3d:b8:12:02:c2:69:9e: 18:07:76:b3:b8:0f:e3:7c:0a:78:aa:01:bd:e4:91:c6:42:a6: 59:1e:4d:b0:bc:9e:49:75:d1:a7:42:3d:b1:df:5d:37:de:ba: 1a:2a:19:54:2f:06:02:bc:93:b4:5a:ae:67:26:8c:ba:93:58: 00:51:fb:25:47:66:d7:cb:ae:4c:ca:ff:93:f6:57:e0:13:65: 87:9d:6a:3a:11:84:3f:fb:ae:b0:5a:fe:6c:e5:5a:7d:89:97: 42:8d:0e:4f:93:21:9e:c3:72:44:a6:09:cb:bf:09:b2:a0:cd: 35:5d:0a:ce:3f:56:9c:78:e3:d9:cd:f6:27:8f:b8:81:f7:73: 48:8c:b9:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQwMTcxMTAvBgNVBAUTKDFBOUYyQkJFQTUyMkYxRUUyNTkyMzU5QjRCNTJGQTJC NDFBM0NEQzQwHhcNMjYwNDA0MjMxMTMzWhcNMjYwNDExMjMxMTMzWjAYMRYwFAYD VQQDEw02OWQxOWFhNi03YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWwZDuvZr/MFToDrhs972rbnQ8a6J64uz/yaDDo5B1N6qiyI2RvaUbR6bTsY IpsU+VDqwFeWzPS0+Sq1dKGtefxodhtVcJ2JeeOCj1Md9oZ7evqlpZTBfw3wEmT/ w769CL5JVt4rt0a2DTP2qk6W3x49kjy1eu0x9iRICmE4J8+032RoD2OD30UGtA01 xaNJJZEEv3zcI35W0l7eVhrJCmCg4C0SjE06bPh/0Uq9NZyL/+nsweM+gZ+Y+CnU IZFnUPKfsAvGrPUyo1iKrLRs3tW8cbrOX3B3uvkq4SY1a/SHyNflVrSrcOVu1Ssc bKV/ZhbjMFSuvLEl3FR0h/dQgwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCM7yIdc jCeg+pfNBOol/+vAafGeMB8GA1UdIwQYMBaAFBqfK76lIvHuJZI1m0tS+itBo83E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDAxNy83RjEyMjgxQzJE NjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThlNGxraldiUzFMNkswR2p6 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dwOHJ2cVVpOGU0bGtqV2JTMUw2SzBHanpjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDAxNy83RjEyMjgxQzJENjQxMUVDODVENjhCODBDNEY5QUUwMi9HcDhydnFVaThl NGxraldiUzFMNkswR2p6Y1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeYxcVdOb3iUsqQoy8vdavCKqj7LZe0io6pyztAapB1VBIuyiiJP+mY1Eylts ixuQC2qdEMwCdzQYyGxRT6kD3cpxHIVxn8xNEfK/DSSMsLJpLWonsDyFE2BnXoEL NqrFrVgF1Pqx/2gHVGxAkJRAKCPgOyl7V1k9uBICwmmeGAd2s7gP43wKeKoBveSR xkKmWR5NsLyeSXXRp0I9sd9dN966GioZVC8GAryTtFquZyaMupNYAFH7JUdm18uu TMr/k/ZX4BNlh51qOhGEP/uusFr+bOVafYmXQo0OT5MhnsNyRKYJy78JsqDNNV0K zj9WnHjj2c32J4+4gfdzSIy5pg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:39:27 2026 by rpki-client