$ rpki-client -vvf rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft File: 1ppgVl8zchSc5uL8nnI9SQZ2doo.mft (raw, json) Hash identifier: fUEh869flNsWtmjXPxJA7dZf+j13n/RPw8K9h/huo48= Subject key identifier: D1:6E:DA:66:4D:B0:A2:0E:27:BA:99:73:09:8C:1D:E2:4D:08:0E:87 Authority key identifier: D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A Certificate issuer: /CN=A9185F7D/serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A Certificate serial: 352A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft Manifest number: 352A Signing time: Sat 04 Apr 2026 14:56:35 +0000 Manifest this update: Sat 04 Apr 2026 14:56:34 +0000 Manifest next update: Sat 11 Apr 2026 14:56:34 +0000 Files and hashes: 1: 1ppgVl8zchSc5uL8nnI9SQZ2doo.crl (hash: S3bQiwVKGudNQCyozeqat2OntQJFUizOxwYHZUZQPPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13610 (0x352a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185F7D, serialNumber=D69A60565F3372149CE6E2FC9E723D490676768A Validity Not Before: Apr 4 14:56:34 2026 GMT Not After : Apr 11 14:56:34 2026 GMT Subject: CN=69d126a3-e5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:fa:1f:60:b0:47:d0:a8:69:38:13:46:b7: 09:fc:5d:44:1a:ff:c1:ec:17:88:f2:7f:bb:66:11: e5:6d:0c:57:44:01:4a:c6:3f:4b:44:bc:fe:09:e5: a4:40:12:36:1d:10:2e:24:46:37:8e:ef:3d:36:55: b0:cf:cd:31:40:1c:16:d5:73:ca:e7:68:ff:cb:55: 2e:ee:20:25:e5:39:be:e6:f1:77:7b:0f:a8:22:6c: f8:72:98:c8:84:0d:88:35:54:07:0e:77:ae:96:03: b2:c9:e2:f6:01:ec:aa:1f:99:07:eb:64:4b:b1:88: f6:92:b2:52:3e:36:a0:3c:b3:f8:9c:e5:d5:11:76: 01:f7:c7:04:6f:ba:63:10:89:09:fa:16:c0:e6:7c: c2:d1:37:40:51:3d:01:17:03:e7:f5:da:52:b6:e3: be:64:82:31:a4:21:88:e1:93:83:c7:73:e8:19:0c: b3:cb:c7:45:d5:d7:43:fe:5b:1a:18:12:11:af:15: 2e:9d:03:74:67:b1:ee:2d:eb:d6:00:92:04:c9:f4: 26:69:61:c2:48:ef:0b:07:33:86:91:86:57:58:6c: 60:05:76:0c:2e:5b:02:bd:22:e8:c6:bc:7b:31:87: 77:d9:de:ed:ab:75:37:98:13:c4:b7:b5:67:da:10: 98:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6E:DA:66:4D:B0:A2:0E:27:BA:99:73:09:8C:1D:E2:4D:08:0E:87 X509v3 Authority Key Identifier: keyid:D6:9A:60:56:5F:33:72:14:9C:E6:E2:FC:9E:72:3D:49:06:76:76:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ppgVl8zchSc5uL8nnI9SQZ2doo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185F7D/69753F581D9C11E2A6FBF08A08B02CD2/1ppgVl8zchSc5uL8nnI9SQZ2doo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b0:7a:97:70:f2:6e:98:da:fc:70:94:53:68:0a:79:9b:51: 49:76:93:95:4c:5a:96:b4:8a:0f:a5:78:6c:fa:98:9b:18:04: c9:32:f3:7a:83:d8:8b:d6:e0:b7:52:33:a4:73:67:06:83:d7: e2:9e:06:66:22:01:72:a6:a9:8c:8f:88:20:40:58:17:ce:b8: 49:19:51:84:33:c2:ee:14:97:5d:02:81:f8:9c:77:06:a7:dd: 85:76:e8:8b:5e:bc:7a:b1:94:55:d8:fb:e2:a1:8c:23:ba:91: 42:38:51:51:25:30:bd:a0:ea:11:9e:92:64:1f:6f:3c:bb:09: 14:8e:bc:3b:82:a6:c3:06:24:d3:f1:23:c7:f2:b8:69:51:22: 0c:68:a4:61:06:4a:3d:cf:fb:d2:6f:c7:27:ba:63:a1:c6:d2: 49:fb:14:f3:af:29:85:6d:80:43:de:74:79:f7:35:bf:de:53: 68:05:88:aa:07:6d:84:9a:72:6d:93:17:83:b3:1a:f6:cd:c9: 07:fe:0d:7e:44:0e:bd:4e:c1:9c:9b:ed:1f:5a:e1:f6:d5:20: 11:f2:f7:01:af:10:f0:3d:5d:4e:88:42:b5:26:1f:65:82:ed: cc:55:f3:f9:36:a1:b3:ec:a7:fe:16:a1:b4:60:c7:e5:70:4a: 76:bf:a0:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVGN0QxMTAvBgNVBAUTKEQ2OUE2MDU2NUYzMzcyMTQ5Q0U2RTJGQzlFNzIzRDQ5 MDY3Njc2OEEwHhcNMjYwNDA0MTQ1NjM0WhcNMjYwNDExMTQ1NjM0WjAYMRYwFAYD VQQDEw02OWQxMjZhMy1lNWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D36H2CwR9CoaTgTRrcJ/F1EGv/B7BeI8n+7ZhHlbQxXRAFKxj9LRLz+CeWk QBI2HRAuJEY3ju89NlWwz80xQBwW1XPK52j/y1Uu7iAl5Tm+5vF3ew+oImz4cpjI hA2INVQHDneulgOyyeL2AeyqH5kH62RLsYj2krJSPjagPLP4nOXVEXYB98cEb7pj EIkJ+hbA5nzC0TdAUT0BFwPn9dpStuO+ZIIxpCGI4ZODx3PoGQyzy8dF1ddD/lsa GBIRrxUunQN0Z7HuLevWAJIEyfQmaWHCSO8LBzOGkYZXWGxgBXYMLlsCvSLoxrx7 MYd32d7tq3U3mBPEt7Vn2hCYnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFu2mZN sKIOJ7qZcwmMHeJNCA6HMB8GA1UdIwQYMBaAFNaaYFZfM3IUnObi/J5yPUkGdnaK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUY3RC82OTc1M0Y1ODFE OUMxMUUyQTZGQkYwOEEwOEIwMkNEMi8xcHBnVmw4emNoU2M1dUw4bm5JOVNRWjJk b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFwcGdWbDh6Y2hTYzV1TDhubkk5U1FaMmRvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUY3RC82OTc1M0Y1ODFEOUMxMUUyQTZGQkYwOEEwOEIwMkNEMi8xcHBnVmw4emNo U2M1dUw4bm5JOVNRWjJkb28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWLB6l3Dybpja/HCUU2gKeZtRSXaTlUxalrSKD6V4bPqYmxgEyTLzeoPYi9bg t1IzpHNnBoPX4p4GZiIBcqapjI+IIEBYF864SRlRhDPC7hSXXQKB+Jx3BqfdhXbo i168erGUVdj74qGMI7qRQjhRUSUwvaDqEZ6SZB9vPLsJFI68O4KmwwYk0/Ejx/K4 aVEiDGikYQZKPc/70m/HJ7pjocbSSfsU868phW2AQ950efc1v95TaAWIqgdthJpy bZMXg7Ma9s3JB/4NfkQOvU7BnJvtH1rh9tUgEfL3Aa8Q8D1dTohCtSYfZYLtzFXz +Tahs+yn/hahtGDH5XBKdr+gWg== -----END CERTIFICATE-----Generated at Mon Apr 6 08:48:33 2026 by rpki-client