$ rpki-client -vvf rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft File: I-mD64u3-GulkjUkGhAWDIBSxk4.mft (raw, json) Hash identifier: loQLliJ6Yl5fw446WCPVzHt91ZpcKlqqRkZudUZdfso= Subject key identifier: EE:01:9F:75:3F:84:24:D9:AF:07:4F:5A:6A:FD:D6:13:6B:D3:FB:E7 Authority key identifier: 23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E Certificate issuer: /CN=A919EDE5/serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Certificate serial: 3668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft Manifest number: 35E2 Signing time: Sat 04 Apr 2026 14:58:47 +0000 Manifest this update: Sat 04 Apr 2026 14:58:47 +0000 Manifest next update: Sat 11 Apr 2026 14:58:47 +0000 Files and hashes: 1: I-mD64u3-GulkjUkGhAWDIBSxk4.crl (hash: 5EJ1O/cB9jASR0YnH+mfVAwidMN4KjASTFNjbxTQwYA=) 2: 7E9AB614268F11F1809EA271B6833773.roa (hash: LfL1qgct7s9A78jWSOYPbYR71D4pCSzR81xKFvr3q4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 14:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13928 (0x3668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EDE5, serialNumber=23E983EB8BB7F86BA59235241A10160C8052C64E Validity Not Before: Apr 4 14:58:47 2026 GMT Not After : Apr 11 14:58:47 2026 GMT Subject: CN=69d12727-3333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:15:18:97:a3:45:d0:b6:23:0f:9c:e6:06:1f: 72:d5:99:2f:29:41:8f:d4:5c:a6:fd:9f:d8:01:fc: aa:06:cd:ac:83:6c:95:43:86:18:39:88:28:aa:e3: 44:2c:92:52:5e:cd:82:3a:d1:25:ec:52:e0:0f:cf: 67:cd:34:db:88:c6:c9:72:76:20:ec:20:5b:7f:09: 37:8a:f7:2d:15:7c:13:04:19:d5:3c:10:57:23:ed: 1a:85:72:d8:20:fb:d5:a6:b1:6c:47:c8:7b:82:d6: 41:02:ff:7f:e5:fb:52:15:22:e1:1b:cb:2c:d6:8a: 1c:a0:80:d5:a8:d3:1a:45:7d:b7:18:32:77:95:d4: 3b:ce:04:fa:85:9d:15:fa:ab:58:74:d2:7a:c0:f4: 83:bb:6e:7e:aa:3b:89:d8:ef:18:e9:cc:e5:20:6e: 53:bb:9e:01:1e:04:23:2e:48:78:02:04:79:2c:ea: ed:48:32:6c:e9:42:13:7e:0a:57:ac:f6:d7:2b:f8: 3c:82:6c:1f:06:8f:01:45:4f:bb:9e:92:ba:44:b2: 1a:08:a3:46:6a:43:31:df:50:cd:e2:1f:e5:2c:d5: cf:d8:bb:b3:54:2e:b7:86:2b:1a:4f:6b:41:ed:9b: 4d:7d:69:93:04:db:57:e8:bd:24:29:db:09:50:eb: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:01:9F:75:3F:84:24:D9:AF:07:4F:5A:6A:FD:D6:13:6B:D3:FB:E7 X509v3 Authority Key Identifier: keyid:23:E9:83:EB:8B:B7:F8:6B:A5:92:35:24:1A:10:16:0C:80:52:C6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-mD64u3-GulkjUkGhAWDIBSxk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EDE5/4A2B6CCE1D9E11E29CA3098E08B02CD2/I-mD64u3-GulkjUkGhAWDIBSxk4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:83:3e:79:ef:58:c6:9e:58:e2:5d:4e:88:71:0e:18:56:ae: af:f8:5f:38:52:f3:c5:75:2b:b3:44:c7:86:d4:7a:be:2c:43: ef:ca:b0:26:45:a5:55:26:a0:72:0e:b2:bc:bb:50:3f:be:09: c9:ec:21:fb:ac:c1:27:0b:fc:ce:af:cc:af:02:86:cb:36:cb: d3:b3:8d:48:96:81:e1:77:25:f1:28:39:31:d9:cb:28:b0:b4: 1e:4a:df:d3:13:09:33:ad:ea:98:35:2b:58:57:6e:1f:3e:9b: bf:7c:d6:11:4b:39:89:60:bd:79:1e:be:27:6d:41:f1:9c:c0: c9:38:01:51:fc:28:16:5c:86:2a:29:fd:37:e0:02:70:ac:7d: 43:26:18:f3:6e:47:12:a2:92:6d:00:c6:66:6a:a0:1f:0f:52: e9:7b:c6:d6:20:2e:53:63:7c:07:7e:da:f8:31:36:9d:79:c8: cd:12:be:c9:38:93:2c:43:d2:e0:89:f3:39:04:42:40:9d:1c: 28:5a:1f:2f:80:c7:8e:95:c6:52:e8:6f:0e:52:6a:6e:ac:e1: 52:9c:84:b9:34:75:c7:5a:9c:7c:6c:63:7f:2b:ab:fe:a2:4e: c9:de:22:39:5a:47:14:46:dd:be:68:3d:48:8e:a9:a4:e8:3f: 3d:0e:50:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVERTUxMTAvBgNVBAUTKDIzRTk4M0VCOEJCN0Y4NkJBNTkyMzUyNDFBMTAxNjBD ODA1MkM2NEUwHhcNMjYwNDA0MTQ1ODQ3WhcNMjYwNDExMTQ1ODQ3WjAYMRYwFAYD VQQDEw02OWQxMjcyNy0zMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRUYl6NF0LYjD5zmBh9y1ZkvKUGP1Fym/Z/YAfyqBs2sg2yVQ4YYOYgoquNE LJJSXs2COtEl7FLgD89nzTTbiMbJcnYg7CBbfwk3ivctFXwTBBnVPBBXI+0ahXLY IPvVprFsR8h7gtZBAv9/5ftSFSLhG8ss1oocoIDVqNMaRX23GDJ3ldQ7zgT6hZ0V +qtYdNJ6wPSDu25+qjuJ2O8Y6czlIG5Tu54BHgQjLkh4AgR5LOrtSDJs6UITfgpX rPbXK/g8gmwfBo8BRU+7npK6RLIaCKNGakMx31DN4h/lLNXP2LuzVC63hisaT2tB 7ZtNfWmTBNtX6L0kKdsJUOvGuwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO4Bn3U/ hCTZrwdPWmr91hNr0/vnMB8GA1UdIwQYMBaAFCPpg+uLt/hrpZI1JBoQFgyAUsZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RURFNS80QTJCNkNDRTFE OUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1HdWxralVrR2hBV0RJQlN4 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ktbUQ2NHUzLUd1bGtqVWtHaEFXRElCU3hrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RURFNS80QTJCNkNDRTFEOUUxMUUyOUNBMzA5OEUwOEIwMkNEMi9JLW1ENjR1My1H dWxralVrR2hBV0RJQlN4azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAloM+ee9Yxp5Y4l1OiHEOGFaur/hfOFLzxXUrs0THhtR6vixD78qwJkWlVSag cg6yvLtQP74Jyewh+6zBJwv8zq/MrwKGyzbL07ONSJaB4Xcl8Sg5MdnLKLC0Hkrf 0xMJM63qmDUrWFduHz6bv3zWEUs5iWC9eR6+J21B8ZzAyTgBUfwoFlyGKin9N+AC cKx9QyYY825HEqKSbQDGZmqgHw9S6XvG1iAuU2N8B37a+DE2nXnIzRK+yTiTLEPS 4InzOQRCQJ0cKFofL4DHjpXGUuhvDlJqbqzhUpyEuTR1x1qcfGxjfyur/qJOyd4i OVpHFEbdvmg9SI6ppOg/PQ5QoQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:02:03 2026 by rpki-client