$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft File: gja7zXAtSCL93VuwVmDPEDjsjH4.mft (raw, json) Hash identifier: f/6EJW5kLayHKJdqVK9BbGXqftUPcGTQVi045Lb5KOA= Subject key identifier: 70:74:13:F5:48:F4:0B:67:A7:02:8C:17:2D:F5:08:85:E1:25:F2:DE Authority key identifier: 82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E Certificate issuer: /CN=A911AE4B/serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Certificate serial: 08E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft Manifest number: 08D5 Signing time: Sat 18 Apr 2026 20:16:04 +0000 Manifest this update: Sat 18 Apr 2026 20:16:04 +0000 Manifest next update: Sat 25 Apr 2026 20:16:04 +0000 Files and hashes: 1: gja7zXAtSCL93VuwVmDPEDjsjH4.crl (hash: zknpt2gykazkTYqa31YLhUfMGownWyijmO7AdNMKBjc=) 2: 63B7CB76D0E511EA9916E053C4F9AE02.roa (hash: cdnSLxMfhuwZ6Et2fzD+gihlVu8L05hih+WXS+qI80c=) 3: 3ABFAC2231E211EFA341983CC4F9AE02.roa (hash: 9utKPxoH2n6Lt3z3yPm91op8vGhWDr2B1tZqqN/7b1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 20:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2272 (0x8e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE4B, serialNumber=8236BBCD702D4822FDDD5BB05660CF1038EC8C7E Validity Not Before: Apr 18 20:16:04 2026 GMT Not After : Apr 25 20:16:04 2026 GMT Subject: CN=69e3e684-7d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:f5:f3:f0:5b:2f:d6:92:9d:a5:fa:01:18: 05:76:bd:00:8a:c3:0d:78:76:d9:39:3c:7d:eb:b0: 93:44:d2:0c:b9:25:10:e0:07:ea:55:dd:c9:97:34: 1b:20:51:ce:ec:30:e3:7f:9e:ba:3a:8b:73:2c:4e: d2:14:41:0d:7a:72:79:20:c4:a1:73:83:9c:ed:46: 96:b3:ba:6d:c6:53:d6:56:e7:b4:a0:9a:94:3a:63: e9:2a:67:64:0a:65:27:ed:5d:1a:2b:92:b6:e4:db: 08:2d:b5:c9:d0:95:3e:a8:30:ab:2d:3d:88:bd:81: c6:96:b6:06:d5:aa:da:a0:3e:5d:33:2b:c2:cc:6e: 19:c6:3e:bc:6a:22:05:f1:98:b8:a9:e1:03:1f:bd: 2a:10:48:11:ec:65:82:8a:74:2b:81:22:8c:41:cd: fd:1a:ac:58:98:17:15:8e:2e:e6:6b:c3:d4:5b:d7: 55:21:52:bd:de:77:ec:4d:bc:8b:d0:9d:62:4e:77: ef:2c:65:2b:7f:39:9f:db:7c:06:6a:31:d3:7b:e0: a3:80:3e:73:6c:0a:89:d7:94:b6:b3:68:b0:fd:1e: ca:87:ac:46:b9:ce:fa:70:e4:26:46:81:00:c5:25: 20:8e:6e:9e:dc:d4:5e:9b:db:70:04:71:a8:c8:3d: 6f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:74:13:F5:48:F4:0B:67:A7:02:8C:17:2D:F5:08:85:E1:25:F2:DE X509v3 Authority Key Identifier: keyid:82:36:BB:CD:70:2D:48:22:FD:DD:5B:B0:56:60:CF:10:38:EC:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gja7zXAtSCL93VuwVmDPEDjsjH4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4B/24A68E9CD0E311EA9A73B94FC4F9AE02/gja7zXAtSCL93VuwVmDPEDjsjH4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:f2:f2:09:45:86:25:d8:4c:81:76:73:92:f4:bd:fb:4d:6c: 56:bd:12:4c:16:20:1b:4e:e9:69:c0:a9:9f:61:ef:b9:4a:46: 14:83:97:99:35:a3:8f:ec:e9:a7:05:9e:2e:89:49:af:af:3e: 87:4f:52:b8:bf:93:f7:f5:28:9f:ee:df:dd:f8:4f:cd:c5:fe: a7:5b:2a:40:c2:da:e2:e0:2d:65:fb:b7:b6:d4:4f:d6:e6:c8: 7f:84:f2:28:c8:43:2e:82:61:65:d6:8b:90:de:39:94:95:d7: fb:61:10:5a:01:6d:0a:25:c0:4b:9c:27:28:8a:07:34:dc:cc: 66:9e:8d:80:7d:f7:09:82:51:3b:dd:ea:95:f4:46:c1:21:8b: 5b:eb:45:90:0c:a9:01:6c:1b:0b:6e:9b:4d:f1:29:53:fb:b5: 05:d2:06:f0:ef:c1:62:13:f5:32:57:da:79:3d:ad:f0:26:64: d6:6a:95:c3:1b:cf:7b:7f:6a:40:9b:67:8a:b5:ab:51:3f:bd: 71:5e:27:ab:3f:c1:b7:ed:5f:83:03:8e:b2:07:ab:42:3e:e2: 08:8c:e2:01:e2:8f:83:4d:5a:af:5b:db:d0:ab:84:12:de:b6: df:2c:a9:0e:c2:90:fb:82:72:8f:da:01:99:91:88:9e:e3:18: ea:1c:88:fc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFNEIxMTAvBgNVBAUTKDgyMzZCQkNENzAyRDQ4MjJGRERENUJCMDU2NjBDRjEw MzhFQzhDN0UwHhcNMjYwNDE4MjAxNjA0WhcNMjYwNDI1MjAxNjA0WjAYMRYwFAYD VQQDEw02OWUzZTY4NC03ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNH18/BbL9aSnaX6ARgFdr0AisMNeHbZOTx967CTRNIMuSUQ4AfqVd3JlzQb IFHO7DDjf566OotzLE7SFEENenJ5IMShc4Oc7UaWs7ptxlPWVue0oJqUOmPpKmdk CmUn7V0aK5K25NsILbXJ0JU+qDCrLT2IvYHGlrYG1araoD5dMyvCzG4Zxj68aiIF 8Zi4qeEDH70qEEgR7GWCinQrgSKMQc39GqxYmBcVji7ma8PUW9dVIVK93nfsTbyL 0J1iTnfvLGUrfzmf23wGajHTe+CjgD5zbAqJ15S2s2iw/R7Kh6xGuc76cOQmRoEA xSUgjm6e3NRem9twBHGoyD1vBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHB0E/VI 9AtnpwKMFy31CIXhJfLeMB8GA1UdIwQYMBaAFII2u81wLUgi/d1bsFZgzxA47Ix+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU0Qi8yNEE2OEU5Q0Qw RTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFNDTDkzVnV3Vm1EUEVEanNq SDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dqYTd6WEF0U0NMOTNWdXdWbURQRURqc2pINC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU0Qi8yNEE2OEU5Q0QwRTMxMUVBOUE3M0I5NEZDNEY5QUUwMi9namE3elhBdFND TDkzVnV3Vm1EUEVEanNqSDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJfLyCUWGJdhMgXZzkvS9+01sVr0STBYgG07pacCpn2HvuUpGFIOXmTWjj+zp pwWeLolJr68+h09SuL+T9/Uon+7f3fhPzcX+p1sqQMLa4uAtZfu3ttRP1ubIf4Ty KMhDLoJhZdaLkN45lJXX+2EQWgFtCiXAS5wnKIoHNNzMZp6NgH33CYJRO93qlfRG wSGLW+tFkAypAWwbC26bTfEpU/u1BdIG8O/BYhP1MlfaeT2t8CZk1mqVwxvPe39q QJtnirWrUT+9cV4nqz/Bt+1fgwOOsgerQj7iCIziAeKPg01ar1vb0KuEEt623yyp DsKQ+4Jyj9oBmZGInuMY6hyI/A== -----END CERTIFICATE-----Generated at Sun Apr 19 08:22:49 2026 by rpki-client