$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft File: A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json) Hash identifier: EBfB01vgxMKOtZZKzHL0kEqAF/GOlT9d7kTXf53jw+U= Subject key identifier: B1:8B:7D:76:50:EC:9C:2A:50:A6:85:F9:89:EA:84:08:7B:6F:E5:A0 Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE Certificate issuer: /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft Manifest number: 0138 Signing time: Fri 17 Apr 2026 05:06:35 +0000 Manifest this update: Fri 17 Apr 2026 05:06:35 +0000 Manifest next update: Fri 24 Apr 2026 05:06:35 +0000 Files and hashes: 1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: IOnLldXZ0jOoaCV0tlkDijazRdaAOYf8m5OftQHE+SY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 05:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE Validity Not Before: Apr 17 05:06:35 2026 GMT Not After : Apr 24 05:06:35 2026 GMT Subject: CN=69e1bfdb-8d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:20:0b:b5:cc:b6:86:04:4a:b7:0c:be:d8: 22:32:b2:f0:cc:51:6e:c5:4a:f1:b9:5f:f7:5a:9d: 7b:71:6a:55:3c:b0:11:bf:32:73:3a:dc:f2:33:f9: db:55:08:d4:ac:6d:0b:37:e7:5a:eb:49:79:d2:97: ac:03:18:87:a7:42:f1:ff:95:bd:e4:64:6c:16:3c: 35:c5:a5:55:ae:fd:c6:45:a9:94:11:24:76:42:9b: 3f:ce:90:32:61:03:65:0e:73:51:2c:51:cb:ff:e4: 48:53:09:5f:35:b3:4c:b3:0b:61:2a:e3:e4:18:8a: a6:ac:fa:b3:ac:14:32:af:c1:8b:aa:ee:f7:56:8a: 66:bd:9b:45:03:8d:a7:d2:73:a0:38:55:8e:71:26: 4b:68:68:00:67:18:e9:46:b2:c0:d0:c4:20:8b:85: d4:14:2e:f3:9b:e3:99:ba:e5:8b:da:fd:df:fa:36: b9:6e:73:45:63:20:09:1c:0a:4a:4c:bf:d3:b5:b9: 43:9f:03:06:9d:b1:44:8a:ec:d1:68:bd:d1:5b:5c: da:12:ef:79:29:4c:9e:52:7a:39:91:54:ca:47:ef: 27:c3:cb:9a:79:c8:b5:a0:95:12:8c:b7:19:16:e7: 58:f0:b1:eb:c4:9f:dd:a4:31:d1:5a:7d:a0:0e:88: 9e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8B:7D:76:50:EC:9C:2A:50:A6:85:F9:89:EA:84:08:7B:6F:E5:A0 X509v3 Authority Key Identifier: keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c3:f8:30:27:62:9f:ff:5f:ab:7d:3f:ba:0e:df:63:15:2a: 0e:90:0d:0c:56:12:1e:12:ec:e4:38:32:7c:e1:47:c8:a5:42: 3a:75:38:f5:aa:6f:57:6a:b1:f5:41:86:43:73:02:d3:a0:92: 56:83:22:7c:55:35:52:4b:2e:04:fa:b9:73:26:97:67:37:10: a4:2a:27:4d:f2:95:42:04:b2:b2:98:1e:b4:22:32:9b:5d:ef: d3:f4:f1:0f:03:7f:b6:31:e4:44:da:f8:61:98:d7:e3:89:16: b1:6e:e0:b1:68:cb:e1:61:47:3e:50:6b:1f:84:0f:92:72:ab: 43:36:54:82:bd:c9:cc:19:21:dc:e1:0e:59:bd:d9:b1:b9:91: db:c7:a1:87:9d:53:e1:86:a1:f2:90:21:cc:33:1a:5a:74:e4: 52:41:84:73:0e:bf:5f:21:db:04:ae:42:b0:9d:df:eb:3a:e3: eb:a4:c3:bd:a0:65:31:10:15:84:60:2c:b0:c1:66:27:92:47: be:10:2e:3a:62:b1:4d:7d:13:7e:25:bf:73:6d:04:80:27:a7: 1d:34:5f:a8:60:fe:23:51:fb:85:19:a9:f0:84:b0:32:c8:d8: a7:8d:01:0d:b0:32:08:17:b6:6e:a5:79:88:1f:37:22:2a:d4: c9:79:37:18 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKDAzRjRERTAzQTFDOTg1QzM0REM2ODI3MkY5RDc3MzVC MzNGQTZBREUwHhcNMjYwNDE3MDUwNjM1WhcNMjYwNDI0MDUwNjM1WjAYMRYwFAYD VQQDEw02OWUxYmZkYi04ZDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjggC7XMtoYESrcMvtgiMrLwzFFuxUrxuV/3Wp17cWpVPLARvzJzOtzyM/nb VQjUrG0LN+da60l50pesAxiHp0Lx/5W95GRsFjw1xaVVrv3GRamUESR2Qps/zpAy YQNlDnNRLFHL/+RIUwlfNbNMswthKuPkGIqmrPqzrBQyr8GLqu73VopmvZtFA42n 0nOgOFWOcSZLaGgAZxjpRrLA0MQgi4XUFC7zm+OZuuWL2v3f+ja5bnNFYyAJHApK TL/TtblDnwMGnbFEiuzRaL3RW1zaEu95KUyeUno5kVTKR+8nw8uaeci1oJUSjLcZ FudY8LHrxJ/dpDHRWn2gDoieQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLGLfXZQ 7JwqUKaF+YnqhAh7b+WgMB8GA1UdIwQYMBaAFAP03gOhyYXDTcaCcvnXc1sz+mre MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ERjBCNjg2QTVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhjTk54b0p5LWRkeld6UDZh dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzdDRC9ERjBCNjg2QTVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhj Tk54b0p5LWRkeld6UDZhdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXsP4MCdin/9fq30/ug7fYxUqDpANDFYSHhLs5DgyfOFHyKVCOnU49apvV2qx 9UGGQ3MC06CSVoMifFU1UksuBPq5cyaXZzcQpConTfKVQgSyspgetCIym13v0/Tx DwN/tjHkRNr4YZjX44kWsW7gsWjL4WFHPlBrH4QPknKrQzZUgr3JzBkh3OEOWb3Z sbmR28ehh51T4Yah8pAhzDMaWnTkUkGEcw6/XyHbBK5CsJ3f6zrj66TDvaBlMRAV hGAssMFmJ5JHvhAuOmKxTX0TfiW/c20EgCenHTRfqGD+I1H7hRmp8ISwMsjYp40B DbAyCBe2bqV5iB83IirUyXk3GA== -----END CERTIFICATE-----Generated at Fri Apr 17 15:48:22 2026 by rpki-client