$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: oDUUWmoHfpF2tlF2mpwmVNdTENnBLx2Mx8zlmIR3QRY= Subject key identifier: 2B:24:C8:20:65:01:94:5F:C1:AF:FE:84:06:B4:F1:2C:35:8D:17:1D Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 0457 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 0438 Signing time: Fri 17 Apr 2026 00:14:37 +0000 Manifest this update: Fri 17 Apr 2026 00:14:36 +0000 Manifest next update: Fri 24 Apr 2026 00:14:36 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: 0m50GhHOB6P6tXYLhflcp97+ozZtjC3KQEOeCbILyJg=) 2: 7D1E4382F7E111F09133AC30656F56BC.roa (hash: zNF2ygfhhND/uBTDhIyFRkeFn/MaMe2JQ58piW9rdw0=) 3: 5963078E311611F1A5EF62D2C0833773.roa (hash: hAgQWjP5KafrY4xqJuxoHjvWfdsN4t0UT3NmZ7Q2C9g=) 4: 7C17299AF7E111F09133AC30656F56BC.roa (hash: t296rVU/xx7eKuOhP3U3tbmVD7byq5VC6ECxFEqQnZo=) 5: 7CA73BD4F7E111F09133AC30656F56BC.roa (hash: lrf8090retSGwJwGuDcCx3aFLrFcPfdjin1o0PlkDcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Apr 17 00:14:36 2026 GMT Not After : Apr 24 00:14:36 2026 GMT Subject: CN=69e17b6d-37ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b1:1e:2c:ae:06:74:54:e0:fe:54:33:d2:8a: 95:28:bb:65:13:9b:2d:21:53:e2:2e:40:df:c3:73: 43:69:43:d0:54:35:5d:ce:35:d3:87:f5:92:bc:ea: 83:11:fa:ab:7c:b1:59:90:4e:63:74:bc:2c:e1:d1: 18:d0:54:2f:de:57:d3:f0:86:70:ac:5e:29:7a:f0: 82:17:cb:d4:20:65:11:54:c5:88:0b:89:7e:d8:21: 05:69:01:e3:82:3e:63:20:e8:d7:0c:16:1c:e2:bc: 2f:69:29:5e:2b:82:49:81:00:da:de:b3:14:b8:a7: 0b:e2:51:63:53:7e:c9:ce:a7:50:f0:0f:56:00:75: 4a:cd:21:7c:ae:53:f8:1f:7e:dd:3e:d7:fd:2a:e8: 90:65:2a:83:fb:db:e8:2c:7e:c2:17:4b:f9:c6:6b: 06:3d:ba:7a:f3:df:d1:09:42:bc:3a:b6:3b:89:a7: 10:28:a5:e5:e5:55:22:63:3c:53:7c:9c:09:4e:1c: c3:b9:c7:5c:07:12:36:f5:2d:b5:54:46:a7:a1:2d: 83:4d:51:e7:d4:d0:24:0d:00:5d:a8:d3:8e:5f:e7: 79:eb:2e:8c:73:81:4f:05:62:c3:3f:45:b8:cc:10: d6:a2:15:2f:df:e7:49:da:55:2e:2e:75:52:1b:f8: 51:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:C8:20:65:01:94:5F:C1:AF:FE:84:06:B4:F1:2C:35:8D:17:1D X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:c8:24:66:a6:28:3d:16:5e:bd:eb:58:a3:94:99:b4:fd:15: 28:4d:8b:61:eb:24:bd:0c:00:c4:94:d7:f4:42:35:75:0f:a4: 0a:0a:fa:ba:15:80:19:8b:6d:e0:ad:9a:7f:c4:f4:07:f3:25: 5c:ea:19:0c:6e:35:b7:5b:a8:22:76:b7:2b:26:27:0c:43:db: 9a:72:b4:e2:3c:79:20:a2:5e:ef:af:82:f9:a8:7c:a1:8d:db: 7b:c3:9d:a1:91:fc:06:5b:77:8a:c1:cd:55:62:40:80:2f:37: b9:6f:06:5f:4c:35:d0:e0:ad:2c:db:c9:35:3c:02:37:ba:23: 2e:d1:34:15:93:92:0d:22:ab:de:02:4d:b3:48:31:7f:70:84: 41:7d:a9:7e:e6:27:ef:3d:05:e9:1f:7f:83:67:fa:7d:46:4e: ec:bd:09:f3:a6:d2:ad:f1:f1:63:94:98:29:20:a5:1d:63:34: 09:d4:21:3b:57:c5:be:6c:f2:39:ab:2d:4d:99:d1:ce:f1:eb: 73:c6:f2:bf:74:81:df:6c:52:75:bf:6b:e9:4b:0d:40:a4:f0: 1b:99:3d:cc:b7:ae:9f:08:d4:3a:70:5f:ba:2c:fa:17:0e:b7: 08:e0:4e:41:05:27:c5:c4:03:c7:ed:9e:2c:53:b9:0d:b6:b0: 73:2b:9b:bb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjYwNDE3MDAxNDM2WhcNMjYwNDI0MDAxNDM2WjAYMRYwFAYD VQQDEw02OWUxN2I2ZC0zN2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAgbEeLK4GdFTg/lQz0oqVKLtlE5stIVPiLkDfw3NDaUPQVDVdzjXTh/WSvOqD EfqrfLFZkE5jdLws4dEY0FQv3lfT8IZwrF4pevCCF8vUIGURVMWIC4l+2CEFaQHj gj5jIOjXDBYc4rwvaSleK4JJgQDa3rMUuKcL4lFjU37JzqdQ8A9WAHVKzSF8rlP4 H37dPtf9KuiQZSqD+9voLH7CF0v5xmsGPbp689/RCUK8OrY7iacQKKXl5VUiYzxT fJwJThzDucdcBxI29S21VEanoS2DTVHn1NAkDQBdqNOOX+d56y6Mc4FPBWLDP0W4 zBDWohUv3+dJ2lUuLnVSG/hRKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCskyCBl AZRfwa/+hAa08Sw1jRcdMB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJ8gkZqYoPRZevetYo5SZtP0VKE2LYeskvQwAxJTX9EI1dQ+kCgr6uhWAGYtt 4K2af8T0B/MlXOoZDG41t1uoIna3KyYnDEPbmnK04jx5IKJe76+C+ah8oY3be8Od oZH8Blt3isHNVWJAgC83uW8GX0w10OCtLNvJNTwCN7ojLtE0FZOSDSKr3gJNs0gx f3CEQX2pfuYn7z0F6R9/g2f6fUZO7L0J86bSrfHxY5SYKSClHWM0CdQhO1fFvmzy OastTZnRzvHrc8byv3SB32xSdb9r6UsNQKTwG5k9zLeunwjUOnBfuiz6Fw63COBO QQUnxcQDx+2eLFO5Dbawcyubuw== -----END CERTIFICATE-----Generated at Fri Apr 17 12:54:18 2026 by rpki-client