$ rpki-client -vvf rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft File: aCDlNpQmEvNLA3PdH3ftI0_981w.mft (raw, json) Hash identifier: PXDO+Nzp4zJDVEmc6rPPPk7uUnqCxsKjDXIvVFHG1E4= Subject key identifier: 1D:18:08:09:2D:4C:05:4A:8A:53:FE:EF:19:77:F2:FB:F4:90:12:8B Authority key identifier: 68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C Certificate issuer: /CN=A911F8C9/serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Certificate serial: 04EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft Manifest number: 04E5 Signing time: Thu 16 Apr 2026 23:41:33 +0000 Manifest this update: Thu 16 Apr 2026 23:41:33 +0000 Manifest next update: Thu 23 Apr 2026 23:41:33 +0000 Files and hashes: 1: aCDlNpQmEvNLA3PdH3ftI0_981w.crl (hash: TLDewHI/esBYpY1FU2x7J7SBgj3gyhejUM8lB5QjthA=) 2: 0DC4BC0C5CDE11ECB486850FC4F9AE02.roa (hash: 6u8EDQPeHd1f5myvUPvFnltCBejoVUEG20zIQZJhOPo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 23:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1262 (0x4ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F8C9, serialNumber=6820E536942612F34B0373DD1F77ED234FFDF35C Validity Not Before: Apr 16 23:41:33 2026 GMT Not After : Apr 23 23:41:33 2026 GMT Subject: CN=69e173ad-192f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:78:bf:88:29:ee:06:68:51:6c:07:5c:82: ca:78:7a:f7:6f:a8:66:a4:20:20:6b:94:78:f2:3d: ba:38:40:41:2c:35:b7:d7:f8:45:c6:65:fa:9a:3c: 4d:cd:b9:b9:4e:13:03:51:e2:e7:d7:76:69:a8:5b: ec:3b:1e:62:8a:5b:be:f8:80:ea:b0:90:c6:4a:49: 83:85:68:7c:a0:e6:17:e1:71:5a:fe:55:c3:40:c4: 89:d9:25:06:78:56:07:31:a7:df:11:fe:31:4d:18: 70:ec:dc:1a:72:5e:a5:d1:14:f4:30:e9:18:7a:9c: 3d:41:a7:7a:e8:48:c3:7b:c6:70:bb:10:e2:a4:85: 75:0c:26:77:d6:35:98:1a:c4:1c:71:e9:12:47:8f: 04:51:a4:31:6c:83:ba:d4:f2:d6:24:a3:b1:ee:a5: 32:00:63:4c:b1:cc:7c:b7:c3:7f:6c:41:5a:23:8b: e7:41:48:dc:9e:08:30:86:73:67:94:bf:13:af:d9: 9f:ae:71:06:c2:71:f8:2d:93:09:39:63:bc:fa:dc: 2c:aa:e8:3b:5f:c6:bb:b1:d4:e7:6a:21:1d:fa:eb: 68:27:8b:ba:df:e4:3c:b0:af:bb:a4:e6:78:74:13: 57:81:93:d7:d4:23:27:f7:be:a8:c3:90:bf:d2:37: 27:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:18:08:09:2D:4C:05:4A:8A:53:FE:EF:19:77:F2:FB:F4:90:12:8B X509v3 Authority Key Identifier: keyid:68:20:E5:36:94:26:12:F3:4B:03:73:DD:1F:77:ED:23:4F:FD:F3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aCDlNpQmEvNLA3PdH3ftI0_981w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F8C9/4B4D712A5CDB11ECBD54F70CC4F9AE02/aCDlNpQmEvNLA3PdH3ftI0_981w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:0a:31:1d:04:7d:cc:60:5a:4a:8c:ef:50:61:b8:17:4f:e7: 93:3a:1b:91:39:63:35:b9:0d:1a:9a:81:31:63:6c:e9:f9:62: 25:04:ee:64:c2:43:49:e5:49:ad:ea:eb:23:09:d1:72:b9:27: ba:73:05:74:a3:3f:e5:63:3c:97:f6:85:7c:d3:31:45:d6:21: 2b:7a:ed:59:9d:45:7b:ea:39:d0:98:49:2a:81:43:0f:d2:f9: e5:a2:9f:68:3c:ae:f5:6a:3c:2f:35:91:bf:6f:bf:40:7b:24: 00:ed:2e:c5:b3:ba:af:d2:e2:10:b4:5f:b5:8c:48:48:a7:96: 7a:b4:68:54:ce:14:56:ef:7c:12:7b:2f:9f:13:c8:1e:d8:2a: 0f:51:39:82:3d:5e:0a:f4:1c:08:fd:e5:01:e7:42:12:6a:f5: 9b:37:d8:b8:e1:16:e0:c4:2b:19:0d:32:fb:47:78:59:8b:55: d5:c0:77:04:fb:5d:db:9d:9c:5b:7d:89:15:bd:db:00:a5:ed: 61:96:f4:c6:ae:ae:e5:53:fe:be:33:45:fd:e9:66:9a:12:f0: ff:62:b9:7d:8f:b4:9a:6d:a0:e6:72:f2:06:8b:24:67:cd:3e: f8:ce:f4:1a:35:05:1b:62:bc:12:cc:d7:05:b2:b6:07:ce:bf: 32:31:d3:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY4QzkxMTAvBgNVBAUTKDY4MjBFNTM2OTQyNjEyRjM0QjAzNzNERDFGNzdFRDIz NEZGREYzNUMwHhcNMjYwNDE2MjM0MTMzWhcNMjYwNDIzMjM0MTMzWjAYMRYwFAYD VQQDEw02OWUxNzNhZC0xOTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvah4v4gp7gZoUWwHXILKeHr3b6hmpCAga5R48j26OEBBLDW31/hFxmX6mjxN zbm5ThMDUeLn13ZpqFvsOx5iilu++IDqsJDGSkmDhWh8oOYX4XFa/lXDQMSJ2SUG eFYHMaffEf4xTRhw7Nwacl6l0RT0MOkYepw9Qad66EjDe8ZwuxDipIV1DCZ31jWY GsQccekSR48EUaQxbIO61PLWJKOx7qUyAGNMscx8t8N/bEFaI4vnQUjcnggwhnNn lL8Tr9mfrnEGwnH4LZMJOWO8+twsqug7X8a7sdTnaiEd+utoJ4u63+Q8sK+7pOZ4 dBNXgZPX1CMn976ow5C/0jcngwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB0YCAkt TAVKilP+7xl38vv0kBKLMB8GA1UdIwQYMBaAFGgg5TaUJhLzSwNz3R937SNP/fNc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjhDOS80QjRENzEyQTVD REIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2TkxBM1BkSDNmdEkwXzk4 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FDRGxOcFFtRXZOTEEzUGRIM2Z0STBfOTgxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjhDOS80QjRENzEyQTVDREIxMUVDQkQ1NEY3MENDNEY5QUUwMi9hQ0RsTnBRbUV2 TkxBM1BkSDNmdEkwXzk4MXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABQoxHQR9zGBaSozvUGG4F0/nkzobkTljNbkNGpqBMWNs6fliJQTuZMJDSeVJ rerrIwnRcrknunMFdKM/5WM8l/aFfNMxRdYhK3rtWZ1Fe+o50JhJKoFDD9L55aKf aDyu9Wo8LzWRv2+/QHskAO0uxbO6r9LiELRftYxISKeWerRoVM4UVu98EnsvnxPI HtgqD1E5gj1eCvQcCP3lAedCEmr1mzfYuOEW4MQrGQ0y+0d4WYtV1cB3BPtd252c W32JFb3bAKXtYZb0xq6u5VP+vjNF/elmmhLw/2K5fY+0mm2g5nLyBoskZ80++M70 GjUFG2K8EszXBbK2B86/MjHT8Q== -----END CERTIFICATE-----Generated at Fri Apr 17 11:00:55 2026 by rpki-client