$ rpki-client -vvf rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft File: RCHzqdfkHW9Ht4b90-eojeQrB7k.mft (raw, json) Hash identifier: 92b8hR9hQtqNXU4ZydlOltzocZ9FAqOqCdNm8V9/7yo= Subject key identifier: 62:43:58:1F:2D:64:88:41:49:C1:FD:F8:44:C8:E3:7B:43:22:A2:FB Authority key identifier: 44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 Certificate issuer: /CN=A913442A/serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Certificate serial: 0354 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft Manifest number: 034D Signing time: Fri 17 Apr 2026 00:51:48 +0000 Manifest this update: Fri 17 Apr 2026 00:51:48 +0000 Manifest next update: Fri 24 Apr 2026 00:51:48 +0000 Files and hashes: 1: RCHzqdfkHW9Ht4b90-eojeQrB7k.crl (hash: Ge0IiUgi/MzQ7qHEn8YFI2KfvdpdTaHEHNkGceUES74=) 2: 0F9DB8E0FC3D11ECAD619C35C4F9AE02.roa (hash: ncZ5sqUN2e07RUTT/QMvuN5PhxtUUQgW+T5Lo9bRtVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 852 (0x354) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913442A, serialNumber=4421F3A9D7E41D6F47B786FDD3E7A88DE42B07B9 Validity Not Before: Apr 17 00:51:48 2026 GMT Not After : Apr 24 00:51:48 2026 GMT Subject: CN=69e18424-2d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f9:d6:7c:f2:db:f9:4b:b8:7c:ae:7b:4a:99: 3b:88:c3:fc:93:2c:d1:03:1f:c1:d9:fe:e0:f7:48: b5:4a:3a:1c:09:69:65:b7:3e:65:6a:6b:8b:27:e3: ee:85:8d:f3:52:41:05:9a:ed:21:44:e8:8b:0c:94: 75:03:35:85:ac:c2:11:cd:97:15:e2:53:da:23:b1: 9c:86:36:d7:9c:2f:aa:dd:e0:ef:f3:67:fa:0a:59: e0:2e:58:0a:71:1e:de:9e:26:ab:98:32:a2:c0:f4: 24:11:32:ad:98:0b:05:72:1d:0e:95:b2:75:e5:5b: a9:76:7d:f5:f6:f6:b8:a7:a7:c5:29:26:d1:c8:2d: 0a:09:09:2f:ce:bf:f8:3b:09:a4:91:fe:71:2e:df: a6:68:c8:36:40:fd:a6:23:e4:e1:6e:95:8c:84:99: 20:f4:58:2f:10:24:83:a7:14:13:b9:96:2b:8e:80: f1:95:70:05:37:e6:fd:f3:52:4e:a8:5d:1f:19:cf: 39:63:67:ec:44:ff:6f:eb:aa:ad:f4:81:c7:52:53: b3:49:71:19:3d:64:6f:de:83:59:4e:12:7b:b8:6a: 92:4c:58:da:64:f8:a3:91:9e:2e:67:7f:1a:79:20: 47:a5:b2:f4:69:ec:bb:a8:83:d2:6f:fa:56:4a:31: 50:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:43:58:1F:2D:64:88:41:49:C1:FD:F8:44:C8:E3:7B:43:22:A2:FB X509v3 Authority Key Identifier: keyid:44:21:F3:A9:D7:E4:1D:6F:47:B7:86:FD:D3:E7:A8:8D:E4:2B:07:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RCHzqdfkHW9Ht4b90-eojeQrB7k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913442A/AB4E5244FC3911EC95C81387C4F9AE02/RCHzqdfkHW9Ht4b90-eojeQrB7k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fc:53:ad:8e:b8:f5:5a:cf:c0:e8:07:ae:b7:2c:ad:18:14: 2b:31:b2:57:bc:64:91:0d:2b:90:cd:0a:cf:b2:ae:b9:d5:68: 55:27:46:cc:7d:7a:01:ac:16:ff:0c:81:d8:63:3f:1b:59:33: b1:45:a0:a7:12:60:4d:59:38:75:5a:48:38:a1:46:69:d4:ea: 3f:d1:9c:52:d5:c2:46:42:2d:6c:44:32:5a:6d:30:2c:58:fe: 22:f4:b6:34:a8:53:ea:ae:18:86:6e:bd:8b:bf:f3:ee:d3:b7: b5:c0:1e:25:09:51:f4:f3:c9:1c:2d:18:0e:2a:49:36:12:c1: 03:15:62:3e:41:56:de:dc:21:b0:2a:f2:66:bb:df:ee:c0:be: 1b:b7:a6:74:11:9b:07:d5:93:22:8f:42:c8:9f:d3:87:fe:21: 96:d8:a0:dc:e7:92:a4:d6:d8:8b:a9:30:74:83:6b:2a:c7:e7: c2:6d:4e:c2:96:48:55:c3:36:59:3f:4e:aa:92:47:ed:2a:54: ae:eb:92:25:c7:2b:7c:b9:91:09:ec:bc:5d:f9:58:17:69:cb: a0:bc:62:e3:e4:db:05:6c:a3:b5:c7:cf:11:60:f2:98:8a:92: a2:7b:a8:f9:72:bd:65:23:47:67:3d:0e:ab:fb:26:d9:87:55: 96:23:07:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ0MkExMTAvBgNVBAUTKDQ0MjFGM0E5RDdFNDFENkY0N0I3ODZGREQzRTdBODhE RTQyQjA3QjkwHhcNMjYwNDE3MDA1MTQ4WhcNMjYwNDI0MDA1MTQ4WjAYMRYwFAYD VQQDEw02OWUxODQyNC0yZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3PnWfPLb+Uu4fK57Spk7iMP8kyzRAx/B2f7g90i1SjocCWlltz5lamuLJ+Pu hY3zUkEFmu0hROiLDJR1AzWFrMIRzZcV4lPaI7GchjbXnC+q3eDv82f6ClngLlgK cR7eniarmDKiwPQkETKtmAsFch0OlbJ15Vupdn319va4p6fFKSbRyC0KCQkvzr/4 Owmkkf5xLt+maMg2QP2mI+ThbpWMhJkg9FgvECSDpxQTuZYrjoDxlXAFN+b981JO qF0fGc85Y2fsRP9v66qt9IHHUlOzSXEZPWRv3oNZThJ7uGqSTFjaZPijkZ4uZ38a eSBHpbL0aey7qIPSb/pWSjFQjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGJDWB8t ZIhBScH9+ETI43tDIqL7MB8GA1UdIwQYMBaAFEQh86nX5B1vR7eG/dPnqI3kKwe5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDQyQS9BQjRFNTI0NEZD MzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hXOUh0NGI5MC1lb2plUXJC N2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JDSHpxZGZrSFc5SHQ0YjkwLWVvamVRckI3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDQyQS9BQjRFNTI0NEZDMzkxMUVDOTVDODEzODdDNEY5QUUwMi9SQ0h6cWRma0hX OUh0NGI5MC1lb2plUXJCN2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKPxTrY649VrPwOgHrrcsrRgUKzGyV7xkkQ0rkM0Kz7KuudVoVSdGzH16AawW /wyB2GM/G1kzsUWgpxJgTVk4dVpIOKFGadTqP9GcUtXCRkItbEQyWm0wLFj+IvS2 NKhT6q4Yhm69i7/z7tO3tcAeJQlR9PPJHC0YDipJNhLBAxViPkFW3twhsCryZrvf 7sC+G7emdBGbB9WTIo9CyJ/Th/4hltig3OeSpNbYi6kwdINrKsfnwm1OwpZIVcM2 WT9OqpJH7SpUruuSJccrfLmRCey8XflYF2nLoLxi4+TbBWyjtcfPEWDymIqSonuo +XK9ZSNHZz0Oq/sm2YdVliMHtQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:35 2026 by rpki-client