$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft File: gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft (raw, json) Hash identifier: LYxeEQcmz2F2gwzoNmrqJLckHPQoYnrHLa8e0D1G4pw= Subject key identifier: 36:EA:D6:E7:51:35:E7:31:DC:0D:A8:E5:D7:BB:89:30:E6:A5:B6:7C Authority key identifier: 81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA Certificate issuer: /CN=A9149F3E/serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Certificate serial: 354A Authority info access: rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft Manifest number: 354A Signing time: Thu 16 Apr 2026 14:22:04 +0000 Manifest this update: Thu 16 Apr 2026 14:22:03 +0000 Manifest next update: Thu 23 Apr 2026 14:22:03 +0000 Files and hashes: 1: gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl (hash: R/GNYvltC7Jb13+Y7pIrDvCYAfPfTVNmId+zShaR95E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.crl rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/NI-bm5KnLM_Tbzxw81Z1czzI6iI.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/NI-bm5KnLM_Tbzxw81Z1czzI6iI.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 14:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13642 (0x354a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=81FD563CC6865DE02DA6A83F2A01F116111D0FFA Validity Not Before: Apr 16 14:22:03 2026 GMT Not After : Apr 23 14:22:03 2026 GMT Subject: CN=69e0f08c-3272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:56:c2:61:90:82:ed:c5:85:ac:99:47:68:c0: 2b:7b:2e:7c:c5:55:90:74:67:1a:5c:f0:0b:ec:77: f6:e5:e8:fa:a8:2d:0c:d4:e3:69:80:8b:25:2f:e5: bd:1d:27:5d:46:e5:05:70:0b:b9:31:bc:9d:b5:63: 70:b7:e5:57:f8:e8:1e:2f:30:5d:d7:c7:c0:d8:65: d4:1f:31:99:45:d9:6e:07:01:a7:f0:3f:7f:3f:ab: 03:94:73:5b:e6:bf:c0:82:2d:ee:a4:ee:86:07:29: 79:d5:f4:20:1f:8f:56:ff:07:74:d6:ab:d5:a7:ab: 18:4a:9e:2c:5d:68:55:31:00:b9:b0:d6:1c:77:4f: 9f:a6:b3:7b:e2:51:d1:8f:e7:c9:49:7c:86:9c:cf: 6b:35:33:d0:96:3e:94:2c:e2:f9:af:de:2d:69:a4: 1b:29:6b:40:79:5e:ba:36:83:11:e6:24:09:d6:c6: a0:a0:ac:8a:85:94:2e:57:d4:94:fd:45:20:09:4d: 92:16:42:03:f4:66:b6:a0:84:b7:8c:f5:cd:2b:b3: 7a:59:ca:e1:16:55:64:7f:aa:e5:cf:99:e3:75:1c: b8:b2:42:ee:b7:78:d6:ba:cf:72:44:2c:7c:ce:aa: 7f:7c:b5:f6:05:74:21:5f:b5:74:fd:70:88:9b:8d: 72:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EA:D6:E7:51:35:E7:31:DC:0D:A8:E5:D7:BB:89:30:E6:A5:B6:7C X509v3 Authority Key Identifier: keyid:81:FD:56:3C:C6:86:5D:E0:2D:A6:A8:3F:2A:01:F1:16:11:1D:0F:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B41FE6101D6611E2A62F877C72FD1FF2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/8871FB2C1D8211E2BC6417D708B02CD2/gf1WPMaGXeAtpqg_KgHxFhEdD_o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:97:27:42:0b:ae:91:61:b7:37:f4:db:ab:dd:61:c5:39:35: 63:79:59:f0:0d:ea:7a:32:65:69:f3:e0:54:b8:73:62:ad:5e: f7:7f:86:bd:1b:1a:06:74:ad:b8:a1:30:cd:dc:b4:22:35:2b: cc:da:94:56:58:c7:56:c6:e5:d7:a9:86:bf:58:ce:b3:c5:82: 99:72:d8:97:26:a6:ca:8b:b9:31:55:e9:75:9d:e0:c1:df:13: a7:72:23:61:7f:49:10:61:66:7b:63:30:c4:4a:4c:ed:b2:bf: 1f:aa:33:95:09:55:18:6f:df:1f:35:b5:cb:7a:4b:f9:c6:9f: 45:3b:b6:85:15:c9:99:69:18:a3:4c:b9:8c:39:b7:85:d6:87: 11:74:af:5c:7c:54:d6:58:e0:8d:28:06:38:77:e2:25:01:00: 01:70:e4:1c:38:95:61:92:b4:3a:01:26:10:3d:52:25:80:18: cf:18:27:03:df:c9:42:73:82:6c:3d:53:9a:f5:6b:25:3b:ed: 33:d1:fe:48:e6:1e:a4:8c:49:7d:b0:7b:7f:8a:0b:89:7f:a2: 25:73:08:6c:2f:b0:05:66:57:a4:10:e1:f6:c0:b6:d2:5d:2e: 47:6f:7a:d8:75:d3:39:5b:3c:e7:31:2c:7b:75:08:9d:c4:66: 5a:ed:2e:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKDgxRkQ1NjNDQzY4NjVERTAyREE2QTgzRjJBMDFGMTE2 MTExRDBGRkEwHhcNMjYwNDE2MTQyMjAzWhcNMjYwNDIzMTQyMjAzWjAYMRYwFAYD VQQDEw02OWUwZjA4Yy0zMjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlbCYZCC7cWFrJlHaMArey58xVWQdGcaXPAL7Hf25ej6qC0M1ONpgIslL+W9 HSddRuUFcAu5MbydtWNwt+VX+OgeLzBd18fA2GXUHzGZRdluBwGn8D9/P6sDlHNb 5r/Agi3upO6GByl51fQgH49W/wd01qvVp6sYSp4sXWhVMQC5sNYcd0+fprN74lHR j+fJSXyGnM9rNTPQlj6ULOL5r94taaQbKWtAeV66NoMR5iQJ1sagoKyKhZQuV9SU /UUgCU2SFkID9Ga2oIS3jPXNK7N6WcrhFlVkf6rlz5njdRy4skLut3jWus9yRCx8 zqp/fLX2BXQhX7V0/XCIm41yywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDbq1udR Necx3A2o5de7iTDmpbZ8MB8GA1UdIwQYMBaAFIH9VjzGhl3gLaaoPyoB8RYRHQ/6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS84ODcxRkIyQzFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hlQXRwcWdfS2dIeEZoRWRE X28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0MUZFNjEwMUQ2NjExRTJBNjJGODc3Qzcy RkQxRkYyL2dmMVdQTWFHWGVBdHBxZ19LZ0h4RmhFZERfby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS84ODcxRkIyQzFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi9nZjFXUE1hR1hl QXRwcWdfS2dIeEZoRWREX28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKZcnQguukWG3N/Tbq91hxTk1Y3lZ8A3qejJlafPgVLhzYq1e93+GvRsaBnSt uKEwzdy0IjUrzNqUVljHVsbl16mGv1jOs8WCmXLYlyamyou5MVXpdZ3gwd8Tp3Ij YX9JEGFme2MwxEpM7bK/H6ozlQlVGG/fHzW1y3pL+cafRTu2hRXJmWkYo0y5jDm3 hdaHEXSvXHxU1ljgjSgGOHfiJQEAAXDkHDiVYZK0OgEmED1SJYAYzxgnA9/JQnOC bD1TmvVrJTvtM9H+SOYepIxJfbB7f4oLiX+iJXMIbC+wBWZXpBDh9sC20l0uR296 2HXTOVs85zEse3UIncRmWu0uCw== -----END CERTIFICATE-----Generated at Fri Apr 17 21:23:09 2026 by rpki-client