$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft File: gAcXZemLOWEliNN4VyFDLDJgf-4.mft (raw, json) Hash identifier: MIRSpkOGeRNTejW4v6HYppU1RbZo6g5s32ApSna+8MU= Subject key identifier: F7:C4:A4:E8:A0:A7:5D:81:33:C7:3A:F5:61:8F:9B:3B:4C:7A:53:19 Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE Certificate issuer: /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft Manifest number: 5D Signing time: Wed 25 Mar 2026 07:16:38 +0000 Manifest this update: Wed 25 Mar 2026 07:16:38 +0000 Manifest next update: Wed 01 Apr 2026 07:16:38 +0000 Files and hashes: 1: gAcXZemLOWEliNN4VyFDLDJgf-4.crl (hash: kmRYr883ZMyC1HCKcDKjRTdjLVImBV4APAN43hrqEZA=) 2: D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (hash: jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:16:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE Validity Not Before: Mar 25 07:16:38 2026 GMT Not After : Apr 1 07:16:38 2026 GMT Subject: CN=69c38bd6-19d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:18:9b:da:52:8b:75:df:a3:07:4a:34:c0: cb:31:68:bc:dd:53:61:94:26:9c:2a:7c:4d:4d:39: 25:1d:97:3f:3c:0a:6f:1e:55:6b:ae:8f:3e:5a:63: 01:c1:46:4b:46:f4:dc:f9:dc:6e:52:9e:ed:a0:70: 93:f9:bc:38:c2:06:e1:6c:c2:2d:13:fe:27:a8:04: 23:37:48:44:0b:68:27:23:c2:12:51:49:60:64:49: 94:81:3e:19:9f:59:c7:6d:fb:2b:11:81:9c:b7:4f: 5a:99:7a:4e:ff:3a:36:5b:37:9f:39:45:47:83:18: 32:56:fb:d2:a2:50:a3:a3:26:64:76:56:80:a2:5a: 71:a1:44:65:fd:4b:36:93:ed:dd:5d:54:f1:07:f5: 80:1e:df:88:8c:89:ed:2d:dd:53:04:f7:cf:0f:77: 23:84:a0:5a:13:de:4b:91:36:2b:bc:46:ab:d1:fe: a7:ad:ef:7e:9a:f2:b5:f8:1e:4c:8f:7f:7e:a5:e9: 2b:14:eb:21:64:8f:3d:bd:da:be:a3:95:6d:e5:cb: 83:03:a0:22:00:e0:6a:62:2a:42:17:cc:b2:c4:6c: 13:30:88:ef:7b:54:10:bf:b9:45:df:49:a6:8e:9b: f2:8b:a9:99:0b:3d:03:84:e6:25:30:93:d0:f4:af: 48:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C4:A4:E8:A0:A7:5D:81:33:C7:3A:F5:61:8F:9B:3B:4C:7A:53:19 X509v3 Authority Key Identifier: keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5d:3f:60:ed:38:8f:67:f3:3f:0b:f2:e1:8c:9e:d0:a9:96: e7:7e:53:c0:16:6d:a1:29:20:59:04:ab:8f:bb:f5:e5:50:a5: 20:50:55:9c:b7:43:7b:32:86:19:6f:cf:8d:06:89:65:2b:e5: ff:75:6d:e5:f2:42:83:89:b7:4b:31:4f:e5:75:df:cd:d3:bb: 2c:75:eb:7a:e6:f1:0d:7e:af:a7:4e:1c:86:22:0e:a9:a0:43: cb:02:f1:05:ce:15:ef:ce:ca:d6:ea:0f:3a:c1:be:f7:2f:b2: ab:ad:1d:50:46:2e:be:03:87:f6:0b:f4:84:10:4d:da:81:54: 9d:0f:e2:3b:c6:a8:f3:3a:b1:6d:4b:c3:95:78:7a:03:d0:f3: 4c:a8:65:4c:26:06:75:95:36:91:66:96:82:59:7b:fd:29:54: ac:47:7c:45:32:58:e9:af:98:65:96:6e:3b:00:e0:94:b9:62: ae:5a:1d:6e:cf:10:e8:02:85:58:8c:d4:de:00:09:2f:24:df: bf:12:c6:d7:b8:8a:56:54:98:ef:58:24:f7:bb:3f:a4:02:59: 6b:67:bc:4d:09:bf:42:d8:81:f7:21:18:71:ad:3c:33:43:60: 95:3e:df:74:d4:a5:38:68:4e:e0:8f:ad:e1:c8:6a:df:98:db: e5:8f:83:cb -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NDExMC8GA1UEBRMoODAwNzE3NjVFOThCMzk2MTI1ODhEMzc4NTcyMTQzMkMz MjYwN0ZFRTAeFw0yNjAzMjUwNzE2MzhaFw0yNjA0MDEwNzE2MzhaMBgxFjAUBgNV BAMTDTY5YzM4YmQ2LTE5ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2Mhib2lKLdd+jB0o0wMsxaLzdU2GUJpwqfE1NOSUdlz88Cm8eVWuujz5aYwHB RktG9Nz53G5Snu2gcJP5vDjCBuFswi0T/ieoBCM3SEQLaCcjwhJRSWBkSZSBPhmf Wcdt+ysRgZy3T1qZek7/OjZbN585RUeDGDJW+9KiUKOjJmR2VoCiWnGhRGX9SzaT 7d1dVPEH9YAe34iMie0t3VME988PdyOEoFoT3kuRNiu8RqvR/qet736a8rX4HkyP f36l6SsU6yFkjz292r6jlW3ly4MDoCIA4GpiKkIXzLLEbBMwiO97VBC/uUXfSaaO m/KLqZkLPQOE5iUwk9D0r0i1AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU98Sk6KCn XYEzxzr1YY+bO0x6UxkwHwYDVR0jBBgwFoAUgAcXZemLOWEliNN4VyFDLDJgf+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg0L0ZGRjgwMjE4OURB ODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2Yt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ0FjWFplbUxPV0VsaU5ONFZ5RkRMREpnZi00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTg0L0ZGRjgwMjE4OURBODExRjBBRURBM0YzQUM0RjlBRTAyL2dBY1haZW1MT1dF bGlOTjRWeUZETERKZ2YtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBTXT9g7TiPZ/M/C/LhjJ7QqZbnflPAFm2hKSBZBKuPu/XlUKUgUFWct0N7MoYZ b8+NBollK+X/dW3l8kKDibdLMU/ldd/N07ssdet65vENfq+nThyGIg6poEPLAvEF zhXvzsrW6g86wb73L7KrrR1QRi6+A4f2C/SEEE3agVSdD+I7xqjzOrFtS8OVeHoD 0PNMqGVMJgZ1lTaRZpaCWXv9KVSsR3xFMljpr5hllm47AOCUuWKuWh1uzxDoAoVY jNTeAAkvJN+/EsbXuIpWVJjvWCT3uz+kAllrZ7xNCb9C2IH3IRhxrTwzQ2CVPt90 1KU4aE7gj63hyGrfmNvlj4PL -----END CERTIFICATE-----Generated at Thu Mar 26 00:48:04 2026 by rpki-client