$ rpki-client -vvf rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft File: GHdbe2us8oHq7XjadoaGguUxsfA.mft (raw, json) Hash identifier: oRydneoSjRWU+wFIw+TXClnd19VkI6y0QTCzaIyO0yw= Subject key identifier: 8D:89:F3:DD:03:33:88:E7:3B:6C:06:E9:1C:73:CB:66:D8:3F:A7:42 Authority key identifier: 18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 Certificate issuer: /CN=A9115A98/serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Certificate serial: 10C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft Manifest number: 10B7 Signing time: Thu 26 Mar 2026 17:17:18 +0000 Manifest this update: Thu 26 Mar 2026 17:17:18 +0000 Manifest next update: Thu 02 Apr 2026 17:17:18 +0000 Files and hashes: 1: GHdbe2us8oHq7XjadoaGguUxsfA.crl (hash: eQV2OdeS0A9fqgQlIGcvkTpi/tAzh/TpYENnUyYcyTQ=) 2: 6CE4307243AB11E98FAE6F0AC4F9AE02.roa (hash: HxPDHKbAptGURrp1VPcHC1Bsg9OYOIPrENYm1X1q9Hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4290 (0x10c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115A98, serialNumber=18775B7B6BACF281EAED78DA76868682E531B1F0 Validity Not Before: Mar 26 17:17:18 2026 GMT Not After : Apr 2 17:17:18 2026 GMT Subject: CN=69c56a1e-d89b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:d2:91:b3:76:35:49:2c:96:0a:df:f6:3f: 69:d3:ed:dc:de:2f:33:e8:61:4c:6c:6f:3d:3f:6b: 9f:9b:e4:cb:cf:a4:d8:5e:f4:76:44:67:93:fb:54: 44:87:20:39:6d:20:db:f5:cb:4a:07:c9:bd:44:96: 37:75:32:ba:e9:b7:79:38:5b:d7:d8:1b:d1:43:a0: 80:70:ba:44:f0:57:c3:d0:d3:05:f4:21:de:58:ae: 60:48:6a:42:d4:04:d1:a9:22:c4:79:24:e6:5f:4a: 79:13:08:e6:7d:0c:0e:e0:4f:e7:dc:ee:f4:8e:dd: 6b:be:f2:ed:b5:7a:02:de:96:c8:e3:54:9f:5a:06: 87:b1:db:03:2c:fc:d5:da:d7:30:06:bd:45:08:42: 3f:a3:1a:75:d6:01:7e:ca:73:43:c7:e4:1f:52:6c: b0:1c:ee:30:1e:79:14:6c:4b:01:56:c1:5d:16:92: ef:63:d1:77:ea:4e:48:06:bc:2a:0f:99:1d:06:d5: e9:27:66:00:c2:4c:72:b9:36:3e:6d:48:34:45:a5: 4a:65:24:b3:18:8e:e7:40:8d:0f:44:2a:0c:da:0e: 56:0b:40:05:24:e6:e8:6b:2f:53:57:5d:53:10:88: ba:68:bf:96:be:ee:56:76:c1:7f:f1:00:96:0b:ea: 64:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:89:F3:DD:03:33:88:E7:3B:6C:06:E9:1C:73:CB:66:D8:3F:A7:42 X509v3 Authority Key Identifier: keyid:18:77:5B:7B:6B:AC:F2:81:EA:ED:78:DA:76:86:86:82:E5:31:B1:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHdbe2us8oHq7XjadoaGguUxsfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115A98/323EC4D443A911E9A6C47D84C4F9AE02/GHdbe2us8oHq7XjadoaGguUxsfA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:71:21:53:90:4c:46:47:6e:c1:2e:39:ef:06:7a:8e:7f:98: 73:ed:dc:b3:d0:d4:47:14:fc:ff:89:8a:f3:b0:40:e7:1a:ab: 53:bd:cd:03:9d:3d:00:f6:77:77:9d:c9:67:b5:d4:2f:74:ed: 1a:8b:8c:3c:bf:b3:1b:d5:2a:45:27:a3:a5:94:10:fe:9e:f5: af:16:2d:7e:f2:8e:46:0d:a0:00:a6:34:3a:43:81:6f:d9:80: be:f4:35:2d:f3:a9:c5:5f:96:73:0a:03:09:25:eb:a4:6f:6a: cb:00:bc:9e:0e:99:c3:cc:72:54:f7:77:af:5c:f5:be:0c:ab: b8:b0:08:22:44:29:a9:7b:c1:f5:c7:23:d9:45:74:d4:fb:45: 3e:76:bc:88:95:10:e0:4c:46:52:2e:ff:44:df:2b:98:fc:e0: 2a:f7:60:08:81:a1:88:20:8e:0c:28:0f:99:dc:d2:ee:cd:47: 00:0e:e1:ba:60:79:6c:7a:69:47:5e:0a:be:ed:d3:b1:c3:a2: 83:89:7e:f5:04:a1:79:43:63:19:1c:1a:77:0a:36:1d:19:9a: be:3f:08:a1:42:8b:c2:6d:10:98:62:07:45:ea:45:4b:c6:58: 33:e7:31:35:d1:8d:a1:e4:df:de:a2:af:d6:02:21:65:68:85: 0e:a9:7d:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVBOTgxMTAvBgNVBAUTKDE4Nzc1QjdCNkJBQ0YyODFFQUVENzhEQTc2ODY4Njgy RTUzMUIxRjAwHhcNMjYwMzI2MTcxNzE4WhcNMjYwNDAyMTcxNzE4WjAYMRYwFAYD VQQDEw02OWM1NmExZS1kODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUHSkbN2NUkslgrf9j9p0+3c3i8z6GFMbG89P2ufm+TLz6TYXvR2RGeT+1RE hyA5bSDb9ctKB8m9RJY3dTK66bd5OFvX2BvRQ6CAcLpE8FfD0NMF9CHeWK5gSGpC 1ATRqSLEeSTmX0p5EwjmfQwO4E/n3O70jt1rvvLttXoC3pbI41SfWgaHsdsDLPzV 2tcwBr1FCEI/oxp11gF+ynNDx+QfUmywHO4wHnkUbEsBVsFdFpLvY9F36k5IBrwq D5kdBtXpJ2YAwkxyuTY+bUg0RaVKZSSzGI7nQI0PRCoM2g5WC0AFJOboay9TV11T EIi6aL+Wvu5WdsF/8QCWC+pktQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2J890D M4jnO2wG6Rxzy2bYP6dCMB8GA1UdIwQYMBaAFBh3W3trrPKB6u142naGhoLlMbHw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUE5OC8zMjNFQzRENDQz QTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhvSHE3WGphZG9hR2d1VXhz ZkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dIZGJlMnVzOG9IcTdYamFkb2FHZ3VVeHNmQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUE5OC8zMjNFQzRENDQzQTkxMUU5QTZDNDdEODRDNEY5QUUwMi9HSGRiZTJ1czhv SHE3WGphZG9hR2d1VXhzZkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASnEhU5BMRkduwS457wZ6jn+Yc+3cs9DURxT8/4mK87BA5xqrU73NA509APZ3 d53JZ7XUL3TtGouMPL+zG9UqRSejpZQQ/p71rxYtfvKORg2gAKY0OkOBb9mAvvQ1 LfOpxV+WcwoDCSXrpG9qywC8ng6Zw8xyVPd3r1z1vgyruLAIIkQpqXvB9ccj2UV0 1PtFPna8iJUQ4ExGUi7/RN8rmPzgKvdgCIGhiCCODCgPmdzS7s1HAA7humB5bHpp R14Kvu3TscOig4l+9QSheUNjGRwadwo2HRmavj8IoUKLwm0QmGIHRepFS8ZYM+cx NdGNoeTf3qKv1gIhZWiFDql9tg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:41 2026 by rpki-client