$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: /t/MGDJY5LtgEsh+5pFxFIDqZhthZOAsPZ8Y1XhM4Qw= Subject key identifier: 6B:EC:CA:F2:2B:3A:37:F7:AB:1F:E1:20:A9:C6:D7:85:0B:FA:E2:A4 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 085F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 084F Signing time: Tue 24 Mar 2026 20:33:20 +0000 Manifest this update: Tue 24 Mar 2026 20:33:19 +0000 Manifest next update: Tue 31 Mar 2026 20:33:19 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: bedzs9LjXB61SyZJ3r4EQrAQyZuE9V0EBxSf/4tgyQU=) 2: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=) 3: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2143 (0x85f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: Mar 24 20:33:19 2026 GMT Not After : Mar 31 20:33:19 2026 GMT Subject: CN=69c2f510-a1c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ab:90:f9:00:b7:4a:09:16:e0:d9:26:ec:61: 0f:75:f7:3a:ee:59:6d:2f:bd:a1:3f:f7:db:d2:e2: b4:4c:7f:22:ca:45:97:f7:35:6b:f6:18:e6:a8:42: b6:93:1a:f9:0c:10:b7:27:2f:6a:b8:fa:1a:12:25: c9:61:c3:a9:ad:ed:dc:c8:ae:07:68:c1:49:07:57: 68:34:3c:e7:5c:1a:23:e1:4c:c0:ef:f0:74:3a:8b: d1:01:6f:29:c8:2f:14:fd:e3:a7:d1:e3:7c:b1:bd: 28:1f:a2:4c:65:c1:fb:2e:51:46:c2:18:aa:e2:5f: f2:40:a9:49:e3:d8:95:7b:fd:10:27:ce:be:e0:bb: fd:f1:9d:a3:95:2e:d2:e1:02:7b:76:d6:ec:b0:ce: cb:63:55:74:8b:50:ac:48:49:67:dd:e5:87:32:21: 57:f2:3d:35:c8:b4:80:4a:ac:3b:99:57:93:20:34: 98:b5:21:34:07:db:dd:44:cc:6d:a0:5f:7d:a9:1c: 67:42:49:9d:fa:37:a6:40:ae:fc:95:a1:da:21:82: 91:45:d9:a7:8c:eb:8a:45:53:41:26:83:23:69:44: f0:4e:39:14:e0:ca:7d:df:ed:60:2e:f8:7b:22:20: 7f:0a:60:12:57:94:54:43:ed:71:36:69:7a:7d:da: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EC:CA:F2:2B:3A:37:F7:AB:1F:E1:20:A9:C6:D7:85:0B:FA:E2:A4 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c4:8e:d6:2f:9f:e7:de:11:1b:26:43:88:7d:a9:c0:75:c7: e5:61:dc:63:78:4d:a7:f3:ee:e3:b8:39:ab:b6:1d:bd:0b:54: c6:5e:fa:d0:ac:91:a6:3d:09:2a:f6:60:19:90:31:fa:de:99: f5:b0:ac:11:d1:f3:32:23:06:e9:00:c9:e5:0f:92:c1:f0:1e: fb:fd:f6:38:93:12:e6:dc:63:2d:a2:5e:a3:70:8b:a3:e2:72: 02:87:f2:5a:12:e9:6e:44:6c:b3:7c:60:7a:e9:85:f7:ee:68: 5d:0c:e1:72:89:77:97:67:56:03:00:18:6f:e6:ed:a8:7a:96: 0a:59:fa:53:fe:52:23:cc:cb:2a:3c:89:c2:3f:8f:24:a8:6c: f7:8a:d8:72:25:f8:14:1f:63:97:23:83:4a:03:71:24:b9:22: 3e:fa:88:d3:bc:bd:9a:6a:74:e0:bf:da:cb:2c:2d:35:07:82: 3c:0f:e2:3d:d7:a4:80:d5:fa:e3:8f:d3:39:da:56:b2:90:de: 3c:55:5f:ec:65:d5:fa:db:ee:35:d8:88:05:5e:32:51:3e:bb: 1d:5b:20:2e:b3:af:d7:19:bc:15:25:fa:47:3b:47:f9:f2:99: 27:5f:3a:e0:54:fa:cb:57:a5:77:9f:36:e3:1d:86:0d:66:28: 4f:c5:49:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjYwMzI0MjAzMzE5WhcNMjYwMzMxMjAzMzE5WjAYMRYwFAYD VQQDEw02OWMyZjUxMC1hMWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA96uQ+QC3SgkW4Nkm7GEPdfc67lltL72hP/fb0uK0TH8iykWX9zVr9hjmqEK2 kxr5DBC3Jy9quPoaEiXJYcOpre3cyK4HaMFJB1doNDznXBoj4UzA7/B0OovRAW8p yC8U/eOn0eN8sb0oH6JMZcH7LlFGwhiq4l/yQKlJ49iVe/0QJ86+4Lv98Z2jlS7S 4QJ7dtbssM7LY1V0i1CsSEln3eWHMiFX8j01yLSASqw7mVeTIDSYtSE0B9vdRMxt oF99qRxnQkmd+jemQK78laHaIYKRRdmnjOuKRVNBJoMjaUTwTjkU4Mp93+1gLvh7 IiB/CmASV5RUQ+1xNml6fdr8FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvsyvIr Ojf3qx/hIKnG14UL+uKkMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARsSO1i+f594RGyZDiH2pwHXH5WHcY3hNp/Pu47g5q7YdvQtUxl760KyRpj0J KvZgGZAx+t6Z9bCsEdHzMiMG6QDJ5Q+SwfAe+/32OJMS5txjLaJeo3CLo+JyAofy WhLpbkRss3xgeumF9+5oXQzhcol3l2dWAwAYb+btqHqWCln6U/5SI8zLKjyJwj+P JKhs94rYciX4FB9jlyODSgNxJLkiPvqI07y9mmp04L/ayywtNQeCPA/iPdekgNX6 44/TOdpWspDePFVf7GXV+tvuNdiIBV4yUT67HVsgLrOv1xm8FSX6RztH+fKZJ186 4FT6y1eld5824x2GDWYoT8VJTg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:38:28 2026 by rpki-client