$ rpki-client -vvf rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft File: G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft (raw, json) Hash identifier: OipA3tySjqy8F4vgoTOKTm7aULr9dKFMjuyGJedoYvY= Subject key identifier: 78:A8:A4:75:1A:75:31:6D:95:11:2B:33:70:D7:A2:E2:59:DD:8B:74 Authority key identifier: 1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 Certificate issuer: /CN=A9117FA3/serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft Manifest number: 0C65 Signing time: Tue 24 Mar 2026 18:30:11 +0000 Manifest this update: Tue 24 Mar 2026 18:30:11 +0000 Manifest next update: Tue 31 Mar 2026 18:30:11 +0000 Files and hashes: 1: G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl (hash: 6VI5t9qdyoddF8mg1lAK5Ut8/enA52WNujVeYyHd4+c=) 2: 53409F861D9C11EAA3FD402FC4F9AE02.roa (hash: +93w0+gECKsPxfT8GgCs4EFDA/kceHJr+UZbAJ/I5oE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:30:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117FA3, serialNumber=1B8212DBF1553C3B761F199E5E05A2D1098DCD47 Validity Not Before: Mar 24 18:30:11 2026 GMT Not After : Mar 31 18:30:11 2026 GMT Subject: CN=69c2d833-d39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dd:4c:21:ec:77:23:70:21:31:a7:d5:ff:7b: b0:0d:7b:dd:c9:52:e2:f4:e1:0d:c3:c5:40:75:e7: 73:44:85:ef:ad:4a:e4:fa:6b:77:a1:e0:f4:82:0d: 1a:1b:db:1c:90:49:23:32:fc:03:20:ba:f9:6a:0d: af:04:39:4f:a6:4b:9a:8d:a0:c1:d5:47:9f:f9:53: 6a:d4:b5:12:96:19:12:8e:fc:33:26:09:df:70:ef: 1b:e3:09:52:56:31:3e:4d:ed:7f:61:95:15:e1:24: 11:aa:09:15:1e:41:62:09:4f:15:60:03:0b:90:b6: e9:88:bf:23:bb:cc:f9:2c:6a:60:c7:d5:4e:80:20: 46:e7:01:3f:66:39:2a:b2:18:60:33:87:2b:71:c6: 6b:f8:5c:29:67:fd:11:59:0d:b5:25:2b:81:44:93: 0d:71:86:7b:85:6c:93:d6:dd:10:b1:37:96:59:44: 84:5a:ab:bc:24:42:88:06:7f:64:67:fe:47:94:6b: 85:41:66:43:20:c0:c1:82:37:72:9d:d7:88:df:50: 03:92:b5:66:40:71:f3:ad:57:c7:6d:59:25:57:cb: 46:94:ff:35:a2:8e:29:29:17:b1:89:87:ce:71:1d: fc:35:13:85:7f:e2:7e:d1:de:b4:ce:16:de:2c:bd: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A8:A4:75:1A:75:31:6D:95:11:2B:33:70:D7:A2:E2:59:DD:8B:74 X509v3 Authority Key Identifier: keyid:1B:82:12:DB:F1:55:3C:3B:76:1F:19:9E:5E:05:A2:D1:09:8D:CD:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4IS2_FVPDt2HxmeXgWi0QmNzUc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117FA3/593073361D9B11EA860ECB2DC4F9AE02/G4IS2_FVPDt2HxmeXgWi0QmNzUc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:88:a8:d8:49:e1:60:8b:80:ec:a0:c3:84:85:75:fe:b6:dd: 9a:e8:ef:aa:04:83:a8:37:72:ec:4d:6f:bd:e1:09:27:4d:1f: c3:65:97:c5:74:d6:f3:8e:ba:f5:a8:6c:87:d4:2c:da:46:8a: 84:f6:83:13:cd:aa:68:a4:ed:5d:2b:bf:be:eb:38:66:60:b2: 3f:31:19:57:c4:04:35:74:c1:7e:0c:d6:f2:ea:72:b8:a9:3e: 2f:39:fa:bf:80:37:33:6c:9d:9d:ba:ca:18:7a:35:00:92:d9: 75:d0:98:5b:1d:8b:fa:9f:e0:0b:20:14:dc:80:1f:bf:5f:72: 41:b3:51:76:ad:47:1e:2d:a4:18:a8:e6:00:b2:8f:12:e0:e3: 77:a4:c4:0f:8d:4b:27:36:e2:92:aa:c4:89:a2:1b:40:5d:ab: e0:74:dc:b0:26:61:c6:91:40:25:ff:c5:d3:0d:a9:18:ad:2f: d4:01:b8:84:e6:f0:f5:b1:62:2b:36:89:09:65:54:c6:42:e5: f3:d3:e4:f8:7b:83:56:d7:6e:29:5a:48:8c:62:95:f1:64:ac: 69:21:19:2c:28:a5:99:55:64:9f:21:cf:45:98:80:31:a0:48: 4f:36:e5:7a:ce:1b:5c:ad:0d:d0:da:a2:05:a1:7c:9b:e7:07: b7:38:ed:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdGQTMxMTAvBgNVBAUTKDFCODIxMkRCRjE1NTNDM0I3NjFGMTk5RTVFMDVBMkQx MDk4RENENDcwHhcNMjYwMzI0MTgzMDExWhcNMjYwMzMxMTgzMDExWjAYMRYwFAYD VQQDEw02OWMyZDgzMy1kMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxN1MIex3I3AhMafV/3uwDXvdyVLi9OENw8VAdedzRIXvrUrk+mt3oeD0gg0a G9sckEkjMvwDILr5ag2vBDlPpkuajaDB1Uef+VNq1LUSlhkSjvwzJgnfcO8b4wlS VjE+Te1/YZUV4SQRqgkVHkFiCU8VYAMLkLbpiL8ju8z5LGpgx9VOgCBG5wE/Zjkq shhgM4crccZr+FwpZ/0RWQ21JSuBRJMNcYZ7hWyT1t0QsTeWWUSEWqu8JEKIBn9k Z/5HlGuFQWZDIMDBgjdyndeI31ADkrVmQHHzrVfHbVklV8tGlP81oo4pKRexiYfO cR38NROFf+J+0d60zhbeLL2fEwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHiopHUa dTFtlRErM3DXouJZ3Yt0MB8GA1UdIwQYMBaAFBuCEtvxVTw7dh8Znl4FotEJjc1H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0ZBMy81OTMwNzMzNjFE OUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBEdDJIeG1lWGdXaTBRbU56 VWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c0SVMyX0ZWUER0Mkh4bWVYZ1dpMFFtTnpVYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx N0ZBMy81OTMwNzMzNjFEOUIxMUVBODYwRUNCMkRDNEY5QUUwMi9HNElTMl9GVlBE dDJIeG1lWGdXaTBRbU56VWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALIio2EnhYIuA7KDDhIV1/rbdmujvqgSDqDdy7E1vveEJJ00fw2WXxXTW8466 9ahsh9Qs2kaKhPaDE82qaKTtXSu/vus4ZmCyPzEZV8QENXTBfgzW8upyuKk+Lzn6 v4A3M2ydnbrKGHo1AJLZddCYWx2L+p/gCyAU3IAfv19yQbNRdq1HHi2kGKjmALKP EuDjd6TED41LJzbikqrEiaIbQF2r4HTcsCZhxpFAJf/F0w2pGK0v1AG4hObw9bFi KzaJCWVUxkLl89Pk+HuDVtduKVpIjGKV8WSsaSEZLCilmVVknyHPRZiAMaBITzbl es4bXK0N0NqiBaF8m+cHtzjt7g== -----END CERTIFICATE-----Generated at Thu Mar 26 04:10:27 2026 by rpki-client