$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: UoF0xpul6GP+KQjlc7mt72SLlOWkSBUKZNZHXR6u4zU= Subject key identifier: 02:FC:48:A9:E3:39:15:91:F2:13:DF:83:FD:C5:37:43:35:12:62:A2 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0DA6 Signing time: Tue 24 Mar 2026 17:47:50 +0000 Manifest this update: Tue 24 Mar 2026 17:47:50 +0000 Manifest next update: Tue 31 Mar 2026 17:47:50 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: Y1MALyu3okXEng9d3igeDokdlnCv7s7N3KspoD/XBvY=) 2: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: GtQoqjQUirpvjAYOKzxLFZEEug+qoArWCD33oXD/Vgw=) 3: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: ygQB2y8hsTLzbf5SF7WCvYfKunhmdLdBTxW0WpljHeM=) 4: 677F3316E02711E9AB669750C4F9AE02.roa (hash: ULb7MnuSpC+RNv8YH7wBDdLNbPZxB2oAuIx44Pnr+I8=) 5: 749B738AF28F11F095D4F2986B6F56BC.roa (hash: KEcoT61kbpKYaqHWHrY20ixUYzmALZ1uWpR1U4eKh3Y=) 6: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: wI1y6ntLsUWaWyufcxzOljo2NrfksupJylZSnJ7IKS8=) 7: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 21I1lPOhCB6OoTCDKwmnVs4XWHIQNSrXN0TNGGcuqdQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3527 (0xdc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Mar 24 17:47:50 2026 GMT Not After : Mar 31 17:47:50 2026 GMT Subject: CN=69c2ce46-c833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:cc:c2:d7:b0:ac:cf:c4:af:08:9f:62:ad:4e: d8:7b:aa:f9:af:29:9d:b0:bc:9e:00:54:c9:59:e5: 97:64:ce:ed:c6:d0:d2:1a:a8:64:b0:7e:a4:aa:4e: 66:57:75:98:fb:02:f0:2f:d0:13:9f:1e:a0:6f:34: 29:78:10:76:97:7e:a5:1a:44:13:7a:6b:46:82:12: 22:02:d1:13:51:96:28:17:04:bc:e6:58:75:31:b7: 1a:45:f7:41:5e:b5:fb:86:21:1f:b2:8f:e4:86:4a: 74:d1:69:c7:7f:67:3e:f4:3f:22:a8:34:a3:3a:a4: bb:5b:b1:e5:2f:bd:18:bc:b5:c9:d6:65:58:a3:bb: 51:a0:7b:ea:4b:90:79:0e:45:01:a6:40:9c:53:df: bf:e2:00:a6:c7:fc:7e:df:21:3b:2d:6b:25:b4:4d: 21:32:9b:6a:73:4e:31:37:70:10:ef:ef:7e:d0:98: ff:9e:2c:e1:0e:f4:a2:17:58:15:c2:12:48:c7:da: f9:18:30:69:3d:e1:bc:c0:3c:45:76:58:af:dd:18: 10:92:4b:b7:28:b6:e3:be:31:d4:59:80:f1:e4:ca: 83:2b:a4:03:30:1e:e9:73:fa:0a:2a:5a:c0:d7:17: e2:c8:82:f6:4e:e4:93:08:c7:34:c1:79:fc:2e:94: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FC:48:A9:E3:39:15:91:F2:13:DF:83:FD:C5:37:43:35:12:62:A2 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ef:af:f7:31:ea:22:64:7a:50:11:54:69:fe:4c:1b:d0:60: cd:28:ea:e5:08:a4:27:8b:0a:06:8a:3f:22:8d:21:fd:77:8b: 62:56:22:58:74:6e:cd:3c:d6:12:9a:d9:c1:5a:4c:e7:51:be: d4:3a:19:ad:b7:a9:c7:e4:63:18:ae:90:79:5b:54:43:ab:8b: 13:43:b3:70:2c:65:51:de:92:74:a6:85:cb:89:ee:e5:0c:88: ec:6c:63:1d:74:6d:5d:db:77:df:9d:7f:f8:b5:8d:9a:8f:84: 36:6c:9c:51:fe:11:12:8e:62:cf:35:f5:c8:14:0d:ba:c6:67: a5:42:01:c4:8e:f6:0b:55:57:67:59:c2:f5:3e:78:41:6e:2f: 5d:97:bd:81:b7:12:87:af:b6:d1:85:0e:21:85:08:3c:7c:96: 60:d1:51:ee:c1:c1:7b:02:ab:62:45:8a:6a:a3:52:e4:ba:1e: a3:b1:6a:8a:c8:64:b6:02:4a:d0:b6:76:d3:0e:1f:f6:96:22: 7e:b0:50:62:14:dd:cb:d0:bc:6f:dc:9c:eb:8d:b2:0d:07:87: 63:9f:e7:27:47:c9:f1:d2:1f:30:4e:cd:bf:0f:5f:6a:d8:8a: e0:3f:5c:bf:b4:23:74:fb:bb:cc:ec:ce:34:cf:02:73:ad:8b: 93:06:d9:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwMzI0MTc0NzUwWhcNMjYwMzMxMTc0NzUwWjAYMRYwFAYD VQQDEw02OWMyY2U0Ni1jODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7MzC17Csz8SvCJ9irU7Ye6r5rymdsLyeAFTJWeWXZM7txtDSGqhksH6kqk5m V3WY+wLwL9ATnx6gbzQpeBB2l36lGkQTemtGghIiAtETUZYoFwS85lh1MbcaRfdB XrX7hiEfso/khkp00WnHf2c+9D8iqDSjOqS7W7HlL70YvLXJ1mVYo7tRoHvqS5B5 DkUBpkCcU9+/4gCmx/x+3yE7LWsltE0hMptqc04xN3AQ7+9+0Jj/nizhDvSiF1gV whJIx9r5GDBpPeG8wDxFdliv3RgQkku3KLbjvjHUWYDx5MqDK6QDMB7pc/oKKlrA 1xfiyIL2TuSTCMc0wXn8LpS2fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAL8SKnj ORWR8hPfg/3FN0M1EmKiMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ++v9zHqImR6UBFUaf5MG9BgzSjq5QikJ4sKBoo/Io0h/XeLYlYiWHRuzTzW EprZwVpM51G+1DoZrbepx+RjGK6QeVtUQ6uLE0OzcCxlUd6SdKaFy4nu5QyI7Gxj HXRtXdt3351/+LWNmo+ENmycUf4REo5izzX1yBQNusZnpUIBxI72C1VXZ1nC9T54 QW4vXZe9gbcSh6+20YUOIYUIPHyWYNFR7sHBewKrYkWKaqNS5Loeo7FqishktgJK 0LZ20w4f9pYifrBQYhTdy9C8b9yc642yDQeHY5/nJ0fJ8dIfME7Nvw9fatiK4D9c v7QjdPu7zOzONM8Cc62LkwbZFQ== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:12 2026 by rpki-client