$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: FJXpcBnDX/2lzD7amNI1iUob9OMsq8fcKZL3b/No7tk= Subject key identifier: 5D:2D:89:04:72:07:EC:F2:B2:B0:96:9B:CB:8E:70:73:2B:67:E9:92 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DC8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0DA7 Signing time: Thu 26 Mar 2026 17:52:33 +0000 Manifest this update: Thu 26 Mar 2026 17:52:33 +0000 Manifest next update: Thu 02 Apr 2026 17:52:33 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: RTG5Ky1MeeNLnXs5664QsFiDgusPrI0ZA6eUyOAlTxQ=) 2: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: ygQB2y8hsTLzbf5SF7WCvYfKunhmdLdBTxW0WpljHeM=) 3: 677F3316E02711E9AB669750C4F9AE02.roa (hash: ULb7MnuSpC+RNv8YH7wBDdLNbPZxB2oAuIx44Pnr+I8=) 4: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: GtQoqjQUirpvjAYOKzxLFZEEug+qoArWCD33oXD/Vgw=) 5: 749B738AF28F11F095D4F2986B6F56BC.roa (hash: KEcoT61kbpKYaqHWHrY20ixUYzmALZ1uWpR1U4eKh3Y=) 6: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 21I1lPOhCB6OoTCDKwmnVs4XWHIQNSrXN0TNGGcuqdQ=) 7: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: wI1y6ntLsUWaWyufcxzOljo2NrfksupJylZSnJ7IKS8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3528 (0xdc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Mar 26 17:52:33 2026 GMT Not After : Apr 2 17:52:33 2026 GMT Subject: CN=69c57261-45aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:0f:13:1b:06:ef:b0:3e:12:ee:dc:5e:e5: 62:10:88:f4:90:a1:79:a9:43:3b:54:79:43:3e:1b: e9:e4:19:b4:54:cd:a1:85:a7:f0:5c:20:d8:03:6a: 5e:a9:59:f9:71:68:8f:d6:a1:b4:24:f7:86:a1:01: 9b:b1:72:cb:af:fc:7b:15:72:52:88:e0:ef:ad:c9: 32:83:82:0a:e5:f0:af:ec:97:2e:7a:ec:3d:fb:a3: 48:42:c1:46:95:48:06:fa:69:58:2b:fe:41:04:0a: e4:2b:1c:98:27:d6:3d:12:ac:f7:41:dd:a2:e7:85: fd:d2:ef:36:50:23:d3:ea:6c:6f:7b:8d:82:c6:ee: 15:b9:f6:39:06:2f:e7:6b:38:c7:6a:d1:ff:ce:cd: 56:dc:91:bd:bd:32:0f:f2:0f:2b:c2:1c:9d:88:c4: 5e:6f:66:5e:10:8f:48:10:33:68:64:1c:90:27:b2: ae:89:1a:75:e9:94:e0:a2:a9:bd:62:2e:3d:f4:8d: 1c:7a:92:de:fa:96:5a:e5:1b:d0:96:b5:93:89:80: 75:aa:2a:fc:ec:c2:98:37:5b:8b:9e:41:97:6a:09: c7:b2:23:08:d1:dc:29:2f:9f:51:6a:8e:74:e1:43: 48:60:cc:41:c5:32:cf:9e:e1:3b:3e:10:fa:68:78: cb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2D:89:04:72:07:EC:F2:B2:B0:96:9B:CB:8E:70:73:2B:67:E9:92 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:dc:cb:1a:43:95:f0:9b:96:63:47:bf:41:93:13:9d:03:99: 66:73:2d:e1:68:d1:74:e0:22:d1:ef:65:31:5a:e6:09:5f:1a: 87:2e:10:8a:bc:22:12:4d:f8:f0:2d:fc:98:22:e2:a6:79:73: ca:0e:47:21:04:e3:23:bf:7a:8f:c3:d6:c9:c9:30:bf:6e:0f: d5:13:f4:f2:a7:31:2f:36:a4:7a:d1:90:0f:e7:36:6c:0c:1f: 49:a0:e6:fd:c3:05:39:d7:b3:cd:cf:60:e0:6f:3b:35:37:04: ff:11:9d:a9:3d:49:31:63:92:f0:68:f2:cd:aa:c2:1c:88:ce: ff:e5:35:29:12:2d:04:3c:5b:92:06:a1:87:5a:8e:d7:7f:97: 13:ba:08:63:2a:24:ac:70:e7:25:2c:b6:51:cf:91:9c:f1:a8: 13:3b:26:4e:3b:25:e2:50:e2:45:01:42:58:af:48:be:e4:da: bc:a6:b7:60:fc:c3:a4:ba:81:74:01:82:c2:31:03:fc:d9:4f: ad:32:81:37:ff:c2:3e:cb:98:38:3b:25:ff:96:c3:a4:89:4a: 3b:45:79:dd:65:74:d0:42:bf:df:93:51:5f:98:18:09:c3:f1: 7d:6d:b6:57:59:74:58:fa:90:0e:9d:8e:bc:3e:e3:b7:f5:7d: aa:0b:45:a1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwMzI2MTc1MjMzWhcNMjYwNDAyMTc1MjMzWjAYMRYwFAYD VQQDEw02OWM1NzI2MS00NWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsn0PExsG77A+Eu7cXuViEIj0kKF5qUM7VHlDPhvp5Bm0VM2hhafwXCDYA2pe qVn5cWiP1qG0JPeGoQGbsXLLr/x7FXJSiODvrckyg4IK5fCv7Jcueuw9+6NIQsFG lUgG+mlYK/5BBArkKxyYJ9Y9Eqz3Qd2i54X90u82UCPT6mxve42Cxu4VufY5Bi/n azjHatH/zs1W3JG9vTIP8g8rwhydiMReb2ZeEI9IEDNoZByQJ7KuiRp16ZTgoqm9 Yi499I0cepLe+pZa5RvQlrWTiYB1qir87MKYN1uLnkGXagnHsiMI0dwpL59Rao50 4UNIYMxBxTLPnuE7PhD6aHjLywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF0tiQRy B+zysrCWm8uOcHMrZ+mSMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm9zLGkOV8JuWY0e/QZMTnQOZZnMt4WjRdOAi0e9lMVrmCV8ahy4QirwiEk34 8C38mCLipnlzyg5HIQTjI796j8PWyckwv24P1RP08qcxLzaketGQD+c2bAwfSaDm /cMFOdezzc9g4G87NTcE/xGdqT1JMWOS8GjyzarCHIjO/+U1KRItBDxbkgahh1qO 13+XE7oIYyokrHDnJSy2Uc+RnPGoEzsmTjsl4lDiRQFCWK9IvuTavKa3YPzDpLqB dAGCwjED/NlPrTKBN//CPsuYODsl/5bDpIlKO0V53WV00EK/35NRX5gYCcPxfW22 V1l0WPqQDp2OvD7jt/V9qgtFoQ== -----END CERTIFICATE-----Generated at Fri Mar 27 04:10:09 2026 by rpki-client