$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft File: G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft (raw, json) Hash identifier: fPTLcHbQlXm+bTYOrO6M71mEvi/PTJM47NLIRN8NxH8= Subject key identifier: 9E:1B:09:B0:5C:54:2E:BC:CC:6F:1D:31:CC:1C:62:D8:F2:20:74:8E Authority key identifier: 1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 Certificate issuer: /CN=A911DF56/serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Certificate serial: 8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft Manifest number: 88 Signing time: Wed 25 Mar 2026 06:48:38 +0000 Manifest this update: Wed 25 Mar 2026 06:48:37 +0000 Manifest next update: Wed 01 Apr 2026 06:48:37 +0000 Files and hashes: 1: G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl (hash: WcXPPOhAjuXoAI+HoMZ5VI966FSm45xvPO7IVhXrnOw=) 2: 6D18C6E88FF311F0B3309340C4F9AE02.roa (hash: B/siaUA6CI2wK/uyB8by+8BX4ZeMJoKY29AWKojuWa8=) 3: C31F44C25BD211F0962D6F5BC4F9AE02.roa (hash: eBU/BwClmiFg499xv0HW6a00bR/BPwa7zYSjtYkxkiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=1BD6336B97868C2F54EB3D9478D39E41731D4487 Validity Not Before: Mar 25 06:48:37 2026 GMT Not After : Apr 1 06:48:37 2026 GMT Subject: CN=69c38546-c28e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:34:b1:b2:d0:bc:6b:9c:aa:49:9a:fe:83:b1: 5e:92:dd:b9:4a:22:a5:1d:12:c1:eb:22:17:3c:2d: 97:65:ca:bd:cf:19:9f:b4:5d:7c:70:8e:85:64:b1: e5:d4:d2:a6:3e:21:91:e7:f9:69:f0:b2:10:b6:5e: 3a:20:5d:f6:d5:45:60:62:ff:ae:4d:34:39:eb:90: 98:1a:08:c2:7f:b7:de:71:99:a6:dd:ee:4a:8f:9e: 12:4e:22:38:c5:b8:d9:cd:c5:cb:bc:74:78:4c:33: 61:35:f5:e4:24:42:91:f8:4b:04:0c:97:a9:32:bf: e8:a6:c3:ba:6c:a5:bc:79:03:44:2f:d8:77:d7:a3: cf:e6:4a:bf:05:57:a9:bb:5a:d5:71:9a:ba:c7:41: a6:0c:b8:2c:23:18:30:7f:55:ef:a1:26:02:fe:95: 8e:fe:8a:21:23:c0:e1:33:da:d3:0f:2d:92:1d:06: 8c:44:52:f9:54:92:0e:77:ea:2d:59:65:c7:9f:65: d2:b6:1b:3c:58:86:1b:08:bc:bb:df:37:69:2e:a1: e7:56:0a:3f:0a:51:19:c6:16:fc:a2:b9:fa:e3:a6: b1:16:9b:7f:b5:ab:af:ed:a7:ba:53:24:ec:b7:79: b8:4d:92:61:84:4e:13:7d:f3:e9:0f:5b:65:3e:3c: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:09:B0:5C:54:2E:BC:CC:6F:1D:31:CC:1C:62:D8:F2:20:74:8E X509v3 Authority Key Identifier: keyid:1B:D6:33:6B:97:86:8C:2F:54:EB:3D:94:78:D3:9E:41:73:1D:44:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G9Yza5eGjC9U6z2UeNOeQXMdRIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/6D5E6A545BD211F0B737D45AC4F9AE02/G9Yza5eGjC9U6z2UeNOeQXMdRIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:50:c7:fe:06:f0:1a:ab:67:22:3e:db:10:20:03:a9:ca:98: a2:f2:26:11:3b:d8:ff:62:ac:4f:8e:ac:1b:4f:8a:c1:6f:67: 2c:94:1f:fc:41:3a:6e:ab:d4:4f:a5:3f:f5:3b:b2:a8:bd:30: 74:55:8c:a1:47:3c:b9:c4:fd:66:15:6c:04:f1:4e:94:5a:f9: 90:10:8f:98:77:7d:5e:39:23:27:eb:2b:47:d0:47:18:04:4d: 3a:b5:0f:23:70:84:59:ea:07:67:2f:5c:fe:07:ee:36:eb:c4: 21:9e:d9:3b:c0:ed:cc:bf:08:fb:21:12:2e:9b:85:6b:1a:ea: 9c:08:69:a0:2c:6e:85:2a:8e:29:ce:32:e6:b6:b8:26:19:8c: 67:e4:e6:72:b8:5e:cc:e9:49:a1:49:7e:04:bf:c8:f0:94:11: ac:2c:e8:2f:43:6f:5a:25:6e:dc:72:98:81:54:39:61:ba:01: 00:90:89:1d:d7:cf:24:e6:a4:a3:f3:41:b2:ff:01:22:9b:ee: f7:af:47:91:5e:b3:9b:7b:a3:98:0e:5b:eb:e6:f6:3b:e3:ac: 70:4f:0e:8f:17:81:d9:c8:45:98:94:89:46:f9:4c:cf:c7:4c: 76:ad:25:aa:29:13:b9:85:1d:d2:8d:a2:b6:33:85:ea:e8:6e: 67:a7:00:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGNTYxMTAvBgNVBAUTKDFCRDYzMzZCOTc4NjhDMkY1NEVCM0Q5NDc4RDM5RTQx NzMxRDQ0ODcwHhcNMjYwMzI1MDY0ODM3WhcNMjYwNDAxMDY0ODM3WjAYMRYwFAYD VQQDEw02OWMzODU0Ni1jMjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTSxstC8a5yqSZr+g7Fekt25SiKlHRLB6yIXPC2XZcq9zxmftF18cI6FZLHl 1NKmPiGR5/lp8LIQtl46IF321UVgYv+uTTQ565CYGgjCf7fecZmm3e5Kj54STiI4 xbjZzcXLvHR4TDNhNfXkJEKR+EsEDJepMr/opsO6bKW8eQNEL9h316PP5kq/BVep u1rVcZq6x0GmDLgsIxgwf1XvoSYC/pWO/oohI8DhM9rTDy2SHQaMRFL5VJIOd+ot WWXHn2XSths8WIYbCLy73zdpLqHnVgo/ClEZxhb8orn646axFpt/tauv7ae6UyTs t3m4TZJhhE4TffPpD1tlPjxROwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ4bCbBc VC68zG8dMcwcYtjyIHSOMB8GA1UdIwQYMBaAFBvWM2uXhowvVOs9lHjTnkFzHUSH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY1Ni82RDVFNkE1NDVC RDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pDOVU2ejJVZU5PZVFYTWRS SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0c5WXphNWVHakM5VTZ6MlVlTk9lUVhNZFJJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY1Ni82RDVFNkE1NDVCRDIxMUYwQjczN0Q0NUFDNEY5QUUwMi9HOVl6YTVlR2pD OVU2ejJVZU5PZVFYTWRSSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYVDH/gbwGqtnIj7bECADqcqYovImETvY/2KsT46sG0+KwW9nLJQf/EE6bqvU T6U/9TuyqL0wdFWMoUc8ucT9ZhVsBPFOlFr5kBCPmHd9XjkjJ+srR9BHGARNOrUP I3CEWeoHZy9c/gfuNuvEIZ7ZO8DtzL8I+yESLpuFaxrqnAhpoCxuhSqOKc4y5ra4 JhmMZ+TmcrhezOlJoUl+BL/I8JQRrCzoL0NvWiVu3HKYgVQ5YboBAJCJHdfPJOak o/NBsv8BIpvu969HkV6zm3ujmA5b6+b2O+OscE8OjxeB2chFmJSJRvlMz8dMdq0l qikTuYUd0o2itjOF6uhuZ6cA5g== -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:32 2026 by rpki-client