$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft File: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft (raw, json) Hash identifier: bcfYLQQmD7QEVCtwxEwGeBA9tOTgOoJJkZURHQPGl8s= Subject key identifier: D7:7B:53:74:35:A6:7E:49:E0:3F:38:11:B4:29:90:58:7F:10:A4:B4 Authority key identifier: 82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A Certificate issuer: /CN=A911DF8A/serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft Manifest number: 042B Signing time: Wed 25 Mar 2026 00:02:14 +0000 Manifest this update: Wed 25 Mar 2026 00:02:13 +0000 Manifest next update: Wed 01 Apr 2026 00:02:13 +0000 Files and hashes: 1: gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl (hash: nT1TUQPZkyGQYJLmbnnSTgf3opYoM2B96cIjvu+F168=) 2: 7D1E4382F7E111F09133AC30656F56BC.roa (hash: zNF2ygfhhND/uBTDhIyFRkeFn/MaMe2JQ58piW9rdw0=) 3: 7CA73BD4F7E111F09133AC30656F56BC.roa (hash: lrf8090retSGwJwGuDcCx3aFLrFcPfdjin1o0PlkDcA=) 4: 7C17299AF7E111F09133AC30656F56BC.roa (hash: t296rVU/xx7eKuOhP3U3tbmVD7byq5VC6ECxFEqQnZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF8A, serialNumber=826007A4E3D14BB0B509BB969845D01EB809DD7A Validity Not Before: Mar 25 00:02:13 2026 GMT Not After : Apr 1 00:02:13 2026 GMT Subject: CN=69c32606-11e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3b:8a:9b:0a:2f:61:be:fe:dc:da:66:6f:1e: b7:a9:7a:dc:e9:a4:c5:fd:b1:1f:f1:dc:a7:ff:f5: 67:a1:c6:cc:c9:a7:31:3f:e5:a9:d3:d5:7f:67:45: 71:9c:97:58:66:2a:f1:2b:59:13:1e:ac:a0:b9:e7: 49:55:9b:bf:8e:f7:a0:f2:62:7e:39:d7:e3:86:00: 04:97:b6:6e:63:c1:a2:88:7a:5a:df:bd:9d:95:b6: e8:26:11:6f:59:93:ff:f5:dd:2c:52:fc:58:0c:2c: 9d:6a:22:f9:9b:22:72:46:04:8d:43:ce:a2:b7:36: 3d:df:a7:90:20:94:f3:f0:4b:b5:cb:47:e9:7c:ac: b0:4e:9f:7e:f0:8c:d1:65:5c:52:65:f3:4c:4e:55: 80:91:47:c8:fb:96:1f:ae:92:52:ee:40:7c:f0:d1: b0:b7:0f:99:26:12:bb:dc:fe:1f:17:54:39:e7:53: 94:ac:a1:3e:c1:8f:70:f4:ea:e8:3e:1f:57:1a:6f: 7e:59:5f:e4:31:0f:99:fa:98:6c:3b:d0:e4:fb:5f: 74:7f:fd:7e:48:da:7c:a4:de:3f:5b:7d:8e:42:fd: 31:b3:a9:b6:e4:81:18:10:0f:d6:12:4a:6f:ec:f7: e2:fb:19:39:a1:51:4a:c2:43:86:f1:84:9a:9d:cc: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:53:74:35:A6:7E:49:E0:3F:38:11:B4:29:90:58:7F:10:A4:B4 X509v3 Authority Key Identifier: keyid:82:60:07:A4:E3:D1:4B:B0:B5:09:BB:96:98:45:D0:1E:B8:09:DD:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF8A/3553CFAAA37F11EC92D6FA5EC4F9AE02/gmAHpOPRS7C1CbuWmEXQHrgJ3Xo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:80:9c:4a:ee:80:13:2c:62:35:57:1b:29:27:5f:e4:75:05: 14:b9:a7:40:fd:cb:45:d5:c8:fd:00:f6:e0:e8:0a:15:e3:6d: 17:86:07:9c:1e:0c:2a:7d:98:3f:db:ea:56:36:35:95:39:3a: 29:3d:4b:71:d4:8a:73:aa:fd:ef:c1:54:6b:37:40:ee:be:b4: 61:34:a1:59:a9:2b:92:ec:66:fd:65:22:2b:6e:3f:fc:60:56: c1:dc:e1:ba:f6:a5:bf:62:42:3f:0d:47:05:5d:a6:aa:95:89: 6b:6c:68:d5:28:d0:23:88:3a:b4:7d:8f:13:e0:02:25:54:cc: 41:37:51:9a:94:43:c1:ac:59:d6:c4:81:e6:23:b2:94:4b:42: dd:6b:a3:e8:07:62:48:0a:7b:65:5f:f1:bf:fa:11:1f:b1:1c: b3:97:2b:56:40:70:90:aa:d3:da:86:0e:2c:a3:b0:d9:75:e3: c6:7a:fe:89:90:15:61:f3:73:ff:f3:4e:2b:85:50:87:56:18: b4:d9:42:ac:11:a6:51:4d:bc:26:92:32:7b:52:81:18:e2:30: 89:19:fd:5b:89:3c:cc:9e:85:54:ee:8c:27:3b:04:40:62:28: b6:60:9a:be:b4:59:f9:78:e1:d5:c0:ce:3a:00:f8:fc:c5:5c: 04:c2:2d:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURGOEExMTAvBgNVBAUTKDgyNjAwN0E0RTNEMTRCQjBCNTA5QkI5Njk4NDVEMDFF QjgwOUREN0EwHhcNMjYwMzI1MDAwMjEzWhcNMjYwNDAxMDAwMjEzWjAYMRYwFAYD VQQDEw02OWMzMjYwNi0xMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmDuKmwovYb7+3Npmbx63qXrc6aTF/bEf8dyn//VnocbMyacxP+Wp09V/Z0Vx nJdYZirxK1kTHqyguedJVZu/jveg8mJ+OdfjhgAEl7ZuY8GiiHpa372dlbboJhFv WZP/9d0sUvxYDCydaiL5myJyRgSNQ86itzY936eQIJTz8Eu1y0fpfKywTp9+8IzR ZVxSZfNMTlWAkUfI+5YfrpJS7kB88NGwtw+ZJhK73P4fF1Q551OUrKE+wY9w9Oro Ph9XGm9+WV/kMQ+Z+phsO9Dk+190f/1+SNp8pN4/W32OQv0xs6m25IEYEA/WEkpv 7Pfi+xk5oVFKwkOG8YSancwpnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNd7U3Q1 pn5J4D84EbQpkFh/EKS0MB8GA1UdIwQYMBaAFIJgB6Tj0UuwtQm7lphF0B64Cd16 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREY4QS8zNTUzQ0ZBQUEz N0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3QzFDYnVXbUVYUUhyZ0oz WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dtQUhwT1BSUzdDMUNidVdtRVhRSHJnSjNYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REY4QS8zNTUzQ0ZBQUEzN0YxMUVDOTJENkZBNUVDNEY5QUUwMi9nbUFIcE9QUlM3 QzFDYnVXbUVYUUhyZ0ozWG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO4CcSu6AEyxiNVcbKSdf5HUFFLmnQP3LRdXI/QD24OgKFeNtF4YHnB4MKn2Y P9vqVjY1lTk6KT1LcdSKc6r978FUazdA7r60YTShWakrkuxm/WUiK24//GBWwdzh uvalv2JCPw1HBV2mqpWJa2xo1SjQI4g6tH2PE+ACJVTMQTdRmpRDwaxZ1sSB5iOy lEtC3Wuj6AdiSAp7ZV/xv/oRH7Ecs5crVkBwkKrT2oYOLKOw2XXjxnr+iZAVYfNz //NOK4VQh1YYtNlCrBGmUU28JpIye1KBGOIwiRn9W4k8zJ6FVO6MJzsEQGIotmCa vrRZ+Xjh1cDOOgD4/MVcBMItnQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:42 2026 by rpki-client