$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft File: g1sFZ9k-rArjJOofFrPDnLGzOI4.mft (raw, json) Hash identifier: hktSmkZTTZ9BkyYfl6viDQrTM8FoQG7roT/LNLQtmxg= Subject key identifier: 88:4E:CD:58:9E:54:E7:1F:08:0A:B4:7C:35:4C:C9:A1:FB:19:4C:F4 Authority key identifier: 83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E Certificate issuer: /CN=A911F5B7/serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Certificate serial: 0B62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft Manifest number: 0D77 Signing time: Tue 24 Mar 2026 19:00:15 +0000 Manifest this update: Tue 24 Mar 2026 19:00:15 +0000 Manifest next update: Tue 31 Mar 2026 19:00:15 +0000 Files and hashes: 1: g1sFZ9k-rArjJOofFrPDnLGzOI4.crl (hash: BsMNcIpDgp+ILovqShVnkJIY3Mjq3aATnuWGXh+iXLc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2914 (0xb62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5B7, serialNumber=835B0567D93EAC0AE324EA1F16B3C39CB1B3388E Validity Not Before: Mar 24 19:00:15 2026 GMT Not After : Mar 31 19:00:15 2026 GMT Subject: CN=69c2df3f-81b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:35:71:77:a1:1f:86:72:e1:dc:be:2b:6a:a8: 5b:d5:42:20:90:79:b8:b6:1d:eb:cc:ba:a5:b3:2f: f5:9a:c7:19:6f:80:7a:df:0e:0b:28:cb:52:65:89: 75:15:ff:ea:5e:76:61:42:e6:71:4e:d0:c8:7b:21: 5f:31:29:f4:95:a9:41:57:08:48:a6:cb:7d:ef:7b: fd:4e:4a:ea:43:c6:d3:34:bd:59:21:a2:0e:1c:7f: 5a:2e:c4:27:d3:e0:b8:89:f2:60:e0:fe:33:3a:cc: 8d:e9:c1:25:0c:98:4c:c3:ca:6c:ac:0f:56:f1:1b: 6e:5b:b3:f0:9f:8d:8e:65:f8:c9:94:f7:ce:1c:2f: 58:58:60:49:47:30:a3:1e:67:07:85:5f:a7:58:70: f8:75:d7:3c:88:54:07:c0:50:61:4f:6a:d5:52:2e: 9b:91:b9:8d:74:dc:4c:0f:31:10:3a:99:65:9a:9c: e5:60:29:ca:da:b3:da:34:7a:98:60:0b:5d:e4:d8: 5b:ff:43:7c:1c:42:d1:a2:68:85:63:24:17:6f:4c: 26:14:9a:7f:26:76:0e:e4:a2:10:df:84:45:12:79: 59:57:8f:b3:ff:66:bd:fe:64:b9:7b:10:dc:31:80: 73:8f:84:49:00:48:f7:bc:08:ad:aa:1d:e9:96:2e: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:CD:58:9E:54:E7:1F:08:0A:B4:7C:35:4C:C9:A1:FB:19:4C:F4 X509v3 Authority Key Identifier: keyid:83:5B:05:67:D9:3E:AC:0A:E3:24:EA:1F:16:B3:C3:9C:B1:B3:38:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1sFZ9k-rArjJOofFrPDnLGzOI4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/g1sFZ9k-rArjJOofFrPDnLGzOI4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:89:af:86:d4:c0:63:4b:91:7b:f3:35:0c:d8:e2:90:68:eb: 1b:54:a9:8e:d4:bb:37:cc:b5:c4:d5:07:55:21:07:38:35:85: 96:84:a5:e5:a3:f9:1e:9c:32:75:66:41:23:43:cd:50:8a:aa: 29:f0:51:49:0f:13:37:58:d0:d6:45:de:c0:62:f5:8b:6c:38: ec:44:e5:ad:ea:ca:18:86:89:8a:1a:4e:7a:78:e9:ce:d7:5d: 3d:c3:65:22:1d:42:d7:2b:90:fb:41:d9:a0:c6:18:f6:c1:99: e9:97:b3:39:f1:34:05:c5:17:7f:b2:5d:aa:b6:03:82:cd:db: ef:d4:e6:83:23:7f:19:e4:60:52:99:32:17:b2:88:d8:31:74: 10:6c:26:fc:6a:15:30:08:44:c5:9a:38:34:cc:a0:95:d6:a5: 93:ec:42:5a:fc:aa:31:89:98:29:09:a5:08:1f:02:a2:f6:ab: 07:37:14:f4:12:d6:08:d5:85:62:c1:c1:b1:21:34:dc:02:e8: 49:d0:e4:5d:d6:e7:19:2a:3d:af:f2:c3:6a:b4:29:9f:ba:ee: 08:85:a3:fb:81:c0:3e:73:d8:8f:38:5f:29:e4:90:b0:b7:f5: 97:a9:f8:5b:d4:d7:6f:2a:41:d5:52:09:e7:33:3d:cb:a6:96: 14:6b:fc:54 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1QjcxMTAvBgNVBAUTKDgzNUIwNTY3RDkzRUFDMEFFMzI0RUExRjE2QjNDMzlD QjFCMzM4OEUwHhcNMjYwMzI0MTkwMDE1WhcNMjYwMzMxMTkwMDE1WjAYMRYwFAYD VQQDEw02OWMyZGYzZi04MWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9zVxd6EfhnLh3L4raqhb1UIgkHm4th3rzLqlsy/1mscZb4B63w4LKMtSZYl1 Ff/qXnZhQuZxTtDIeyFfMSn0lalBVwhIpst973v9TkrqQ8bTNL1ZIaIOHH9aLsQn 0+C4ifJg4P4zOsyN6cElDJhMw8psrA9W8RtuW7Pwn42OZfjJlPfOHC9YWGBJRzCj HmcHhV+nWHD4ddc8iFQHwFBhT2rVUi6bkbmNdNxMDzEQOpllmpzlYCnK2rPaNHqY YAtd5Nhb/0N8HELRomiFYyQXb0wmFJp/JnYO5KIQ34RFEnlZV4+z/2a9/mS5exDc MYBzj4RJAEj3vAitqh3pli6hawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIhOzVie VOcfCAq0fDVMyaH7GUz0MB8GA1UdIwQYMBaAFINbBWfZPqwK4yTqHxazw5yxsziO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVCNy83MUU3QTIyMjUx OTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJBcmpKT29mRnJQRG5MR3pP STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxc0ZaOWstckFyakpPb2ZGclBEbkxHek9JNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVCNy83MUU3QTIyMjUxOTUxMUVBODQ2NEJBNzhDNEY5QUUwMi9nMXNGWjlrLXJB cmpKT29mRnJQRG5MR3pPSTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAyYmvhtTAY0uRe/M1DNjikGjrG1SpjtS7N8y1xNUHVSEHODWFloSl5aP5Hpwy dWZBI0PNUIqqKfBRSQ8TN1jQ1kXewGL1i2w47ETlrerKGIaJihpOenjpztddPcNl Ih1C1yuQ+0HZoMYY9sGZ6ZezOfE0BcUXf7JdqrYDgs3b79TmgyN/GeRgUpkyF7KI 2DF0EGwm/GoVMAhExZo4NMygldalk+xCWvyqMYmYKQmlCB8CovarBzcU9BLWCNWF YsHBsSE03ALoSdDkXdbnGSo9r/LDarQpn7ruCIWj+4HAPnPYjzhfKeSQsLf1l6n4 W9TXbypB1VIJ5zM9y6aWFGv8VA== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:47 2026 by rpki-client