$ rpki-client -vvf rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft File: gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft (raw, json) Hash identifier: aCZxaX1Ht9MTjkEm13oerFZN/vdHfSrdUyVt7HJJXjQ= Subject key identifier: 8B:E0:28:31:CA:6A:EC:18:2F:59:BC:25:67:43:DF:46:32:46:F1:85 Authority key identifier: 81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 Certificate issuer: /CN=A912096C/serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Certificate serial: 07F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft Manifest number: 07EB Signing time: Tue 24 Mar 2026 20:59:59 +0000 Manifest this update: Tue 24 Mar 2026 20:59:59 +0000 Manifest next update: Tue 31 Mar 2026 20:59:59 +0000 Files and hashes: 1: gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl (hash: 3lYFDdeJpPstCTxwimbQsIdMrXeQ4Fgd5deGqJSX8eY=) 2: 7D7B467CE06011EDBB10FD53C4F9AE02.roa (hash: I0zmL5B73oQFIRIRYeKUXBMAOnBgVjWPSDX99GBH4kI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2037 (0x7f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912096C, serialNumber=8197663A7F6347D591B6B2B9ADD5A2D574E91124 Validity Not Before: Mar 24 20:59:59 2026 GMT Not After : Mar 31 20:59:59 2026 GMT Subject: CN=69c2fb4f-4ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2f:c0:11:ee:c9:af:fb:75:12:fa:28:ba:1f: 86:0d:e4:fc:fa:49:c7:d5:5c:49:d6:4f:77:1d:2b: c5:51:99:33:52:81:87:66:3e:58:a0:8f:3c:ab:f7: e2:57:1d:d1:35:fe:c8:a6:db:ec:97:25:23:bd:62: a8:22:7c:bf:a6:c1:44:d5:55:30:cb:81:6e:16:bb: f4:1f:86:9e:6c:3b:f1:bf:c9:4f:cd:b5:e3:17:27: 78:c1:3d:25:99:35:8d:7c:59:41:7d:90:7f:ff:fa: 48:62:c9:03:1a:18:ab:4d:6c:65:9c:30:a1:d3:d2: b4:40:f4:56:55:4f:22:37:f8:58:bd:0f:17:8a:c6: 07:94:3a:94:ea:8b:76:8f:14:9e:73:ab:2b:e4:ab: 06:55:bd:54:76:a5:e2:9f:b0:4f:1f:c2:f1:2a:ff: bd:57:68:65:0d:cc:36:2d:e7:19:0b:4f:01:91:a2: c4:a8:4d:ac:10:6f:93:d4:59:9c:af:b7:6d:6a:98: a2:e7:af:97:06:d2:bb:16:87:15:06:34:18:9c:a8: c5:f8:c7:81:34:10:82:1a:73:4a:af:9d:80:82:96: bf:0d:9b:27:1d:78:a2:66:1d:7a:6b:1b:be:ca:87: 8b:dc:de:da:af:9d:ed:a9:fa:37:ff:2f:7b:c4:75: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E0:28:31:CA:6A:EC:18:2F:59:BC:25:67:43:DF:46:32:46:F1:85 X509v3 Authority Key Identifier: keyid:81:97:66:3A:7F:63:47:D5:91:B6:B2:B9:AD:D5:A2:D5:74:E9:11:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gZdmOn9jR9WRtrK5rdWi1XTpESQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912096C/1D31C184289211EBAC8CCE13C4F9AE02/gZdmOn9jR9WRtrK5rdWi1XTpESQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:6c:ba:ed:e3:d7:6b:ce:45:5a:98:32:c1:e0:99:6a:4a:f7: 79:3c:f0:c9:34:ec:09:ec:28:1e:5f:92:56:b9:86:aa:73:b8: 3a:b7:68:91:f6:2f:c3:11:1b:96:58:e7:1f:1a:86:48:c0:6c: 88:79:40:df:09:d3:07:f8:4d:bf:67:45:2c:8c:d2:bc:7d:25: ef:74:b5:ea:ab:29:6c:a1:0a:3f:b1:66:1b:44:fc:e7:3d:b6: 72:ae:52:00:16:49:fa:20:d7:4c:05:c6:41:22:12:21:3e:e4: a5:50:5b:5a:ac:c7:0e:29:f7:24:9c:cd:8f:b9:1a:e1:1b:88: fc:b4:63:52:d9:53:e7:11:3f:73:e0:ae:3a:7d:9d:0a:c0:cc: fd:d9:97:64:62:8e:17:b4:54:02:14:26:17:78:69:7c:67:81: a7:85:98:48:d2:ee:3f:cb:c8:4c:5b:cb:67:2e:21:bd:0e:cb: aa:df:12:b0:7a:af:a2:c5:9a:4d:a6:34:a3:11:00:a0:55:dc: 91:a8:92:a8:fe:92:a5:b3:e3:3a:82:e4:6c:68:ca:27:c2:b7: 2b:35:96:71:f1:1b:51:3d:c7:79:ae:8f:75:59:d5:cf:5f:d9: 80:22:ba:d0:b1:02:ba:35:46:f9:1e:9d:4e:2b:94:49:f9:9c: c1:b0:94:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA5NkMxMTAvBgNVBAUTKDgxOTc2NjNBN0Y2MzQ3RDU5MUI2QjJCOUFERDVBMkQ1 NzRFOTExMjQwHhcNMjYwMzI0MjA1OTU5WhcNMjYwMzMxMjA1OTU5WjAYMRYwFAYD VQQDEw02OWMyZmI0Zi00ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4S/AEe7Jr/t1Evoouh+GDeT8+knH1VxJ1k93HSvFUZkzUoGHZj5YoI88q/fi Vx3RNf7IptvslyUjvWKoIny/psFE1VUwy4FuFrv0H4aebDvxv8lPzbXjFyd4wT0l mTWNfFlBfZB///pIYskDGhirTWxlnDCh09K0QPRWVU8iN/hYvQ8XisYHlDqU6ot2 jxSec6sr5KsGVb1UdqXin7BPH8LxKv+9V2hlDcw2LecZC08BkaLEqE2sEG+T1Fmc r7dtapii56+XBtK7FocVBjQYnKjF+MeBNBCCGnNKr52Agpa/DZsnHXiiZh16axu+ yoeL3N7ar53tqfo3/y97xHXGewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIvgKDHK auwYL1m8JWdD30YyRvGFMB8GA1UdIwQYMBaAFIGXZjp/Y0fVkbayua3VotV06REk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDk2Qy8xRDMxQzE4NDI4 OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5V1J0cks1cmRXaTFYVHBF U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2daZG1PbjlqUjlXUnRySzVyZFdpMVhUcEVTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDk2Qy8xRDMxQzE4NDI4OTIxMUVCQUM4Q0NFMTNDNEY5QUUwMi9nWmRtT245alI5 V1J0cks1cmRXaTFYVHBFU1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl2y67ePXa85FWpgyweCZakr3eTzwyTTsCewoHl+SVrmGqnO4OrdokfYvwxEb lljnHxqGSMBsiHlA3wnTB/hNv2dFLIzSvH0l73S16qspbKEKP7FmG0T85z22cq5S ABZJ+iDXTAXGQSISIT7kpVBbWqzHDin3JJzNj7ka4RuI/LRjUtlT5xE/c+CuOn2d CsDM/dmXZGKOF7RUAhQmF3hpfGeBp4WYSNLuP8vITFvLZy4hvQ7Lqt8SsHqvosWa TaY0oxEAoFXckaiSqP6SpbPjOoLkbGjKJ8K3KzWWcfEbUT3Hea6PdVnVz1/ZgCK6 0LECujVG+R6dTiuUSfmcwbCU0A== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:39 2026 by rpki-client