$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: klJc+3ySVYVQxBYuAHCBFr0yFHE4s2DAUujOp8ynPbU= Subject key identifier: CA:DE:62:1F:03:80:2F:CF:B2:3D:51:13:99:C3:96:5C:33:16:76:03 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 032E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0324 Signing time: Wed 25 Mar 2026 00:44:13 +0000 Manifest this update: Wed 25 Mar 2026 00:44:13 +0000 Manifest next update: Wed 01 Apr 2026 00:44:13 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: h/A05rFmL3VlIexwbeeTjw1qqD/dRBF5VdASGS2ctkw=) 2: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: zJhTBwWvG8hmDhtzVqHYpoi7kDNMPWyue7YoZZ3MSOw=) 3: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: te2pLoJZYO3JYrW3CAq/cTYGshKCIgPSrs/rQNrttpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 814 (0x32e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Mar 25 00:44:13 2026 GMT Not After : Apr 1 00:44:13 2026 GMT Subject: CN=69c32fdd-30b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:4d:e1:fa:74:e9:a9:eb:fb:03:fe:20:bc: f0:99:95:e6:bb:61:23:cb:e6:26:a8:57:49:57:14: 48:de:40:21:2f:fa:5f:d3:11:1e:35:b0:1c:03:4d: c7:c9:2d:13:dc:9c:0c:39:3f:f2:14:4d:b3:d9:1e: 9e:be:53:1d:91:d7:be:2b:c2:e2:68:c7:75:30:3a: 16:08:30:ac:41:64:6c:0a:27:9e:37:56:03:b5:16: 00:01:fb:52:cd:46:db:a4:6e:a2:07:b9:40:91:1b: 2c:19:0f:6d:9c:55:52:bb:8a:7e:cb:d0:9a:57:4a: a4:60:8e:88:03:d1:d8:f1:fa:00:81:6e:a4:44:8c: d5:23:4f:6d:1d:42:e3:dd:86:73:dc:8c:6b:3a:1a: ed:1c:77:ec:9f:b2:fe:cb:65:65:df:bf:3f:6e:89: ce:15:4c:a0:66:03:b5:c2:5f:51:37:56:05:ad:56: 01:9a:34:c2:08:61:da:a7:85:3c:47:68:dc:df:ce: a1:f1:22:5b:4e:d9:73:f2:15:8e:b5:21:ca:04:29: 64:4e:74:a2:e4:1f:cc:d6:dd:57:b9:c6:93:30:85: 34:83:10:53:7b:89:f9:f8:d6:46:35:5b:c2:5f:37: 3d:67:1d:28:75:b8:3c:a5:ce:1e:75:31:79:9a:f3: 71:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DE:62:1F:03:80:2F:CF:B2:3D:51:13:99:C3:96:5C:33:16:76:03 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:5b:75:ec:b3:27:a9:4a:77:0a:1e:1f:f9:29:07:f4:68:df: 1e:1e:ae:ff:d8:22:51:58:0b:e5:5b:fc:4b:f8:03:33:89:1d: d0:d6:2a:88:7b:aa:17:a9:02:7c:c8:a7:10:a6:8e:e2:a9:35: 4d:59:d0:2a:97:dd:fb:88:c1:ca:ea:89:59:1c:a6:4b:cd:f4: 1e:9a:28:a6:d9:09:b1:f2:4d:b7:21:e3:cd:af:c1:2e:0f:da: d0:d1:aa:bf:10:c7:98:89:21:5f:cd:94:0a:d7:1d:45:d4:cc: 1c:02:82:e4:97:45:f0:e6:64:b1:7c:86:0c:37:a6:d2:f5:d8: 41:14:61:15:77:09:2a:9a:bd:b5:50:4d:0e:31:4e:3b:c4:05: f0:37:73:89:81:ec:a9:1e:27:73:d6:b2:12:25:68:06:b1:40: 9f:93:9a:c9:fb:63:22:33:99:35:68:71:cf:8b:df:f9:9b:03: 69:0c:bf:5c:93:76:fd:09:a1:dd:43:b4:8a:21:14:60:38:60: 0f:5a:5e:d9:f8:ce:cb:5c:6a:3e:2c:57:be:14:4a:6d:8b:95: 20:97:0e:04:fd:08:98:d5:ec:fa:09:2f:a4:10:58:1e:0e:5a: 37:6f:cb:d3:a7:2e:5f:53:8f:12:bc:6d:b5:9c:40:f7:cb:27: ed:f4:02:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwMzI1MDA0NDEzWhcNMjYwNDAxMDA0NDEzWjAYMRYwFAYD VQQDEw02OWMzMmZkZC0zMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYFN4fp06anr+wP+ILzwmZXmu2Ejy+YmqFdJVxRI3kAhL/pf0xEeNbAcA03H yS0T3JwMOT/yFE2z2R6evlMdkde+K8LiaMd1MDoWCDCsQWRsCieeN1YDtRYAAftS zUbbpG6iB7lAkRssGQ9tnFVSu4p+y9CaV0qkYI6IA9HY8foAgW6kRIzVI09tHULj 3YZz3IxrOhrtHHfsn7L+y2Vl378/bonOFUygZgO1wl9RN1YFrVYBmjTCCGHap4U8 R2jc386h8SJbTtlz8hWOtSHKBClkTnSi5B/M1t1XucaTMIU0gxBTe4n5+NZGNVvC Xzc9Zx0odbg8pc4edTF5mvNxOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMreYh8D gC/Psj1RE5nDllwzFnYDMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiFt17LMnqUp3Ch4f+SkH9GjfHh6u/9giUVgL5Vv8S/gDM4kd0NYqiHuqF6kC fMinEKaO4qk1TVnQKpfd+4jByuqJWRymS830HpooptkJsfJNtyHjza/BLg/a0NGq vxDHmIkhX82UCtcdRdTMHAKC5JdF8OZksXyGDDem0vXYQRRhFXcJKpq9tVBNDjFO O8QF8DdziYHsqR4nc9ayEiVoBrFAn5OayftjIjOZNWhxz4vf+ZsDaQy/XJN2/Qmh 3UO0iiEUYDhgD1pe2fjOy1xqPixXvhRKbYuVIJcOBP0ImNXs+gkvpBBYHg5aN2/L 06cuX1OPErxttZxA98sn7fQCZg== -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:32 2026 by rpki-client