$ rpki-client -vvf rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft File: gJ8D89FTd5ZIUgkSmfr428wnR3w.mft (raw, json) Hash identifier: 4CXvCZ8+rRYGGtge5e3EBaNy6pUP1XVAf/mOM7Z2+S8= Subject key identifier: 69:B0:79:B6:00:59:91:19:33:59:10:37:AD:D9:39:E6:16:E7:0C:15 Authority key identifier: 80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C Certificate issuer: /CN=A9127BF1/serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft Manifest number: 01FA Signing time: Wed 25 Mar 2026 02:36:14 +0000 Manifest this update: Wed 25 Mar 2026 02:36:14 +0000 Manifest next update: Wed 01 Apr 2026 02:36:14 +0000 Files and hashes: 1: gJ8D89FTd5ZIUgkSmfr428wnR3w.crl (hash: /KqqbndLT3pc0ZYLRaB9eM4MbdoAgTtpYTzzCuSxK9Q=) 2: C9836F3A314C11EEB33F3686C4F9AE02.roa (hash: QCegcRYs57pRsPyT5X8JuUVRIwN6pDaNJngx1VkdWBE=) 3: 62A413B2D23811EFA34C3663C4F9AE02.roa (hash: nm71mjp1wKJMnw5o4H2CqL1YYBqldzh5Oha2XaIb+4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127BF1, serialNumber=809F03F3D15377964852091299FAF8DBCC27477C Validity Not Before: Mar 25 02:36:14 2026 GMT Not After : Apr 1 02:36:14 2026 GMT Subject: CN=69c34a1e-a60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:04:47:46:c8:88:16:63:6b:62:a1:46:ff:64: 67:b0:db:2e:31:b4:3c:f4:12:9e:c4:b8:90:b6:21: 5c:f2:98:55:0c:6d:36:1c:20:31:72:be:50:e1:91: f7:46:1d:b6:fa:1c:e7:17:b0:c1:77:7b:2a:4f:65: b0:17:1a:fd:c1:ba:72:5f:e0:dd:2a:f1:a2:3a:d0: a1:e7:da:6b:36:14:1d:78:d0:ce:4a:c3:4a:33:f6: fa:30:9a:8c:3a:ed:dc:99:37:13:bd:bc:e4:55:57: bf:0c:07:10:a6:98:6a:97:de:72:57:d2:c3:12:1a: 9f:57:00:6c:35:52:e3:e2:f7:89:c4:2b:f2:a8:33: 21:3f:c3:ec:d8:64:e8:30:14:35:20:b4:f7:38:6b: 79:4d:1f:90:b9:e5:4b:c1:b0:34:18:a5:8f:ca:da: 74:42:9c:08:6f:31:c9:33:1b:be:9d:1a:82:cd:6c: cb:3c:98:7c:dd:e1:89:1b:e4:cc:eb:35:4e:b4:9f: f7:60:71:e0:07:ab:b9:4e:e9:8f:c0:5b:6a:3f:a0: 56:43:a8:74:4d:e4:2d:3b:6c:4a:48:5e:11:88:38: 37:c5:2f:0a:bf:f6:0a:af:b8:93:e2:35:6d:39:be: 6b:10:66:8b:05:69:a0:69:dd:cc:d6:cf:b5:22:af: dc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B0:79:B6:00:59:91:19:33:59:10:37:AD:D9:39:E6:16:E7:0C:15 X509v3 Authority Key Identifier: keyid:80:9F:03:F3:D1:53:77:96:48:52:09:12:99:FA:F8:DB:CC:27:47:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ8D89FTd5ZIUgkSmfr428wnR3w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127BF1/30D48634314C11EEABFFA984C4F9AE02/gJ8D89FTd5ZIUgkSmfr428wnR3w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:bb:84:0b:f3:38:04:e2:c2:4d:40:7f:f5:c2:1a:38:f8:e8: 69:fe:f8:dc:08:90:9e:67:d2:cd:44:df:94:55:3a:a0:e1:fa: 43:2b:8d:db:5e:b7:13:fc:21:35:54:4f:0e:f8:e6:20:bd:56: 90:4e:a6:7b:27:82:03:21:45:0f:92:ef:7e:86:e7:6b:c4:d5: 25:65:83:39:72:8c:68:42:fc:13:b8:ad:37:cd:55:d7:b9:ce: f0:43:d6:ad:e9:d6:ee:cc:96:a5:62:99:5b:59:6b:97:09:01: ad:54:b8:bc:79:8d:76:b2:ff:10:f4:8d:d1:8e:71:e8:ee:19: 5c:c8:68:bc:55:2b:94:28:80:70:a0:58:c1:18:e3:24:97:80: c7:af:9d:22:d6:72:44:86:ab:ee:27:74:1f:6e:ec:f6:69:a5: 40:a7:67:b7:e8:03:cc:e9:b3:73:bb:26:1e:e0:60:81:46:1a: a8:77:68:c4:18:d2:8d:7b:a7:d3:83:c7:20:d2:8a:5c:c0:e8: 98:9c:2d:67:f7:fb:7f:3f:83:99:dd:e7:d8:89:98:23:d2:d6: bd:e5:92:d3:51:6a:13:ba:98:70:5e:92:58:ad:de:5c:c3:f4: f1:d7:a5:63:2d:ef:9a:e6:93:c9:4d:51:70:d7:86:d1:0b:d7: 48:55:b3:eb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCRjExMTAvBgNVBAUTKDgwOUYwM0YzRDE1Mzc3OTY0ODUyMDkxMjk5RkFGOERC Q0MyNzQ3N0MwHhcNMjYwMzI1MDIzNjE0WhcNMjYwNDAxMDIzNjE0WjAYMRYwFAYD VQQDEw02OWMzNGExZS1hNjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgRHRsiIFmNrYqFG/2RnsNsuMbQ89BKexLiQtiFc8phVDG02HCAxcr5Q4ZH3 Rh22+hznF7DBd3sqT2WwFxr9wbpyX+DdKvGiOtCh59prNhQdeNDOSsNKM/b6MJqM Ou3cmTcTvbzkVVe/DAcQpphql95yV9LDEhqfVwBsNVLj4veJxCvyqDMhP8Ps2GTo MBQ1ILT3OGt5TR+QueVLwbA0GKWPytp0QpwIbzHJMxu+nRqCzWzLPJh83eGJG+TM 6zVOtJ/3YHHgB6u5TumPwFtqP6BWQ6h0TeQtO2xKSF4RiDg3xS8Kv/YKr7iT4jVt Ob5rEGaLBWmgad3M1s+1Iq/c8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGmwebYA WZEZM1kQN63ZOeYW5wwVMB8GA1UdIwQYMBaAFICfA/PRU3eWSFIJEpn6+NvMJ0d8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0JGMS8zMEQ0ODYzNDMx NEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1WklVZ2tTbWZyNDI4d25S M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dKOEQ4OUZUZDVaSVVna1NtZnI0Mjh3blIzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0JGMS8zMEQ0ODYzNDMxNEMxMUVFQUJGRkE5ODRDNEY5QUUwMi9nSjhEODlGVGQ1 WklVZ2tTbWZyNDI4d25SM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAU7uEC/M4BOLCTUB/9cIaOPjoaf743AiQnmfSzUTflFU6oOH6QyuN2163E/wh NVRPDvjmIL1WkE6meyeCAyFFD5Lvfobna8TVJWWDOXKMaEL8E7itN81V17nO8EPW renW7syWpWKZW1lrlwkBrVS4vHmNdrL/EPSN0Y5x6O4ZXMhovFUrlCiAcKBYwRjj JJeAx6+dItZyRIar7id0H27s9mmlQKdnt+gDzOmzc7smHuBggUYaqHdoxBjSjXun 04PHINKKXMDomJwtZ/f7fz+Dmd3n2ImYI9LWveWS01FqE7qYcF6SWK3eXMP08del Yy3vmuaTyU1RcNeG0QvXSFWz6w== -----END CERTIFICATE-----Generated at Thu Mar 26 14:14:55 2026 by rpki-client