$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: L/5DcflcePBuInu/gkcgTuch+TY0S8TkS/JWY9Epwjg= Subject key identifier: 6D:84:65:12:D0:87:7A:E6:47:30:8B:E4:AA:4F:C0:17:4D:EA:C1:E7 Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 0867 Signing time: Thu 26 Mar 2026 20:38:09 +0000 Manifest this update: Thu 26 Mar 2026 20:38:08 +0000 Manifest next update: Thu 02 Apr 2026 20:38:08 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: eT6sHXeFycyBoGdqI13E8dUvxtreITF7UDNHg53gH7c=) 2: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: kfnLo6TLNnxHzHz2hfx3dzeu6fOXlby4NhM/hMtaUog=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: MaFJmDPMqlk1C6MUJjdtLiNgPwGqra//weYceabgP/k=) 4: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: N8OrGg15ZoxlIKz8paOj7jgooryKDtsZ+DLKkaeQezQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:38:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Mar 26 20:38:08 2026 GMT Not After : Apr 2 20:38:08 2026 GMT Subject: CN=69c59931-0090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:63:fe:10:99:02:da:c1:d7:90:52:81:94: e5:94:90:d2:ed:2f:13:2c:40:7c:1f:ac:fc:d5:bd: a7:a2:26:b9:85:1b:2e:a6:30:5e:41:83:c2:b6:ab: f1:92:2b:f9:03:e9:be:54:74:d7:50:db:1e:a0:d7: 2f:d8:fa:38:52:c9:00:34:1a:40:20:13:63:7e:aa: 8c:87:bf:ea:02:65:3f:31:6d:50:ce:86:87:ed:d8: d2:eb:38:ba:8f:e1:fe:00:42:3a:9e:20:04:c3:bc: aa:31:ac:1f:3f:13:5c:ff:9e:3f:f5:d4:94:e5:57: a0:61:74:07:52:e0:f0:22:cd:87:42:f6:f3:6b:e3: d3:23:ab:60:be:58:39:ad:5d:40:d6:43:f9:26:ce: 36:36:8e:6b:24:1b:c1:b3:7f:5b:5e:36:72:a0:f1: 09:1f:0a:26:37:37:36:cd:41:53:62:44:40:33:5e: bd:75:26:74:0a:db:15:8a:23:43:b0:a9:ab:6f:b0: e6:1b:69:6e:02:07:38:11:6f:ea:61:99:1b:da:65: 97:9c:40:a0:37:d6:e7:ca:30:32:0f:50:d5:41:fc: 3a:d5:dc:72:04:37:94:72:2a:7e:8a:fd:ad:16:b8: 77:85:7a:03:a8:d0:0b:d9:dc:f0:d4:e8:b9:b7:54: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:84:65:12:D0:87:7A:E6:47:30:8B:E4:AA:4F:C0:17:4D:EA:C1:E7 X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:74:f0:6f:1c:48:c9:df:1e:2f:f5:3c:38:de:f3:c7:11:f3: 88:54:f0:33:b1:51:2d:3f:5e:ce:f7:f1:82:6c:67:0d:2b:fb: cd:03:99:5a:b0:05:4a:e2:73:d1:e9:4b:06:0b:f8:f9:61:a6: a5:80:d3:fb:8f:09:06:f9:11:54:f2:10:20:a9:1c:a7:e0:72: 25:15:41:20:e0:89:38:9a:a3:39:fc:25:ed:cc:4b:ed:20:71: e7:3e:28:97:92:f4:a8:a8:03:24:65:b6:a8:86:12:c7:59:95: a1:45:d4:a2:c0:c0:b5:80:74:d8:88:de:c7:8b:06:82:b1:9e: bf:61:66:aa:ed:c0:2b:01:62:8c:f8:68:91:66:9c:ff:43:02: 1e:fb:2a:36:37:98:7e:30:39:b0:71:67:d3:51:67:5b:23:1e: 3b:15:3f:d6:10:19:c6:34:0b:98:1b:ee:b1:01:02:65:4a:c4: 6f:94:4b:4f:66:68:b1:00:7a:ce:b0:d3:a5:ec:1f:20:bb:e9: ba:51:58:93:b2:c9:71:59:34:a8:ae:3b:e0:46:1d:f8:49:6d: 1d:64:eb:bf:06:71:db:dd:bd:b1:bc:a9:5b:0b:91:53:98:a1: 85:0d:5f:90:e0:12:3e:32:e9:20:2a:cc:d0:3c:92:db:b6:70: d8:5d:99:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjYwMzI2MjAzODA4WhcNMjYwNDAyMjAzODA4WjAYMRYwFAYD VQQDEw02OWM1OTkzMS0wMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuHBj/hCZAtrB15BSgZTllJDS7S8TLEB8H6z81b2noia5hRsupjBeQYPCtqvx kiv5A+m+VHTXUNseoNcv2Po4UskANBpAIBNjfqqMh7/qAmU/MW1QzoaH7djS6zi6 j+H+AEI6niAEw7yqMawfPxNc/54/9dSU5VegYXQHUuDwIs2HQvbza+PTI6tgvlg5 rV1A1kP5Js42No5rJBvBs39bXjZyoPEJHwomNzc2zUFTYkRAM169dSZ0CtsViiND sKmrb7DmG2luAgc4EW/qYZkb2mWXnECgN9bnyjAyD1DVQfw61dxyBDeUcip+iv2t Frh3hXoDqNAL2dzw1Oi5t1Tx8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG2EZRLQ h3rmRzCL5KpPwBdN6sHnMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAenTwbxxIyd8eL/U8ON7zxxHziFTwM7FRLT9ezvfxgmxnDSv7zQOZWrAFSuJz 0elLBgv4+WGmpYDT+48JBvkRVPIQIKkcp+ByJRVBIOCJOJqjOfwl7cxL7SBx5z4o l5L0qKgDJGW2qIYSx1mVoUXUosDAtYB02Ijex4sGgrGev2Fmqu3AKwFijPhokWac /0MCHvsqNjeYfjA5sHFn01FnWyMeOxU/1hAZxjQLmBvusQECZUrEb5RLT2ZosQB6 zrDTpewfILvpulFYk7LJcVk0qK474EYd+EltHWTrvwZx2929sbypWwuRU5ihhQ1f kOASPjLpICrM0DyS27Zw2F2Zvw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:10:02 2026 by rpki-client