$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft File: U78N14DbA47OFNQEWbq5xo9phTs.mft (raw, json) Hash identifier: NUvPKThMlhVVGvsZ56vjEYr5yIp+HKUlf3rKM/X5axw= Subject key identifier: 42:27:03:17:FA:9B:84:0F:E0:8F:1E:97:A5:37:EF:99:23:7A:6C:5B Authority key identifier: 53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B Certificate issuer: /CN=A912FCD6/serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Certificate serial: 2345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft Manifest number: 22D2 Signing time: Tue 24 Mar 2026 15:47:47 +0000 Manifest this update: Tue 24 Mar 2026 15:47:47 +0000 Manifest next update: Tue 31 Mar 2026 15:47:47 +0000 Files and hashes: 1: U78N14DbA47OFNQEWbq5xo9phTs.crl (hash: SLZ2EF/Wu+r/hvWOs0KKjzKxCCmxQX2Dm6YNEk7JHxc=) 2: E23C1886EF8811F0B6CFCA01616F56BC.roa (hash: hyVjQ/ybV11665cH/1oRipAj/sBN9cWklhwxNFtgIuo=) 3: 213F506AEF8A11F08E686F05616F56BC.roa (hash: +0TIbXgSWfY4Rfh4n/KWV5MfMbBrpgMrwoEbGLQfWss=) 4: A44814E8EF8411F087F172675F6F56BC.roa (hash: wvN10FQ8zvYAowPbb2JVqT+LitRhCvH0XZWoM78inD0=) 5: BB252FD40EF111F195D6D4120A3D8C67.roa (hash: /hTiZWSYK2Vv4i6AxRoBfgNn6QuWyN3II6fBK7L3F/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9029 (0x2345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912FCD6, serialNumber=53BF0DD780DB038ECE14D40459BAB9C68F69853B Validity Not Before: Mar 24 15:47:47 2026 GMT Not After : Mar 31 15:47:47 2026 GMT Subject: CN=69c2b223-2b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6b:97:05:1e:f9:fa:8e:6b:1c:50:a0:8b:10: 8c:d2:7c:37:94:fd:d1:00:7b:1c:22:7a:23:d5:39: 65:61:d2:d5:90:ae:41:f9:6a:6f:20:7e:26:54:98: f0:20:47:bc:89:df:96:91:5c:f8:24:75:85:49:d0: 19:83:95:96:3c:1f:d0:6e:90:f0:c3:50:26:85:46: 65:ef:42:2c:9c:ca:08:23:eb:06:c8:5a:b7:6e:6b: d1:26:5a:c8:e6:0d:2b:16:96:b2:27:8c:ac:96:7c: 27:19:15:29:9b:1c:ba:2c:9f:15:20:b6:e9:f4:7b: 19:3d:c6:10:31:d2:52:86:9c:63:62:c3:7b:40:f3: 3f:a5:23:9d:9f:e2:ea:76:91:4f:a7:19:5a:d7:0a: 12:91:ca:ea:bb:1d:a2:3b:ea:a8:8a:3b:41:cf:aa: bf:14:03:32:ed:40:e1:65:0c:ce:aa:23:6a:8f:3b: d6:9b:22:6c:da:27:02:93:6f:d7:28:1a:6d:4e:f8: 99:ef:ea:68:96:10:cb:a9:c5:1a:a2:71:8f:e6:2b: 10:3a:7c:3a:e4:aa:0a:21:75:7e:4a:38:e4:0d:e2: 76:50:3e:26:a2:bb:8d:1a:f4:cd:a3:45:73:92:23: e5:f9:b6:0b:a8:27:a0:2f:f1:a2:17:aa:bc:6a:bc: 5d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:27:03:17:FA:9B:84:0F:E0:8F:1E:97:A5:37:EF:99:23:7A:6C:5B X509v3 Authority Key Identifier: keyid:53:BF:0D:D7:80:DB:03:8E:CE:14:D4:04:59:BA:B9:C6:8F:69:85:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U78N14DbA47OFNQEWbq5xo9phTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCD6/1E9E1AACD2EA11E5AFB1E24CC4F9AE02/U78N14DbA47OFNQEWbq5xo9phTs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:b4:b3:81:88:fc:93:b0:c4:bf:e1:a5:20:aa:4f:db:d1:43: 5e:f0:a2:71:34:89:ae:c4:21:e5:f8:06:df:ee:ae:40:c4:75: f7:8d:06:b3:93:c9:76:1a:e7:e2:b2:90:18:f6:9b:88:0f:36: f8:2c:eb:d9:ec:a9:8d:94:47:d5:38:7c:97:da:2b:3c:2f:fe: 7a:1f:e5:6d:8a:1f:c0:d3:e4:1b:15:97:72:b8:b7:d8:88:a4: 68:9f:30:4e:99:53:03:60:0b:cf:6a:63:2f:16:66:4e:aa:35: 0f:99:65:95:4b:be:07:93:8a:a1:15:65:6b:a7:2d:a8:62:96: a0:79:5b:d0:ab:c2:89:de:db:aa:52:52:bb:1f:a2:6b:ba:ce: 0f:1a:e8:11:72:93:db:c0:25:fd:5f:5e:42:d3:3d:a9:32:73: d2:0b:3b:23:46:45:47:8d:e7:4c:8f:b8:f2:15:4a:0f:83:4c: 52:8d:d8:76:71:7e:8f:48:00:ba:c3:9e:f9:0f:54:ff:b9:c7: f8:1e:94:89:f7:6c:a8:fa:99:2c:ac:36:09:dd:56:13:47:71: 2b:93:09:7c:ff:12:ad:25:a6:14:69:2f:d6:2c:91:88:f2:d5: 6a:bf:34:a1:10:da:c8:01:ed:27:15:b2:e8:4e:11:54:a5:7a: 3b:b7:b5:e9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkZDRDYxMTAvBgNVBAUTKDUzQkYwREQ3ODBEQjAzOEVDRTE0RDQwNDU5QkFCOUM2 OEY2OTg1M0IwHhcNMjYwMzI0MTU0NzQ3WhcNMjYwMzMxMTU0NzQ3WjAYMRYwFAYD VQQDEw02OWMyYjIyMy0yYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0WuXBR75+o5rHFCgixCM0nw3lP3RAHscInoj1TllYdLVkK5B+WpvIH4mVJjw IEe8id+WkVz4JHWFSdAZg5WWPB/QbpDww1AmhUZl70IsnMoII+sGyFq3bmvRJlrI 5g0rFpayJ4yslnwnGRUpmxy6LJ8VILbp9HsZPcYQMdJShpxjYsN7QPM/pSOdn+Lq dpFPpxla1woSkcrqux2iO+qoijtBz6q/FAMy7UDhZQzOqiNqjzvWmyJs2icCk2/X KBptTviZ7+polhDLqcUaonGP5isQOnw65KoKIXV+SjjkDeJ2UD4moruNGvTNo0Vz kiPl+bYLqCegL/GiF6q8arxduwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEInAxf6 m4QP4I8el6U375kjemxbMB8GA1UdIwQYMBaAFFO/DdeA2wOOzhTUBFm6ucaPaYU7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkNENi8xRTlFMUFBQ0Qy RUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0N09GTlFFV2JxNXhvOXBo VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1U3OE4xNERiQTQ3T0ZOUUVXYnE1eG85cGhUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RkNENi8xRTlFMUFBQ0QyRUExMUU1QUZCMUUyNENDNEY5QUUwMi9VNzhOMTREYkE0 N09GTlFFV2JxNXhvOXBoVHMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlrSzgYj8k7DEv+GlIKpP29FDXvCicTSJrsQh5fgG3+6uQMR1940Gs5PJdhrn 4rKQGPabiA82+Czr2eypjZRH1Th8l9orPC/+eh/lbYofwNPkGxWXcri32IikaJ8w TplTA2ALz2pjLxZmTqo1D5lllUu+B5OKoRVla6ctqGKWoHlb0KvCid7bqlJSux+i a7rODxroEXKT28Al/V9eQtM9qTJz0gs7I0ZFR43nTI+48hVKD4NMUo3YdnF+j0gA usOe+Q9U/7nH+B6UifdsqPqZLKw2Cd1WE0dxK5MJfP8SrSWmFGkv1iyRiPLVar80 oRDayAHtJxWy6E4RVKV6O7e16Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:55:40 2026 by rpki-client