$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: iP6DT/kIyhwXpdja5L2LX4ub+214L5wMXRCL7S4OLzM= Subject key identifier: CE:97:3A:60:96:B5:C8:75:1A:99:EC:7E:A8:92:04:B1:57:8E:20:7D Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: 0125 Signing time: Wed 25 Mar 2026 05:07:21 +0000 Manifest this update: Wed 25 Mar 2026 05:07:21 +0000 Manifest next update: Wed 01 Apr 2026 05:07:21 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: ezdftVR+x9QpJ6FJPTX3Am9ArXTPU0T2dQfySHYKRxo=) 2: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: xM+k8JQJmpD4Ax0g8sE6JNmMBLQtiYg67IPffewNqIg=) 3: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: MzzziUvdgBRD34K13czjAKz5Qa4KFePNv6ZSJaDtfDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Mar 25 05:07:21 2026 GMT Not After : Apr 1 05:07:21 2026 GMT Subject: CN=69c36d89-92f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dc:05:69:fb:33:3a:ca:fd:a9:2a:07:e6:93: 40:58:ff:7d:30:c1:e3:8b:9f:03:4a:82:16:44:7e: 4b:08:2d:a3:78:eb:51:ea:9b:95:8b:93:bb:5e:55: 68:1b:82:70:90:8b:9d:3e:b0:e5:a4:75:cf:d8:c7: f2:da:7f:86:23:ca:a5:1b:25:34:21:30:48:5a:74: 41:a4:75:b5:e6:d9:5a:55:db:33:21:5e:54:2d:72: d9:a6:a8:15:d9:3b:b6:ef:76:59:6a:ee:82:2f:3b: b3:e8:df:c2:d6:4e:b7:14:d7:10:f1:a9:aa:97:a2: b9:4f:b9:5a:94:dd:49:92:05:6c:dd:0a:e4:66:b2: aa:60:48:46:c2:19:47:15:31:c5:28:b4:13:98:8d: 10:48:e0:bf:ec:a2:91:7c:c6:4e:d6:e1:c7:87:ec: d2:c6:db:28:6f:f3:85:cc:43:91:92:75:3d:b5:d7: 49:93:fc:cd:02:63:45:2e:72:01:83:68:68:f6:f1: 39:f9:75:c3:00:0b:ed:9b:c7:31:df:99:7b:cc:cb: 6c:e9:60:2d:74:77:3d:a7:dd:6b:d7:84:0e:dc:8c: f0:8d:f9:58:7f:1d:1e:b9:14:03:72:86:17:ef:7a: 39:ab:22:71:1a:90:1c:af:0a:0b:d7:d5:a1:29:df: e8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:97:3A:60:96:B5:C8:75:1A:99:EC:7E:A8:92:04:B1:57:8E:20:7D X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d8:9a:e1:a0:bd:7b:09:54:ab:d1:2a:7c:55:4b:f5:fc:af: b3:a1:8e:6e:7a:9f:c3:46:79:02:94:4e:6d:28:9c:66:38:a7: 98:15:b7:bc:c2:c9:05:92:c9:32:c9:f8:10:53:37:ef:e8:aa: 3d:8f:53:1f:a2:55:85:5c:29:c9:d0:dc:e0:a7:cf:79:02:fa: 5c:d0:55:83:72:a1:03:3c:7e:81:3b:4d:02:7e:8a:32:09:e0: 53:d3:5e:9b:40:f4:74:af:fb:6a:42:75:62:22:c9:b0:b2:22: cc:7b:a2:a0:7b:56:43:46:9c:13:71:4e:9a:b0:9b:72:60:da: 21:90:20:4e:05:8f:0d:c8:c0:56:6b:52:1f:2a:c5:19:17:49: 6d:c6:5c:f2:eb:1b:3f:8f:0b:76:57:18:09:d1:00:3c:4d:cf: 74:f7:ad:27:15:98:07:33:13:28:99:c3:7f:b1:de:41:c3:e2: 64:8b:f5:02:16:a4:f5:f2:bc:2d:39:06:f0:96:c5:22:30:47: c5:9d:3f:9a:e5:f1:cc:c2:80:48:dd:54:b5:10:47:c2:18:5f: 9f:b6:a0:3c:2b:df:3b:da:03:47:f7:b1:20:b8:ea:93:8d:fc: 97:b3:c9:0a:88:cf:9a:7d:59:26:b5:b5:a8:b9:e3:70:30:3e: 5b:ad:c7:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjYwMzI1MDUwNzIxWhcNMjYwNDAxMDUwNzIxWjAYMRYwFAYD VQQDEw02OWMzNmQ4OS05MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiNwFafszOsr9qSoH5pNAWP99MMHji58DSoIWRH5LCC2jeOtR6puVi5O7XlVo G4JwkIudPrDlpHXP2Mfy2n+GI8qlGyU0ITBIWnRBpHW15tlaVdszIV5ULXLZpqgV 2Tu273ZZau6CLzuz6N/C1k63FNcQ8amql6K5T7lalN1JkgVs3QrkZrKqYEhGwhlH FTHFKLQTmI0QSOC/7KKRfMZO1uHHh+zSxtsob/OFzEORknU9tddJk/zNAmNFLnIB g2ho9vE5+XXDAAvtm8cx35l7zMts6WAtdHc9p91r14QO3IzwjflYfx0euRQDcoYX 73o5qyJxGpAcrwoL19WhKd/oiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM6XOmCW tch1GpnsfqiSBLFXjiB9MB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF9ia4aC9ewlUq9EqfFVL9fyvs6GObnqfw0Z5ApRObSicZjinmBW3vMLJBZLJ Msn4EFM37+iqPY9TH6JVhVwpydDc4KfPeQL6XNBVg3KhAzx+gTtNAn6KMgngU9Ne m0D0dK/7akJ1YiLJsLIizHuioHtWQ0acE3FOmrCbcmDaIZAgTgWPDcjAVmtSHyrF GRdJbcZc8usbP48LdlcYCdEAPE3PdPetJxWYBzMTKJnDf7HeQcPiZIv1Ahak9fK8 LTkG8JbFIjBHxZ0/muXxzMKASN1UtRBHwhhfn7agPCvfO9oDR/exILjqk438l7PJ CojPmn1ZJrW1qLnjcDA+W63H7A== -----END CERTIFICATE-----Generated at Thu Mar 26 20:37:05 2026 by rpki-client