$ rpki-client -vvf rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft File: d5yg0JVwhQFufQNaTsuieBq3xQ8.mft (raw, json) Hash identifier: iEURxeatJaDFYl/piIPd2/Nz4nPENy3qDUncHM6nwpw= Subject key identifier: 38:B3:50:B3:80:D0:1A:63:70:9F:C0:A0:30:28:44:A1:A3:41:F8:61 Authority key identifier: 77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F Certificate issuer: /CN=A9137157/serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft Manifest number: 18 Signing time: Wed 25 Mar 2026 08:11:30 +0000 Manifest this update: Wed 25 Mar 2026 08:11:30 +0000 Manifest next update: Wed 01 Apr 2026 08:11:30 +0000 Files and hashes: 1: d5yg0JVwhQFufQNaTsuieBq3xQ8.crl (hash: HrGATcSxjs4O8IA3r74BKiWCmDn8S3KmUDR29xtBIKs=) 2: 9AAB80560BD511F1920C67C12E3D8C67.roa (hash: kqV3oKn3iSJ05FgfTJc78t84aqKB7m6Xr2Ot/p1Zm1k=) 3: 55C25D260BD911F1B73B6397303D8C67.roa (hash: EKXgM16EsTst1A1QTtcnCCqDbQBrcCZuzsJr1SJRdww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137157, serialNumber=779CA0D0957085016E7D035A4ECBA2781AB7C50F Validity Not Before: Mar 25 08:11:30 2026 GMT Not After : Apr 1 08:11:30 2026 GMT Subject: CN=69c398b2-c595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:54:2a:b3:19:fc:cc:3a:5e:03:ac:28:33:3f: fb:d1:e9:40:d8:97:ed:0f:37:5c:9e:b6:30:37:eb: c0:03:81:72:87:a0:8e:17:65:4f:69:f7:cc:b4:08: 6f:6a:26:b1:b1:28:2c:c5:1e:6d:69:96:3a:56:3f: 1a:3e:62:f0:42:58:d2:50:35:d9:73:75:75:c7:78: cd:7a:54:1e:71:5d:b1:96:50:c0:e0:22:01:a9:62: 3e:f5:72:1a:19:b1:48:a8:85:d2:82:3c:b6:52:f4: ec:d2:e2:6a:70:8c:f5:e2:2d:06:05:33:15:19:dc: 9b:69:5c:98:b1:fb:2b:c3:ab:d8:7a:b2:39:64:93: a1:89:5c:fb:ac:1a:91:07:40:0c:7d:9a:8f:af:02: ce:b7:a6:20:e4:d0:2b:d0:b2:08:c8:4d:c1:09:c9: f7:79:ab:13:b4:bb:3b:06:7f:c6:33:bd:f9:f1:ac: cc:d8:db:98:1d:58:fc:9f:d8:8e:23:81:6f:74:c7: c7:26:ce:70:b7:df:86:c3:8e:2d:ab:2a:69:bf:9c: c6:9a:33:8b:a6:6f:a1:d3:2d:e6:ce:c3:3d:e3:ad: 10:82:84:f6:6d:89:19:0b:c1:f0:8c:af:fe:7c:ee: 70:90:15:26:c5:28:3b:f2:1f:ae:57:24:8f:d3:43: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B3:50:B3:80:D0:1A:63:70:9F:C0:A0:30:28:44:A1:A3:41:F8:61 X509v3 Authority Key Identifier: keyid:77:9C:A0:D0:95:70:85:01:6E:7D:03:5A:4E:CB:A2:78:1A:B7:C5:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5yg0JVwhQFufQNaTsuieBq3xQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137157/65B88B9C0BCF11F1BBD1FEDA2C3D8C67/d5yg0JVwhQFufQNaTsuieBq3xQ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:92:fe:01:15:c0:7b:dc:e7:cd:0d:58:7b:07:26:1b:e8:91: e9:3e:c4:a7:a0:3f:72:1b:3f:39:d3:4e:15:48:0a:bd:8a:8d: 29:c8:bf:d7:c4:37:36:03:70:2c:e8:e9:ec:50:bf:a8:11:32: b0:fc:3f:aa:5e:c7:b8:ab:70:a5:ba:70:83:c4:04:da:f7:45: c8:a9:aa:63:60:0e:95:0f:99:61:ea:8d:8a:a4:8e:c4:0d:01: 58:00:81:0c:cb:b7:03:11:1d:2d:5d:38:80:8c:26:c1:ff:cb: 4f:32:60:bd:5a:9f:b6:f9:39:54:97:79:c1:12:9b:c1:94:bc: 73:43:66:65:57:b3:8b:62:1a:c9:eb:10:e1:3f:58:e0:9c:65: 25:a0:ef:07:2e:fb:43:55:0d:05:82:a0:52:11:11:c3:44:d6: 61:9e:95:41:82:60:f0:d5:1f:dd:7d:16:86:9b:75:28:2e:05: f7:3f:ba:96:36:4f:75:e1:f8:a8:14:e2:2f:e0:d1:de:9d:1e: 11:a0:7e:8e:f6:f5:6e:e3:c1:83:1b:b4:6e:1d:bd:25:3a:d9: 73:91:ab:a6:49:2e:02:1e:22:1f:1a:53:45:ab:b4:d8:e8:0d: 30:40:30:c9:b0:eb:d8:a6:d4:d5:bf:7d:20:fa:0f:d4:ed:41: 7c:2e:32:9c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzE1NzExMC8GA1UEBRMoNzc5Q0EwRDA5NTcwODUwMTZFN0QwMzVBNEVDQkEyNzgx QUI3QzUwRjAeFw0yNjAzMjUwODExMzBaFw0yNjA0MDEwODExMzBaMBgxFjAUBgNV BAMTDTY5YzM5OGIyLWM1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOVCqzGfzMOl4DrCgzP/vR6UDYl+0PN1yetjA368ADgXKHoI4XZU9p98y0CG9q JrGxKCzFHm1pljpWPxo+YvBCWNJQNdlzdXXHeM16VB5xXbGWUMDgIgGpYj71choZ sUiohdKCPLZS9OzS4mpwjPXiLQYFMxUZ3JtpXJix+yvDq9h6sjlkk6GJXPusGpEH QAx9mo+vAs63piDk0CvQsgjITcEJyfd5qxO0uzsGf8YzvfnxrMzY25gdWPyf2I4j gW90x8cmznC334bDji2rKmm/nMaaM4umb6HTLebOwz3jrRCChPZtiRkLwfCMr/58 7nCQFSbFKDvyH65XJI/TQ6xbAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUOLNQs4DQ GmNwn8CgMChEoaNB+GEwHwYDVR0jBBgwFoAUd5yg0JVwhQFufQNaTsuieBq3xQ8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3MTU3LzY1Qjg4QjlDMEJD RjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFGdWZRTmFUc3VpZUJxM3hR OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDV5ZzBKVndoUUZ1ZlFOYVRzdWllQnEzeFE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 MTU3LzY1Qjg4QjlDMEJDRjExRjFCQkQxRkVEQTJDM0Q4QzY3L2Q1eWcwSlZ3aFFG dWZRTmFUc3VpZUJxM3hROC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCgkv4BFcB73OfNDVh7ByYb6JHpPsSnoD9yGz85004VSAq9io0pyL/XxDc2A3As 6OnsUL+oETKw/D+qXse4q3ClunCDxATa90XIqapjYA6VD5lh6o2KpI7EDQFYAIEM y7cDER0tXTiAjCbB/8tPMmC9Wp+2+TlUl3nBEpvBlLxzQ2ZlV7OLYhrJ6xDhP1jg nGUloO8HLvtDVQ0FgqBSERHDRNZhnpVBgmDw1R/dfRaGm3UoLgX3P7qWNk914fio FOIv4NHenR4RoH6O9vVu48GDG7RuHb0lOtlzkaumSS4CHiIfGlNFq7TY6A0wQDDJ sOvYptTVv30g+g/U7UF8LjKc -----END CERTIFICATE-----Generated at Thu Mar 26 21:28:04 2026 by rpki-client