$ rpki-client -vvf rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft File: 788TGtZIDR3QTx1EduNZVFL_RBw.mft (raw, json) Hash identifier: UDN7xlT5LUvYKkksays7jiwg8WIP2bmxas2CdRH2vcI= Subject key identifier: 26:90:0E:1D:6C:D8:47:FE:0E:19:88:FC:1B:AB:F5:E0:8D:52:8C:A7 Authority key identifier: EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C Certificate issuer: /CN=A9140D20/serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Certificate serial: 08BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft Manifest number: 08AE Signing time: Tue 24 Mar 2026 20:15:01 +0000 Manifest this update: Tue 24 Mar 2026 20:15:00 +0000 Manifest next update: Tue 31 Mar 2026 20:15:00 +0000 Files and hashes: 1: 788TGtZIDR3QTx1EduNZVFL_RBw.crl (hash: iCXyvWq0GAnkfMf+diZ3BnYXMi31/C301M2HL2Yw8Rw=) 2: 5E4A01CA941111EE84D37717C4F9AE02.roa (hash: Z5cniwYpcysrYSbmGVe8lhrLrM0kQoHeBRyDzZhCjRY=) 3: 01E652108F4F11EEA2E9CA7DC4F9AE02.roa (hash: 5Bf508KFyPOHiXUPlJ5Lt2YhRIk2soZom9mW0lTXFhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2235 (0x8bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140D20, serialNumber=EFCF131AD6480D1DD04F1D4476E3595452FF441C Validity Not Before: Mar 24 20:15:00 2026 GMT Not After : Mar 31 20:15:00 2026 GMT Subject: CN=69c2f0c4-3ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:96:5c:ae:a9:08:d5:3a:23:3c:2e:e7:0a: 69:99:70:e9:a3:bd:f1:c6:dd:94:69:5e:b1:34:55: 45:f3:87:36:41:8d:f2:af:bb:1a:36:30:44:7e:3d: 67:56:7c:0c:ce:67:96:f3:f1:58:d5:38:ba:72:1c: e6:a3:b8:7e:9e:40:ae:44:ee:fe:d7:42:80:2b:d0: 24:cc:36:6a:6b:9b:0c:62:c6:86:dc:26:9f:7d:e7: c8:d1:5d:12:61:21:89:a0:9f:df:ac:8d:dc:02:ee: e3:83:73:a2:f2:7d:64:da:d8:77:a1:69:d6:fa:7b: 8c:c7:06:fe:fa:4f:94:30:b5:52:ec:cf:25:40:7a: 6b:00:bd:75:08:42:ac:11:dc:01:18:b4:1b:d1:71: b3:46:ae:95:7c:71:a9:56:f6:de:2c:74:f6:3b:9d: ec:b2:55:d9:97:03:20:fb:37:e6:8a:3b:6b:ac:94: e4:c5:ac:69:a9:b6:a0:ac:e0:a8:98:4d:98:ad:65: 78:33:85:f5:f3:24:0e:59:05:cd:65:38:20:b7:44: 94:23:c2:24:3e:3d:71:88:77:6a:30:a2:85:35:5f: 99:5b:b5:43:47:df:74:9b:9c:e3:c6:3e:13:53:98: c9:92:3c:e7:14:35:0d:df:9a:77:4e:33:cf:25:1c: 80:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:90:0E:1D:6C:D8:47:FE:0E:19:88:FC:1B:AB:F5:E0:8D:52:8C:A7 X509v3 Authority Key Identifier: keyid:EF:CF:13:1A:D6:48:0D:1D:D0:4F:1D:44:76:E3:59:54:52:FF:44:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788TGtZIDR3QTx1EduNZVFL_RBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140D20/D943A45ADBDA11EAA2CC2B41C4F9AE02/788TGtZIDR3QTx1EduNZVFL_RBw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:49:aa:52:16:6a:19:98:35:b7:ff:23:61:c3:0e:ce:ed:46: 87:7a:39:34:aa:e2:72:de:70:3f:de:97:b9:57:b9:90:14:9a: 0e:8b:2f:2d:16:5f:3f:c4:6d:07:4c:16:85:c9:da:d8:03:93: 2a:75:a3:99:14:a3:16:8c:a7:01:d2:66:be:90:5d:78:5a:ff: ab:6f:ce:4c:37:82:83:d4:76:aa:21:68:ac:7f:21:6e:b2:04: be:94:42:b4:f2:7d:28:41:b0:ed:1f:54:4f:c2:f4:68:6f:e2: f9:85:fd:ab:dd:3f:d7:87:de:b6:38:e5:24:3b:c5:0d:0c:47: a1:c5:99:39:4c:c0:7d:d6:a6:a4:57:2a:bc:03:44:bd:25:37: dc:42:22:58:17:7f:d8:bd:aa:69:77:00:53:03:d2:6f:c2:cc: 1a:38:97:8c:4c:d1:54:6f:26:04:6d:f2:fc:df:a9:2a:e8:6f: 24:40:98:ec:a6:20:30:eb:99:1a:69:ac:27:8c:b5:76:69:a6: e6:5a:80:3d:f5:c7:6e:3f:05:5e:60:09:a7:9e:a1:8f:11:f6: d2:40:4b:ac:42:e8:96:2c:c2:b1:e9:2c:66:68:56:1a:ed:e8: 05:7f:a0:59:68:57:55:8e:5b:81:db:0f:43:16:ea:8a:e0:ab: 8a:8e:9f:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBEMjAxMTAvBgNVBAUTKEVGQ0YxMzFBRDY0ODBEMUREMDRGMUQ0NDc2RTM1OTU0 NTJGRjQ0MUMwHhcNMjYwMzI0MjAxNTAwWhcNMjYwMzMxMjAxNTAwWjAYMRYwFAYD VQQDEw02OWMyZjBjNC0zY2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs16WXK6pCNU6Izwu5wppmXDpo73xxt2UaV6xNFVF84c2QY3yr7saNjBEfj1n VnwMzmeW8/FY1Ti6chzmo7h+nkCuRO7+10KAK9AkzDZqa5sMYsaG3CaffefI0V0S YSGJoJ/frI3cAu7jg3Oi8n1k2th3oWnW+nuMxwb++k+UMLVS7M8lQHprAL11CEKs EdwBGLQb0XGzRq6VfHGpVvbeLHT2O53sslXZlwMg+zfmijtrrJTkxaxpqbagrOCo mE2YrWV4M4X18yQOWQXNZTggt0SUI8IkPj1xiHdqMKKFNV+ZW7VDR990m5zjxj4T U5jJkjznFDUN35p3TjPPJRyAnQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCaQDh1s 2Ef+DhmI/Bur9eCNUoynMB8GA1UdIwQYMBaAFO/PExrWSA0d0E8dRHbjWVRS/0Qc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEQyMC9EOTQzQTQ1QURC REExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURSM1FUeDFFZHVOWlZGTF9S QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OFRHdFpJRFIzUVR4MUVkdU5aVkZMX1JCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEQyMC9EOTQzQTQ1QURCREExMUVBQTJDQzJCNDFDNEY5QUUwMi83ODhUR3RaSURS M1FUeDFFZHVOWlZGTF9SQncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGEmqUhZqGZg1t/8jYcMOzu1Gh3o5NKrict5wP96XuVe5kBSaDosvLRZfP8Rt B0wWhcna2AOTKnWjmRSjFoynAdJmvpBdeFr/q2/OTDeCg9R2qiForH8hbrIEvpRC tPJ9KEGw7R9UT8L0aG/i+YX9q90/14fetjjlJDvFDQxHocWZOUzAfdampFcqvANE vSU33EIiWBd/2L2qaXcAUwPSb8LMGjiXjEzRVG8mBG3y/N+pKuhvJECY7KYgMOuZ GmmsJ4y1dmmm5lqAPfXHbj8FXmAJp56hjxH20kBLrELolizCseksZmhWGu3oBX+g WWhXVY5bgdsPQxbqiuCrio6f0Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:19 2026 by rpki-client