$ rpki-client -vvf rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft File: aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft (raw, json) Hash identifier: NAG3JxCvN2aQ4f1wAfITvFEJh/7Q+k7TRXnjWEkDcFc= Subject key identifier: 72:EC:53:8F:67:A3:7D:9A:A8:15:91:1D:24:21:4E:B1:6D:EF:09:EF Authority key identifier: 69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 Certificate issuer: /CN=A9141274/serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft Manifest number: D0 Signing time: Wed 25 Mar 2026 06:04:48 +0000 Manifest this update: Wed 25 Mar 2026 06:04:47 +0000 Manifest next update: Wed 01 Apr 2026 06:04:47 +0000 Files and hashes: 1: aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl (hash: +z4OHcF17MewP7U5KXQ3RKRGBw9/3wcaCqXE+flPABY=) 2: 1C8955ACFB3911EFA7A85D5EC4F9AE02.roa (hash: yZGNlzCw9fYEkUgbHQXyzQMU/Eeaou90bAR9FcUS1CQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141274, serialNumber=6958A1AB3ACF7F95EDA5AD9C9E41E449B6D117F2 Validity Not Before: Mar 25 06:04:47 2026 GMT Not After : Apr 1 06:04:47 2026 GMT Subject: CN=69c37aff-a0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:0f:06:cb:69:a7:0e:50:7c:94:04:d6:da: 2c:56:7c:c6:67:6b:ef:e2:96:30:dc:87:59:c6:fd: 17:52:16:96:95:78:f6:4e:b3:7a:2a:6f:ef:2e:f1: c8:ba:4e:2e:45:a5:61:e2:62:aa:b2:3d:00:e7:99: 68:90:b7:18:56:da:8d:83:c4:cf:ca:16:42:5f:96: d2:b2:7a:0c:01:b5:ec:1b:03:47:e2:a3:29:d1:94: fe:d0:92:90:ad:ae:a3:66:02:00:44:f5:aa:87:f5: 8a:21:52:62:d5:14:9e:b3:d2:b7:1a:12:d6:d2:29: 67:68:dd:43:c8:dd:a8:50:89:80:83:bf:c2:ab:4e: 76:2f:37:a3:2a:c7:e8:c4:e5:dd:1f:c5:b0:82:2c: 88:3a:f7:e6:c8:45:23:bf:94:db:02:1d:26:49:51: 95:98:7f:8c:0c:7f:4c:df:c4:83:7c:12:c9:6b:1f: 23:03:2d:ca:5f:9b:6f:61:67:51:60:6c:30:65:08: b3:54:65:cb:8d:63:74:d7:cf:51:d0:a5:17:19:2d: f6:4e:d8:14:7c:f9:d7:c4:85:3e:4c:a8:55:28:3e: e1:03:71:b1:55:4e:a5:2a:16:0b:ea:23:d4:68:8a: 04:1b:a5:ff:f7:5f:da:ba:7d:f5:43:3b:9b:e3:a8: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:EC:53:8F:67:A3:7D:9A:A8:15:91:1D:24:21:4E:B1:6D:EF:09:EF X509v3 Authority Key Identifier: keyid:69:58:A1:AB:3A:CF:7F:95:ED:A5:AD:9C:9E:41:E4:49:B6:D1:17:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aVihqzrPf5Xtpa2cnkHkSbbRF_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141274/D99F3AFAFB2311EF9F15C74AC4F9AE02/aVihqzrPf5Xtpa2cnkHkSbbRF_I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f5:2a:25:d0:2a:aa:05:2c:e9:46:0c:99:4c:e3:2d:0a:cd:b7: 00:08:1f:6d:73:36:00:92:c4:69:a9:3f:2a:fd:1c:3d:f5:e8: a8:e3:10:41:1e:70:09:92:ee:5e:69:3b:cb:0a:2d:13:dd:0e: 63:76:ed:1c:9e:03:0b:0c:55:d0:e1:a8:31:ac:0b:6c:85:94: 3b:57:c1:56:86:a8:87:8f:fd:bd:82:12:4e:fd:a9:6c:67:2d: 0d:4a:0c:d7:41:a9:e9:45:53:b5:e9:59:0b:49:7e:af:46:08: dc:06:f7:f7:10:d0:dd:0e:94:d2:47:9a:6d:74:fb:ce:83:93: 76:b0:70:ed:a0:da:af:15:37:b9:b6:a0:71:19:00:70:7e:42: 87:be:f5:27:26:c8:95:3f:14:f5:28:6a:d4:ba:b5:67:28:ca: 87:54:3a:d5:90:15:87:c8:90:c8:fd:cb:6a:0c:cc:0d:8d:cb: 5f:0a:2e:9a:d4:1c:10:22:1c:40:9b:18:48:83:0d:dc:66:eb: dc:37:e8:c8:77:37:a2:0a:23:d8:50:6d:67:e7:d3:e1:b0:77: e5:75:bd:65:3c:59:bb:71:f3:70:05:5b:a1:cb:df:a4:dc:fb: 45:b8:d3:48:ce:e2:ab:ce:fe:81:71:65:77:de:1d:a3:46:1f: 6c:f3:5c:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDEyNzQxMTAvBgNVBAUTKDY5NThBMUFCM0FDRjdGOTVFREE1QUQ5QzlFNDFFNDQ5 QjZEMTE3RjIwHhcNMjYwMzI1MDYwNDQ3WhcNMjYwNDAxMDYwNDQ3WjAYMRYwFAYD VQQDEw02OWMzN2FmZi1hMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzTcPBstppw5QfJQE1tosVnzGZ2vv4pYw3IdZxv0XUhaWlXj2TrN6Km/vLvHI uk4uRaVh4mKqsj0A55lokLcYVtqNg8TPyhZCX5bSsnoMAbXsGwNH4qMp0ZT+0JKQ ra6jZgIARPWqh/WKIVJi1RSes9K3GhLW0ilnaN1DyN2oUImAg7/Cq052LzejKsfo xOXdH8WwgiyIOvfmyEUjv5TbAh0mSVGVmH+MDH9M38SDfBLJax8jAy3KX5tvYWdR YGwwZQizVGXLjWN0189R0KUXGS32TtgUfPnXxIU+TKhVKD7hA3GxVU6lKhYL6iPU aIoEG6X/91/aun31Qzub46ib4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHLsU49n o32aqBWRHSQhTrFt7wnvMB8GA1UdIwQYMBaAFGlYoas6z3+V7aWtnJ5B5Em20Rfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTI3NC9EOTlGM0FGQUZC MjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1WHRwYTJjbmtIa1NiYlJG X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FWaWhxenJQZjVYdHBhMmNua0hrU2JiUkZfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTI3NC9EOTlGM0FGQUZCMjMxMUVGOUYxNUM3NEFDNEY5QUUwMi9hVmlocXpyUGY1 WHRwYTJjbmtIa1NiYlJGX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA9Sol0CqqBSzpRgyZTOMtCs23AAgfbXM2AJLEaak/Kv0cPfXoqOMQQR5wCZLu Xmk7ywotE90OY3btHJ4DCwxV0OGoMawLbIWUO1fBVoaoh4/9vYISTv2pbGctDUoM 10Gp6UVTtelZC0l+r0YI3Ab39xDQ3Q6U0keabXT7zoOTdrBw7aDarxU3ubagcRkA cH5Ch771JybIlT8U9Shq1Lq1ZyjKh1Q61ZAVh8iQyP3LagzMDY3LXwoumtQcECIc QJsYSIMN3Gbr3DfoyHc3ogoj2FBtZ+fT4bB35XW9ZTxZu3HzcAVbocvfpNz7RbjT SM7iq87+gXFld94do0YfbPNcXg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:08 2026 by rpki-client