$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft File: srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json) Hash identifier: XwFNpV8/9hJ6y6ZSJTFCo/b16+1VYML41pno6lc9Sn4= Subject key identifier: A1:3D:60:92:FA:AC:52:1C:1C:76:B4:13:D0:A4:14:7C:10:77:F7:D0 Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 Certificate issuer: /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Certificate serial: 0B1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft Manifest number: 0B12 Signing time: Tue 24 Mar 2026 19:06:49 +0000 Manifest this update: Tue 24 Mar 2026 19:06:49 +0000 Manifest next update: Tue 31 Mar 2026 19:06:49 +0000 Files and hashes: 1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: M1fJhSdHLpR4DVu+kNZEENYbZZjJ0Nt8yhftcY+QR2I=) 2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2842 (0xb1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058 Validity Not Before: Mar 24 19:06:49 2026 GMT Not After : Mar 31 19:06:49 2026 GMT Subject: CN=69c2e0c9-a976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:88:89:e0:50:0c:59:d6:7e:e6:6d:72:78:1e: 77:00:94:9a:64:52:91:85:42:23:2d:84:98:f7:6c: 04:49:99:b6:ab:f1:72:11:37:ad:81:0e:f5:ca:dc: fe:75:e5:0b:b3:0e:0b:a0:09:74:7a:04:4e:96:4f: df:4b:45:7f:dc:d1:ab:ab:9f:38:33:99:19:cb:ee: f5:82:6a:f8:dd:7c:e1:ba:ed:b0:a0:d2:3e:db:a0: 5e:25:e6:b7:77:a9:bb:5a:54:13:f6:bf:f4:80:f0: 41:55:20:90:4d:2f:a6:37:da:8d:4f:91:76:c1:f4: 2c:d1:1d:d6:f9:4e:14:9f:6b:07:5b:24:51:ca:94: 4d:14:1b:e4:5d:91:6a:7c:e3:8b:0b:ab:df:93:bc: 68:ce:99:0d:3f:93:cf:1b:3b:96:0a:c6:4f:a8:e0: 8a:70:2d:30:ef:80:cc:cb:b9:49:5a:6b:e8:66:a7: 3f:98:be:3a:46:97:17:0b:f7:c8:39:83:b1:1f:53: 10:9e:46:98:0e:f3:8a:36:38:ea:b7:0e:74:92:bf: 87:25:a7:13:74:22:c7:35:f4:30:08:f5:99:25:3d: b4:61:29:b1:34:39:d3:ad:bc:d5:b3:96:76:e5:47: 13:75:1a:b6:c0:49:bd:5e:7e:13:52:a4:95:9d:22: fa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3D:60:92:FA:AC:52:1C:1C:76:B4:13:D0:A4:14:7C:10:77:F7:D0 X509v3 Authority Key Identifier: keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:2c:19:eb:1a:e6:0b:9e:7b:ad:ae:40:cf:79:93:e3:23:17: d6:e8:fb:45:1a:3c:7b:28:12:5f:a0:ef:be:f2:46:9f:96:a8: 9f:b6:da:44:46:a5:d5:dd:00:ad:fd:84:49:4d:0a:d4:ba:de: da:6e:cf:88:8e:79:cc:d9:37:72:a1:89:4b:db:45:f2:9a:ac: 3a:80:41:3d:f9:10:ad:d5:15:48:73:0e:36:ef:5c:fa:91:d3: 05:63:2b:d8:f3:54:a9:f9:99:b1:74:8b:06:c5:e1:11:e9:91: fe:d7:d4:b5:ba:72:c0:f5:95:8e:3e:30:d9:29:0c:96:eb:7d: d1:6c:bf:08:cd:c4:e5:b4:9b:70:08:c9:b5:51:e2:d9:85:2c: f9:65:bd:94:d1:3f:29:5e:a8:ee:19:3f:54:99:87:af:03:6f: a0:1e:62:26:d5:97:91:69:8e:27:29:8d:53:7e:ac:6c:4f:9c: 1b:ee:6f:cc:35:fb:aa:ab:ed:0d:db:f8:e3:aa:97:cb:b4:bf: 59:4e:14:81:4f:3e:a8:42:36:83:79:43:c9:a0:14:ad:0c:98: 9e:c5:12:42:21:c2:24:fa:8e:d6:14:da:f2:88:13:fb:6d:1f: 43:81:bb:79:83:7c:64:18:78:31:6d:b9:92:eb:0d:66:8a:01: 9d:5d:5b:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDM5N0IxMTAvBgNVBAUTKEIyQkE0RDI3NUE0OThGQjQ2NDZDN0JDMDZFMjYyM0Ux NkJFNzkwNTgwHhcNMjYwMzI0MTkwNjQ5WhcNMjYwMzMxMTkwNjQ5WjAYMRYwFAYD VQQDEw02OWMyZTBjOS1hOTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA54iJ4FAMWdZ+5m1yeB53AJSaZFKRhUIjLYSY92wESZm2q/FyETetgQ71ytz+ deULsw4LoAl0egROlk/fS0V/3NGrq584M5kZy+71gmr43Xzhuu2woNI+26BeJea3 d6m7WlQT9r/0gPBBVSCQTS+mN9qNT5F2wfQs0R3W+U4Un2sHWyRRypRNFBvkXZFq fOOLC6vfk7xozpkNP5PPGzuWCsZPqOCKcC0w74DMy7lJWmvoZqc/mL46RpcXC/fI OYOxH1MQnkaYDvOKNjjqtw50kr+HJacTdCLHNfQwCPWZJT20YSmxNDnTrbzVs5Z2 5UcTdRq2wEm9Xn4TUqSVnSL6jwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKE9YJL6 rFIcHHa0E9CkFHwQd/fQMB8GA1UdIwQYMBaAFLK6TSdaSY+0ZGx7wG4mI+Fr55BY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mzk3Qi8wRTA0MDFBMjVF QTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3UmtiSHZBYmlZajRXdm5r RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NycE5KMXBKajdSa2JIdkFiaVlqNFd2bmtGZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mzk3Qi8wRTA0MDFBMjVFQTAxMUVBOUEyNjQ2NkJDNEY5QUUwMi9zcnBOSjFwSmo3 UmtiSHZBYmlZajRXdm5rRmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkiwZ6xrmC557ra5Az3mT4yMX1uj7RRo8eygSX6DvvvJGn5aon7baREal1d0A rf2ESU0K1Lre2m7PiI55zNk3cqGJS9tF8pqsOoBBPfkQrdUVSHMONu9c+pHTBWMr 2PNUqfmZsXSLBsXhEemR/tfUtbpywPWVjj4w2SkMlut90Wy/CM3E5bSbcAjJtVHi 2YUs+WW9lNE/KV6o7hk/VJmHrwNvoB5iJtWXkWmOJymNU36sbE+cG+5vzDX7qqvt Ddv446qXy7S/WU4UgU8+qEI2g3lDyaAUrQyYnsUSQiHCJPqO1hTa8ogT+20fQ4G7 eYN8ZBh4MW25kusNZooBnV1bLg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:01 2026 by rpki-client