$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: dG/jAf0LKsaYwj3/3yIq3xDcoMV/uLoRA7YgFAGw/y4= Subject key identifier: 70:F3:12:94:D7:6C:8E:50:8E:7F:A1:63:42:E2:27:87:CE:FF:95:C1 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: 0155 Signing time: Wed 25 Mar 2026 04:19:24 +0000 Manifest this update: Wed 25 Mar 2026 04:19:24 +0000 Manifest next update: Wed 01 Apr 2026 04:19:24 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: mEGOaU40PjeLQ9BDaH1e8jEshk17ioTXjALvG3KJKww=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: VVQzShIJbaueJ2kqgBg7iWLw4cnFdAHY6jIMdsEURbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Mar 25 04:19:24 2026 GMT Not After : Apr 1 04:19:24 2026 GMT Subject: CN=69c3624c-829f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:d5:68:9c:c4:5e:29:37:8f:14:69:b0:71: d5:80:e3:4d:97:c2:f1:ff:4a:f2:19:55:38:6e:2d: 0d:fd:7b:b8:b8:1d:73:73:3b:76:32:8b:ee:52:e5: 82:dc:91:bb:4e:c2:fd:eb:99:46:ad:2d:87:b0:91: fe:f4:45:0d:e4:e3:51:a2:4a:13:0e:f2:33:d8:21: 2a:29:70:fd:df:e1:e9:62:77:73:a4:fc:e2:1e:70: 77:3a:15:65:83:2e:b2:bf:ea:be:7a:d5:a8:38:94: 6d:c7:0a:4f:ab:1d:e0:53:c6:5f:08:5d:71:49:81: 29:4d:e0:bf:42:a9:d0:30:00:a8:ab:5e:9e:bc:94: 5a:aa:86:9a:90:d2:db:d0:97:f9:b3:54:5c:8e:21: 5c:6e:62:44:11:dc:88:34:c0:94:12:57:17:d7:03: 1a:7b:9b:66:5c:4b:b7:4e:72:a0:4d:8c:3f:c4:41: 13:bc:6a:c0:72:41:2a:04:8c:f2:a6:57:ed:c7:8e: c9:ff:fc:98:d3:33:88:71:4a:64:dc:4b:a0:cc:9d: a1:2b:3c:30:50:7e:15:fd:4a:40:d6:7e:d7:0d:f8: d8:97:57:07:d8:5e:27:7c:97:3e:4a:f9:e1:31:19: 6c:53:da:c6:f3:9e:f8:7d:7a:be:3b:0a:d8:b0:a3: c3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:12:94:D7:6C:8E:50:8E:7F:A1:63:42:E2:27:87:CE:FF:95:C1 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b6:4a:8f:3c:c8:41:e8:03:b5:98:6c:f1:23:f2:af:d4:54: 2e:0e:48:28:51:87:42:66:1d:15:76:41:71:c6:03:aa:04:0f: 5f:bb:76:b5:53:7e:72:a2:2d:e5:5a:61:82:da:4f:4d:f0:5d: 18:2b:93:e9:4a:d4:74:7d:1c:12:9a:ba:af:38:f2:80:f6:bd: ca:95:f1:02:ea:89:1b:6b:2d:1a:c3:c6:59:03:cc:7c:59:6e: 33:3a:29:42:14:23:26:1d:35:19:0b:5d:03:fe:e7:49:29:35: e2:5e:e2:d4:8c:b8:f6:f4:a3:cc:b2:c7:f8:44:ae:00:46:eb: 1b:fb:28:f9:f9:47:6e:27:9b:66:96:06:63:ac:01:53:d5:04: dd:bd:37:9c:14:5a:9f:35:46:50:9e:bb:51:0b:51:8f:a6:76: 5e:b8:14:7b:26:ac:2c:e9:91:5a:3d:b4:ab:48:72:a9:f0:c2: f3:d9:b8:a7:e0:a7:6d:84:4b:e0:06:b1:c9:0e:3a:7b:28:45: e3:ed:56:31:02:a0:1e:c7:3a:d3:eb:29:75:7b:a8:3d:49:4f: 91:e5:44:3d:21:8e:8e:69:64:6c:ef:9d:fb:30:f3:46:61:93: e0:08:37:df:b9:f5:68:9c:47:8d:f4:20:ac:e9:45:b1:a3:7c: d8:f8:44:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjYwMzI1MDQxOTI0WhcNMjYwNDAxMDQxOTI0WjAYMRYwFAYD VQQDEw02OWMzNjI0Yy04MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4PVaJzEXik3jxRpsHHVgONNl8Lx/0ryGVU4bi0N/Xu4uB1zczt2MovuUuWC 3JG7TsL965lGrS2HsJH+9EUN5ONRokoTDvIz2CEqKXD93+HpYndzpPziHnB3OhVl gy6yv+q+etWoOJRtxwpPqx3gU8ZfCF1xSYEpTeC/QqnQMACoq16evJRaqoaakNLb 0Jf5s1RcjiFcbmJEEdyINMCUElcX1wMae5tmXEu3TnKgTYw/xEETvGrAckEqBIzy plftx47J//yY0zOIcUpk3EugzJ2hKzwwUH4V/UpA1n7XDfjYl1cH2F4nfJc+Svnh MRlsU9rG8574fXq+OwrYsKPDWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHDzEpTX bI5Qjn+hY0LiJ4fO/5XBMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALbZKjzzIQegDtZhs8SPyr9RULg5IKFGHQmYdFXZBccYDqgQPX7t2tVN+cqIt 5VphgtpPTfBdGCuT6UrUdH0cEpq6rzjygPa9ypXxAuqJG2stGsPGWQPMfFluMzop QhQjJh01GQtdA/7nSSk14l7i1Iy49vSjzLLH+ESuAEbrG/so+flHbiebZpYGY6wB U9UE3b03nBRanzVGUJ67UQtRj6Z2XrgUeyasLOmRWj20q0hyqfDC89m4p+CnbYRL 4AaxyQ46eyhF4+1WMQKgHsc60+spdXuoPUlPkeVEPSGOjmlkbO+d+zDzRmGT4Ag3 37n1aJxHjfQgrOlFsaN82PhEdQ== -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:26 2026 by rpki-client