$ rpki-client -vvf rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft File: 0l-HlucNZw6YbGwkdz5rd4w2BXc.mft (raw, json) Hash identifier: Nke4bHRiZbDwMuSDJO1nOMxwhG1IsCNk8VW/FJxcsVc= Subject key identifier: F9:0D:37:44:8A:E7:27:E6:57:86:8D:20:D0:AE:62:A2:02:CA:AC:09 Authority key identifier: D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 Certificate issuer: /CN=A914FD01/serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft Manifest number: 72 Signing time: Wed 25 Mar 2026 07:02:53 +0000 Manifest this update: Wed 25 Mar 2026 07:02:52 +0000 Manifest next update: Wed 01 Apr 2026 07:02:52 +0000 Files and hashes: 1: 0l-HlucNZw6YbGwkdz5rd4w2BXc.crl (hash: Z+rKIS1gDecYsNelhXhadniLehsAaEK+rf5ElFy9AW8=) 2: 44AA60D87D6311F0BC413466C4F9AE02.roa (hash: dSxq3tnitdswi8P+yewwXq9R5FYSJH19oDL7hgxl48M=) 3: 442749147D6311F0BC413466C4F9AE02.roa (hash: /H/amlDYVgpG+GZhv+9Zlb6iKP36CZtKh78wy+TXTLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FD01, serialNumber=D25F8796E70D670E986C6C24773E6B778C360577 Validity Not Before: Mar 25 07:02:52 2026 GMT Not After : Apr 1 07:02:52 2026 GMT Subject: CN=69c3889d-d96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:6f:8a:71:a8:fb:8e:0f:17:99:da:d0:17: 36:db:a6:ed:03:90:03:79:47:42:5c:2a:13:b2:5c: 41:67:a4:41:94:fe:ab:0c:63:42:f6:52:f4:0e:1e: bb:b2:49:fc:f8:20:63:5d:f6:0a:92:77:75:26:e5: 82:74:39:f1:3b:9e:d2:c5:d7:f7:a7:f9:93:ec:58: 72:2c:b9:ea:e1:7a:e8:20:fa:fc:3e:44:67:55:b8: de:2a:4e:b3:e3:4c:ac:bc:3b:b5:bd:8a:8b:34:0a: 2a:02:e3:19:7c:11:b0:ae:9c:5c:5f:b3:8a:74:ea: 5c:0a:3b:0a:43:ff:b4:46:48:d4:0e:9f:7a:a1:71: 22:80:07:90:c0:08:e6:71:7a:ed:76:c4:91:49:a7: 0b:9a:f7:21:51:db:b0:57:65:80:24:b1:54:3f:6b: 52:d2:92:81:cb:56:65:98:42:96:8b:94:62:45:39: e9:f5:e7:64:1b:8d:1d:3f:19:81:43:4a:f0:b7:00: d3:ed:7e:21:bc:4c:9e:cf:38:99:4f:cb:9d:ce:d1: b9:2d:b1:7d:a7:4b:fd:6e:e3:3f:81:61:86:e3:30: fb:3f:7d:db:20:1d:ab:ab:c6:80:76:4d:6f:01:d1: 80:75:47:b9:d2:0b:cd:b0:8f:82:f5:7a:cb:60:fe: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:37:44:8A:E7:27:E6:57:86:8D:20:D0:AE:62:A2:02:CA:AC:09 X509v3 Authority Key Identifier: keyid:D2:5F:87:96:E7:0D:67:0E:98:6C:6C:24:77:3E:6B:77:8C:36:05:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0l-HlucNZw6YbGwkdz5rd4w2BXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FD01/36A71E4E7D5F11F09EC9C938C4F9AE02/0l-HlucNZw6YbGwkdz5rd4w2BXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3c:f3:6b:d7:07:b0:9a:7b:e8:93:c5:03:8c:51:5d:72:0f: 76:87:32:be:f2:99:fb:1a:62:5c:43:a0:b1:7a:15:80:cf:1d: 80:7a:e4:f4:05:77:e9:ae:ea:3e:17:93:14:7e:f9:71:27:26: cf:42:95:a9:d2:7e:f9:20:44:d1:4b:9e:35:76:f1:ae:c1:ec: 14:9f:62:f7:7d:2d:8a:be:c0:a9:3f:0b:02:49:a3:45:3a:09: e9:8f:39:c6:66:ce:60:36:33:9b:49:a5:91:13:09:43:c4:17: bf:60:e9:10:aa:c2:cf:44:fc:39:61:97:95:9a:01:db:6c:0b: a8:57:36:c7:88:46:60:19:b2:8e:36:25:e3:40:0e:76:ae:f8: 33:10:c2:d1:c6:96:c8:c1:b3:59:99:a9:f3:25:f4:90:13:b5: ed:59:69:53:c3:6e:5b:ba:87:a9:ac:1e:ca:a6:4d:78:fb:77: 16:d7:07:64:ed:c7:63:e7:3c:0e:2b:df:a6:9f:2e:a6:a4:f6: ae:aa:25:e6:14:c1:2a:cc:4a:d3:44:ce:f9:3c:1c:6f:19:aa: bd:49:52:c4:62:cf:55:d6:73:6c:69:60:56:0d:07:42:79:9f: bf:bf:be:9c:34:f3:d5:d2:28:ea:43:55:21:4a:c6:05:07:e6: 7a:b7:90:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RkQwMTExMC8GA1UEBRMoRDI1Rjg3OTZFNzBENjcwRTk4NkM2QzI0NzczRTZCNzc4 QzM2MDU3NzAeFw0yNjAzMjUwNzAyNTJaFw0yNjA0MDEwNzAyNTJaMBgxFjAUBgNV BAMTDTY5YzM4ODlkLWQ5NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAPW+Kcaj7jg8XmdrQFzbbpu0DkAN5R0JcKhOyXEFnpEGU/qsMY0L2UvQOHruy Sfz4IGNd9gqSd3Um5YJ0OfE7ntLF1/en+ZPsWHIsuerheugg+vw+RGdVuN4qTrPj TKy8O7W9ios0CioC4xl8EbCunFxfs4p06lwKOwpD/7RGSNQOn3qhcSKAB5DACOZx eu12xJFJpwua9yFR27BXZYAksVQ/a1LSkoHLVmWYQpaLlGJFOen152QbjR0/GYFD SvC3ANPtfiG8TJ7POJlPy53O0bktsX2nS/1u4z+BYYbjMPs/fdsgHaurxoB2TW8B 0YB1R7nSC82wj4L1estg/hfDAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU+Q03RIrn J+ZXho0g0K5iogLKrAkwHwYDVR0jBBgwFoAU0l+HlucNZw6YbGwkdz5rd4w2BXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGRDAxLzM2QTcxRTRFN0Q1 RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2WWJHd2tkejVyZDR3MkJY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGwtSGx1Y05adzZZYkd3a2R6NXJkNHcyQlhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG RDAxLzM2QTcxRTRFN0Q1RjExRjA5RUM5QzkzOEM0RjlBRTAyLzBsLUhsdWNOWnc2 WWJHd2tkejVyZDR3MkJYYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvPPNr1wewmnvok8UDjFFdcg92hzK+8pn7GmJcQ6CxehWAzx2AeuT0BXfpruo+ F5MUfvlxJybPQpWp0n75IETRS541dvGuwewUn2L3fS2KvsCpPwsCSaNFOgnpjznG Zs5gNjObSaWREwlDxBe/YOkQqsLPRPw5YZeVmgHbbAuoVzbHiEZgGbKONiXjQA52 rvgzEMLRxpbIwbNZmanzJfSQE7XtWWlTw25buoeprB7Kpk14+3cW1wdk7cdj5zwO K9+mny6mpPauqiXmFMEqzErTRM75PBxvGaq9SVLEYs9V1nNsaWBWDQdCeZ+/v76c NPPV0ijqQ1UhSsYFB+Z6t5At -----END CERTIFICATE-----Generated at Thu Mar 26 06:17:39 2026 by rpki-client