$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft File: 67t1Ysakn7ft5XQSvB_61I4a-0k.mft (raw, json) Hash identifier: pr/6J4fFdElfy9JZ+jq+vPzvZNye9DjZidXca3+r/fE= Subject key identifier: E3:2D:90:7C:6A:49:9A:0C:FE:5F:4D:2A:2C:3E:AC:85:54:EF:FE:3E Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 Certificate issuer: /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Certificate serial: 04F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft Manifest number: 04E9 Signing time: Tue 24 Mar 2026 23:29:33 +0000 Manifest this update: Tue 24 Mar 2026 23:29:33 +0000 Manifest next update: Tue 31 Mar 2026 23:29:33 +0000 Files and hashes: 1: 67t1Ysakn7ft5XQSvB_61I4a-0k.crl (hash: TQLALL+MMd3joWugzmRzQnmec2ie/jzYlOaZ55QIg40=) 2: FDFFD0D8FFFC11F0BE7B89863A6F56BC.roa (hash: ctyWpGsIE5EQesNkt+cSgGgPoPwdQaksbBOUuFK3Fho=) 3: 9CA1FC26FA7A11F0A1FE82F24D6F56BC.roa (hash: D7TWn4uVI/L44bR9jZY7LmPRQC44gxFuipaLGEVANoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1273 (0x4f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49 Validity Not Before: Mar 24 23:29:33 2026 GMT Not After : Mar 31 23:29:33 2026 GMT Subject: CN=69c31e5d-b472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:2d:c3:e2:ba:90:d4:90:52:71:af:7c:b6: e4:f6:fa:c2:24:85:9a:cd:d0:53:01:06:82:97:5d: 71:3a:39:13:b5:a6:b8:b9:64:d8:a1:84:d7:62:d6: 14:ec:c8:cb:42:48:27:70:19:46:92:82:2e:4d:69: e0:ab:fa:62:70:85:0f:67:30:e3:63:71:60:50:4b: dc:e6:b1:e6:2f:6b:71:91:df:a3:97:03:d4:42:46: 9a:70:4d:65:36:ea:58:09:ae:3b:9c:f5:2e:06:ec: 71:9f:2e:f3:ea:82:72:e1:de:80:65:45:3a:f9:44: ac:b6:32:4a:c8:21:b6:23:35:aa:81:54:4a:6b:41: 1e:a9:23:15:f2:40:05:cb:ae:d4:b4:a0:d9:2e:4d: bd:2b:dc:75:14:b1:1c:d2:44:5c:90:cf:76:67:6d: 1d:d7:54:0a:79:e9:ea:92:de:67:e9:62:ea:2f:d2: b3:1f:e4:11:df:58:e5:58:3c:8e:c3:f2:a1:84:2c: 86:38:4d:3d:30:7a:8f:d9:57:de:44:81:69:5b:fc: b2:34:33:bf:0f:e2:20:03:0a:d4:a8:61:4f:16:a9: cb:70:5a:c8:a8:a5:b3:6f:47:6d:27:28:21:b2:5b: e4:f0:83:46:df:01:16:41:7a:aa:f6:98:54:fb:6c: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2D:90:7C:6A:49:9A:0C:FE:5F:4D:2A:2C:3E:AC:85:54:EF:FE:3E X509v3 Authority Key Identifier: keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c1:c0:99:38:03:ab:b2:da:90:e0:28:7d:09:de:f2:f7:71: c3:1b:77:a8:ca:ff:76:36:33:ec:f6:2c:02:04:bc:15:7f:a7: 20:22:c5:7b:93:59:f1:b2:ab:e5:d6:f3:4e:c5:b3:91:4f:d0: 34:a5:ab:2f:72:98:5b:80:84:08:34:bc:73:61:47:a0:e1:97: 21:5c:7e:aa:87:bc:a9:c3:66:50:64:85:60:5b:cb:9e:3b:be: 61:09:f2:20:46:73:70:8e:00:79:1f:3d:ff:2e:a6:85:83:25: 61:d8:af:76:0d:25:a3:0e:9f:1c:0e:f0:2c:04:0b:c0:33:57: 57:81:e2:0a:76:1c:a6:c8:fb:27:00:bf:48:d8:d6:3c:c9:e7: 97:1b:ce:7c:1d:53:81:14:75:4e:8f:53:db:46:26:95:de:31: 2e:ec:0a:1d:c5:48:e5:3a:78:1c:c7:28:c2:68:b0:de:f6:74: 2d:62:3a:2c:1b:c0:37:85:5f:8c:9e:64:c8:e0:3d:ab:2e:96: 07:0f:e1:e3:67:ef:5b:5c:47:1c:0e:57:1a:a8:e2:fa:0b:ca: 16:55:b0:1a:62:57:16:c9:37:d2:24:28:ee:9f:aa:8e:67:a6: 1e:f4:19:b6:a8:cc:03:6b:25:c7:ed:19:d3:62:4f:5f:59:25: dc:41:90:9a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFODcxMTAvBgNVBAUTKEVCQkI3NTYyQzZBNDlGQjdFREU1NzQxMkJDMUZGQUQ0 OEUxQUZCNDkwHhcNMjYwMzI0MjMyOTMzWhcNMjYwMzMxMjMyOTMzWjAYMRYwFAYD VQQDEw02OWMzMWU1ZC1iNDcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY8tw+K6kNSQUnGvfLbk9vrCJIWazdBTAQaCl11xOjkTtaa4uWTYoYTXYtYU 7MjLQkgncBlGkoIuTWngq/picIUPZzDjY3FgUEvc5rHmL2txkd+jlwPUQkaacE1l NupYCa47nPUuBuxxny7z6oJy4d6AZUU6+USstjJKyCG2IzWqgVRKa0EeqSMV8kAF y67UtKDZLk29K9x1FLEc0kRckM92Z20d11QKeenqkt5n6WLqL9KzH+QR31jlWDyO w/KhhCyGOE09MHqP2VfeRIFpW/yyNDO/D+IgAwrUqGFPFqnLcFrIqKWzb0dtJygh slvk8ING3wEWQXqq9phU+2ySZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOMtkHxq SZoM/l9NKiw+rIVU7/4+MB8GA1UdIwQYMBaAFOu7dWLGpJ+37eV0Erwf+tSOGvtJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkU4Ny80RTE0MDFFNjVD QjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243ZnQ1WFFTdkJfNjFJNGEt MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dDFZc2FrbjdmdDVYUVN2Ql82MUk0YS0way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkU4Ny80RTE0MDFFNjVDQjYxMUVDQTc3MTE4MEVDNEY5QUUwMi82N3QxWXNha243 ZnQ1WFFTdkJfNjFJNGEtMGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcsHAmTgDq7LakOAofQne8vdxwxt3qMr/djYz7PYsAgS8FX+nICLFe5NZ8bKr 5dbzTsWzkU/QNKWrL3KYW4CECDS8c2FHoOGXIVx+qoe8qcNmUGSFYFvLnju+YQny IEZzcI4AeR89/y6mhYMlYdivdg0low6fHA7wLAQLwDNXV4HiCnYcpsj7JwC/SNjW PMnnlxvOfB1TgRR1To9T20Ymld4xLuwKHcVI5Tp4HMcowmiw3vZ0LWI6LBvAN4Vf jJ5kyOA9qy6WBw/h42fvW1xHHA5XGqji+gvKFlWwGmJXFsk30iQo7p+qjmemHvQZ tqjMA2slx+0Z02JPX1kl3EGQmg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:43 2026 by rpki-client