$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: GQDw1Osqib4h7sytRr0QOMe4BCV3p11zVU39uXsM7MQ= Subject key identifier: 57:68:8D:8E:4E:46:E5:6E:5B:D9:0E:17:13:80:5A:F5:77:F8:FC:EB Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 0233 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 01DF Signing time: Wed 25 Mar 2026 04:00:13 +0000 Manifest this update: Wed 25 Mar 2026 04:00:12 +0000 Manifest next update: Wed 01 Apr 2026 04:00:12 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: q4+nolHgAD+dv1H0DYdjwAy1FEEWTD69LIxDpKkfo9Y=) 2: D1825C02598911F0848EA472C4F9AE02.roa (hash: AXuNEQhDZvnFZqkaW+L9U8CneqM+5lU+Ywjwx02JDnY=) 3: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 2yKTAZYnZIzr1D5gDTXkNr4QqK0s9dbV2MakqBfyRC0=) 4: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: s+Ins2dxN86QTHjcB8YXqLtQtxtHR/M8caRS+c+QI7U=) 5: C2412F50EED211F08AE562A4736F56BC.roa (hash: 3nZXBR8iljeWoGFytP3w3yIxID7181RGS5MClxCp+Kc=) 6: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: QJ8mn8VYu6yJWP7YvnwUy8wxKdhWELvCW8UZdzTVujk=) 7: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: ZzS3J/pGs2pu0M1LkdWlVtHcUR8Uu5S0AjyVdXZhGUA=) 8: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: VQhZgOQPriWRYMgMvVif5slfnGGWce5qBIKL9jfU4zw=) 9: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: GJyC3nX3iAMpGyl1mqqZSyTlbVSzRpyiarSp6OZBQCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 563 (0x233) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Mar 25 04:00:12 2026 GMT Not After : Apr 1 04:00:12 2026 GMT Subject: CN=69c35dcd-a305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1f:98:79:b5:99:03:0c:6c:eb:e9:b0:27:ce: da:b1:29:da:d0:23:18:b3:11:06:84:84:45:8f:3c: 7a:80:8c:c2:fb:0e:3e:5d:e7:26:5b:1b:d8:7b:47: d1:10:9a:cc:f7:7e:a7:ad:2c:54:b4:0e:4f:47:2d: 1d:f9:30:5a:88:ba:0e:f3:27:81:f6:76:e5:b5:3d: c3:6a:cc:e4:cf:2c:42:ba:1b:d0:93:23:42:a5:94: c2:d2:18:f3:83:1d:30:79:7f:a1:71:b8:6e:8d:d7: ec:dc:2e:75:87:bf:60:cf:a3:14:18:f8:a8:8e:c4: 23:49:08:dc:42:5e:49:c7:a9:50:4c:26:75:cb:b6: b6:a4:02:81:00:6c:fa:35:74:1f:76:71:63:32:ff: 3a:5f:02:c9:f8:98:44:45:d2:1b:17:39:21:b2:2d: 59:83:f0:bb:73:4c:87:6e:ed:b4:d4:b6:72:34:28: a2:82:cb:67:57:19:04:89:df:03:46:2e:42:b3:41: 73:2d:26:4c:3f:47:1a:c8:c4:6c:5c:c0:33:d3:38: 88:23:da:af:03:4e:64:36:cc:3b:22:2b:d8:91:07: 73:5b:d6:fd:bf:a7:81:ff:3a:cb:00:76:94:f2:a6: 6b:f7:5f:bd:52:22:96:b5:5a:ca:5c:85:f1:ad:53: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:68:8D:8E:4E:46:E5:6E:5B:D9:0E:17:13:80:5A:F5:77:F8:FC:EB X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:df:38:b2:84:1e:0a:b1:41:f1:b0:04:77:a0:d7:87:c5:5b: 6c:c3:ec:d6:8b:0f:25:cd:39:40:c8:b3:55:72:87:f2:db:56: aa:97:37:db:f5:0f:6d:49:29:34:5c:8e:6f:84:6e:b2:c7:07: 4b:c0:46:d5:7b:ef:07:69:fe:ac:12:cf:29:ff:e9:03:56:8d: 24:fc:37:35:3a:86:d6:57:63:fc:23:e9:1d:53:03:da:00:00: 34:db:ef:42:d1:2e:17:f8:01:4a:65:9b:04:e5:77:d7:d2:c6: c8:e2:bc:0d:ff:1f:e1:1f:fa:aa:e1:8d:3b:4c:e3:c1:29:b3: b0:33:c0:6b:a4:5d:d2:94:b3:44:46:11:7a:c4:36:31:15:d6: 26:02:e1:fc:b0:3c:43:0a:8f:38:12:3f:d6:31:97:be:d1:e9: 59:5c:5f:8f:01:c4:31:89:0f:5c:55:61:ad:34:47:f2:63:a1: 55:2f:ae:11:75:43:cc:57:ce:74:6f:54:ae:88:14:8f:fc:47: f2:b6:00:99:19:fd:ba:92:a2:05:58:31:4c:ed:1f:de:0b:f2: ac:6f:f1:c8:5a:33:0f:a6:e0:db:04:6b:81:f1:d0:33:fc:8e: 80:9b:9d:17:fa:81:e3:87:b4:f2:bf:34:21:a4:b4:5c:69:70: 3e:aa:d9:08 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjYwMzI1MDQwMDEyWhcNMjYwNDAxMDQwMDEyWjAYMRYwFAYD VQQDEw02OWMzNWRjZC1hMzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnh+YebWZAwxs6+mwJ87asSna0CMYsxEGhIRFjzx6gIzC+w4+XecmWxvYe0fR EJrM936nrSxUtA5PRy0d+TBaiLoO8yeB9nbltT3DaszkzyxCuhvQkyNCpZTC0hjz gx0weX+hcbhujdfs3C51h79gz6MUGPiojsQjSQjcQl5Jx6lQTCZ1y7a2pAKBAGz6 NXQfdnFjMv86XwLJ+JhERdIbFzkhsi1Zg/C7c0yHbu201LZyNCiigstnVxkEid8D Ri5Cs0FzLSZMP0cayMRsXMAz0ziII9qvA05kNsw7IivYkQdzW9b9v6eB/zrLAHaU 8qZr91+9UiKWtVrKXIXxrVOI7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFdojY5O RuVuW9kOFxOAWvV3+PzrMB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgt84soQeCrFB8bAEd6DXh8VbbMPs1osPJc05QMizVXKH8ttWqpc32/UPbUkp NFyOb4RusscHS8BG1XvvB2n+rBLPKf/pA1aNJPw3NTqG1ldj/CPpHVMD2gAANNvv QtEuF/gBSmWbBOV319LGyOK8Df8f4R/6quGNO0zjwSmzsDPAa6Rd0pSzREYResQ2 MRXWJgLh/LA8QwqPOBI/1jGXvtHpWVxfjwHEMYkPXFVhrTRH8mOhVS+uEXVDzFfO dG9UrogUj/xH8rYAmRn9upKiBVgxTO0f3gvyrG/xyFozD6bg2wRrgfHQM/yOgJud F/qB44e08r80IaS0XGlwPqrZCA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:09 2026 by rpki-client