$ rpki-client -vvf rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft File: A8f_7gyvSSWEnihuwO-7DIsqjk8.mft (raw, json) Hash identifier: D6Drl3cPy2oSYeNUtP6FYmNVzgQRC4srWfJnW9otBnc= Subject key identifier: 10:71:A8:D2:2F:51:6B:C1:F8:E2:68:16:E0:5D:2E:3A:1F:2F:4A:1C Authority key identifier: 03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F Certificate issuer: /CN=A9156CFE/serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Certificate serial: 0A6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft Manifest number: 0A4C Signing time: Tue 24 Mar 2026 19:31:43 +0000 Manifest this update: Tue 24 Mar 2026 19:31:43 +0000 Manifest next update: Tue 31 Mar 2026 19:31:43 +0000 Files and hashes: 1: A8f_7gyvSSWEnihuwO-7DIsqjk8.crl (hash: 1QT7gJogL+f473sI8/4MySeEsq4pAFXBWFQOcUpzJdY=) 2: E00620C0267C11EE803B2155C4F9AE02.roa (hash: FjoaYasaX35xO0OxM5ZHWyDBaB3m3PCkgBiPkzevM+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2667 (0xa6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156CFE, serialNumber=03C7FFEE0CAF4925849E286EC0EFBB0C8B2A8E4F Validity Not Before: Mar 24 19:31:43 2026 GMT Not After : Mar 31 19:31:43 2026 GMT Subject: CN=69c2e69f-726f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8a:9c:dd:cf:32:81:c8:96:2b:9d:32:8e:00: bf:e5:17:b8:13:22:d9:f2:02:6a:94:55:c9:8c:3d: 63:18:6b:a3:00:3a:a8:3e:10:52:cc:ac:8e:1f:90: 17:c9:f9:db:f4:1f:a2:cc:83:c3:31:3b:a5:3e:9a: c8:46:dc:13:16:15:14:f6:aa:96:e0:d5:bb:59:1a: 08:33:e0:8c:7a:a5:dc:d2:13:87:57:88:09:45:3a: ec:8a:f1:56:9f:ee:80:d5:71:31:f7:bf:eb:b8:aa: 3f:2f:52:d5:7c:b9:a0:ba:bb:4e:40:ae:61:d6:74: e3:8a:36:a8:4a:6f:2d:3c:66:d2:d4:b1:ff:f1:67: 88:de:3d:ad:91:f7:ce:6c:83:5b:7a:90:78:43:10: 65:33:59:c5:1c:91:64:37:a3:92:e1:b0:fd:58:c6: 50:b3:34:fb:1c:2d:4a:21:6d:4c:8a:f3:0f:ce:e0: 67:55:e9:5e:ba:77:0f:23:d7:d9:4f:2e:81:f4:87: f1:cf:65:25:36:6b:18:83:10:23:0f:2c:d1:25:7d: a3:2e:0e:fa:74:5b:8e:8d:d0:eb:ba:60:c1:3b:22: 7f:a8:87:9d:ec:ff:53:5e:20:33:0b:58:d4:0e:2d: dd:38:43:ed:46:8f:f6:b7:5c:93:22:fa:9c:14:d7: c7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:A8:D2:2F:51:6B:C1:F8:E2:68:16:E0:5D:2E:3A:1F:2F:4A:1C X509v3 Authority Key Identifier: keyid:03:C7:FF:EE:0C:AF:49:25:84:9E:28:6E:C0:EF:BB:0C:8B:2A:8E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A8f_7gyvSSWEnihuwO-7DIsqjk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156CFE/B39031708AB211EAB022193CC4F9AE02/A8f_7gyvSSWEnihuwO-7DIsqjk8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:34:5e:b8:90:a0:b2:9c:e4:ad:18:ed:66:4b:b6:76:70:52: e7:35:e2:2d:8c:ed:64:1d:fd:85:68:b4:6f:79:26:58:63:22: e0:9c:d1:25:1c:8c:c6:b2:71:9c:30:a3:7d:84:53:8c:1a:39: 5f:7b:d2:06:cd:5e:a1:ae:7b:39:ac:40:3c:51:5a:f7:58:ab: 7e:46:1c:87:a8:43:80:ee:5a:e2:76:2b:22:e7:c5:9c:38:22: ca:2f:a7:d8:89:fb:82:76:19:1a:7a:e5:5d:fe:b6:d5:e8:e7: 74:2a:a4:30:53:e1:47:a5:6a:8f:26:c6:fb:bc:82:0d:62:10: 52:f8:aa:86:a7:f7:6e:06:4c:01:b7:d6:2c:bc:27:21:58:ad: 24:d8:be:ef:1e:09:67:d7:5e:2e:52:49:b6:99:54:35:a9:ec: fe:18:1c:be:4c:83:ec:44:86:94:b5:55:ff:ca:bd:f2:cc:06: 1b:24:81:e1:20:2f:04:73:f4:de:05:16:6c:0a:ca:d3:b6:de: 70:f5:39:d4:69:c6:52:b7:63:67:45:9a:df:35:c6:25:94:f5: eb:bd:84:e0:71:a9:7d:b7:94:71:9d:50:24:1a:ec:f5:22:ff: a7:fc:d8:f1:f6:7f:e9:ea:03:00:68:05:cb:66:1e:51:ee:3d: 82:d3:dd:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZDRkUxMTAvBgNVBAUTKDAzQzdGRkVFMENBRjQ5MjU4NDlFMjg2RUMwRUZCQjBD OEIyQThFNEYwHhcNMjYwMzI0MTkzMTQzWhcNMjYwMzMxMTkzMTQzWjAYMRYwFAYD VQQDEw02OWMyZTY5Zi03MjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Yqc3c8ygciWK50yjgC/5Re4EyLZ8gJqlFXJjD1jGGujADqoPhBSzKyOH5AX yfnb9B+izIPDMTulPprIRtwTFhUU9qqW4NW7WRoIM+CMeqXc0hOHV4gJRTrsivFW n+6A1XEx97/ruKo/L1LVfLmgurtOQK5h1nTjijaoSm8tPGbS1LH/8WeI3j2tkffO bINbepB4QxBlM1nFHJFkN6OS4bD9WMZQszT7HC1KIW1MivMPzuBnVeleuncPI9fZ Ty6B9Ifxz2UlNmsYgxAjDyzRJX2jLg76dFuOjdDrumDBOyJ/qIed7P9TXiAzC1jU Di3dOEPtRo/2t1yTIvqcFNfHJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBBxqNIv UWvB+OJoFuBdLjofL0ocMB8GA1UdIwQYMBaAFAPH/+4Mr0klhJ4obsDvuwyLKo5P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkNGRS9CMzkwMzE3MDhB QjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNTV0VuaWh1d08tN0RJc3Fq azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E4Zl83Z3l2U1NXRW5paHV3Ty03RElzcWprOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkNGRS9CMzkwMzE3MDhBQjIxMUVBQjAyMjE5M0NDNEY5QUUwMi9BOGZfN2d5dlNT V0VuaWh1d08tN0RJc3FqazgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWzReuJCgspzkrRjtZku2dnBS5zXiLYztZB39hWi0b3kmWGMi4JzRJRyMxrJx nDCjfYRTjBo5X3vSBs1eoa57OaxAPFFa91irfkYch6hDgO5a4nYrIufFnDgiyi+n 2In7gnYZGnrlXf621ejndCqkMFPhR6VqjybG+7yCDWIQUviqhqf3bgZMAbfWLLwn IVitJNi+7x4JZ9deLlJJtplUNans/hgcvkyD7ESGlLVV/8q98swGGySB4SAvBHP0 3gUWbArK07becPU51GnGUrdjZ0Wa3zXGJZT1672E4HGpfbeUcZ1QJBrs9SL/p/zY 8fZ/6eoDAGgFy2YeUe49gtPd3g== -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:17 2026 by rpki-client