$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft File: fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft (raw, json) Hash identifier: nCON87LHUeTZkJrpfFZ2GQKk96Vr/rMgKqV/SvflNBA= Subject key identifier: B8:1D:68:2F:07:CC:F2:6F:24:B5:8A:87:21:2C:1B:97:D4:81:86:7D Authority key identifier: 7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 Certificate issuer: /CN=A9158E3F/serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Certificate serial: 0CCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft Manifest number: 0C04 Signing time: Tue 24 Mar 2026 19:02:30 +0000 Manifest this update: Tue 24 Mar 2026 19:02:30 +0000 Manifest next update: Tue 31 Mar 2026 19:02:30 +0000 Files and hashes: 1: fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl (hash: w6XfS2H63x4aU/DmlTEuSrfa/NAgdThKnhrvPIjKu0k=) 2: C3290D00636F11F0A1C6DA70C4F9AE02.roa (hash: I8QsExkkx/lQXZrUI8Q7vR9Vux4YkSdHgTIl8y+WbMk=) 3: 958CC8DA1C2611ECB416AA68C4F9AE02.roa (hash: EykGpXwalZSOBcmCqBPjJofqYixjM46Qzlbp8WB+N/Q=) 4: CB67A9DC8D1311EF9895E61CC4F9AE02.roa (hash: whrOto6YdWxD5nUJi5RhnyhfSKeLupBw4gHNI11xyhI=) 5: 52863B4C9DBA11EB83364624C4F9AE02.roa (hash: TjrXzvrlWANf8JvFU1WnxrTztuxOH43IK3Zl85V0kH0=) 6: E8819018178811EC876F5F50C4F9AE02.roa (hash: vUBN3WiPziWGZpfHV/nuh0lxaXpR2pUDXk1dHU8ebwE=) 7: 8008F5CA620C11ECAFF5941AC4F9AE02.roa (hash: BZMmvsi1yqiTsCVctnffOHMNepndBiyB42ybFXbXkIE=) 8: 065A717E9B6E11EFBCAB692BC4F9AE02.roa (hash: RupCODMCVn7fipZVaU8cDxGLwLhz8c3cckM5d5QL83Q=) 9: 1605F9B6169E11EC9D259855C4F9AE02.roa (hash: utuJrvT7k0aAp1PIv4kJ0yTf9B0xorguSm8sns4EFRw=) 10: 206969823B9411EB9F059D7EC4F9AE02.roa (hash: lU4qj9qhMKsVAQxIlEtzz2s2LN2qpGRwvCOWleMDdN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3276 (0xccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158E3F, serialNumber=7E313AB7FF26E783E03C07851612751881AE4918 Validity Not Before: Mar 24 19:02:30 2026 GMT Not After : Mar 31 19:02:30 2026 GMT Subject: CN=69c2dfc6-11f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:04:af:22:19:4d:89:82:92:64:d8:79:7d: 9a:ab:ec:c9:fd:91:a1:dd:ca:8b:83:26:79:37:69: 21:38:3c:8b:f3:3a:31:6a:07:19:42:3f:d0:b0:e6: 6f:ac:b7:86:fb:5a:f7:09:38:b3:77:df:a9:62:ea: c6:55:09:4c:eb:de:c9:35:2d:7b:73:08:7c:02:c4: d2:70:fb:15:15:a2:5b:fd:e6:dd:49:51:52:9d:02: 8f:a5:ba:34:63:21:5d:88:a8:05:7e:36:62:c8:af: 0c:36:66:bd:08:c9:dd:8d:a0:ae:b5:e5:38:e0:d1: 24:f7:32:99:61:85:f3:49:55:06:9d:e5:8a:ad:3e: cc:57:1b:93:1a:d1:42:48:67:50:da:07:67:b8:75: 3b:d3:db:07:aa:3f:ec:0a:20:72:8e:df:e2:2b:a1: 42:2b:b0:be:28:23:a5:a2:72:6a:10:e2:88:78:93: f1:cd:9e:62:79:36:7e:05:4e:43:1f:c2:e0:13:86: 1c:c1:ec:35:b9:eb:b5:a3:14:12:dd:8c:82:40:e6: 2a:a1:49:fd:cc:83:11:dd:0a:5e:81:e3:db:6d:81: 55:08:09:49:26:44:db:4d:ae:55:84:78:9a:73:a7: 01:44:9a:27:fe:d0:5f:42:f5:51:d4:a3:20:70:a7: 40:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:68:2F:07:CC:F2:6F:24:B5:8A:87:21:2C:1B:97:D4:81:86:7D X509v3 Authority Key Identifier: keyid:7E:31:3A:B7:FF:26:E7:83:E0:3C:07:85:16:12:75:18:81:AE:49:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjE6t_8m54PgPAeFFhJ1GIGuSRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E3F/C24322BA544611EA8C05651DC4F9AE02/fjE6t_8m54PgPAeFFhJ1GIGuSRg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:22:ec:47:4a:a5:43:d4:b2:ac:6c:0e:74:fc:e3:cd:ed:b7: 1d:87:9e:5d:1d:ac:bf:23:70:5d:28:f5:11:0c:51:60:da:35: 73:c5:23:59:56:b3:5d:f0:86:94:5c:d2:86:e7:43:48:3c:b5: 19:ee:92:ec:3e:bc:34:ed:5b:f9:07:eb:75:7d:e3:0b:4b:fb: 47:4b:99:b1:9a:d8:ae:b5:cd:98:2f:df:67:3d:93:41:08:e9: bf:97:7c:20:52:7f:56:ec:06:a9:51:61:f6:d2:ec:b8:31:b2: 7e:0b:f0:e2:0f:38:ea:a5:a8:c9:59:d7:24:c7:5b:1b:6e:72: 44:75:0d:ac:93:42:3c:0f:5c:a7:cc:28:a8:97:a8:71:8f:12: 17:fa:a2:74:fd:fd:e3:5e:51:0b:27:25:88:59:87:7a:98:83: 12:1c:b8:0f:11:04:8d:5d:70:56:68:29:ba:1f:14:fc:32:e4: 56:d4:2b:ad:ce:c4:71:f9:f0:b8:64:4a:67:10:0e:53:3c:62: 89:36:2e:fb:d6:36:d0:28:f6:74:76:9a:83:3b:27:3e:80:18: 21:39:7d:f1:26:56:7c:e2:e2:01:5a:68:9a:ee:1d:fb:98:6b: 7e:9c:d9:6d:29:e7:dd:9f:2f:5e:09:41:b2:a5:08:b3:c4:7a: 68:b2:9b:93 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThFM0YxMTAvBgNVBAUTKDdFMzEzQUI3RkYyNkU3ODNFMDNDMDc4NTE2MTI3NTE4 ODFBRTQ5MTgwHhcNMjYwMzI0MTkwMjMwWhcNMjYwMzMxMTkwMjMwWjAYMRYwFAYD VQQDEw02OWMyZGZjNi0xMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOcEryIZTYmCkmTYeX2aq+zJ/ZGh3cqLgyZ5N2khODyL8zoxagcZQj/QsOZv rLeG+1r3CTizd9+pYurGVQlM697JNS17cwh8AsTScPsVFaJb/ebdSVFSnQKPpbo0 YyFdiKgFfjZiyK8MNma9CMndjaCuteU44NEk9zKZYYXzSVUGneWKrT7MVxuTGtFC SGdQ2gdnuHU709sHqj/sCiByjt/iK6FCK7C+KCOlonJqEOKIeJPxzZ5ieTZ+BU5D H8LgE4Ycwew1ueu1oxQS3YyCQOYqoUn9zIMR3QpegePbbYFVCAlJJkTbTa5VhHia c6cBRJon/tBfQvVR1KMgcKdA0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLgdaC8H zPJvJLWKhyEsG5fUgYZ9MB8GA1UdIwQYMBaAFH4xOrf/JueD4DwHhRYSdRiBrkkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEUzRi9DMjQzMjJCQTU0 NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0UGdQQWVGRmhKMUdJR3VT UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqRTZ0XzhtNTRQZ1BBZUZGaEoxR0lHdVNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEUzRi9DMjQzMjJCQTU0NDYxMUVBOEMwNTY1MURDNEY5QUUwMi9makU2dF84bTU0 UGdQQWVGRmhKMUdJR3VTUmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaCLsR0qlQ9SyrGwOdPzjze23HYeeXR2svyNwXSj1EQxRYNo1c8UjWVazXfCG lFzShudDSDy1Ge6S7D68NO1b+QfrdX3jC0v7R0uZsZrYrrXNmC/fZz2TQQjpv5d8 IFJ/VuwGqVFh9tLsuDGyfgvw4g846qWoyVnXJMdbG25yRHUNrJNCPA9cp8woqJeo cY8SF/qidP39415RCycliFmHepiDEhy4DxEEjV1wVmgpuh8U/DLkVtQrrc7Ecfnw uGRKZxAOUzxiiTYu+9Y20Cj2dHaagzsnPoAYITl98SZWfOLiAVpomu4d+5hrfpzZ bSnn3Z8vXglBsqUIs8R6aLKbkw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:26 2026 by rpki-client