$ rpki-client -vvf rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft File: goh6uR0rD2rb_HCyRhnxh7GlPVk.mft (raw, json) Hash identifier: lOczMqYHaNlmWBlZDfqfwIQ3cGj6epDl3dL3QmUP4e8= Subject key identifier: 3B:11:09:EF:29:84:3C:18:DF:6E:6F:79:EC:50:F9:57:07:43:24:3C Authority key identifier: 82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 Certificate issuer: /CN=A9159032/serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Certificate serial: 1AC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft Manifest number: 1AB1 Signing time: Tue 24 Mar 2026 16:13:55 +0000 Manifest this update: Tue 24 Mar 2026 16:13:54 +0000 Manifest next update: Tue 31 Mar 2026 16:13:54 +0000 Files and hashes: 1: goh6uR0rD2rb_HCyRhnxh7GlPVk.crl (hash: qp23KH501bbODcF4kzIKrDqLd5hF7NzrRo5PsMco8Rg=) 2: 326E1852D80B11EC874C9083C4F9AE02.roa (hash: IDXNSxSYw7MwVbEZDmPmh0DB59CxN8YqBLdS4525Kc0=) 3: 8AFD7D885DCE11EEA74FC07DC4F9AE02.roa (hash: EoR8DK7eEzTSiOArrO9f6TT4ri3HuFHCaAT4jJINYao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6851 (0x1ac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159032, serialNumber=82887AB91D2B0F6ADBFC70B24619F187B1A53D59 Validity Not Before: Mar 24 16:13:54 2026 GMT Not After : Mar 31 16:13:54 2026 GMT Subject: CN=69c2b842-1427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:40:21:4d:aa:63:52:1e:a6:46:df:d8:64: d3:d5:f3:c0:d8:62:10:a4:86:f6:22:4a:7a:d2:cb: 03:24:17:08:d6:ab:18:23:32:7d:b9:cb:d9:9e:d2: 3e:55:0a:4a:51:79:02:c5:e6:03:05:4a:fa:4e:09: e2:b9:ef:f2:5c:9a:23:38:82:a1:51:ac:e4:91:d7: a2:93:d9:0c:ca:ba:f1:80:d8:71:04:47:3c:d9:ee: 9f:75:d5:09:88:c6:f9:f8:c3:5f:34:8c:af:8d:d5: b9:49:7f:87:b7:ff:af:c3:4b:39:bf:17:c4:f9:3f: 37:c0:e1:88:8a:4d:72:b1:7b:5f:0f:7a:bc:43:d5: e0:90:29:e9:19:d2:cb:be:83:f7:82:e0:01:d3:20: d9:db:1f:17:16:ec:3f:f3:02:4b:3e:66:0e:5b:7e: 39:ee:2b:0b:dd:03:39:c6:f3:0f:37:75:10:10:b9: 6b:21:6b:57:dc:9c:6f:79:3e:b9:7f:7f:ac:97:c6: d6:5b:fe:75:79:2f:0c:94:ba:e0:c7:73:20:3e:32: c1:11:95:9b:0b:93:f5:d2:d5:f9:55:a1:e2:ac:1c: d1:c7:b7:7f:36:17:5f:b9:ec:4f:30:9f:58:36:d1: 6e:75:82:2f:a4:a9:6f:cb:e3:54:1f:ac:bf:4b:8d: e1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:11:09:EF:29:84:3C:18:DF:6E:6F:79:EC:50:F9:57:07:43:24:3C X509v3 Authority Key Identifier: keyid:82:88:7A:B9:1D:2B:0F:6A:DB:FC:70:B2:46:19:F1:87:B1:A5:3D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/goh6uR0rD2rb_HCyRhnxh7GlPVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159032/45FCF5E04FEA11E79710DE3EC4F9AE02/goh6uR0rD2rb_HCyRhnxh7GlPVk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:64:e9:a2:a1:ed:e8:6a:c8:29:4f:68:3b:47:6c:a6:3e:e2: e7:51:b7:08:a3:04:08:a8:a7:bf:71:e6:5d:5d:c3:5c:52:15: 4a:e5:de:72:af:0e:20:5d:bd:cd:35:50:31:d0:f0:c7:3e:73: a5:75:c3:5c:bb:36:d6:b1:5b:9c:83:71:aa:f1:a4:ff:b7:c5: 59:e7:de:b6:a9:20:f4:c7:45:db:4b:4d:93:74:7d:d0:1b:a7: 2c:cf:17:99:8c:f7:8e:4f:4e:6d:08:a8:2c:0d:80:fc:bb:e2: 3c:28:ce:7e:aa:1e:88:9f:73:5f:f6:42:a5:27:16:4b:65:07: 0e:60:72:60:6d:db:d0:4a:9c:44:ed:a1:6c:6f:a6:e7:d5:c5: 42:5c:4c:ba:7b:7b:90:d4:1f:23:98:58:e2:b7:0f:cc:e2:cc: b5:0a:54:b7:8f:3e:33:0a:03:be:ad:5a:5c:89:ea:cf:de:6e: fe:6a:76:9a:56:a9:24:51:8d:33:bc:4a:6a:77:ee:d3:89:25: 41:aa:05:04:f2:de:f3:ee:9b:7a:ca:5a:07:6c:16:38:ac:50: cb:27:89:54:21:e8:6f:59:7f:ae:a0:a5:79:3a:1c:fc:7f:70: 5e:45:42:14:8d:3f:bb:68:67:c9:b0:c2:00:3e:86:a5:53:ea: b6:7f:92:09 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkwMzIxMTAvBgNVBAUTKDgyODg3QUI5MUQyQjBGNkFEQkZDNzBCMjQ2MTlGMTg3 QjFBNTNENTkwHhcNMjYwMzI0MTYxMzU0WhcNMjYwMzMxMTYxMzU0WjAYMRYwFAYD VQQDEw02OWMyYjg0Mi0xNDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV1AIU2qY1Iepkbf2GTT1fPA2GIQpIb2Ikp60ssDJBcI1qsYIzJ9ucvZntI+ VQpKUXkCxeYDBUr6Tgniue/yXJojOIKhUazkkdeik9kMyrrxgNhxBEc82e6fddUJ iMb5+MNfNIyvjdW5SX+Ht/+vw0s5vxfE+T83wOGIik1ysXtfD3q8Q9XgkCnpGdLL voP3guAB0yDZ2x8XFuw/8wJLPmYOW3457isL3QM5xvMPN3UQELlrIWtX3JxveT65 f3+sl8bWW/51eS8MlLrgx3MgPjLBEZWbC5P10tX5VaHirBzRx7d/NhdfuexPMJ9Y NtFudYIvpKlvy+NUH6y/S43h4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDsRCe8p hDwY325veexQ+VcHQyQ8MB8GA1UdIwQYMBaAFIKIerkdKw9q2/xwskYZ8YexpT1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTAzMi80NUZDRjVFMDRG RUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQycmJfSEN5UmhueGg3R2xQ VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvaDZ1UjByRDJyYl9IQ3lSaG54aDdHbFBWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTAzMi80NUZDRjVFMDRGRUExMUU3OTcxMERFM0VDNEY5QUUwMi9nb2g2dVIwckQy cmJfSEN5UmhueGg3R2xQVmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK2TpoqHt6GrIKU9oO0dspj7i51G3CKMECKinv3HmXV3DXFIVSuXecq8OIF29 zTVQMdDwxz5zpXXDXLs21rFbnINxqvGk/7fFWefetqkg9MdF20tNk3R90BunLM8X mYz3jk9ObQioLA2A/LviPCjOfqoeiJ9zX/ZCpScWS2UHDmByYG3b0EqcRO2hbG+m 59XFQlxMunt7kNQfI5hY4rcPzOLMtQpUt48+MwoDvq1aXInqz95u/mp2mlapJFGN M7xKanfu04klQaoFBPLe8+6bespaB2wWOKxQyyeJVCHob1l/rqCleToc/H9wXkVC FI0/u2hnybDCAD6GpVPqtn+SCQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:09:38 2026 by rpki-client