$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft File: fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft (raw, json) Hash identifier: b8GO1c+Ec4xNKxf2Usw4GFYlwcxutUufR1Xf/wsiUOQ= Subject key identifier: 8D:B0:F7:1C:4C:68:D4:BD:36:CD:4A:BD:41:47:19:0E:B9:94:2D:ED Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 Certificate issuer: /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft Manifest number: 84 Signing time: Wed 25 Mar 2026 06:52:30 +0000 Manifest this update: Wed 25 Mar 2026 06:52:29 +0000 Manifest next update: Wed 01 Apr 2026 06:52:29 +0000 Files and hashes: 1: fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl (hash: OKKg3pNe+HK/suI2cwHlmIyCh9e9gvT6TOazmf7NMVc=) 2: 21C5B04263A311F096468248C4F9AE02.roa (hash: EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=) 3: B32DFBA0613E11F0807A9A39C4F9AE02.roa (hash: nT8Gn6kmDh+P+vCU8iV+2GM1ote3Wc58DjS3MS+fe0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777 Validity Not Before: Mar 25 06:52:29 2026 GMT Not After : Apr 1 06:52:29 2026 GMT Subject: CN=69c3862e-c24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4a:97:59:ea:8f:ce:42:9c:85:05:c5:29:f7: 5b:d5:47:59:bd:c9:e1:05:d0:a2:7e:a1:79:98:fa: b7:4b:51:93:4d:45:68:f9:33:2a:5e:a9:b4:bf:d3: bf:88:9e:c4:74:0a:d5:c5:f9:4b:2b:d4:aa:eb:98: 66:0e:f9:5e:2f:72:f5:89:e5:d2:13:e7:de:2c:f2: 31:e0:52:d8:a3:ab:2d:3d:6e:6b:60:86:3a:5e:52: 0c:05:f5:97:11:96:04:2c:76:d9:67:24:c6:74:73: 65:2c:a7:2d:a6:e5:e8:2e:a7:f4:cc:86:b8:2b:b0: 7f:ab:1e:78:f9:46:f0:48:f6:ab:0d:cb:8d:0e:a2: 49:f6:17:4b:e0:fb:e1:11:23:12:4f:82:78:8f:02: 9c:65:8c:b6:0a:d5:68:9d:17:44:0c:87:9d:f4:05: 29:c0:c2:8d:b0:af:df:d9:dd:1d:a6:66:07:ff:c0: 96:6c:81:86:18:e4:e1:f1:3d:b1:64:39:5c:66:b5: fb:f3:3f:c2:ea:ae:0d:36:2c:9c:03:b9:94:6d:dc: a6:16:b5:d8:a7:85:75:ad:fe:7a:e9:4d:db:d6:58: 63:d6:14:5e:b7:5b:de:1b:f9:e6:8c:d2:1a:75:d0: bd:59:2d:b7:21:6b:3c:1d:d9:58:4c:0d:ac:92:ed: da:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:B0:F7:1C:4C:68:D4:BD:36:CD:4A:BD:41:47:19:0E:B9:94:2D:ED X509v3 Authority Key Identifier: keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a3:b7:8b:f3:e8:a3:d4:af:9d:c0:d4:8d:8f:b1:de:60:77: e0:a9:8b:c7:f5:bf:b8:87:9f:d1:b4:39:7e:31:26:89:ff:85: 9c:5c:f6:85:7f:e6:17:db:05:cb:21:a2:57:2e:3b:08:26:ac: 22:b0:bb:32:46:f9:b1:d3:a0:94:e9:c8:d5:fc:c1:41:47:fa: 3c:b9:22:e5:60:bf:0d:f0:45:cd:dc:d5:c2:51:66:3e:5c:19: 6e:5e:58:1d:48:a5:bb:d4:19:05:1b:fd:01:d9:88:05:36:85: b5:30:5a:a5:df:8e:4a:e9:a6:4d:a6:85:8c:8e:66:1c:9a:1f: 38:e9:3f:85:71:2a:47:07:22:54:ef:56:34:5f:22:55:d2:8c: a6:52:2c:8f:e6:4a:0a:5b:b4:81:e2:76:51:e4:3c:2d:cc:61: 38:13:c6:84:51:05:9f:19:7a:a1:21:8c:ae:ea:b3:ed:f7:d6: 1d:6e:d7:60:25:2c:23:8c:ea:83:6e:97:8c:ab:f8:7d:e7:35: 24:e7:7c:fc:c9:3b:15:55:0e:d9:66:8e:b1:48:28:a1:78:ea: 22:36:03:80:7a:ea:7c:f5:5c:47:12:15:8e:28:9d:91:52:a8: ed:b4:a2:04:a5:bf:13:98:21:1b:16:8f:40:87:c1:56:02:6f: 59:48:c8:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkzMDkxMTAvBgNVBAUTKDdEOEZBMEJFRjZBRUY3MUJERjg4Mzg1OEY3MzYxOUQz QjU5RTI3NzcwHhcNMjYwMzI1MDY1MjI5WhcNMjYwNDAxMDY1MjI5WjAYMRYwFAYD VQQDEw02OWMzODYyZS1jMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEqXWeqPzkKchQXFKfdb1UdZvcnhBdCifqF5mPq3S1GTTUVo+TMqXqm0v9O/ iJ7EdArVxflLK9Sq65hmDvleL3L1ieXSE+feLPIx4FLYo6stPW5rYIY6XlIMBfWX EZYELHbZZyTGdHNlLKctpuXoLqf0zIa4K7B/qx54+UbwSParDcuNDqJJ9hdL4Pvh ESMST4J4jwKcZYy2CtVonRdEDIed9AUpwMKNsK/f2d0dpmYH/8CWbIGGGOTh8T2x ZDlcZrX78z/C6q4NNiycA7mUbdymFrXYp4V1rf566U3b1lhj1hRet1veG/nmjNIa ddC9WS23IWs8HdlYTA2sku3aTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI2w9xxM aNS9Ns1KvUFHGQ65lC3tMB8GA1UdIwQYMBaAFH2PoL72rvcb34g4WPc2GdO1nid3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTMwOS85ODkxRTkyRTYx M0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4dmZpRGhZOXpZWjA3V2VK M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUozYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi9mWS1ndnZhdTl4 dmZpRGhZOXpZWjA3V2VKM2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJaO3i/Poo9SvncDUjY+x3mB34KmLx/W/uIef0bQ5fjEmif+FnFz2hX/mF9sF yyGiVy47CCasIrC7Mkb5sdOglOnI1fzBQUf6PLki5WC/DfBFzdzVwlFmPlwZbl5Y HUilu9QZBRv9AdmIBTaFtTBapd+OSummTaaFjI5mHJofOOk/hXEqRwciVO9WNF8i VdKMplIsj+ZKClu0geJ2UeQ8LcxhOBPGhFEFnxl6oSGMruqz7ffWHW7XYCUsI4zq g26XjKv4fec1JOd8/Mk7FVUO2WaOsUgooXjqIjYDgHrqfPVcRxIVjiidkVKo7bSi BKW/E5ghGxaPQIfBVgJvWUjILg== -----END CERTIFICATE-----Generated at Thu Mar 26 23:45:27 2026 by rpki-client