$ rpki-client -vvf rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft File: -GGkJMXdlLdB2BgJtff_OVVjdl4.mft (raw, json) Hash identifier: sxgsV/cWC8ppXGcGed1w4v0tdh0hxgyH/QhfKPZB558= Subject key identifier: 6D:D4:9F:59:BA:31:AC:DB:C7:47:2C:0D:C0:FC:B6:DF:B2:7F:11:04 Authority key identifier: F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E Certificate issuer: /CN=A915B6E9/serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft Manifest number: 0472 Signing time: Tue 24 Mar 2026 23:47:36 +0000 Manifest this update: Tue 24 Mar 2026 23:47:36 +0000 Manifest next update: Tue 31 Mar 2026 23:47:36 +0000 Files and hashes: 1: -GGkJMXdlLdB2BgJtff_OVVjdl4.crl (hash: qMkN5Auz70OYHDiks4oWIg0k/o5gsc6oRyJ1KnUi6ak=) 2: D2438C7C4B1F11EDAF41BC7FC4F9AE02.roa (hash: y9AWX9pr7/40gfTliDeYcrWRNr/D4ngulxUgREVk2K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B6E9, serialNumber=F861A424C5DD94B741D81809B5F7FF395563765E Validity Not Before: Mar 24 23:47:36 2026 GMT Not After : Mar 31 23:47:36 2026 GMT Subject: CN=69c32298-e927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6d:21:ae:2e:26:ac:1f:90:f2:54:8b:c5:a0: 86:2f:10:21:f2:45:39:21:c0:4c:6d:5c:c0:e5:cb: 33:14:dd:5d:9c:10:8e:7b:76:a8:d0:0d:fa:65:62: a4:58:6a:25:68:74:05:ee:94:6e:46:a5:b8:e1:69: 3b:fc:4b:43:04:44:b6:89:4b:57:43:b5:e2:07:5d: 1a:75:13:d0:1e:cb:c1:8f:bd:66:b0:40:0a:71:6b: cb:f7:14:38:cb:53:a2:f8:0e:67:e8:4a:f2:a3:85: 37:a3:28:43:f4:78:98:78:51:21:03:ab:54:eb:d9: f1:d5:cf:5d:50:8a:64:f0:91:12:83:bf:f5:cb:01: 71:e1:f9:05:72:a9:a1:82:7c:88:ea:4c:a4:57:82: 3b:9b:86:c9:75:ca:bd:5b:9e:51:7c:59:3d:de:2a: 3d:f9:e6:c2:e0:63:05:11:f5:4e:07:8d:e3:ec:a5: 7d:c1:73:22:95:4c:7a:a0:dd:09:f8:ed:c1:d8:96: 99:7a:ec:46:3c:2a:34:96:08:5c:7a:bb:1b:a4:66: 85:46:b1:8e:44:0f:2e:46:96:28:df:78:93:f4:df: 84:1e:99:bf:c2:b2:e4:26:2c:5c:ea:1f:3a:68:8d: 2b:d5:16:f2:72:5f:3f:e4:10:8c:f1:91:77:88:25: 1f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D4:9F:59:BA:31:AC:DB:C7:47:2C:0D:C0:FC:B6:DF:B2:7F:11:04 X509v3 Authority Key Identifier: keyid:F8:61:A4:24:C5:DD:94:B7:41:D8:18:09:B5:F7:FF:39:55:63:76:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-GGkJMXdlLdB2BgJtff_OVVjdl4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B6E9/0A16919C858E11EC9C028454C4F9AE02/-GGkJMXdlLdB2BgJtff_OVVjdl4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:e7:c1:72:df:ba:56:fc:bd:5c:76:8c:2d:79:3a:96:3c:96: 33:62:b4:98:d3:82:92:e0:40:29:d4:93:ee:54:81:0b:39:7e: 8b:e7:be:e3:1e:00:6a:4f:69:2e:dc:c7:04:53:11:75:42:63: 23:5b:ff:1f:d0:f4:80:23:a2:42:bc:f9:72:65:f1:82:94:31: ce:a1:f9:6d:e1:c8:15:f1:18:11:df:b5:b9:5f:74:4d:b9:3c: 3c:13:1a:c4:99:64:18:5b:f3:f8:1b:0b:a7:01:30:22:e7:1e: 17:11:e6:c5:cd:c1:e8:06:60:4e:37:37:54:ce:8c:b4:e6:55: ce:83:19:e1:e7:47:96:cb:c1:27:66:40:f4:d8:8d:7a:3b:3e: 55:e4:9e:cc:19:2f:de:5a:20:a4:ba:d7:91:2e:b3:24:78:67: 7b:70:ed:f1:4f:21:3a:63:c1:f4:8c:e3:a2:b7:95:6b:8a:25: 81:47:35:5e:e9:f8:41:8c:a8:57:93:76:0d:af:86:b4:6c:2d: e5:11:70:91:71:4e:25:04:84:ae:6a:19:70:98:61:9b:1e:a5: 44:fa:26:97:fc:92:28:f4:86:ae:02:4e:3a:02:66:e6:dc:62: 7f:12:d5:d2:b1:d3:4a:27:d3:78:09:6f:e7:d0:30:01:4f:c5: 6f:61:75:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI2RTkxMTAvBgNVBAUTKEY4NjFBNDI0QzVERDk0Qjc0MUQ4MTgwOUI1RjdGRjM5 NTU2Mzc2NUUwHhcNMjYwMzI0MjM0NzM2WhcNMjYwMzMxMjM0NzM2WjAYMRYwFAYD VQQDEw02OWMzMjI5OC1lOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn20hri4mrB+Q8lSLxaCGLxAh8kU5IcBMbVzA5cszFN1dnBCOe3ao0A36ZWKk WGolaHQF7pRuRqW44Wk7/EtDBES2iUtXQ7XiB10adRPQHsvBj71msEAKcWvL9xQ4 y1Oi+A5n6Eryo4U3oyhD9HiYeFEhA6tU69nx1c9dUIpk8JESg7/1ywFx4fkFcqmh gnyI6kykV4I7m4bJdcq9W55RfFk93io9+ebC4GMFEfVOB43j7KV9wXMilUx6oN0J +O3B2JaZeuxGPCo0lghcersbpGaFRrGORA8uRpYo33iT9N+EHpm/wrLkJixc6h86 aI0r1Rbycl8/5BCM8ZF3iCUf/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG3Un1m6 Mazbx0csDcD8tt+yfxEEMB8GA1UdIwQYMBaAFPhhpCTF3ZS3QdgYCbX3/zlVY3Ze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjZFOS8wQTE2OTE5Qzg1 OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxMZEIyQmdKdGZmX09WVmpk bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1HR2tKTVhkbExkQjJCZ0p0ZmZfT1ZWamRsNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjZFOS8wQTE2OTE5Qzg1OEUxMUVDOUMwMjg0NTRDNEY5QUUwMi8tR0drSk1YZGxM ZEIyQmdKdGZmX09WVmpkbDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaOfBct+6Vvy9XHaMLXk6ljyWM2K0mNOCkuBAKdST7lSBCzl+i+e+4x4Aak9p LtzHBFMRdUJjI1v/H9D0gCOiQrz5cmXxgpQxzqH5beHIFfEYEd+1uV90Tbk8PBMa xJlkGFvz+BsLpwEwIuceFxHmxc3B6AZgTjc3VM6MtOZVzoMZ4edHlsvBJ2ZA9NiN ejs+VeSezBkv3logpLrXkS6zJHhne3Dt8U8hOmPB9IzjoreVa4olgUc1Xun4QYyo V5N2Da+GtGwt5RFwkXFOJQSErmoZcJhhmx6lRPoml/ySKPSGrgJOOgJm5txifxLV 0rHTSifTeAlv59AwAU/Fb2F1SQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:00 2026 by rpki-client