$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: ZWrQ7U3MepUCv3Pf2SS+2tZAEG3FK48pb2yLtg79wBk= Subject key identifier: FC:C9:E2:EA:8D:11:69:BD:01:78:25:6A:2F:00:20:5C:CE:AB:AC:46 Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 09B2 Signing time: Tue 24 Mar 2026 20:56:07 +0000 Manifest this update: Tue 24 Mar 2026 20:56:07 +0000 Manifest next update: Tue 31 Mar 2026 20:56:07 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: toHwVVrv9+5COAEIuU4jd1XidFIxuTnJLosb/nFeJvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Mar 24 20:56:07 2026 GMT Not After : Mar 31 20:56:07 2026 GMT Subject: CN=69c2fa67-f911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:6e:a0:98:53:17:f1:4e:a9:3d:9a:88:49: 76:b9:af:e5:d3:ce:6d:49:63:60:ba:da:9e:66:62: 16:94:bc:f5:a0:82:58:ea:c9:45:8e:05:3b:3c:d2: 9d:72:3f:6f:e2:b8:a7:5c:ec:72:33:47:95:46:72: 23:8e:60:35:f2:9c:ab:35:af:54:1c:bb:88:1e:8a: 1a:dd:81:27:52:dd:dd:b1:83:f4:dc:48:80:a4:4d: 3f:41:2e:c8:72:8a:e6:db:d6:d1:e4:ca:8e:59:55: 63:11:fa:fa:61:b2:90:17:90:40:c5:ee:2a:91:1f: 61:c8:3a:3e:90:74:10:81:2b:e1:ba:81:18:19:41: 38:9c:99:50:d0:d5:c2:c3:58:57:e7:e2:ec:9d:75: 97:38:5e:c3:0a:ac:28:99:d7:70:d4:96:22:03:99: 43:8d:c0:cd:92:d7:12:84:c0:92:f8:f8:8b:52:17: fc:31:97:95:0a:70:a1:dd:7c:06:b6:d2:9c:9f:6c: 3c:0a:c9:ab:d5:7e:1a:d6:f3:f1:5f:7b:06:2b:f6: 83:51:bc:74:b4:8e:b0:89:bf:21:5d:ec:f8:e4:de: 60:78:8d:ae:8e:48:40:46:95:11:04:28:33:34:60: 8f:20:13:ef:71:b7:f4:bd:89:aa:b5:c1:c7:40:c6: 0b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C9:E2:EA:8D:11:69:BD:01:78:25:6A:2F:00:20:5C:CE:AB:AC:46 X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:6c:10:9b:a5:31:a8:88:02:73:bf:d3:82:e9:d9:78:3c:73: a0:b6:13:a5:59:88:78:2e:2a:fe:41:26:1b:d6:48:cc:cb:49: a9:cb:ec:4d:e8:e0:e6:64:fc:65:ab:23:9e:f2:ef:e3:16:3d: 34:4b:ce:51:eb:96:36:0a:79:b3:35:b4:1d:79:98:da:dd:bc: 67:2c:bb:98:f0:c9:c4:ae:8c:43:61:77:41:53:c0:37:ec:24: ce:44:02:a3:e3:a2:32:30:31:6a:fa:40:f9:c6:e7:fe:85:9f: 6f:ff:0f:49:de:ec:91:52:1f:e0:fe:87:5d:2d:8f:63:61:82: 9e:23:b7:15:d6:61:25:95:7e:c3:fc:ac:8a:c3:95:cf:a6:ee: bf:93:1e:ab:44:9b:36:91:f5:1f:01:c1:25:b2:11:45:0e:6f: e0:55:b7:2f:3c:26:5d:a2:8d:63:82:6d:1f:1c:58:a1:f4:33: 56:b9:01:61:1f:10:a7:82:7c:96:a3:48:70:99:6e:7a:42:36: 0f:d8:37:dd:05:93:61:3a:17:f0:94:f3:ff:e5:c9:93:b4:cd: 43:c1:b5:77:96:72:fb:c4:11:31:92:f0:41:24:c7:84:db:2b: 4d:2e:6e:81:45:c2:bb:10:f0:4c:14:34:8d:22:6d:61:e0:5c: 9e:e3:55:cb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjYwMzI0MjA1NjA3WhcNMjYwMzMxMjA1NjA3WjAYMRYwFAYD VQQDEw02OWMyZmE2Ny1mOTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaJuoJhTF/FOqT2aiEl2ua/l085tSWNgutqeZmIWlLz1oIJY6slFjgU7PNKd cj9v4rinXOxyM0eVRnIjjmA18pyrNa9UHLuIHooa3YEnUt3dsYP03EiApE0/QS7I corm29bR5MqOWVVjEfr6YbKQF5BAxe4qkR9hyDo+kHQQgSvhuoEYGUE4nJlQ0NXC w1hX5+LsnXWXOF7DCqwomddw1JYiA5lDjcDNktcShMCS+PiLUhf8MZeVCnCh3XwG ttKcn2w8Csmr1X4a1vPxX3sGK/aDUbx0tI6wib8hXez45N5geI2ujkhARpURBCgz NGCPIBPvcbf0vYmqtcHHQMYLXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPzJ4uqN EWm9AXglai8AIFzOq6xGMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALmwQm6UxqIgCc7/TgunZeDxzoLYTpVmIeC4q/kEmG9ZIzMtJqcvsTejg5mT8 ZasjnvLv4xY9NEvOUeuWNgp5szW0HXmY2t28Zyy7mPDJxK6MQ2F3QVPAN+wkzkQC o+OiMjAxavpA+cbn/oWfb/8PSd7skVIf4P6HXS2PY2GCniO3FdZhJZV+w/ysisOV z6buv5Meq0SbNpH1HwHBJbIRRQ5v4FW3LzwmXaKNY4JtHxxYofQzVrkBYR8Qp4J8 lqNIcJluekI2D9g33QWTYToX8JTz/+XJk7TNQ8G1d5Zy+8QRMZLwQSTHhNsrTS5u gUXCuxDwTBQ0jSJtYeBcnuNVyw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:51:25 2026 by rpki-client