$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json) Hash identifier: VMOi8m7d14zrNt2EGKbE8vS6wO/gWaVh29/RAqz5HeI= Subject key identifier: A8:D0:B3:C5:D9:AA:36:67:F5:14:9B:29:75:F9:B2:B0:94:BD:49:E2 Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft Manifest number: 40 Signing time: Wed 25 Mar 2026 07:38:29 +0000 Manifest this update: Wed 25 Mar 2026 07:38:28 +0000 Manifest next update: Wed 01 Apr 2026 07:38:28 +0000 Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: U2V51fRsbNyJfyKwRkrDGOZjrWlbzWwadrYfBWPKhq4=) 2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:38:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Validity Not Before: Mar 25 07:38:28 2026 GMT Not After : Apr 1 07:38:28 2026 GMT Subject: CN=69c390f5-66fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f2:52:e4:3b:d5:8f:b8:ef:3f:e5:48:90:79: de:e0:c6:74:c9:ee:9a:e7:99:5d:ec:cf:27:73:26: d8:4b:63:ce:87:b1:b6:c8:3c:3f:c4:5c:1b:db:27: e7:05:a6:0f:09:d8:72:7e:9a:8b:91:78:e2:7d:66: 49:d5:1d:85:aa:dc:6c:2e:f4:16:ea:a8:ed:a9:de: 50:4c:f8:9b:28:89:80:21:1b:8e:6b:f9:fd:22:b8: b4:d2:74:85:a8:9a:77:18:bd:c7:36:9e:28:37:15: e9:21:6b:65:fc:86:ff:12:9f:e9:a6:43:52:9b:95: cb:5d:52:7c:e7:47:80:67:a6:ce:86:ff:68:97:99: a5:aa:3f:50:73:0a:a4:1a:be:67:30:e6:33:de:ef: 54:e3:df:72:1c:56:8a:f5:62:c5:41:03:08:91:f3: b5:ee:e9:64:ad:cc:8c:d4:7a:e4:b6:43:99:76:5b: 3c:bb:91:c2:28:27:80:ac:46:d2:a2:a6:8f:d4:27: 29:31:b4:99:fd:66:bf:55:64:43:82:68:70:24:33: 84:48:fe:5e:32:70:bd:4e:b7:1b:c4:d3:c6:3a:e7: f8:84:73:42:2c:aa:37:99:f2:fa:ba:a9:e1:db:29: 1e:41:6b:b2:36:97:5c:e0:dd:9f:b1:60:ec:81:13: 48:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D0:B3:C5:D9:AA:36:67:F5:14:9B:29:75:F9:B2:B0:94:BD:49:E2 X509v3 Authority Key Identifier: keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:d6:2f:2c:81:5e:f7:34:75:96:74:f3:10:a4:8c:31:e8:eb: ec:3e:71:6d:38:b9:12:dc:b0:79:86:39:6e:dc:58:89:aa:4b: d5:44:7c:aa:68:24:7a:19:93:da:7e:86:60:13:00:98:e8:c2: 79:7f:60:72:e0:b2:9a:82:57:25:45:b5:ed:c6:ec:c1:69:cb: ec:8a:e7:c3:67:44:9b:1e:37:2a:f2:4d:91:88:dd:a3:2e:eb: 6e:db:0c:c4:a0:45:2a:2e:8b:1a:b3:cb:dd:f8:93:ae:5c:bc: f5:f5:5f:86:bb:33:dc:e6:1f:41:d7:35:a8:4a:1d:14:f3:b7: aa:3b:fa:cb:87:c7:61:f2:49:d9:da:9e:de:29:ef:9d:c7:58: c2:ab:d8:52:75:57:03:48:a0:53:6d:82:93:78:88:e2:7e:28: f2:12:f8:6d:83:f8:cd:69:25:22:bc:97:e9:30:93:b1:e9:d8: e7:ff:54:f8:48:ef:04:0e:52:4b:a8:89:9c:ba:96:46:94:d7: 3a:ea:92:04:48:25:98:6b:a4:53:92:cf:99:22:1d:f4:7e:36: 06:15:82:7e:52:ca:15:fb:e6:13:36:9f:ab:01:43:08:9f:21: 33:0b:b7:be:8e:47:53:9f:32:e0:a4:d5:6a:ce:f1:5f:1b:e6: b1:4d:fd:33 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEY1MDExMC8GA1UEBRMoMUJFQTM4MTE0RTlFRTgyRTQwNjRFQjNCRjkxMzI4MDg2 QzM1N0I2MTAeFw0yNjAzMjUwNzM4MjhaFw0yNjA0MDEwNzM4MjhaMBgxFjAUBgNV BAMTDTY5YzM5MGY1LTY2ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCa8lLkO9WPuO8/5UiQed7gxnTJ7prnmV3szydzJthLY86HsbbIPD/EXBvbJ+cF pg8J2HJ+mouReOJ9ZknVHYWq3Gwu9BbqqO2p3lBM+JsoiYAhG45r+f0iuLTSdIWo mncYvcc2nig3Fekha2X8hv8Sn+mmQ1KblctdUnznR4Bnps6G/2iXmaWqP1BzCqQa vmcw5jPe71Tj33IcVor1YsVBAwiR87Xu6WStzIzUeuS2Q5l2Wzy7kcIoJ4CsRtKi po/UJykxtJn9Zr9VZEOCaHAkM4RI/l4ycL1OtxvE08Y65/iEc0IsqjeZ8vq6qeHb KR5Ba7I2l1zg3Z+xYOyBE0j3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqNCzxdmq Nmf1FJspdfmysJS9SeIwHwYDVR0jBBgwFoAUG+o4EU6e6C5AZOs7+RMoCGw1e2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RjUwLzAzM0VDRDcyQzlC MzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZlNkM1QVpPczctUk1vQ0d3MWUy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRy1vNEVVNmU2QzVBWk9zNy1STW9DR3cxZTJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RjUwLzAzM0VDRDcyQzlCMzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZlNkM1 QVpPczctUk1vQ0d3MWUyRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQB41i8sgV73NHWWdPMQpIwx6OvsPnFtOLkS3LB5hjlu3FiJqkvVRHyqaCR6GZPa foZgEwCY6MJ5f2By4LKaglclRbXtxuzBacvsiufDZ0SbHjcq8k2RiN2jLutu2wzE oEUqLosas8vd+JOuXLz19V+GuzPc5h9B1zWoSh0U87eqO/rLh8dh8knZ2p7eKe+d x1jCq9hSdVcDSKBTbYKTeIjifijyEvhtg/jNaSUivJfpMJOx6djn/1T4SO8EDlJL qImcupZGlNc66pIESCWYa6RTks+ZIh30fjYGFYJ+UsoV++YTNp+rAUMInyEzC7e+ jkdTnzLgpNVqzvFfG+axTf0z -----END CERTIFICATE-----Generated at Thu Mar 26 21:32:19 2026 by rpki-client