$ rpki-client -vvf rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft File: G2L9XgPTM3qi3E4VB5QUQEextjo.mft (raw, json) Hash identifier: SA2gb04sr6VkMcRYEuAY9sXUpNwAqWYyq9CrxaXzBfI= Subject key identifier: 4B:BC:18:94:DD:F4:F1:D4:BC:54:8F:57:5E:8E:51:89:5B:6F:08:34 Authority key identifier: 1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A Certificate issuer: /CN=A916C643/serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Certificate serial: 05A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft Manifest number: 0590 Signing time: Tue 24 Mar 2026 22:56:42 +0000 Manifest this update: Tue 24 Mar 2026 22:56:42 +0000 Manifest next update: Tue 31 Mar 2026 22:56:42 +0000 Files and hashes: 1: G2L9XgPTM3qi3E4VB5QUQEextjo.crl (hash: AFNxUGWsmaySivUfRtfMLMpR3NVb/oHhfV8QKCZAEzE=) 2: 5A0804A4152E11EC94BCB264C4F9AE02.roa (hash: 49abEkg0KhXLphiSvkFxFB5/cBrDujbbgSy2255f/a8=) 3: 594A0BF2152E11EC94BCB264C4F9AE02.roa (hash: 2+WcS7JB0+agxKcQ22MQ04J/yCONuIWJ6zoWcxPIlh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C643, serialNumber=1B62FD5E03D3337AA2DC4E150794144047B1B63A Validity Not Before: Mar 24 22:56:42 2026 GMT Not After : Mar 31 22:56:42 2026 GMT Subject: CN=69c316aa-51e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:14:f9:4b:9a:b2:0b:4c:53:42:74:72:68: dc:0f:9b:11:fa:d0:2f:cc:04:b3:88:3b:2f:a2:44: 04:ba:22:9f:ad:5b:8c:4c:83:48:54:db:90:29:5e: ce:0a:45:40:8c:48:fe:7d:75:53:6e:2b:ad:e1:24: e3:d9:8c:e5:91:0e:65:27:18:4e:98:1f:d9:2c:9d: a3:b1:41:e0:0a:ff:f8:0a:cf:63:08:5a:4c:ea:7f: 57:f0:b1:d0:6e:15:9f:5b:c8:8a:c8:0e:b4:0f:3b: 6b:39:0f:53:30:0e:75:bf:e4:fb:4d:d7:db:19:db: 4a:e3:0a:d7:83:83:0d:d4:24:53:98:9b:89:d9:33: 54:ec:7b:2b:ac:28:0f:32:49:0a:6d:df:3f:e8:7a: 87:44:bf:54:51:07:75:72:3f:cd:a2:49:52:a8:d7: 24:32:c0:23:18:9e:ad:1e:fd:44:e6:79:1d:03:87: 9d:af:e3:c9:5e:7f:94:ca:d2:4d:e2:c1:06:81:b6: 9d:cd:dd:90:4b:35:7e:88:72:0f:f9:cc:1f:72:ae: 42:d7:d2:c4:5f:e4:92:76:6f:fb:1d:bd:14:5a:dd: 5a:ca:a8:6d:00:cb:e7:d2:d0:f7:95:ed:0b:de:7a: c5:9b:ea:2c:68:f1:49:ea:4d:79:5a:ce:7b:7d:25: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:18:94:DD:F4:F1:D4:BC:54:8F:57:5E:8E:51:89:5B:6F:08:34 X509v3 Authority Key Identifier: keyid:1B:62:FD:5E:03:D3:33:7A:A2:DC:4E:15:07:94:14:40:47:B1:B6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G2L9XgPTM3qi3E4VB5QUQEextjo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C643/A5D884C4152B11ECA53E4C63C4F9AE02/G2L9XgPTM3qi3E4VB5QUQEextjo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0f:17:24:a2:45:7d:76:e3:9c:7f:90:67:4c:f4:f0:13:96: d1:28:e3:cf:ac:f8:d7:1e:b0:15:3c:cd:fa:97:49:43:18:09: 20:d8:63:24:59:d3:5a:15:36:27:65:34:67:8b:a3:d5:bf:32: d0:66:be:15:7f:c5:ba:af:21:02:30:34:0d:b6:23:e4:76:94: c4:4d:4c:20:0a:28:dc:da:d8:dc:74:7a:f6:92:e9:70:80:0c: e1:ed:d2:6b:46:d0:1d:6f:83:85:50:fc:63:64:9e:e5:4c:62: 9a:e1:36:e7:3c:6f:b1:86:0a:d4:90:e6:b9:c0:2a:c5:bc:a1: 13:ea:31:3c:fc:b2:47:c8:97:2d:7e:a9:83:f0:55:2b:64:12: 36:29:9d:0c:0d:71:dc:2c:ff:24:c8:4d:ae:db:cc:04:fa:e6: e7:c9:79:38:c8:15:0c:0f:6e:41:0f:05:45:b0:28:56:38:4f: f3:e6:77:32:27:a9:aa:05:f8:80:cc:83:92:a3:7f:b4:98:72: 8d:8f:5f:8d:30:92:b8:ea:57:31:37:20:31:69:2d:8e:b7:18: ee:cb:26:1d:90:80:52:b9:6e:93:2d:ff:0d:d6:57:f2:35:ae: 8e:a4:6e:7e:21:fe:fa:dc:8d:c1:f8:39:ee:65:a7:34:f4:18: 1e:c0:8c:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2NDMxMTAvBgNVBAUTKDFCNjJGRDVFMDNEMzMzN0FBMkRDNEUxNTA3OTQxNDQw NDdCMUI2M0EwHhcNMjYwMzI0MjI1NjQyWhcNMjYwMzMxMjI1NjQyWjAYMRYwFAYD VQQDEw02OWMzMTZhYS01MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZIU+UuasgtMU0J0cmjcD5sR+tAvzASziDsvokQEuiKfrVuMTINIVNuQKV7O CkVAjEj+fXVTbiut4STj2YzlkQ5lJxhOmB/ZLJ2jsUHgCv/4Cs9jCFpM6n9X8LHQ bhWfW8iKyA60DztrOQ9TMA51v+T7TdfbGdtK4wrXg4MN1CRTmJuJ2TNU7HsrrCgP MkkKbd8/6HqHRL9UUQd1cj/NoklSqNckMsAjGJ6tHv1E5nkdA4edr+PJXn+UytJN 4sEGgbadzd2QSzV+iHIP+cwfcq5C19LEX+SSdm/7Hb0UWt1ayqhtAMvn0tD3le0L 3nrFm+osaPFJ6k15Ws57fSWh4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEu8GJTd 9PHUvFSPV16OUYlbbwg0MB8GA1UdIwQYMBaAFBti/V4D0zN6otxOFQeUFEBHsbY6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzY0My9BNUQ4ODRDNDE1 MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0zcWkzRTRWQjVRVVFFZXh0 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cyTDlYZ1BUTTNxaTNFNFZCNVFVUUVleHRqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzY0My9BNUQ4ODRDNDE1MkIxMUVDQTUzRTRDNjNDNEY5QUUwMi9HMkw5WGdQVE0z cWkzRTRWQjVRVVFFZXh0am8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeg8XJKJFfXbjnH+QZ0z08BOW0Sjjz6z41x6wFTzN+pdJQxgJINhjJFnTWhU2 J2U0Z4uj1b8y0Ga+FX/Fuq8hAjA0DbYj5HaUxE1MIAoo3NrY3HR69pLpcIAM4e3S a0bQHW+DhVD8Y2Se5UximuE25zxvsYYK1JDmucAqxbyhE+oxPPyyR8iXLX6pg/BV K2QSNimdDA1x3Cz/JMhNrtvMBPrm58l5OMgVDA9uQQ8FRbAoVjhP8+Z3MiepqgX4 gMyDkqN/tJhyjY9fjTCSuOpXMTcgMWktjrcY7ssmHZCAUrluky3/DdZX8jWujqRu fiH++tyNwfg57mWnNPQYHsCMlA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:30 2026 by rpki-client