$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: nMF0278cEyl+iMIqioCXU/e/LKKKsrXW859A1DnKT1o= Subject key identifier: FD:36:1D:00:D8:29:DB:D3:C9:59:24:7A:3E:7E:77:F1:7D:25:82:B5 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 0128 Signing time: Wed 25 Mar 2026 04:59:15 +0000 Manifest this update: Wed 25 Mar 2026 04:59:14 +0000 Manifest next update: Wed 01 Apr 2026 04:59:14 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: EhLp4JedeqzHQ8RoBAcxreeeRdPfBcJ697R5LloBL5k=) 2: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: WpLf4AaObe+N5I2HIzmO3ifOs3a8b6pFk0v9kjWfhKo=) 3: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: CkipJrZk0lzhAoob2kPQd93c6/y1lAZ0Ra8Fe1utBl0=) 4: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: nm1Ullm2VIIXw5m4XpAUTvY39qoFFv2kQzceO6Rs4JQ=) 5: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=) 6: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: zpgkPkDvpxrkSLXBoEJusQVoT2JeDQ/RaiKoNpwaUvg=) 7: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: tbOGVdr1pGEtRNIPhw+pN+6OYD1Bg4DdAHsAJbGglfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Mar 25 04:59:14 2026 GMT Not After : Apr 1 04:59:14 2026 GMT Subject: CN=69c36ba3-c2bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a7:bb:ce:0d:78:ad:1f:cd:b6:c4:86:c1:41: ef:9a:e2:1c:5d:a0:47:60:5b:eb:ad:20:d2:f9:be: b7:b5:5c:40:89:8a:6f:3e:d1:b0:ec:e7:b1:b9:b0: bc:5b:93:27:ce:e5:81:f4:aa:ce:6d:fd:af:51:30: c3:81:05:af:7b:66:5e:5b:f3:e0:d7:ab:01:02:b2: c3:3f:b2:aa:24:79:ea:e7:22:c0:0e:90:33:e9:dd: b8:26:51:2d:56:f3:81:a2:37:79:e5:4d:d3:9d:1a: a2:aa:e7:3e:46:3f:fb:a6:0f:39:7a:a4:ee:f5:fb: 30:8b:0d:0d:c4:d4:29:40:f5:ed:61:30:f1:e0:69: aa:af:e4:ff:82:68:01:71:3b:13:79:40:60:85:ca: 68:86:53:b5:73:f1:14:3d:f1:21:50:f7:e1:2d:c7: 8c:34:8a:1e:54:fc:dd:2b:2f:2e:0b:0d:24:88:a8: a0:eb:82:87:34:2b:3d:50:2a:22:75:bb:44:8a:16: 2f:9b:bb:c3:3e:6b:08:18:1e:57:59:58:15:01:41: 17:fa:57:9d:7c:55:45:0e:c1:39:9c:8d:1e:56:ce: 32:94:66:a8:d3:18:f1:8a:14:1d:1d:8b:c5:67:ea: 6c:fb:22:32:50:00:1d:af:10:a4:87:2b:97:5e:c0: c8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:36:1D:00:D8:29:DB:D3:C9:59:24:7A:3E:7E:77:F1:7D:25:82:B5 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:73:65:b8:19:fc:00:32:46:7f:e1:10:d8:60:88:ed:eb:30: 61:43:19:78:5b:a0:7c:08:85:0a:5f:e2:8f:8e:9f:5a:31:f3: f9:14:d8:27:3f:0e:aa:dd:55:3a:99:ff:bc:5f:a2:1c:11:de: bb:6d:e3:29:7d:c9:9e:16:27:36:d2:35:4c:96:f9:8c:df:c8: a2:07:1c:ae:c8:bf:74:ef:f6:b1:11:f2:4a:fb:5f:ff:af:00: 2a:a4:35:2b:5b:d1:0e:45:50:dd:b8:04:41:9a:5f:2c:8d:8f: 67:84:72:7e:93:03:a1:84:f1:d5:0b:8a:7f:88:ad:b5:da:71: f6:d3:d4:39:67:e4:ad:63:89:d9:16:f6:44:da:9d:fa:e4:59: 97:76:b7:44:3c:3f:ab:25:2a:8f:cf:34:4c:89:9e:ce:f9:a6: 94:57:49:17:92:92:05:7f:b3:f2:e4:e0:f0:84:3d:b7:f7:50: 6d:99:ca:11:17:df:6a:88:43:c9:1d:2b:93:1e:30:91:53:e6: 96:60:ec:d3:aa:55:95:e2:8f:a6:a3:73:93:cb:83:f9:4b:5e: 16:fe:68:17:88:e2:ec:31:87:ac:a1:df:ab:b9:48:a9:fd:ef: e5:b8:7f:2e:1b:ba:ff:6f:ff:eb:7a:c3:c5:c3:7e:53:37:a6: 9d:7e:f2:8b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjYwMzI1MDQ1OTE0WhcNMjYwNDAxMDQ1OTE0WjAYMRYwFAYD VQQDEw02OWMzNmJhMy1jMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzae7zg14rR/NtsSGwUHvmuIcXaBHYFvrrSDS+b63tVxAiYpvPtGw7OexubC8 W5MnzuWB9KrObf2vUTDDgQWve2ZeW/Pg16sBArLDP7KqJHnq5yLADpAz6d24JlEt VvOBojd55U3TnRqiquc+Rj/7pg85eqTu9fswiw0NxNQpQPXtYTDx4Gmqr+T/gmgB cTsTeUBghcpohlO1c/EUPfEhUPfhLceMNIoeVPzdKy8uCw0kiKig64KHNCs9UCoi dbtEihYvm7vDPmsIGB5XWVgVAUEX+ledfFVFDsE5nI0eVs4ylGao0xjxihQdHYvF Z+ps+yIyUAAdrxCkhyuXXsDI2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP02HQDY KdvTyVkkej5+d/F9JYK1MB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIXNluBn8ADJGf+EQ2GCI7eswYUMZeFugfAiFCl/ij46fWjHz+RTYJz8Oqt1V Opn/vF+iHBHeu23jKX3JnhYnNtI1TJb5jN/Iogccrsi/dO/2sRHySvtf/68AKqQ1 K1vRDkVQ3bgEQZpfLI2PZ4RyfpMDoYTx1QuKf4ittdpx9tPUOWfkrWOJ2Rb2RNqd +uRZl3a3RDw/qyUqj880TImezvmmlFdJF5KSBX+z8uTg8IQ9t/dQbZnKERffaohD yR0rkx4wkVPmlmDs06pVleKPpqNzk8uD+UteFv5oF4ji7DGHrKHfq7lIqf3v5bh/ Lhu6/2//63rDxcN+UzemnX7yiw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:47:40 2026 by rpki-client