$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: MRnJwysU8zpdZp2zqOxtn881DjTo+QT0fOAHC2y7IsQ= Subject key identifier: 7A:19:CF:C1:C8:DE:F1:E5:15:A9:FB:E2:D7:E3:3A:07:32:06:9F:AC Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 0889 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 0875 Signing time: Thu 26 Mar 2026 20:34:38 +0000 Manifest this update: Thu 26 Mar 2026 20:34:37 +0000 Manifest next update: Thu 02 Apr 2026 20:34:37 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: E7pBeRFtx2pKwiMWIcF/tEa2ubxBRW6BbwEgIDvZDF4=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: j8uiQ1yAgz9ZEp0DuVyDJIgNZ2YjQcOMmdmTSIrRMPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:34:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Mar 26 20:34:37 2026 GMT Not After : Apr 2 20:34:37 2026 GMT Subject: CN=69c5985e-9a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:04:83:3f:a9:fa:26:46:05:57:2f:04:69:73: b3:37:d2:30:c5:96:78:08:12:18:f8:c9:33:b3:a8: 4b:5d:f8:9d:02:10:23:1e:a5:2f:21:67:a4:ea:cd: 4a:98:9b:9d:9c:0f:2f:c9:cf:67:c4:ee:76:f1:1f: b4:f8:72:08:3b:15:db:42:84:05:a2:51:1c:6e:72: c8:dd:d5:52:9e:05:ed:ae:b0:72:93:c2:70:52:d5: f9:02:1f:56:74:ec:b3:b1:85:7f:c4:c3:29:00:98: 9f:30:1d:c7:23:04:e2:77:50:06:38:f8:89:a3:74: e6:74:6b:03:e9:ff:4e:31:f3:06:bc:d0:30:58:17: af:ab:32:15:93:0c:60:ba:bb:73:99:c4:be:1a:49: b8:b9:fa:55:a7:65:7a:00:11:25:d6:01:cc:dd:22: bc:b0:71:79:b8:0a:82:eb:61:d5:ab:71:10:62:a1: 85:3d:78:b3:1b:11:47:9c:be:27:ac:96:ce:c4:bb: 3c:3f:71:f6:6c:d1:0b:af:da:a3:26:13:ce:c2:4c: f0:f7:1c:99:ab:7f:f6:fd:57:ae:06:f1:f3:22:5d: 98:af:c3:ff:82:bf:5d:5c:75:49:79:b1:03:11:e2: 9c:b7:db:4b:b6:da:e7:99:0b:16:cf:b2:42:7e:4e: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:19:CF:C1:C8:DE:F1:E5:15:A9:FB:E2:D7:E3:3A:07:32:06:9F:AC X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:db:9c:07:36:43:19:55:eb:af:1a:65:f4:11:d6:77:e4:dc: 75:24:58:32:75:9f:7f:06:eb:b4:e6:b3:6f:df:b6:7e:b7:de: 27:7f:34:0c:dd:f8:c2:67:2d:93:bd:04:6f:4e:f9:df:eb:72: 19:5e:98:4f:4a:0a:15:fe:d4:6e:9b:7b:82:87:37:d6:37:4a: d1:87:38:65:d7:8e:ec:3a:e5:18:6b:44:01:b0:d1:3b:c3:c4: 43:be:21:c3:70:3e:83:ba:c0:a1:21:83:4b:d0:a0:61:68:3a: 4a:36:1e:d0:5a:3d:2b:fc:b8:fe:4c:ab:00:3f:fe:27:2b:17: 07:77:f5:5b:ac:98:19:64:88:45:2c:ee:7a:40:3c:0d:1c:a5: 10:5b:56:b2:aa:77:d3:dd:cf:bb:7e:40:15:2f:c6:24:db:00: f0:67:3c:13:8a:ce:d3:5a:dc:15:b4:d8:62:9e:d4:97:ef:1b: 92:62:c1:ff:50:89:25:d4:7a:14:1a:01:65:59:b4:9d:84:41: e9:d3:23:a2:7e:f1:97:52:e3:7c:2a:e9:c5:4f:63:89:6f:49: aa:88:69:ad:6f:38:52:4a:30:25:67:1f:84:b9:05:2b:1e:38: 90:45:f5:fd:9a:3a:32:7f:b9:2c:44:f9:1e:59:c9:3a:30:64: ae:52:1a:b0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjYwMzI2MjAzNDM3WhcNMjYwNDAyMjAzNDM3WjAYMRYwFAYD VQQDEw02OWM1OTg1ZS05YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmQSDP6n6JkYFVy8EaXOzN9IwxZZ4CBIY+Mkzs6hLXfidAhAjHqUvIWek6s1K mJudnA8vyc9nxO528R+0+HIIOxXbQoQFolEcbnLI3dVSngXtrrByk8JwUtX5Ah9W dOyzsYV/xMMpAJifMB3HIwTid1AGOPiJo3TmdGsD6f9OMfMGvNAwWBevqzIVkwxg urtzmcS+Gkm4ufpVp2V6ABEl1gHM3SK8sHF5uAqC62HVq3EQYqGFPXizGxFHnL4n rJbOxLs8P3H2bNELr9qjJhPOwkzw9xyZq3/2/VeuBvHzIl2Yr8P/gr9dXHVJebED EeKct9tLttrnmQsWz7JCfk7TtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHoZz8HI 3vHlFan74tfjOgcyBp+sMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALtucBzZDGVXrrxpl9BHWd+TcdSRYMnWffwbrtOazb9+2frfeJ380DN34wmct k70Eb0753+tyGV6YT0oKFf7Ubpt7goc31jdK0Yc4ZdeO7DrlGGtEAbDRO8PEQ74h w3A+g7rAoSGDS9CgYWg6SjYe0Fo9K/y4/kyrAD/+JysXB3f1W6yYGWSIRSzuekA8 DRylEFtWsqp3093Pu35AFS/GJNsA8Gc8E4rO01rcFbTYYp7Ul+8bkmLB/1CJJdR6 FBoBZVm0nYRB6dMjon7xl1LjfCrpxU9jiW9JqohprW84UkowJWcfhLkFKx44kEX1 /Zo6Mn+5LET5HlnJOjBkrlIasA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:00 2026 by rpki-client