$ rpki-client -vvf rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft File: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft (raw, json) Hash identifier: sjcdBw5FX6AW0jX7xqgYXMQG9w7I6CCAIrwpNdQwhqI= Subject key identifier: D1:4A:8B:E7:93:6C:9A:E5:F3:65:18:0D:06:36:42:AB:55:E5:3E:F5 Authority key identifier: 91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 Certificate issuer: /CN=A917408F/serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft Manifest number: F5 Signing time: Wed 25 Mar 2026 05:33:12 +0000 Manifest this update: Wed 25 Mar 2026 05:33:12 +0000 Manifest next update: Wed 01 Apr 2026 05:33:12 +0000 Files and hashes: 1: kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl (hash: +V05AixXQ6ZZ1Yv7xLCYWMf4yCfUU5zLE9+26YQI80E=) 2: 9CEF2622B76E11EF8FCC9767C4F9AE02.roa (hash: BT5lGoepooMPklXWzsmxnmANaCteYyqvqzOaxtbVyhM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917408F, serialNumber=910F2F41408E13DAED7C21DC472DC5C58C458836 Validity Not Before: Mar 25 05:33:12 2026 GMT Not After : Apr 1 05:33:12 2026 GMT Subject: CN=69c37398-505b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:cf:9a:e6:22:99:5c:66:00:ed:e6:37:39: 01:71:ba:e8:a4:91:13:d6:05:4f:72:2a:1e:88:ca: 3c:93:39:86:18:03:bb:87:fd:e3:b0:b8:32:dd:45: f1:4b:44:01:d1:eb:90:a6:2d:c3:99:72:94:db:12: 4b:cd:57:60:46:ce:39:f0:f8:7c:a2:43:ad:cc:ac: 68:1d:43:8c:7f:a7:7b:92:1f:c4:4f:c7:03:d7:7d: 28:be:fe:d1:aa:f0:21:75:5b:58:27:c5:fb:aa:5c: 3b:bb:9d:07:03:a0:f6:57:bc:8d:4e:98:98:a9:0c: f0:28:18:c4:e5:33:c6:8d:a5:69:ae:d0:86:12:6c: d1:72:46:fa:97:0a:fe:59:cd:91:83:96:c9:87:a8: f0:86:d2:06:fc:e2:7e:ab:02:fb:42:16:99:00:47: b3:37:63:cb:21:a4:19:0c:15:ae:65:1d:d1:b9:84: fb:83:0e:77:ab:48:15:81:a9:22:a5:77:76:a9:de: 4a:6b:17:3a:3d:44:d4:aa:95:2f:f0:3a:25:46:23: 06:39:fb:34:8d:a9:5a:81:47:a1:99:a9:83:e7:e6: 78:ff:57:b1:da:33:ed:e5:f0:f5:40:36:47:d1:67: b7:2a:57:84:6b:79:33:09:fb:92:49:6f:2f:fb:84: 95:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:8B:E7:93:6C:9A:E5:F3:65:18:0D:06:36:42:AB:55:E5:3E:F5 X509v3 Authority Key Identifier: keyid:91:0F:2F:41:40:8E:13:DA:ED:7C:21:DC:47:2D:C5:C5:8C:45:88:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917408F/16CD9858B76E11EFACF0F865C4F9AE02/kQ8vQUCOE9rtfCHcRy3FxYxFiDY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:bc:f4:8d:bd:73:78:4f:e6:a7:8e:fc:43:b9:5a:a1:76:de: 25:24:e3:db:57:7c:8b:e3:d5:ad:f9:40:c3:92:78:3c:c9:0c: 03:ae:84:50:25:0d:13:29:e7:2c:51:77:3b:6f:6d:95:4f:e8: ad:63:92:b9:b5:eb:12:a9:93:c1:04:8f:0a:6b:6f:83:eb:96: c0:36:03:fa:78:5a:0b:ce:66:8b:06:c4:5b:8c:0c:60:80:f7: ed:79:c7:4c:01:4e:60:47:f0:00:cf:2f:df:fc:68:2a:a7:5d: bf:d7:c1:90:ac:54:97:10:99:ce:cf:43:e1:f7:84:9d:32:70: f2:65:7b:ab:a7:8d:03:a7:28:8a:6f:3e:85:16:58:15:f9:97: 9a:fd:fc:6f:ee:9d:b7:a6:0f:aa:f4:dc:e2:ea:d5:d2:4f:b7: 88:0b:12:3a:ef:bc:ac:ff:ee:c3:83:31:4e:ed:86:a4:fe:f4: aa:0e:8e:69:3a:05:13:3c:1d:47:0d:19:4f:1e:9f:91:95:c1: 02:33:28:f3:01:fe:ed:0c:ee:76:77:de:b5:c2:cf:f6:9c:20: d9:b0:2a:a1:46:e5:52:6a:44:bd:67:6a:99:04:cf:12:72:81: 15:0d:0d:5b:85:74:f5:12:1a:95:c1:cf:49:76:39:da:dd:7b: c6:c6:88:bd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQwOEYxMTAvBgNVBAUTKDkxMEYyRjQxNDA4RTEzREFFRDdDMjFEQzQ3MkRDNUM1 OEM0NTg4MzYwHhcNMjYwMzI1MDUzMzEyWhcNMjYwNDAxMDUzMzEyWjAYMRYwFAYD VQQDEw02OWMzNzM5OC01MDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0rPmuYimVxmAO3mNzkBcbropJET1gVPcioeiMo8kzmGGAO7h/3jsLgy3UXx S0QB0euQpi3DmXKU2xJLzVdgRs458Ph8okOtzKxoHUOMf6d7kh/ET8cD130ovv7R qvAhdVtYJ8X7qlw7u50HA6D2V7yNTpiYqQzwKBjE5TPGjaVprtCGEmzRckb6lwr+ Wc2Rg5bJh6jwhtIG/OJ+qwL7QhaZAEezN2PLIaQZDBWuZR3RuYT7gw53q0gVgaki pXd2qd5Kaxc6PUTUqpUv8DolRiMGOfs0jalagUehmamD5+Z4/1ex2jPt5fD1QDZH 0We3KleEa3kzCfuSSW8v+4SV9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNFKi+eT bJrl82UYDQY2QqtV5T71MB8GA1UdIwQYMBaAFJEPL0FAjhPa7Xwh3EctxcWMRYg2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDA4Ri8xNkNEOTg1OEI3 NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5cnRmQ0hjUnkzRnhZeEZp RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tROHZRVUNPRTlydGZDSGNSeTNGeFl4RmlEWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDA4Ri8xNkNEOTg1OEI3NkUxMUVGQUNGMEY4NjVDNEY5QUUwMi9rUTh2UVVDT0U5 cnRmQ0hjUnkzRnhZeEZpRFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApLz0jb1zeE/mp478Q7laoXbeJSTj21d8i+PVrflAw5J4PMkMA66EUCUNEynn LFF3O29tlU/orWOSubXrEqmTwQSPCmtvg+uWwDYD+nhaC85miwbEW4wMYID37XnH TAFOYEfwAM8v3/xoKqddv9fBkKxUlxCZzs9D4feEnTJw8mV7q6eNA6coim8+hRZY FfmXmv38b+6dt6YPqvTc4urV0k+3iAsSOu+8rP/uw4MxTu2GpP70qg6OaToFEzwd Rw0ZTx6fkZXBAjMo8wH+7QzudnfetcLP9pwg2bAqoUblUmpEvWdqmQTPEnKBFQ0N W4V09RIalcHPSXY52t17xsaIvQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:28:22 2026 by rpki-client