$ rpki-client -vvf rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft File: h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft (raw, json) Hash identifier: 661PBxwUCJkvUXHh8UfK+uI5RvOIBve3UVsjnpnv1Zs= Subject key identifier: 92:94:C1:69:90:F9:4C:41:46:0E:2E:5A:7F:F7:00:01:16:2D:52:14 Authority key identifier: 87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE Certificate issuer: /CN=A9174CB0/serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Certificate serial: 088D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft Manifest number: 0883 Signing time: Thu 26 Mar 2026 20:28:55 +0000 Manifest this update: Thu 26 Mar 2026 20:28:55 +0000 Manifest next update: Thu 02 Apr 2026 20:28:55 +0000 Files and hashes: 1: h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl (hash: Q7/IPMfZSNBO8gpONzg0p2/YBM/gKdMASfyLuG9xHKQ=) 2: E21E5A44EB5611EA85A6FA39C4F9AE02.roa (hash: x5zzGg+10gujwwdvHGSHtg4DSreIyjT/dhlTPS5SU8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2189 (0x88d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174CB0, serialNumber=87BF57FBBCE0645E291D4946E5C7227624371ACE Validity Not Before: Mar 26 20:28:55 2026 GMT Not After : Apr 2 20:28:55 2026 GMT Subject: CN=69c59707-8e34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fc:f7:cc:8a:e6:36:e8:1c:82:d5:c5:92:ec: ce:dd:78:45:c5:76:de:ff:50:e7:46:18:d2:d8:aa: 81:ce:57:df:06:ff:08:91:01:13:f4:5a:d0:08:f1: 97:b4:e3:a3:bd:3b:58:14:f0:4f:2f:37:85:5a:8f: 61:0b:72:17:0d:82:5c:c0:1b:0c:ba:7b:b8:6f:45: 82:c8:87:dd:cc:ff:0c:6e:2b:c7:02:92:58:02:e7: 77:8b:c1:5f:b4:a3:7b:f3:10:73:ed:1d:1a:6b:8c: 73:f1:40:06:80:43:32:b5:80:5a:d6:bb:4d:e6:66: 35:90:76:3c:c5:33:5a:76:3d:0a:1a:eb:a6:59:60: 28:ee:50:e5:e8:e6:b7:97:52:fe:58:67:50:13:6c: 30:6c:f7:34:76:64:90:78:5e:54:24:6f:a2:4c:30: 62:ba:2c:ce:40:e3:17:70:3b:3c:a1:ef:2a:24:71: ca:f3:40:a4:1a:87:d1:4d:4a:cd:1f:c6:06:21:52: a2:3d:28:7c:2c:ae:6a:51:3d:e4:08:fc:23:75:4f: c5:cf:de:d9:cf:43:88:62:90:a2:53:4a:87:dc:51: d8:ef:32:8c:97:b9:2c:9c:78:33:ad:9c:19:fe:5f: d7:ca:1c:66:eb:64:fd:53:08:11:68:6e:a1:78:ac: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:94:C1:69:90:F9:4C:41:46:0E:2E:5A:7F:F7:00:01:16:2D:52:14 X509v3 Authority Key Identifier: keyid:87:BF:57:FB:BC:E0:64:5E:29:1D:49:46:E5:C7:22:76:24:37:1A:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h79X-7zgZF4pHUlG5ccidiQ3Gs4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174CB0/CCAC1454EB5511EABDE24E36C4F9AE02/h79X-7zgZF4pHUlG5ccidiQ3Gs4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:29:8d:19:3f:ef:74:06:d8:08:6a:4b:db:66:dc:c8:3b:cd: 16:fd:f8:77:74:17:9f:3a:ed:66:bd:36:a5:b0:4d:03:12:3d: 90:07:b5:ec:71:e7:9d:be:2e:68:3a:20:00:3e:3b:02:c1:96: f8:78:ec:75:fb:31:55:66:f2:19:84:54:75:1d:da:25:f9:23: 98:da:74:0f:77:30:76:f9:f9:e6:62:a7:3e:14:e6:ab:d7:26: cf:fa:40:b4:c1:d2:85:58:c4:03:39:7a:e5:db:75:af:f0:94: 93:35:55:ea:d3:16:e0:65:70:6a:5f:b8:50:ca:de:b0:1b:4c: 54:e7:ef:6f:4b:fd:4f:b5:3d:2c:0c:72:07:6b:bf:e5:1f:ca: a6:9c:1f:9c:f2:6c:d0:c6:56:7d:15:66:4a:05:2e:06:2c:e6: e8:66:ec:f8:d8:19:48:3a:b1:cd:72:76:b2:ca:22:ef:83:d0: 04:aa:ba:03:0f:74:1a:fc:a5:88:b2:50:a2:8f:49:61:fa:87: 38:62:32:5c:35:d7:4b:4b:07:d0:b6:82:4d:cd:19:dd:ab:70: a3:56:fa:be:62:be:25:57:be:fa:25:90:54:0e:ce:d4:0c:fc: 6d:3d:23:b0:ca:5e:22:6c:8c:7a:31:62:ab:f1:26:d4:5b:13: c6:61:34:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzRDQjAxMTAvBgNVBAUTKDg3QkY1N0ZCQkNFMDY0NUUyOTFENDk0NkU1QzcyMjc2 MjQzNzFBQ0UwHhcNMjYwMzI2MjAyODU1WhcNMjYwNDAyMjAyODU1WjAYMRYwFAYD VQQDEw02OWM1OTcwNy04ZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/z3zIrmNugcgtXFkuzO3XhFxXbe/1DnRhjS2KqBzlffBv8IkQET9FrQCPGX tOOjvTtYFPBPLzeFWo9hC3IXDYJcwBsMunu4b0WCyIfdzP8MbivHApJYAud3i8Ff tKN78xBz7R0aa4xz8UAGgEMytYBa1rtN5mY1kHY8xTNadj0KGuumWWAo7lDl6Oa3 l1L+WGdQE2wwbPc0dmSQeF5UJG+iTDBiuizOQOMXcDs8oe8qJHHK80CkGofRTUrN H8YGIVKiPSh8LK5qUT3kCPwjdU/Fz97Zz0OIYpCiU0qH3FHY7zKMl7ksnHgzrZwZ /l/Xyhxm62T9UwgRaG6heKzcZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJKUwWmQ +UxBRg4uWn/3AAEWLVIUMB8GA1UdIwQYMBaAFIe/V/u84GReKR1JRuXHInYkNxrO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NENCMC9DQ0FDMTQ1NEVC NTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pGNHBIVWxHNWNjaWRpUTNH czQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3OVgtN3pnWkY0cEhVbEc1Y2NpZGlRM0dzNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NENCMC9DQ0FDMTQ1NEVCNTUxMUVBQkRFMjRFMzZDNEY5QUUwMi9oNzlYLTd6Z1pG NHBIVWxHNWNjaWRpUTNHczQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzCmNGT/vdAbYCGpL22bcyDvNFv34d3QXnzrtZr02pbBNAxI9kAe17HHnnb4u aDogAD47AsGW+HjsdfsxVWbyGYRUdR3aJfkjmNp0D3cwdvn55mKnPhTmq9cmz/pA tMHShVjEAzl65dt1r/CUkzVV6tMW4GVwal+4UMresBtMVOfvb0v9T7U9LAxyB2u/ 5R/KppwfnPJs0MZWfRVmSgUuBizm6Gbs+NgZSDqxzXJ2ssoi74PQBKq6Aw90Gvyl iLJQoo9JYfqHOGIyXDXXS0sH0LaCTc0Z3atwo1b6vmK+JVe++iWQVA7O1Az8bT0j sMpeImyMejFiq/Em1FsTxmE0Ag== -----END CERTIFICATE-----Generated at Sat Mar 28 12:11:11 2026 by rpki-client