$ rpki-client -vvf rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft File: gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft (raw, json) Hash identifier: gfpYjYcBMerBzpMM711AxuWybt/t3bF68TCRiw91d+g= Subject key identifier: 64:14:9C:6B:F7:6C:96:DA:6F:E6:03:54:AF:6C:89:99:C3:57:AE:7E Authority key identifier: 80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 Certificate issuer: /CN=A9175155/serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft Manifest number: 06A1 Signing time: Tue 24 Mar 2026 22:11:41 +0000 Manifest this update: Tue 24 Mar 2026 22:11:40 +0000 Manifest next update: Tue 31 Mar 2026 22:11:40 +0000 Files and hashes: 1: gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl (hash: NGxkkqyB/Qw9sPidDg8w5kGn0qiVO5c+nrT6/iFt3wg=) 2: 86F4D41881C811ECB5F90D48C4F9AE02.roa (hash: DeneMHcuZrF9hDdFh94wwzaZjKMUOYRWB0wTW8HEivQ=) 3: 899A5138691611EFBED13942C4F9AE02.roa (hash: 641x4scZUN4ZCVnjjE3qhhOg1CGXgMpeMklKEZlPiCI=) 4: A6C94076624711EC9B815772C4F9AE02.roa (hash: V13ycXWWqywILndXonJ3QjvrQDnIDg003VYRA9hMyI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175155, serialNumber=80084A34FD4F3B932C092182407B8905D9406500 Validity Not Before: Mar 24 22:11:40 2026 GMT Not After : Mar 31 22:11:40 2026 GMT Subject: CN=69c30c1d-54f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a2:7a:dd:53:81:e8:bd:4a:57:3a:05:e5:42: 6e:95:56:de:81:c3:19:d1:af:8d:fb:af:19:8d:9e: 86:55:dc:e8:4e:13:99:f4:86:08:ac:8f:0b:7e:a3: a5:5c:6a:f3:d4:46:8b:60:52:d9:90:25:de:33:00: 81:9d:46:43:ba:35:e2:41:05:d0:10:31:e9:51:65: d5:ad:4e:5f:73:19:11:c7:91:11:c7:0c:1d:dc:4e: 46:8e:ed:a0:6f:6b:92:45:08:ef:bb:6a:f3:68:e5: 12:dc:68:8b:2d:20:fa:70:13:e9:f6:26:e4:4f:39: 83:34:b7:15:f3:f6:3b:5f:1f:a1:30:e5:f0:28:6f: 83:0b:13:c3:af:65:8a:14:68:77:80:f3:fd:49:96: 77:c1:27:52:d6:bc:12:6d:44:83:54:0e:e2:d0:c0: 1f:fa:40:f9:0c:47:bc:e7:f7:aa:41:2f:21:0d:48: 6b:d9:1b:f7:95:0e:c8:fe:79:7b:88:39:3a:ce:e7: 42:66:3d:13:4d:34:ea:3e:2d:01:fb:e1:a3:43:94: 0e:75:52:49:48:31:9f:8a:5e:b4:74:41:11:5e:3f: 83:c5:e0:7f:2d:86:3c:95:0f:89:ee:8b:70:70:53: 6f:58:72:1a:a2:f6:f7:7c:d3:c2:81:11:0b:75:9f: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:14:9C:6B:F7:6C:96:DA:6F:E6:03:54:AF:6C:89:99:C3:57:AE:7E X509v3 Authority Key Identifier: keyid:80:08:4A:34:FD:4F:3B:93:2C:09:21:82:40:7B:89:05:D9:40:65:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAhKNP1PO5MsCSGCQHuJBdlAZQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175155/3744B3C4B02811EB9D27891AC4F9AE02/gAhKNP1PO5MsCSGCQHuJBdlAZQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:be:7a:07:1f:30:f1:9d:69:42:b7:f5:2b:b4:4b:fd:b7:0e: 78:ad:ef:0c:3f:29:70:91:ae:d9:9c:4e:44:c3:5b:82:29:a9: e7:3f:0c:8d:92:7b:5e:7a:f0:d8:8d:3f:8a:92:34:a1:5a:34: 32:38:72:f5:3a:62:60:2a:4e:ff:3b:68:7a:a2:a2:f6:d9:ff: 76:1b:b0:0c:ab:2e:29:4b:4c:c2:e8:4f:0c:02:ce:50:89:ff: 64:f8:05:cf:dd:73:c5:cc:83:9e:fc:01:e9:c2:25:44:34:b7: 89:42:ee:f7:a1:0b:9c:1c:ff:33:ad:1b:17:c4:a7:2d:23:e5: a1:6e:fc:d1:c4:f0:4a:d2:d6:84:ba:25:1d:0c:68:80:76:3d: 90:4d:24:2e:16:0c:9f:10:b6:1f:f8:2a:b8:fe:2b:8b:3d:b8: 4c:d7:6b:50:6c:8d:0d:c9:2d:c0:61:b4:00:48:26:b4:bf:a5: 29:06:2f:b0:1e:77:2b:b7:08:5c:8b:a9:eb:e6:ff:7f:45:5c: 7d:31:00:9d:44:b1:f3:ae:f6:a9:18:5b:73:16:7a:2a:69:27: 82:c7:52:c6:23:5b:0c:50:1c:d2:6c:d8:10:20:1f:d2:bf:18: 98:b7:eb:72:ec:40:f1:1e:5d:23:2b:3a:14:50:8a:dd:6b:9f: 1f:26:09:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNTUxMTAvBgNVBAUTKDgwMDg0QTM0RkQ0RjNCOTMyQzA5MjE4MjQwN0I4OTA1 RDk0MDY1MDAwHhcNMjYwMzI0MjIxMTQwWhcNMjYwMzMxMjIxMTQwWjAYMRYwFAYD VQQDEw02OWMzMGMxZC01NGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKJ63VOB6L1KVzoF5UJulVbegcMZ0a+N+68ZjZ6GVdzoThOZ9IYIrI8LfqOl XGrz1EaLYFLZkCXeMwCBnUZDujXiQQXQEDHpUWXVrU5fcxkRx5ERxwwd3E5Gju2g b2uSRQjvu2rzaOUS3GiLLSD6cBPp9ibkTzmDNLcV8/Y7Xx+hMOXwKG+DCxPDr2WK FGh3gPP9SZZ3wSdS1rwSbUSDVA7i0MAf+kD5DEe85/eqQS8hDUhr2Rv3lQ7I/nl7 iDk6zudCZj0TTTTqPi0B++GjQ5QOdVJJSDGfil60dEERXj+DxeB/LYY8lQ+J7otw cFNvWHIaovb3fNPCgRELdZ+TgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGQUnGv3 bJbab+YDVK9siZnDV65+MB8GA1UdIwQYMBaAFIAISjT9TzuTLAkhgkB7iQXZQGUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE1NS8zNzQ0QjNDNEIw MjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81TXNDU0dDUUh1SkJkbEFa UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dBaEtOUDFQTzVNc0NTR0NRSHVKQmRsQVpRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE1NS8zNzQ0QjNDNEIwMjgxMUVCOUQyNzg5MUFDNEY5QUUwMi9nQWhLTlAxUE81 TXNDU0dDUUh1SkJkbEFaUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW756Bx8w8Z1pQrf1K7RL/bcOeK3vDD8pcJGu2ZxORMNbgimp5z8MjZJ7Xnrw 2I0/ipI0oVo0Mjhy9TpiYCpO/ztoeqKi9tn/dhuwDKsuKUtMwuhPDALOUIn/ZPgF z91zxcyDnvwB6cIlRDS3iULu96ELnBz/M60bF8SnLSPloW780cTwStLWhLolHQxo gHY9kE0kLhYMnxC2H/gquP4riz24TNdrUGyNDcktwGG0AEgmtL+lKQYvsB53K7cI XIup6+b/f0VcfTEAnUSx8672qRhbcxZ6KmkngsdSxiNbDFAc0mzYECAf0r8YmLfr cuxA8R5dIys6FFCK3WufHyYJJA== -----END CERTIFICATE-----Generated at Thu Mar 26 19:03:26 2026 by rpki-client