$ rpki-client -vvf rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft File: gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft (raw, json) Hash identifier: KxG+NTMm9eI8PsQuCmS1x0oH/GL+zi7RohUMAJp/AbA= Subject key identifier: 2B:EB:29:B5:79:1B:34:9A:A6:38:70:F2:B7:49:80:F1:55:D9:47:B9 Authority key identifier: 81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 Certificate issuer: /CN=A9175299/serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Certificate serial: 0BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft Manifest number: 0BBA Signing time: Tue 24 Mar 2026 18:51:21 +0000 Manifest this update: Tue 24 Mar 2026 18:51:20 +0000 Manifest next update: Tue 31 Mar 2026 18:51:20 +0000 Files and hashes: 1: gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl (hash: PxCkmBoYEQe6Wu26Oogwxhpo5Cz0VMAVDRYLcPFg+yc=) 2: 89340B10B5E011EE91DD4D53C4F9AE02.roa (hash: 6cuRYkKrSNBuAIRhtyOQTmq+Tuxf6pFsDwJm5X0jf/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3025 (0xbd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175299, serialNumber=81A7151B177592F86823B69F437624E9C002DE41 Validity Not Before: Mar 24 18:51:20 2026 GMT Not After : Mar 31 18:51:20 2026 GMT Subject: CN=69c2dd28-228b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:3e:89:4d:dd:45:c3:0b:4e:48:a6:f4:36: 8f:e5:a4:21:8c:fb:1f:c3:5a:10:00:13:b0:14:f4: 78:de:43:da:92:7c:4c:87:e9:01:67:3f:58:70:d0: 78:d6:aa:8f:a2:bd:44:fd:e3:05:04:39:8b:a8:31: 75:c1:08:94:2b:ba:b8:a4:e5:03:5f:89:81:77:73: cb:a7:72:40:19:b4:70:07:ca:09:08:21:3b:93:62: 9b:7a:ee:e5:35:3b:ba:6d:89:ab:8f:16:86:ae:fd: 48:96:68:ae:8f:a6:53:15:87:c0:53:c2:58:dd:06: 3a:6c:69:53:e8:cb:1b:f6:35:74:17:6d:b8:30:d0: e1:45:5b:ad:be:f5:6d:d5:74:2d:dc:ab:2b:2f:d0: a2:81:af:fa:3c:e5:79:eb:42:bd:5a:e8:bf:20:de: f0:20:98:6e:34:73:02:dc:25:96:6f:fe:19:ac:71: 95:3e:a2:ad:14:c5:a3:41:3d:68:90:05:59:52:9e: 19:d6:47:8a:aa:83:15:23:1a:f0:5d:8f:bf:ea:56: 5e:d0:14:9f:c0:92:40:2e:d5:e3:f6:dd:41:d1:93: e9:8f:00:8e:82:36:7e:7f:b4:46:db:68:0c:3e:20: 2c:ca:bd:3f:c1:d7:a1:82:83:83:7c:0d:2f:18:90: 39:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:29:B5:79:1B:34:9A:A6:38:70:F2:B7:49:80:F1:55:D9:47:B9 X509v3 Authority Key Identifier: keyid:81:A7:15:1B:17:75:92:F8:68:23:B6:9F:43:76:24:E9:C0:02:DE:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gacVGxd1kvhoI7afQ3Yk6cAC3kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175299/26890EDA42C511EAB26CFD1BC4F9AE02/gacVGxd1kvhoI7afQ3Yk6cAC3kE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:62:ee:36:c3:7d:f7:b4:e1:6e:89:fd:08:d3:73:d8:a4:41: 02:20:4e:f9:08:3d:a1:f9:59:48:dd:2d:ad:f1:79:bc:d6:e8: c1:cc:6b:e0:3b:e1:e8:34:17:4a:45:32:d1:bb:cb:cc:bb:4b: 9e:c9:8c:8e:48:d2:51:e0:99:11:f4:fc:54:d3:49:6d:e9:98: df:2c:2e:5f:8b:31:13:a8:58:e5:60:4f:28:c6:d7:93:b3:b9: ad:51:2c:0d:8d:60:ac:ba:15:c0:f4:d9:d6:84:2a:83:46:4b: c9:ab:c3:be:cf:24:21:f8:fe:e7:10:7d:c8:56:9a:5c:4b:cc: 8e:ef:cd:d5:86:13:62:e8:13:10:c2:60:71:cb:68:8e:a1:8f: 97:d7:ab:dc:f9:f5:43:4a:75:81:ec:d3:3d:38:c3:73:71:d2: 9c:ce:09:7e:2f:30:9f:15:c8:ae:9e:93:f3:0d:1a:d0:44:b7: 8c:a3:2e:1c:87:d5:78:9f:e0:9a:f6:67:9b:45:e4:ba:00:c3: dd:67:93:6d:ab:7c:02:87:05:fc:2d:a7:d0:52:80:e7:8a:e4: df:ae:88:42:a1:c9:74:b7:7d:d8:a7:3f:a6:bf:19:17:de:32: d7:07:fe:23:fa:6b:49:26:f6:e4:ef:13:94:62:f2:fb:06:2a: c9:84:8f:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyOTkxMTAvBgNVBAUTKDgxQTcxNTFCMTc3NTkyRjg2ODIzQjY5RjQzNzYyNEU5 QzAwMkRFNDEwHhcNMjYwMzI0MTg1MTIwWhcNMjYwMzMxMTg1MTIwWjAYMRYwFAYD VQQDEw02OWMyZGQyOC0yMjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlik+iU3dRcMLTkim9DaP5aQhjPsfw1oQABOwFPR43kPaknxMh+kBZz9YcNB4 1qqPor1E/eMFBDmLqDF1wQiUK7q4pOUDX4mBd3PLp3JAGbRwB8oJCCE7k2Kbeu7l NTu6bYmrjxaGrv1Ilmiuj6ZTFYfAU8JY3QY6bGlT6Msb9jV0F224MNDhRVutvvVt 1XQt3KsrL9Ciga/6POV560K9Wui/IN7wIJhuNHMC3CWWb/4ZrHGVPqKtFMWjQT1o kAVZUp4Z1keKqoMVIxrwXY+/6lZe0BSfwJJALtXj9t1B0ZPpjwCOgjZ+f7RG22gM PiAsyr0/wdehgoODfA0vGJA5fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCvrKbV5 GzSapjhw8rdJgPFV2Ue5MB8GA1UdIwQYMBaAFIGnFRsXdZL4aCO2n0N2JOnAAt5B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTI5OS8yNjg5MEVEQTQy QzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2aG9JN2FmUTNZazZjQUMz a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dhY1ZHeGQxa3Zob0k3YWZRM1lrNmNBQzNrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTI5OS8yNjg5MEVEQTQyQzUxMUVBQjI2Q0ZEMUJDNEY5QUUwMi9nYWNWR3hkMWt2 aG9JN2FmUTNZazZjQUMza0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmWLuNsN997Thbon9CNNz2KRBAiBO+Qg9oflZSN0trfF5vNbowcxr4Dvh6DQX SkUy0bvLzLtLnsmMjkjSUeCZEfT8VNNJbemY3ywuX4sxE6hY5WBPKMbXk7O5rVEs DY1grLoVwPTZ1oQqg0ZLyavDvs8kIfj+5xB9yFaaXEvMju/N1YYTYugTEMJgccto jqGPl9er3Pn1Q0p1gezTPTjDc3HSnM4Jfi8wnxXIrp6T8w0a0ES3jKMuHIfVeJ/g mvZnm0XkugDD3WeTbat8AocF/C2n0FKA54rk366IQqHJdLd92Kc/pr8ZF94y1wf+ I/prSSb25O8TlGLy+wYqyYSPhQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:55:49 2026 by rpki-client