$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft File: k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft (raw, json) Hash identifier: Fl/v8xkQLwY6tQdGaYhb1FwY0R4gaD5vQJWw1tqgYes= Subject key identifier: AD:E5:A4:88:B7:1F:59:23:D2:DD:AA:19:3F:26:09:F5:6C:DF:3D:59 Authority key identifier: 93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 Certificate issuer: /CN=A9178AFC/serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft Manifest number: 19 Signing time: Wed 25 Mar 2026 08:13:00 +0000 Manifest this update: Wed 25 Mar 2026 08:12:59 +0000 Manifest next update: Wed 01 Apr 2026 08:12:59 +0000 Files and hashes: 1: k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl (hash: gLarm6lP38cT4ayHhMQRafs2gwSbX/ArI4hRgg3CvxI=) 2: 550ED6C61FC911F1858982443A3D8C67.roa (hash: ddkpPiY6ryXn1AzWQqH/VaePq3ZMXolf09Ngi2USLQo=) 3: 28E7910A1FC911F19CD315063A3D8C67.roa (hash: nm/1/orNWXaGNERTaZE87TxHEbHq71JZlG9+7BghPAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=93C019BFD60799D73622C1185F4A39BA5F5F9217 Validity Not Before: Mar 25 08:12:59 2026 GMT Not After : Apr 1 08:12:59 2026 GMT Subject: CN=69c3990c-0fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:0e:f6:66:7f:5b:0c:bf:d1:66:35:d6:bf: 45:af:68:62:03:82:da:f2:99:b6:7b:0a:ee:ff:60: bf:47:3e:6f:75:2d:ea:83:bf:f2:02:ae:af:e1:76: 0b:b5:09:d8:ea:1c:c9:ca:4a:bd:ab:0c:6c:f0:4b: eb:9d:c0:91:f3:86:6c:c1:e4:d5:93:f5:5a:bf:69: c4:6b:a1:fb:70:2a:1d:d2:33:16:aa:aa:e2:ba:b5: b6:9d:bb:c6:71:db:48:96:70:de:c7:9d:25:50:8c: eb:5b:1f:8c:e0:46:d2:b3:4f:be:7f:b1:b5:38:b5: a7:1c:55:cc:f3:3e:ef:27:f8:d2:97:3f:31:d7:5a: ef:90:4f:39:07:ee:df:a3:db:d6:35:da:12:6e:de: ce:d6:54:c7:dd:64:33:5d:1c:8f:16:14:26:c6:a9: b2:be:41:59:e1:42:07:bf:36:4f:73:97:b1:c0:44: 10:a6:9b:60:0f:7e:5c:c4:85:e1:bc:bc:ca:a6:53: 83:fd:ac:8d:31:e2:9f:14:de:4b:98:62:e5:b6:6b: 38:ee:8a:4a:24:b8:1b:90:de:38:c6:c7:fa:8e:12: 5a:d3:4f:2e:b4:82:d8:3b:2f:db:74:37:aa:4d:c5: de:d5:6e:94:0a:83:79:b1:43:f9:f2:0c:5d:ae:61: 6f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E5:A4:88:B7:1F:59:23:D2:DD:AA:19:3F:26:09:F5:6C:DF:3D:59 X509v3 Authority Key Identifier: keyid:93:C0:19:BF:D6:07:99:D7:36:22:C1:18:5F:4A:39:BA:5F:5F:92:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/k8AZv9YHmdc2IsEYX0o5ul9fkhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/410B6534104411F1AFDB1FAC1F3D8C67/k8AZv9YHmdc2IsEYX0o5ul9fkhc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4f:e2:63:c6:00:09:58:43:13:65:f6:f2:1a:5b:ce:e2:75: a2:05:4a:dc:f0:e3:8d:91:9d:d8:4e:1e:99:1a:eb:7e:3d:ee: 33:65:8f:38:4a:c5:f2:7f:7f:88:5f:a2:14:2e:d2:4f:0b:3f: 4e:cd:03:f8:37:fd:9f:66:bb:38:54:7e:4b:fc:d7:b6:c4:de: ea:22:ed:93:19:4e:bd:e2:96:2b:be:ac:bc:92:6d:ee:41:11: 13:8f:77:e9:32:46:04:fb:3a:d5:33:7d:94:40:c7:b6:25:28: 0e:32:30:85:ed:4e:94:4d:93:10:7b:8c:cc:ef:6e:2e:d5:cc: 54:68:bc:8a:8f:a8:60:49:03:b1:dc:40:93:72:35:02:da:e1: 68:ee:e6:70:5f:1c:85:2c:1e:64:e1:07:50:b3:4e:c6:a0:e8: 74:bd:7f:9c:8b:f6:d8:f3:24:35:54:be:0b:f8:59:6a:7a:82: 23:7e:54:20:f2:5b:cf:36:85:1a:45:b8:fd:56:54:47:ac:3f: e5:45:35:5b:a3:65:6e:3e:46:54:15:cd:ce:95:56:24:29:58: 45:4b:cf:1b:e7:2f:7a:d0:16:12:d5:9a:7e:87:a4:43:57:e7: 26:30:01:ab:2d:da:93:de:93:67:63:79:98:02:87:4b:13:b9: 9d:d3:e4:16 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoOTNDMDE5QkZENjA3OTlENzM2MjJDMTE4NUY0QTM5QkE1 RjVGOTIxNzAeFw0yNjAzMjUwODEyNTlaFw0yNjA0MDEwODEyNTlaMBgxFjAUBgNV BAMTDTY5YzM5OTBjLTBmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw/w72Zn9bDL/RZjXWv0WvaGIDgtrymbZ7Cu7/YL9HPm91LeqDv/ICrq/hdgu1 CdjqHMnKSr2rDGzwS+udwJHzhmzB5NWT9Vq/acRroftwKh3SMxaqquK6tbadu8Zx 20iWcN7HnSVQjOtbH4zgRtKzT75/sbU4taccVczzPu8n+NKXPzHXWu+QTzkH7t+j 29Y12hJu3s7WVMfdZDNdHI8WFCbGqbK+QVnhQge/Nk9zl7HARBCmm2APflzEheG8 vMqmU4P9rI0x4p8U3kuYYuW2azjuikokuBuQ3jjGx/qOElrTTy60gtg7L9t0N6pN xd7VbpQKg3mxQ/nyDF2uYW9JAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUreWkiLcf WSPS3aoZPyYJ9WzfPVkwHwYDVR0jBBgwFoAUk8AZv9YHmdc2IsEYX0o5ul9fkhcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzQxMEI2NTM0MTA0 NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRjMklzRVlYMG81dWw5Zmto Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvazhBWnY5WUhtZGMySXNFWVgwbzV1bDlma2hjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzQxMEI2NTM0MTA0NDExRjFBRkRCMUZBQzFGM0Q4QzY3L2s4QVp2OVlIbWRj MklzRVlYMG81dWw5ZmtoYy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBvT+JjxgAJWEMTZfbyGlvO4nWiBUrc8OONkZ3YTh6ZGut+Pe4zZY84SsXyf3+I X6IULtJPCz9OzQP4N/2fZrs4VH5L/Ne2xN7qIu2TGU694pYrvqy8km3uQRETj3fp MkYE+zrVM32UQMe2JSgOMjCF7U6UTZMQe4zM724u1cxUaLyKj6hgSQOx3ECTcjUC 2uFo7uZwXxyFLB5k4QdQs07GoOh0vX+ci/bY8yQ1VL4L+FlqeoIjflQg8lvPNoUa Rbj9VlRHrD/lRTVbo2VuPkZUFc3OlVYkKVhFS88b5y960BYS1Zp+h6RDV+cmMAGr LdqT3pNnY3mYAodLE7md0+QW -----END CERTIFICATE-----Generated at Thu Mar 26 03:01:06 2026 by rpki-client