$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: DzpBnkicJKHO0Gj12wmvQl+dX/Z8EJ3NlumKZLnNUkw= Subject key identifier: 1A:F4:AB:D6:79:C7:25:22:C6:B2:B9:4B:BC:F4:D4:06:CF:CA:04:51 Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 0489 Signing time: Tue 24 Mar 2026 23:47:29 +0000 Manifest this update: Tue 24 Mar 2026 23:47:29 +0000 Manifest next update: Tue 31 Mar 2026 23:47:29 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: 97a7p33hXDGelYY5P/ozyD40vuACHFpL8X5ZdSOymHM=) 2: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 47iFeZ3ErKvHzbiwS5iDjv+frLd/9sz/MxYRjxUDLlw=) 3: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: gw3ZKWMVOPBmgzPuWccsR8SXG2XzgGuDa8yNe9l7t9M=) 4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: 5EuRxR4B2GheCWIyWlKboSn1b5nyMGZFZDHNErx6Vu8=) 5: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: pmi8zhqXFg2mBn5F/aX1G/x9te6L5m3n6EllOKjSqMw=) 6: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: SnwEiSigQk+KbnDBrwRpxTlPdX4p3h8/RF+ekQ3H9UU=) 7: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: sfu8WqaE1CEl+AbmVvNupiQWqawsQGl2Luz8JyWSfko=) 8: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: ImTcO2+bYDpyceBVz0sOi75TmPB1NnlNF+YgMjojJn0=) 9: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: aLH1AvmivEk7WizlOlXYSpsdAmTXmH2XnGqApjHlxM0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Mar 24 23:47:29 2026 GMT Not After : Mar 31 23:47:29 2026 GMT Subject: CN=69c32291-dff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:f7:c9:50:20:1f:0f:3e:5b:b7:a7:09:2d: 11:7c:f3:6e:da:6d:f1:32:f4:3d:07:b4:91:64:11: bd:05:67:25:cc:12:e0:79:7a:c7:98:a0:de:79:89: 96:de:ea:63:3a:df:fc:94:b8:8e:ff:58:84:ab:61: 0b:8c:2c:d1:ec:9c:85:02:d4:b6:8c:1b:e2:f6:96: f7:20:a1:88:44:5e:89:f1:6b:62:77:7f:f9:90:9b: 23:27:ef:01:94:46:a0:d3:86:12:a4:04:4c:ff:33: f3:56:2a:b9:cd:47:51:b1:e3:26:18:6f:16:46:24: 21:aa:05:07:98:75:88:fa:4d:7a:a2:58:9d:09:ea: 62:05:6c:2a:5c:17:f7:c5:18:28:31:86:0a:03:be: 9b:6c:ce:68:b5:f1:88:5d:10:b5:41:23:51:d3:56: f0:83:a6:06:89:1e:1a:2b:30:74:26:f6:82:1d:6c: 6a:6c:23:e0:1a:cb:c3:e3:85:40:d5:bf:0e:85:15: 5b:38:64:e7:f0:d3:26:2c:b4:80:07:d1:b1:99:09: 99:8d:9c:07:2b:93:64:22:dd:33:78:6e:d9:9c:5c: c6:5e:81:f2:04:37:35:61:0b:fb:a7:3e:96:1d:6b: d6:60:eb:45:ac:6a:61:2c:fa:db:84:be:3d:5e:98: 7f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F4:AB:D6:79:C7:25:22:C6:B2:B9:4B:BC:F4:D4:06:CF:CA:04:51 X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:08:29:8e:24:85:77:91:1b:87:cc:00:64:de:57:d7:4b:a3: 4d:1e:5b:7d:bd:af:6d:e2:1b:8d:e7:fa:3d:73:01:c1:20:39: a6:d6:5a:f6:c3:c4:02:52:a8:ee:1b:f4:70:06:7f:f3:77:5b: 97:be:95:73:95:69:30:cd:75:9b:8b:a5:14:18:ee:26:c5:b1: 0c:35:ee:7f:d0:b1:bd:57:46:e4:1d:29:91:8d:00:23:01:02: a1:4e:ad:a6:08:39:cb:61:3a:b3:5a:4b:04:65:fc:08:d8:1c: fb:ce:4c:07:76:60:01:03:cc:d1:0d:d9:6c:5e:0a:5e:9a:4d: 33:6d:35:1c:73:b5:21:f8:16:dd:b1:0b:06:33:e7:a3:dd:f9: 6e:ab:61:b5:ed:2b:52:1d:84:4c:e8:d7:9b:56:89:15:04:fb: 9e:6f:37:81:d1:1a:8f:99:4d:c1:d5:13:d5:58:c9:1f:e6:cd: 49:cb:0c:67:b7:a4:52:b3:fa:e4:5e:ed:eb:29:d1:12:69:8f: d1:f0:53:b2:56:9d:5e:6f:57:fc:96:ef:66:90:48:ed:de:70: f9:a0:b1:f2:7d:7d:e0:ad:47:1b:bb:0e:78:50:5c:cd:85:7c: c0:a5:4a:ab:48:60:c4:eb:44:17:ef:ae:90:9d:35:24:59:a1: 6c:87:8f:2a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjYwMzI0MjM0NzI5WhcNMjYwMzMxMjM0NzI5WjAYMRYwFAYD VQQDEw02OWMzMjI5MS1kZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx873yVAgHw8+W7enCS0RfPNu2m3xMvQ9B7SRZBG9BWclzBLgeXrHmKDeeYmW 3upjOt/8lLiO/1iEq2ELjCzR7JyFAtS2jBvi9pb3IKGIRF6J8Wtid3/5kJsjJ+8B lEag04YSpARM/zPzViq5zUdRseMmGG8WRiQhqgUHmHWI+k16olidCepiBWwqXBf3 xRgoMYYKA76bbM5otfGIXRC1QSNR01bwg6YGiR4aKzB0JvaCHWxqbCPgGsvD44VA 1b8OhRVbOGTn8NMmLLSAB9GxmQmZjZwHK5NkIt0zeG7ZnFzGXoHyBDc1YQv7pz6W HWvWYOtFrGphLPrbhL49Xph/NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBr0q9Z5 xyUixrK5S7z01AbPygRRMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKQgpjiSFd5Ebh8wAZN5X10ujTR5bfb2vbeIbjef6PXMBwSA5ptZa9sPEAlKo 7hv0cAZ/83dbl76Vc5VpMM11m4ulFBjuJsWxDDXuf9CxvVdG5B0pkY0AIwECoU6t pgg5y2E6s1pLBGX8CNgc+85MB3ZgAQPM0Q3ZbF4KXppNM201HHO1IfgW3bELBjPn o935bqthte0rUh2ETOjXm1aJFQT7nm83gdEaj5lNwdUT1VjJH+bNScsMZ7ekUrP6 5F7t6ynREmmP0fBTsladXm9X/JbvZpBI7d5w+aCx8n194K1HG7sOeFBczYV8wKVK q0hgxOtEF++ukJ01JFmhbIePKg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:21 2026 by rpki-client