$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: M9xsnyWnM3GUhc32CAWcWkuBJ4GJRJXc5nvKNrQWbSw= Subject key identifier: F0:83:17:76:F1:93:43:D6:6E:40:45:BF:5E:FC:5E:4A:23:B3:00:D0 Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 09DB Signing time: Tue 24 Mar 2026 19:40:25 +0000 Manifest this update: Tue 24 Mar 2026 19:40:25 +0000 Manifest next update: Tue 31 Mar 2026 19:40:25 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: SKvT7LQgZTRzYguY1Cs5D+I9jQ7yPQXyjlyDb7AcQHc=) 2: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=) 3: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Mar 24 19:40:25 2026 GMT Not After : Mar 31 19:40:25 2026 GMT Subject: CN=69c2e8a9-407a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5d:83:7f:a2:8f:12:3a:3e:60:4f:cf:40:30: 45:e0:d1:05:18:dd:b6:83:8e:1d:10:a3:60:1c:bb: f3:80:91:9a:35:43:58:e6:b6:41:51:c6:8d:5b:a8: e2:57:b2:bb:21:44:bc:ad:b6:09:9e:96:84:de:86: 6c:87:e4:85:26:ae:b6:17:84:00:f1:ef:ae:a5:1b: 87:bb:f2:06:2e:5c:4a:8a:10:44:08:6e:a6:72:e5: ed:08:85:b4:52:bc:0a:67:ea:15:8b:9e:a3:d6:77: 0b:1d:c6:85:9b:dc:5d:d0:9c:3b:3b:09:06:50:04: b8:86:9c:c4:fe:f8:15:96:b2:1d:b1:76:74:8d:a1: 3d:c2:e5:ee:8e:74:36:ee:be:fa:74:f6:01:b9:4b: ee:fb:7c:4f:68:12:99:b8:f0:57:5e:fb:90:d4:85: 65:48:03:6c:df:0f:f0:97:40:2a:0c:5a:5e:ce:19: 97:dc:75:e0:54:3f:11:9c:52:0e:c2:f5:2e:b0:7a: 37:9b:e2:d2:18:9d:35:cb:7e:ac:0f:f1:e2:ed:d3: ed:aa:85:52:4f:c9:ca:22:f2:c0:7b:5a:6f:e2:3c: af:81:66:e4:ae:38:c3:35:ae:bf:a0:4d:6a:fc:d9: c9:a3:d4:6c:da:6d:51:d2:b5:90:83:c2:d0:ea:ae: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:83:17:76:F1:93:43:D6:6E:40:45:BF:5E:FC:5E:4A:23:B3:00:D0 X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f0:76:9a:f1:e4:aa:bd:49:65:09:bb:27:8d:88:1b:e4:66: 9b:e6:ec:1e:05:e9:ab:ae:f8:70:4c:a9:56:f0:2e:f8:a4:00: a7:53:63:0e:98:6a:eb:27:1c:f3:0e:2c:d4:66:a2:c5:92:e4: ac:69:43:31:10:cf:cc:c6:e4:55:87:bd:30:14:02:a5:f2:0c: 63:3a:a4:93:9c:dc:ae:fa:4d:fa:41:de:43:f6:3e:d8:fd:a6: 49:05:41:ca:87:7a:6c:81:85:f8:df:f7:a1:ab:7f:79:49:1c: 58:70:5c:46:85:f6:78:7f:e0:b1:69:16:8d:01:b1:be:01:fe: cb:b5:b3:d6:80:df:0f:b1:e7:aa:2b:21:e0:15:47:99:db:44: 70:f5:9a:10:9c:f0:49:70:b2:11:4c:7a:fa:f6:b6:97:fb:45: d7:9a:2e:08:0c:f4:7f:a5:38:b2:1f:35:20:8d:6f:a8:47:30: 7e:41:89:26:9c:a1:2e:62:30:68:c6:98:d6:84:7c:5f:da:8a: 39:50:01:aa:2d:5d:a3:9a:fb:e9:bc:82:08:52:ec:a0:81:f1: 2a:60:b5:eb:f7:85:93:4b:70:80:a7:c3:31:fb:30:1f:d1:90: f1:09:f3:03:17:fe:68:50:c6:6b:3a:aa:28:64:3d:04:d0:61: 70:5a:1c:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjYwMzI0MTk0MDI1WhcNMjYwMzMxMTk0MDI1WjAYMRYwFAYD VQQDEw02OWMyZThhOS00MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4F2Df6KPEjo+YE/PQDBF4NEFGN22g44dEKNgHLvzgJGaNUNY5rZBUcaNW6ji V7K7IUS8rbYJnpaE3oZsh+SFJq62F4QA8e+upRuHu/IGLlxKihBECG6mcuXtCIW0 UrwKZ+oVi56j1ncLHcaFm9xd0Jw7OwkGUAS4hpzE/vgVlrIdsXZ0jaE9wuXujnQ2 7r76dPYBuUvu+3xPaBKZuPBXXvuQ1IVlSANs3w/wl0AqDFpezhmX3HXgVD8RnFIO wvUusHo3m+LSGJ01y36sD/Hi7dPtqoVST8nKIvLAe1pv4jyvgWbkrjjDNa6/oE1q /NnJo9Rs2m1R0rWQg8LQ6q5gBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPCDF3bx k0PWbkBFv178XkojswDQMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvB2mvHkqr1JZQm7J42IG+Rmm+bsHgXpq674cEypVvAu+KQAp1NjDphq6ycc 8w4s1GaixZLkrGlDMRDPzMbkVYe9MBQCpfIMYzqkk5zcrvpN+kHeQ/Y+2P2mSQVB yod6bIGF+N/3oat/eUkcWHBcRoX2eH/gsWkWjQGxvgH+y7Wz1oDfD7Hnqish4BVH mdtEcPWaEJzwSXCyEUx6+va2l/tF15ouCAz0f6U4sh81II1vqEcwfkGJJpyhLmIw aMaY1oR8X9qKOVABqi1do5r76byCCFLsoIHxKmC16/eFk0twgKfDMfswH9GQ8Qnz Axf+aFDGazqqKGQ9BNBhcFoc+w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:35 2026 by rpki-client