$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: srkYWexu8zKcNl5bYRQ2BUEVgQNNYDreJwkHiY2TUUg= Subject key identifier: 3C:22:F0:96:64:FE:D4:6D:2E:AD:A9:2C:6B:05:3D:A6:40:1E:58:07 Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 18E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 18B9 Signing time: Thu 26 Mar 2026 16:27:30 +0000 Manifest this update: Thu 26 Mar 2026 16:27:29 +0000 Manifest next update: Thu 02 Apr 2026 16:27:29 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: tz6cQ8RQMOrAq4dVmPBzlPNSZVdeeY3WNFcept2a5Ho=) 2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) 3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: F7gvzg0So++J2V4XA9vCkNOHszA1gZ0+wMtYApbJrQM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6368 (0x18e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Mar 26 16:27:29 2026 GMT Not After : Apr 2 16:27:29 2026 GMT Subject: CN=69c55e72-0788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d1:06:1d:2f:ff:22:df:cf:05:5b:60:9c:9c: 9d:5f:55:a7:0e:4a:63:df:91:be:58:4e:a8:8c:28: 92:3b:e7:2d:64:25:41:dd:54:a0:df:b7:fe:bc:b5: dd:fe:c6:fa:da:71:1d:33:35:c2:2a:24:7a:55:0d: 46:2b:85:1e:b6:0f:37:97:e0:df:1e:68:f6:72:a8: 39:0e:d2:c7:98:96:33:65:6d:8d:c6:3d:ec:6c:88: d5:51:88:fb:c1:a0:38:4d:80:8c:a9:ca:3f:66:12: 5d:5b:f9:51:bf:02:43:88:43:e0:14:e3:e4:88:91: ec:0b:b1:36:07:8b:a1:8c:87:2f:5a:10:3b:a6:c9: 0c:fb:31:8a:e2:df:c1:41:c8:71:63:25:82:8c:a3: 14:4b:7a:7e:65:00:f9:c0:e4:79:97:0e:78:c6:55: 36:40:85:ee:9f:ab:d0:3c:d1:ae:cd:ce:fc:2c:a3: 4d:3f:e2:19:52:e7:72:f0:90:c1:df:a2:f8:0e:08: 0f:e5:85:9e:89:dc:a8:27:65:c7:6c:54:af:3b:06: c3:26:fb:aa:18:8c:e0:35:10:2b:4e:9f:f8:03:79: 02:4e:af:6c:11:69:5e:4c:53:b5:c4:97:01:83:f8: 5e:82:23:fd:fc:2e:5d:31:de:26:fb:a7:f2:71:e0: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:22:F0:96:64:FE:D4:6D:2E:AD:A9:2C:6B:05:3D:A6:40:1E:58:07 X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9b:d5:01:4b:f1:a2:2a:f7:19:07:e5:b2:9d:a5:9e:f7:45: b7:b8:39:42:b0:b5:ae:c3:b4:aa:86:d2:2b:9c:6e:7e:e7:07: 95:ee:75:6f:c0:05:13:ec:59:62:68:07:c9:ce:38:48:d9:55: 77:8f:8d:ee:30:24:e7:6a:f3:3e:82:f8:3c:2e:0e:d0:74:45: f2:40:82:23:01:2a:0e:e8:30:77:7e:41:fa:3b:7b:d5:ee:bd: 38:27:3b:de:e4:a4:ac:1c:b4:7d:eb:eb:43:5e:84:83:ab:06: 78:2a:04:98:ff:bd:20:ef:13:5d:2c:ee:b5:2c:67:01:02:e1: 21:cd:64:b5:9d:7e:f3:21:02:33:ba:b0:e0:da:c5:3f:68:0a: 2e:89:88:9f:db:e2:a0:64:bb:d8:8d:3a:aa:94:74:7e:a0:dd: 6d:21:57:23:bd:02:60:d9:55:af:33:91:22:0a:a6:00:49:f4: d1:51:16:76:14:e2:ce:a4:5f:bc:59:a5:b5:a9:57:94:b8:6c: 93:a5:b3:ed:f2:e8:0d:c4:a9:86:a4:fb:6a:de:92:dc:8a:56: 2c:9c:a4:95:c7:b3:f7:cc:2c:cd:59:62:9f:c8:42:40:60:e7: 0e:aa:cd:f4:fc:c8:6c:60:21:2e:16:b9:0e:c9:db:41:6a:df: 20:49:70:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwMzI2MTYyNzI5WhcNMjYwNDAyMTYyNzI5WjAYMRYwFAYD VQQDEw02OWM1NWU3Mi0wNzg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2dEGHS//It/PBVtgnJydX1WnDkpj35G+WE6ojCiSO+ctZCVB3VSg37f+vLXd /sb62nEdMzXCKiR6VQ1GK4Uetg83l+DfHmj2cqg5DtLHmJYzZW2Nxj3sbIjVUYj7 waA4TYCMqco/ZhJdW/lRvwJDiEPgFOPkiJHsC7E2B4uhjIcvWhA7pskM+zGK4t/B QchxYyWCjKMUS3p+ZQD5wOR5lw54xlU2QIXun6vQPNGuzc78LKNNP+IZUudy8JDB 36L4DggP5YWeidyoJ2XHbFSvOwbDJvuqGIzgNRArTp/4A3kCTq9sEWleTFO1xJcB g/hegiP9/C5dMd4m+6fyceD5hQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDwi8JZk /tRtLq2pLGsFPaZAHlgHMB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHJvVAUvxoir3GQflsp2lnvdFt7g5QrC1rsO0qobSK5xufucHle51b8AFE+xZ YmgHyc44SNlVd4+N7jAk52rzPoL4PC4O0HRF8kCCIwEqDugwd35B+jt71e69OCc7 3uSkrBy0fevrQ16Eg6sGeCoEmP+9IO8TXSzutSxnAQLhIc1ktZ1+8yECM7qw4NrF P2gKLomIn9vioGS72I06qpR0fqDdbSFXI70CYNlVrzORIgqmAEn00VEWdhTizqRf vFmltalXlLhsk6Wz7fLoDcSphqT7at6S3IpWLJyklcez98wszVlin8hCQGDnDqrN 9PzIbGAhLha5DsnbQWrfIElwlA== -----END CERTIFICATE-----Generated at Fri Mar 27 03:38:18 2026 by rpki-client