$ rpki-client -vvf rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft File: sFVxc6AI1veMbl5rQPjcB5qN9l8.mft (raw, json) Hash identifier: 0BCXC3/at7Rcs071U2pRSBZiTzTtCovBZeFiV8SnX9o= Subject key identifier: C6:0E:01:92:FA:8F:16:07:89:AC:6E:45:A9:11:10:6B:5E:F9:D5:10 Authority key identifier: B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F Certificate issuer: /CN=A917DDD6/serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Certificate serial: 13C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft Manifest number: 13BA Signing time: Thu 26 Mar 2026 16:55:17 +0000 Manifest this update: Thu 26 Mar 2026 16:55:16 +0000 Manifest next update: Thu 02 Apr 2026 16:55:16 +0000 Files and hashes: 1: sFVxc6AI1veMbl5rQPjcB5qN9l8.crl (hash: znxj4+3odCepZJBy9uH2M/ZpkztSts/3xbsIRTU+52E=) 2: B9629D3258D611ED86C99945C4F9AE02.roa (hash: DL6GA/K6cpxzI2cqMbQjFszw1dEV15dZjZ9FhFB5IeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 16:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5063 (0x13c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DDD6, serialNumber=B0557173A008D6F78C6E5E6B40F8DC079A8DF65F Validity Not Before: Mar 26 16:55:16 2026 GMT Not After : Apr 2 16:55:16 2026 GMT Subject: CN=69c564f5-3e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:21:54:46:db:e7:b5:a9:0d:81:26:4f:2a:e7: 44:81:2d:cb:b2:2b:50:5b:fe:f6:81:0d:73:21:ea: ed:14:df:ab:d2:d2:1e:46:69:da:12:6d:ce:c6:de: 54:d0:81:41:8f:3e:a3:c2:b2:f6:26:62:2c:d4:8a: 41:6f:2e:20:03:7c:e0:4c:d1:1c:f0:a4:41:ac:08: 7c:c7:82:95:5d:99:fc:93:da:cb:4f:da:fe:61:47: e8:32:ee:06:13:5e:96:7b:2d:f0:1d:fe:02:90:f6: 57:f3:25:de:67:3b:2e:1b:c5:71:8b:96:44:c8:e7: 90:b4:8d:b3:f6:74:30:d0:a4:1a:50:d6:e3:76:7b: 66:42:ec:bc:7a:55:ad:d2:b7:2d:10:d5:f7:ac:d5: e0:cb:25:f2:02:89:5b:d7:36:5d:d5:73:19:12:d8: 61:5a:56:c8:f5:62:2e:8b:26:a3:ff:c5:5a:42:e3: 25:76:cf:56:83:f6:a3:fe:f0:34:e1:77:56:95:04: 10:c0:31:de:ca:1b:a9:97:9f:e5:6a:4b:13:58:82: 35:f6:f3:23:8d:98:51:95:07:8f:c7:7f:3a:13:dd: 69:34:e4:57:1f:6b:fe:9d:6d:d3:3f:a6:f2:5d:5e: 4e:f1:2b:2f:8e:83:90:b3:ef:0c:c4:ce:92:ca:c3: 9f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0E:01:92:FA:8F:16:07:89:AC:6E:45:A9:11:10:6B:5E:F9:D5:10 X509v3 Authority Key Identifier: keyid:B0:55:71:73:A0:08:D6:F7:8C:6E:5E:6B:40:F8:DC:07:9A:8D:F6:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFVxc6AI1veMbl5rQPjcB5qN9l8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DDD6/E5347B1CAD2011E8BA9D951AC4F9AE02/sFVxc6AI1veMbl5rQPjcB5qN9l8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cf:aa:1e:87:cc:8e:b3:56:13:bb:22:c2:d2:20:bd:8d:ea: e4:a0:f3:1d:da:a3:2c:d8:72:e8:98:73:62:cb:4a:25:ae:68: 9e:2f:a5:94:6e:da:8d:60:a7:31:ea:3c:f5:0c:1a:97:c4:02: b3:11:4e:50:33:1d:34:6b:8e:00:f1:48:ec:fc:7e:8b:20:3f: 21:41:16:cd:0f:cb:19:61:6a:fe:24:e5:b2:75:f1:ff:bf:c8: 45:38:e4:9e:04:4f:e9:4a:9e:91:45:09:bd:11:af:ff:10:cc: 5e:05:67:85:15:18:da:20:e5:18:d1:fc:1c:fc:a6:16:67:7e: fd:7e:9d:83:65:08:f9:ec:4e:fd:1a:c8:85:16:39:a5:ec:c7: ba:49:d9:ea:24:c7:d6:d0:76:f0:3f:66:e2:e2:ab:8e:4b:33: 70:a6:05:e2:bb:91:11:24:11:7e:79:36:f3:63:e6:33:c4:1f: 90:60:ce:13:b9:0b:2d:42:dc:a5:51:d4:a2:12:f7:1a:ec:69: 1b:e8:4b:cb:d2:67:49:ce:a1:86:f9:66:f8:33:08:bf:d1:c8: dc:bb:26:c2:68:09:e7:ed:6d:c2:4d:40:5a:62:e9:a5:77:d0: 7c:0f:bd:0b:a9:60:a3:c4:7f:8a:df:66:19:83:82:3d:be:8c: 86:e6:52:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICE8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RERDYxMTAvBgNVBAUTKEIwNTU3MTczQTAwOEQ2Rjc4QzZFNUU2QjQwRjhEQzA3 OUE4REY2NUYwHhcNMjYwMzI2MTY1NTE2WhcNMjYwNDAyMTY1NTE2WjAYMRYwFAYD VQQDEw02OWM1NjRmNS0zZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSFURtvntakNgSZPKudEgS3LsitQW/72gQ1zIertFN+r0tIeRmnaEm3Oxt5U 0IFBjz6jwrL2JmIs1IpBby4gA3zgTNEc8KRBrAh8x4KVXZn8k9rLT9r+YUfoMu4G E16Wey3wHf4CkPZX8yXeZzsuG8Vxi5ZEyOeQtI2z9nQw0KQaUNbjdntmQuy8elWt 0rctENX3rNXgyyXyAolb1zZd1XMZEthhWlbI9WIuiyaj/8VaQuMlds9Wg/aj/vA0 4XdWlQQQwDHeyhupl5/laksTWII19vMjjZhRlQePx386E91pNORXH2v+nW3TP6by XV5O8SsvjoOQs+8MxM6SysOfRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMYOAZL6 jxYHiaxuRakREGte+dUQMB8GA1UdIwQYMBaAFLBVcXOgCNb3jG5ea0D43AeajfZf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RERENi9FNTM0N0IxQ0FE MjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2ZU1ibDVyUVBqY0I1cU45 bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NGVnhjNkFJMXZlTWJsNXJRUGpjQjVxTjlsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RERENi9FNTM0N0IxQ0FEMjAxMUU4QkE5RDk1MUFDNEY5QUUwMi9zRlZ4YzZBSTF2 ZU1ibDVyUVBqY0I1cU45bDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACc+qHofMjrNWE7siwtIgvY3q5KDzHdqjLNhy6JhzYstKJa5oni+llG7ajWCn Meo89Qwal8QCsxFOUDMdNGuOAPFI7Px+iyA/IUEWzQ/LGWFq/iTlsnXx/7/IRTjk ngRP6UqekUUJvRGv/xDMXgVnhRUY2iDlGNH8HPymFmd+/X6dg2UI+exO/RrIhRY5 pezHuknZ6iTH1tB28D9m4uKrjkszcKYF4ruRESQRfnk282PmM8QfkGDOE7kLLULc pVHUohL3GuxpG+hLy9JnSc6hhvlm+DMIv9HI3LsmwmgJ5+1twk1AWmLppXfQfA+9 C6lgo8R/it9mGYOCPb6MhuZSXg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:31 2026 by rpki-client