$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: lNogBZs8xfj4lJiEZpahQt1FiwwPjW/ALLKcPvbyO0Y= Subject key identifier: 94:AD:38:E3:BB:BD:58:BE:38:52:01:54:A3:3D:F6:37:0F:CD:E9:EE Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0EA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E93 Signing time: Tue 24 Mar 2026 17:35:35 +0000 Manifest this update: Tue 24 Mar 2026 17:35:34 +0000 Manifest next update: Tue 31 Mar 2026 17:35:34 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: TbSok8uo9j5VXyK6WQ0K0lFvTDmFQtDT+LUzGreE8LY=) 2: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: 0i79WpYlAZ9LIzXBaRHXpaEMFnxhq4fNWyYI1M5ojU4=) 3: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: 6kYz/jIqF4bH5D+CFSov74IZW+HxnNg38aTmon4kT+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3747 (0xea3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Mar 24 17:35:34 2026 GMT Not After : Mar 31 17:35:34 2026 GMT Subject: CN=69c2cb67-376c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:bb:74:f1:e2:56:52:c4:e6:1c:76:55:69: 56:07:31:1a:cb:2f:89:fa:66:be:8d:a3:f3:fa:38: 4e:8c:11:8a:5b:9f:29:23:be:b8:57:1e:9d:b3:22: 5c:c5:84:91:d7:b0:2b:e1:f3:36:e6:47:d2:90:db: 30:89:4a:71:0f:11:58:c6:56:15:27:33:f1:5b:c9: 7e:4d:7f:c6:d2:75:f7:60:d4:bc:d1:17:d8:b9:62: 20:08:d5:f3:46:96:1e:05:02:96:57:a6:32:ac:fc: 09:16:d5:8f:5b:31:6a:96:ee:85:84:3f:eb:8f:72: f1:f7:dc:05:e6:63:78:1d:a8:9a:dd:43:ad:bb:2e: 10:8b:3f:a2:95:30:d1:59:6b:b2:a2:e9:12:88:25: 27:45:77:a9:22:78:46:ca:f1:56:51:ed:e6:5a:33: bf:9a:b7:fc:3d:8b:44:a4:b2:bd:58:0d:f2:e5:47: 84:66:62:a1:e0:87:9e:02:e3:15:a7:bc:45:ae:d3: c1:1d:64:73:16:8a:c8:74:90:e0:a5:ab:ff:89:ac: 40:62:8f:9c:6f:7c:91:89:7d:f2:45:cf:13:e6:5a: 6a:1f:b3:f2:6b:0f:2a:d3:30:2f:10:64:6d:23:c0: b6:41:33:66:74:03:0f:69:52:95:3a:a4:d6:1e:05: ce:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AD:38:E3:BB:BD:58:BE:38:52:01:54:A3:3D:F6:37:0F:CD:E9:EE X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ab:2c:41:1d:c6:8f:fa:e2:27:fd:b8:59:78:1a:70:0d:1a: 09:fe:02:ff:d0:46:6b:96:71:2b:ca:87:4d:fa:22:a8:3b:ce: 05:5a:53:69:bf:92:a4:7b:ea:77:97:ad:3f:82:f0:0c:14:97: d0:67:e0:4a:60:f6:d8:5e:41:ef:97:9a:88:29:6d:30:b6:46: 2d:74:be:d8:19:9b:51:cf:ac:8e:e9:00:bf:70:b0:3e:a1:29: c5:d6:f7:c3:c6:66:b3:d9:8d:17:9e:96:c8:96:f3:54:1d:0c: 9e:fa:93:24:5f:d3:65:b2:63:08:0f:7b:7d:eb:b2:b4:69:b9: fa:a0:a5:9e:2e:27:f7:bb:3d:23:fa:ca:6b:59:36:92:09:d8: 93:93:62:1a:75:3e:ee:82:f6:c6:b0:e9:35:f8:68:5f:86:76: 58:7e:80:46:a3:93:0d:5b:07:40:88:6c:58:70:87:37:37:27: 51:02:cc:d3:52:52:0a:33:3b:92:6a:43:c3:6c:6c:9e:41:dd: a8:e2:ae:32:79:ab:18:18:3a:03:b6:d9:2c:bf:d5:d5:9e:b7: 13:6a:2a:64:92:bb:a3:af:63:e0:1e:e4:35:b5:2f:2e:1f:0b: a8:18:18:cc:12:41:e3:07:8a:8e:ef:26:bd:b4:de:c5:70:db: c9:3e:fd:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjYwMzI0MTczNTM0WhcNMjYwMzMxMTczNTM0WjAYMRYwFAYD VQQDEw02OWMyY2I2Ny0zNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQK7dPHiVlLE5hx2VWlWBzEayy+J+ma+jaPz+jhOjBGKW58pI764Vx6dsyJc xYSR17Ar4fM25kfSkNswiUpxDxFYxlYVJzPxW8l+TX/G0nX3YNS80RfYuWIgCNXz RpYeBQKWV6YyrPwJFtWPWzFqlu6FhD/rj3Lx99wF5mN4Haia3UOtuy4Qiz+ilTDR WWuyoukSiCUnRXepInhGyvFWUe3mWjO/mrf8PYtEpLK9WA3y5UeEZmKh4IeeAuMV p7xFrtPBHWRzForIdJDgpav/iaxAYo+cb3yRiX3yRc8T5lpqH7Pyaw8q0zAvEGRt I8C2QTNmdAMPaVKVOqTWHgXOeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJStOOO7 vVi+OFIBVKM99jcPzenuMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOassQR3Gj/riJ/24WXgacA0aCf4C/9BGa5ZxK8qHTfoiqDvOBVpTab+SpHvq d5etP4LwDBSX0GfgSmD22F5B75eaiCltMLZGLXS+2BmbUc+sjukAv3CwPqEpxdb3 w8Zms9mNF56WyJbzVB0MnvqTJF/TZbJjCA97feuytGm5+qClni4n97s9I/rKa1k2 kgnYk5NiGnU+7oL2xrDpNfhoX4Z2WH6ARqOTDVsHQIhsWHCHNzcnUQLM01JSCjM7 kmpDw2xsnkHdqOKuMnmrGBg6A7bZLL/V1Z63E2oqZJK7o69j4B7kNbUvLh8LqBgY zBJB4weKju8mvbTexXDbyT796A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:36:26 2026 by rpki-client