$ rpki-client -vvf rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft File: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft (raw, json) Hash identifier: lu5vf5Sv1RGZ4AvWxWO9J8vlh5JksOvcu9mr5hSLrTU= Subject key identifier: 11:C6:89:52:60:E3:8E:EF:70:C3:21:B3:4A:65:F5:B1:B8:34:CC:20 Authority key identifier: 8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 Certificate issuer: /CN=A918127C/serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Certificate serial: 0851 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft Manifest number: 0840 Signing time: Tue 24 Mar 2026 20:38:48 +0000 Manifest this update: Tue 24 Mar 2026 20:38:48 +0000 Manifest next update: Tue 31 Mar 2026 20:38:48 +0000 Files and hashes: 1: j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl (hash: s8mhYDHxSS8i0JPWmMXJWogHCd0AaiAvCcelFZ2T3LY=) 2: 706E023CD46911EE9E90881CC4F9AE02.roa (hash: Dj/qSt0IyssQ+QhMMN6zLmyTN4hQ3eLX7SkT6291BOc=) 3: 2C60C8AAE01111EEA6583A7DC4F9AE02.roa (hash: KzpDIugbV8vHQ/gYQ5pO+EKoT/0uahv1Vz2s5knDV8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2129 (0x851) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918127C, serialNumber=8F942252B7D404E33DB9B1E354E09103AAC50184 Validity Not Before: Mar 24 20:38:48 2026 GMT Not After : Mar 31 20:38:48 2026 GMT Subject: CN=69c2f658-0720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1f:36:bf:b8:bd:e3:ea:5e:74:9d:bf:04:a4: ef:f2:d8:93:c1:6f:0c:ab:a8:1f:92:e0:44:ff:96: 14:b4:ad:4b:64:2f:e4:52:dc:3f:55:45:a6:cc:71: a1:89:b4:f7:33:9e:67:af:f1:90:76:e4:09:27:ca: 1e:9d:a5:d1:5a:df:10:db:63:4a:72:8e:23:33:28: d7:e0:14:36:0e:17:4c:27:76:de:14:96:52:ec:0e: 50:6d:0e:27:fb:14:b4:c8:b1:18:4e:66:f0:c1:c4: b6:d2:a1:19:22:48:a8:81:40:95:f1:07:e2:93:3c: f5:7c:2f:39:7a:00:bd:30:2b:9c:64:78:ae:1f:72: 93:cb:7e:2f:6d:4d:c2:99:2e:1c:74:4e:ad:9b:3e: 15:6e:dd:6c:f0:d3:f4:49:d7:36:20:5f:61:b9:eb: 78:90:06:0d:49:bc:56:71:a7:17:7d:0b:c6:3d:13: 2c:62:82:46:59:7f:15:2e:47:d7:91:68:e0:1b:ca: 95:38:a2:3e:66:37:e0:ae:07:83:3d:8f:14:1c:37: 4f:ee:39:70:50:6a:94:f4:27:34:2e:ce:f0:2f:ae: 7a:ac:64:fd:6a:ce:90:7c:63:54:87:43:c4:80:48: 09:39:1b:c2:99:7e:ae:15:ff:d8:f7:6e:9c:83:1e: bd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C6:89:52:60:E3:8E:EF:70:C3:21:B3:4A:65:F5:B1:B8:34:CC:20 X509v3 Authority Key Identifier: keyid:8F:94:22:52:B7:D4:04:E3:3D:B9:B1:E3:54:E0:91:03:AA:C5:01:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918127C/E697112A06AD11EB9821057FC4F9AE02/j5QiUrfUBOM9ubHjVOCRA6rFAYQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6c:98:2a:61:e1:9c:7e:9a:7e:2a:f0:9c:96:bc:ac:f6:9f: 50:c7:4e:a6:fb:36:53:31:71:5a:84:ed:11:40:01:8c:70:58: 23:5b:45:b2:30:a5:06:b2:75:77:c7:fc:ba:e5:b6:17:cd:08: fa:aa:77:25:4d:86:4b:0e:f5:27:d5:2a:f7:9d:ff:16:ae:7f: 52:ca:97:ca:92:96:aa:da:57:12:cc:66:6e:fe:9f:5a:f3:4e: 5f:84:3a:ce:6b:67:58:05:c0:bc:eb:f6:ed:98:3b:ce:5d:29: d0:33:0e:8c:db:da:d1:fc:ad:42:87:e0:3f:c3:43:3d:f9:1b: 1f:5a:d9:63:b5:c8:ee:43:8d:98:3d:87:d5:29:5a:9e:15:ff: 07:24:d8:81:0a:28:a2:2b:b8:e1:be:a0:89:c8:36:47:b6:17: 14:34:1f:53:96:d1:4a:ed:98:fb:f6:77:a7:84:ff:14:11:0e: bc:77:f7:6e:03:da:9a:79:98:a3:43:f6:da:10:b0:7b:79:7f: 0a:48:53:d0:97:c3:28:85:cd:69:f0:4e:24:9f:49:36:bb:88: ad:52:c2:7b:35:71:61:ec:1a:42:24:7f:5e:b0:fa:3d:7b:40: 60:12:ec:79:7e:2a:5f:31:9c:f0:3e:a1:14:56:52:18:97:94: 69:7a:d1:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEyN0MxMTAvBgNVBAUTKDhGOTQyMjUyQjdENDA0RTMzREI5QjFFMzU0RTA5MTAz QUFDNTAxODQwHhcNMjYwMzI0MjAzODQ4WhcNMjYwMzMxMjAzODQ4WjAYMRYwFAYD VQQDEw02OWMyZjY1OC0wNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyR82v7i94+pedJ2/BKTv8tiTwW8Mq6gfkuBE/5YUtK1LZC/kUtw/VUWmzHGh ibT3M55nr/GQduQJJ8oenaXRWt8Q22NKco4jMyjX4BQ2DhdMJ3beFJZS7A5QbQ4n +xS0yLEYTmbwwcS20qEZIkiogUCV8Qfikzz1fC85egC9MCucZHiuH3KTy34vbU3C mS4cdE6tmz4Vbt1s8NP0Sdc2IF9huet4kAYNSbxWcacXfQvGPRMsYoJGWX8VLkfX kWjgG8qVOKI+ZjfgrgeDPY8UHDdP7jlwUGqU9Cc0Ls7wL656rGT9as6QfGNUh0PE gEgJORvCmX6uFf/Y926cgx695wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBHGiVJg 447vcMMhs0pl9bG4NMwgMB8GA1UdIwQYMBaAFI+UIlK31ATjPbmx41TgkQOqxQGE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI3Qy9FNjk3MTEyQTA2 QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJPTTl1YkhqVk9DUkE2ckZB WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2o1UWlVcmZVQk9NOXViSGpWT0NSQTZyRkFZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTI3Qy9FNjk3MTEyQTA2QUQxMUVCOTgyMTA1N0ZDNEY5QUUwMi9qNVFpVXJmVUJP TTl1YkhqVk9DUkE2ckZBWVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUGyYKmHhnH6afirwnJa8rPafUMdOpvs2UzFxWoTtEUABjHBYI1tFsjClBrJ1 d8f8uuW2F80I+qp3JU2GSw71J9Uq953/Fq5/UsqXypKWqtpXEsxmbv6fWvNOX4Q6 zmtnWAXAvOv27Zg7zl0p0DMOjNva0fytQofgP8NDPfkbH1rZY7XI7kONmD2H1Sla nhX/ByTYgQoooiu44b6gicg2R7YXFDQfU5bRSu2Y+/Z3p4T/FBEOvHf3bgPamnmY o0P22hCwe3l/CkhT0JfDKIXNafBOJJ9JNruIrVLCezVxYewaQiR/XrD6PXtAYBLs eX4qXzGc8D6hFFZSGJeUaXrRoA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:33 2026 by rpki-client