$ rpki-client -vvf rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft File: h-gMDkYzEKnTA4zgE88YU3SlxyI.mft (raw, json) Hash identifier: C7YX3v/2cPYRmrqSTzmbskYa+uAWbYfhsOMl0OOOog0= Subject key identifier: 22:23:99:F2:A1:64:A9:63:E8:0B:EF:B9:78:3A:3D:79:28:38:11:EC Authority key identifier: 87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 Certificate issuer: /CN=A918524B/serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Certificate serial: 067B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft Manifest number: 066D Signing time: Thu 26 Mar 2026 22:27:09 +0000 Manifest this update: Thu 26 Mar 2026 22:27:09 +0000 Manifest next update: Thu 02 Apr 2026 22:27:09 +0000 Files and hashes: 1: h-gMDkYzEKnTA4zgE88YU3SlxyI.crl (hash: 5p5racVbD4c5TtChWp6/598UEKTICWVp2J4t7U0x1RM=) 2: C49CE482BEA411EB85828650C4F9AE02.roa (hash: JOGvq1AD8Gg+4yY3ltKJTiWff0l41sfm7XWi5tngbn4=) 3: C850F3BA89A511EEB6692E43C4F9AE02.roa (hash: 5be7I0/+cwjNbyTqFfbMRK0sXrbNJNl+sPoUACjviPI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1659 (0x67b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918524B, serialNumber=87E80C0E463310A9D3038CE013CF185374A5C722 Validity Not Before: Mar 26 22:27:09 2026 GMT Not After : Apr 2 22:27:09 2026 GMT Subject: CN=69c5b2bd-8c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:e2:dc:92:93:4f:84:17:93:bd:6e:9f:9f: 5e:09:9b:ed:40:71:b6:ca:95:6a:1b:1e:b3:41:cd: 13:04:ab:44:c2:17:88:0c:06:d3:01:a4:f9:8c:71: 5e:7d:2e:58:05:ca:ff:04:be:14:03:e7:05:89:a5: 47:6c:14:cf:68:ac:18:9b:b2:ae:88:49:10:78:c1: d5:95:12:dd:55:88:e5:78:b0:bd:8f:dc:f9:59:ea: dc:05:e6:c2:5c:30:04:c3:0e:f5:b3:3d:aa:ca:45: c2:2a:24:b2:f2:4f:ce:03:62:85:85:e0:cb:d9:96: a8:27:cd:22:a4:7f:32:ea:bf:1a:a8:19:6a:de:4a: a8:87:c3:00:90:b1:94:a4:c4:10:e5:ac:b4:78:24: 04:7b:64:b2:8e:c7:10:ea:9c:b0:d4:f9:3c:7f:f3: f4:e3:36:e1:e5:6c:75:9a:ea:9a:25:9b:a5:de:0e: 01:b5:5c:15:6d:9e:a7:c8:cf:f0:35:d6:51:42:d6: 38:84:fd:c2:2e:b4:23:36:5a:49:72:3c:59:dd:61: 36:44:76:98:d9:ef:60:d2:bd:33:0a:c5:0a:6a:00: 4c:4a:2f:2d:fc:93:fb:39:7a:6b:3e:89:72:c9:fa: a0:b9:10:02:ba:e8:d3:2c:d5:40:09:6e:36:da:c7: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:99:F2:A1:64:A9:63:E8:0B:EF:B9:78:3A:3D:79:28:38:11:EC X509v3 Authority Key Identifier: keyid:87:E8:0C:0E:46:33:10:A9:D3:03:8C:E0:13:CF:18:53:74:A5:C7:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h-gMDkYzEKnTA4zgE88YU3SlxyI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918524B/92406A06BEA211EBAD6EF44FC4F9AE02/h-gMDkYzEKnTA4zgE88YU3SlxyI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3f:ee:83:a7:1a:ea:0f:8e:0d:e0:42:ce:4b:be:5d:8e:9c: 81:78:ad:1b:1c:2c:61:69:9c:19:0c:6c:3f:23:7f:66:9e:bd: 17:89:3c:9f:7e:38:6c:ca:7b:54:3d:69:06:5f:8f:02:bc:a9: 10:c6:bf:a7:d2:6b:09:dd:6c:02:67:b9:a9:02:1d:a7:a1:fc: e8:e9:a2:43:cd:6a:cb:de:be:fc:33:81:05:86:a2:ac:11:19: 01:5f:75:1f:9e:e9:9c:ff:15:27:57:89:9a:1a:33:45:03:7e: 69:bf:b4:ac:d7:89:7e:0d:28:f1:e6:fe:d4:c7:49:d5:05:e1: 9a:77:90:ad:32:e0:a0:55:a5:69:9d:c5:fa:75:49:05:32:2a: 6c:62:7b:12:d5:55:f2:04:b0:0a:3b:f0:5c:07:bf:e6:60:2e: cb:ae:24:00:fe:92:7b:9c:ca:79:f6:e3:c8:9f:e8:6f:cd:be: b2:4f:9c:49:89:35:fb:b0:6d:16:2d:a2:5e:db:60:ba:89:87: e7:f3:b9:22:8f:ef:58:ee:77:dd:38:57:ff:7e:07:49:9a:db: 6f:5b:cc:0d:70:f2:77:91:5e:92:32:c2:8c:91:7f:36:a3:84: 2f:34:65:04:f9:4b:e7:b4:8d:15:8c:de:e9:23:93:40:07:d3: c1:67:69:fe -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBnswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyNEIxMTAvBgNVBAUTKDg3RTgwQzBFNDYzMzEwQTlEMzAzOENFMDEzQ0YxODUz NzRBNUM3MjIwHhcNMjYwMzI2MjIyNzA5WhcNMjYwNDAyMjIyNzA5WjAYMRYwFAYD VQQDEw02OWM1YjJiZC04YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCLi3JKTT4QXk71un59eCZvtQHG2ypVqGx6zQc0TBKtEwheIDAbTAaT5jHFe fS5YBcr/BL4UA+cFiaVHbBTPaKwYm7KuiEkQeMHVlRLdVYjleLC9j9z5WercBebC XDAEww71sz2qykXCKiSy8k/OA2KFheDL2ZaoJ80ipH8y6r8aqBlq3kqoh8MAkLGU pMQQ5ay0eCQEe2SyjscQ6pyw1Pk8f/P04zbh5Wx1muqaJZul3g4BtVwVbZ6nyM/w NdZRQtY4hP3CLrQjNlpJcjxZ3WE2RHaY2e9g0r0zCsUKagBMSi8t/JP7OXprPoly yfqguRACuujTLNVACW422seJLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCIjmfKh ZKlj6AvvuXg6PXkoOBHsMB8GA1UdIwQYMBaAFIfoDA5GMxCp0wOM4BPPGFN0pcci MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTI0Qi85MjQwNkEwNkJF QTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVLblRBNHpnRTg4WVUzU2x4 eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2gtZ01Ea1l6RUtuVEE0emdFODhZVTNTbHh5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTI0Qi85MjQwNkEwNkJFQTIxMUVCQUQ2RUY0NEZDNEY5QUUwMi9oLWdNRGtZekVL blRBNHpnRTg4WVUzU2x4eUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJD/ug6ca6g+ODeBCzku+XY6cgXitGxwsYWmcGQxsPyN/Zp69F4k8n344bMp7 VD1pBl+PArypEMa/p9JrCd1sAme5qQIdp6H86OmiQ81qy96+/DOBBYairBEZAV91 H57pnP8VJ1eJmhozRQN+ab+0rNeJfg0o8eb+1MdJ1QXhmneQrTLgoFWlaZ3F+nVJ BTIqbGJ7EtVV8gSwCjvwXAe/5mAuy64kAP6Se5zKefbjyJ/ob82+sk+cSYk1+7Bt Fi2iXttguomH5/O5Io/vWO533ThX/34HSZrbb1vMDXDyd5FekjLCjJF/NqOELzRl BPlL57SNFYze6SOTQAfTwWdp/g== -----END CERTIFICATE-----Generated at Fri Mar 27 03:06:14 2026 by rpki-client