$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft File: -gRcYwK4c-iDZfqaAhSZtPPFhog.mft (raw, json) Hash identifier: TeC4V4G70HeyIbx0N/kf+bbG/KKJiBGaYIfJOj9cjZU= Subject key identifier: 17:7D:C3:5A:9B:CC:4D:5F:E4:E2:69:E8:54:22:76:53:A0:7D:50:89 Authority key identifier: FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 Certificate issuer: /CN=A91853D3/serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft Manifest number: 05DF Signing time: Tue 24 Mar 2026 22:47:55 +0000 Manifest this update: Tue 24 Mar 2026 22:47:54 +0000 Manifest next update: Tue 31 Mar 2026 22:47:54 +0000 Files and hashes: 1: -gRcYwK4c-iDZfqaAhSZtPPFhog.crl (hash: sxa++cdmYuSUfSSaKbNEKjrouLhHSMpiHuypY8pz4r8=) 2: 52A1A77A6ECF11F0B2785815C4F9AE02.roa (hash: BJpks1gOb51AQCv2clwa4s1WpHhotp2F+Z4P3kGOQPE=) 3: 36C4FAAAA9FC11EEBEF3E64AC4F9AE02.roa (hash: ahWWs0kZBjkLDlGiJDE5aUNwMLJFe7OoP0FqUJEFa+k=) 4: 5C9E3A00E83111F0B570A08B79EE528E.roa (hash: tNb9AqniNMGiccuAfhw4fufXJvoKBwPNTf9UHPrYX8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:47:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=FA045C6302B873E88365FA9A021499B4F3C58688 Validity Not Before: Mar 24 22:47:54 2026 GMT Not After : Mar 31 22:47:54 2026 GMT Subject: CN=69c3149b-7b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:f3:e1:e0:78:fc:4d:3c:6d:25:b2:8b:b1: 7d:ff:6f:29:c2:53:e7:44:d3:66:af:19:5d:55:1d: 21:a9:14:87:e0:22:ca:66:85:20:31:f5:72:22:27: aa:c3:cc:7e:74:0c:cd:7e:91:29:72:cf:54:92:44: 36:19:e7:f6:3e:df:eb:4a:e5:3c:3d:c8:3b:ed:7b: 68:3b:e1:ff:24:54:86:c9:91:98:a3:ef:f9:0a:eb: 36:18:be:b9:c6:12:4c:87:79:6e:f3:d0:49:c0:20: 87:05:a3:56:11:63:23:37:8a:cd:e9:a2:0d:0c:44: 75:1f:16:e8:37:55:2a:a3:b2:23:9f:f3:71:c9:73: 65:42:67:71:81:c7:5a:d2:5a:67:58:c2:f0:c5:f3: 23:0a:21:4c:4d:18:e8:fe:e7:1a:66:71:b7:23:67: bf:a9:1d:f6:7b:33:d4:82:77:7f:9d:cd:24:31:02: 8f:8c:c9:02:ca:74:6d:e8:a7:3a:74:b1:6b:cc:5a: 35:04:40:f3:63:8a:d9:75:c1:89:dc:e0:dd:10:07: da:c5:6f:37:c8:3d:ac:a8:dd:97:53:52:90:7b:cc: 4d:3b:85:59:6b:dd:3e:b4:69:10:97:f4:4a:e1:c1: be:fc:5c:32:ae:71:f5:b0:bc:a2:d4:51:71:32:3a: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7D:C3:5A:9B:CC:4D:5F:E4:E2:69:E8:54:22:76:53:A0:7D:50:89 X509v3 Authority Key Identifier: keyid:FA:04:5C:63:02:B8:73:E8:83:65:FA:9A:02:14:99:B4:F3:C5:86:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gRcYwK4c-iDZfqaAhSZtPPFhog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6EC0E368000A11EC8C287252C4F9AE02/-gRcYwK4c-iDZfqaAhSZtPPFhog.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:b5:7c:17:45:10:3f:2f:51:8e:9b:1b:2b:2e:4e:db:74:ea: d1:7e:fa:a9:40:c5:d3:e4:cf:56:7c:e3:d2:66:d0:cd:9d:e3: 50:aa:20:21:e6:14:33:a8:e8:5b:a5:f0:9e:80:dd:ae:c1:19: a8:52:3f:37:39:71:34:91:7a:e0:04:6f:c3:ec:ab:07:13:21: f3:3e:c0:c9:2d:9f:13:f0:92:01:ed:08:77:64:2e:7d:59:1e: bd:40:bf:43:82:7f:57:ce:12:92:84:70:da:94:f2:17:dc:af: d4:cc:2a:70:96:41:44:0e:ee:f4:a1:72:a0:fb:1c:a1:99:20: 94:ec:df:70:83:16:9a:fa:ca:04:5d:37:aa:be:70:01:0b:c8: 4f:ff:55:66:81:a8:b8:47:d6:8e:57:99:8a:04:7e:72:cc:af: 0e:c8:96:e5:07:3f:2e:f9:9b:2e:4d:12:15:e5:32:09:4c:e7: 1a:6d:9a:ce:c7:40:15:4f:46:c8:4e:b4:0b:cd:c5:22:e2:87: a0:40:0d:d4:27:53:fc:8a:de:54:cf:06:97:4f:7b:19:9c:5b: 86:49:2f:0a:ca:1d:b7:f8:2a:5a:6e:43:f5:8a:e9:fe:3f:6f: 91:35:e3:cc:dd:76:66:cd:d5:20:17:26:1e:b4:c8:8c:07:19: 94:70:ee:d0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKEZBMDQ1QzYzMDJCODczRTg4MzY1RkE5QTAyMTQ5OUI0 RjNDNTg2ODgwHhcNMjYwMzI0MjI0NzU0WhcNMjYwMzMxMjI0NzU0WjAYMRYwFAYD VQQDEw02OWMzMTQ5Yi03YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnU3z4eB4/E08bSWyi7F9/28pwlPnRNNmrxldVR0hqRSH4CLKZoUgMfVyIieq w8x+dAzNfpEpcs9UkkQ2Gef2Pt/rSuU8Pcg77XtoO+H/JFSGyZGYo+/5Cus2GL65 xhJMh3lu89BJwCCHBaNWEWMjN4rN6aINDER1HxboN1Uqo7Ijn/NxyXNlQmdxgcda 0lpnWMLwxfMjCiFMTRjo/ucaZnG3I2e/qR32ezPUgnd/nc0kMQKPjMkCynRt6Kc6 dLFrzFo1BEDzY4rZdcGJ3ODdEAfaxW83yD2sqN2XU1KQe8xNO4VZa90+tGkQl/RK 4cG+/FwyrnH1sLyi1FFxMjosxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBd9w1qb zE1f5OJp6FQidlOgfVCJMB8GA1UdIwQYMBaAFPoEXGMCuHPog2X6mgIUmbTzxYaI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82RUMwRTM2ODAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMtaURaZnFhQWhTWnRQUEZo b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1nUmNZd0s0Yy1pRFpmcWFBaFNadFBQRmhvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTNEMy82RUMwRTM2ODAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi8tZ1JjWXdLNGMt aURaZnFhQWhTWnRQUEZob2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7V8F0UQPy9RjpsbKy5O23Tq0X76qUDF0+TPVnzj0mbQzZ3jUKogIeYUM6jo W6XwnoDdrsEZqFI/NzlxNJF64ARvw+yrBxMh8z7AyS2fE/CSAe0Id2QufVkevUC/ Q4J/V84SkoRw2pTyF9yv1MwqcJZBRA7u9KFyoPscoZkglOzfcIMWmvrKBF03qr5w AQvIT/9VZoGouEfWjleZigR+csyvDsiW5Qc/LvmbLk0SFeUyCUznGm2azsdAFU9G yE60C83FIuKHoEAN1CdT/IreVM8Gl097GZxbhkkvCsodt/gqWm5D9Yrp/j9vkTXj zN12Zs3VIBcmHrTIjAcZlHDu0A== -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:27 2026 by rpki-client