$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft File: fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft (raw, json) Hash identifier: Cv40YrbnZJEgNFjKw7ZvcKsUyUX5Jbg3BMQ+nH+KEYE= Subject key identifier: 0C:65:88:2F:C2:C7:B0:F0:D0:D0:F6:BF:40:6A:DA:74:0A:5B:A8:E2 Authority key identifier: 7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 Certificate issuer: /CN=A9187E80/serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Certificate serial: 06D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft Manifest number: 06BE Signing time: Tue 24 Mar 2026 22:03:19 +0000 Manifest this update: Tue 24 Mar 2026 22:03:19 +0000 Manifest next update: Tue 31 Mar 2026 22:03:19 +0000 Files and hashes: 1: fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl (hash: pMgPiLhj+ScWA9wWZDuzlX5dL5DTpa+tIl8nJCY270o=) 2: 9F68F54067EF11F09584C157C4F9AE02.roa (hash: UzDPn/plAnRycbk9Qz1NVyr/2jrEf/+GzQ2KgWJxmuQ=) 3: 1B120B6E563B11EE9C93E334C4F9AE02.roa (hash: zx3SfNrsBStmAGKK4PT2fic35nMh12b91cF9VkyjT2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1745 (0x6d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E80, serialNumber=7CB0E5825101C665443F2CFAB19E84D1A7797597 Validity Not Before: Mar 24 22:03:19 2026 GMT Not After : Mar 31 22:03:19 2026 GMT Subject: CN=69c30a27-b021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:df:3f:66:b5:6a:4d:02:46:85:9d:e8:ab:23: 91:2e:70:66:06:c7:72:37:c0:78:34:39:41:15:ac: 56:20:ed:6c:12:b8:fb:5c:fb:a9:16:f7:6f:09:8a: 5e:27:0d:69:25:d1:d4:19:e1:42:69:8a:8d:b9:a3: 2f:d4:31:a9:1e:b2:95:7e:91:1c:9e:1a:09:a5:b5: 34:4c:fc:7c:ac:af:a1:73:f2:e4:98:3f:77:cf:1e: 7b:61:66:a5:e5:0f:8a:fa:61:2c:09:b7:c1:21:ac: 26:aa:25:10:a4:63:37:fc:57:15:a8:58:83:1b:0d: 6b:e2:f3:fd:4c:40:32:54:47:b6:6c:7a:d5:a6:69: 2a:20:ad:f8:1c:4d:c6:92:75:50:3b:cb:3f:9f:7a: bd:e6:f2:cd:d4:f8:97:3e:90:d4:b2:6d:8f:12:13: 1b:a3:26:9a:7b:5c:e3:fb:b5:3b:fd:da:07:88:a9: 2f:21:95:31:f6:c1:45:9f:28:f2:bd:93:8d:d1:d4: a8:ae:69:2e:31:53:d5:bd:e2:5a:5b:80:62:94:48: 54:de:74:4f:9c:62:40:bb:f3:7f:74:0b:33:3f:85: 46:8b:b9:ea:02:21:66:3c:cb:48:2e:b1:17:55:9f: e2:85:8f:52:3c:02:49:ed:e4:3f:7f:f2:84:d8:27: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:65:88:2F:C2:C7:B0:F0:D0:D0:F6:BF:40:6A:DA:74:0A:5B:A8:E2 X509v3 Authority Key Identifier: keyid:7C:B0:E5:82:51:01:C6:65:44:3F:2C:FA:B1:9E:84:D1:A7:79:75:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLDlglEBxmVEPyz6sZ6E0ad5dZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E80/D278CA649E7711EB8C25DB6CC4F9AE02/fLDlglEBxmVEPyz6sZ6E0ad5dZc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:99:76:69:a1:74:3a:3e:8b:b1:84:f9:02:c6:cf:80:5c:a3: 8c:f8:dc:a0:d7:04:54:c6:6d:c2:a0:ad:cd:ba:42:55:43:c6: 3e:b1:3d:9f:4c:93:72:ba:0d:99:2b:c4:0e:54:c3:f7:9a:42: cf:7d:e6:f7:ea:3c:d6:19:32:ab:90:32:07:c0:f6:fe:6c:15: 1b:8e:ab:ea:bb:28:8d:bf:78:7d:99:db:b2:eb:d8:53:b6:4b: a1:7a:2d:4f:ed:e8:a5:fd:0e:85:21:bd:d3:72:ff:09:08:e2: c1:3b:7b:15:dd:fe:99:30:19:07:64:00:ad:52:96:4b:c3:a8: 46:97:7e:99:a1:58:55:ec:fe:0c:5b:e9:dd:e8:3f:0c:f6:43: e7:67:d4:1c:d5:8b:04:ac:5f:30:a2:2d:f2:e2:93:fa:85:05: fc:bc:f3:37:0e:66:24:a1:4a:06:cc:45:3b:cc:0d:2e:ae:24: 0d:b9:99:15:ad:74:7e:d1:a6:b8:97:cb:b7:67:1b:08:62:de: 1b:ce:e1:a1:77:28:c9:d7:6c:3e:6e:fd:48:7c:fd:03:a7:a4: d6:67:c0:ca:3b:02:b7:3a:52:fe:80:ad:00:7d:2a:f9:0c:8f: 99:57:36:ac:9f:4b:99:cc:54:ab:23:02:c5:ce:5d:a6:9d:f6: fc:12:5a:d2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFODAxMTAvBgNVBAUTKDdDQjBFNTgyNTEwMUM2NjU0NDNGMkNGQUIxOUU4NEQx QTc3OTc1OTcwHhcNMjYwMzI0MjIwMzE5WhcNMjYwMzMxMjIwMzE5WjAYMRYwFAYD VQQDEw02OWMzMGEyNy1iMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv98/ZrVqTQJGhZ3oqyORLnBmBsdyN8B4NDlBFaxWIO1sErj7XPupFvdvCYpe Jw1pJdHUGeFCaYqNuaMv1DGpHrKVfpEcnhoJpbU0TPx8rK+hc/LkmD93zx57YWal 5Q+K+mEsCbfBIawmqiUQpGM3/FcVqFiDGw1r4vP9TEAyVEe2bHrVpmkqIK34HE3G knVQO8s/n3q95vLN1PiXPpDUsm2PEhMboyaae1zj+7U7/doHiKkvIZUx9sFFnyjy vZON0dSormkuMVPVveJaW4BilEhU3nRPnGJAu/N/dAszP4VGi7nqAiFmPMtILrEX VZ/ihY9SPAJJ7eQ/f/KE2CdNBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAxliC/C x7Dw0ND2v0Bq2nQKW6jiMB8GA1UdIwQYMBaAFHyw5YJRAcZlRD8s+rGehNGneXWX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U4MC9EMjc4Q0E2NDlF NzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnhtVkVQeXo2c1o2RTBhZDVk WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMRGxnbEVCeG1WRVB5ejZzWjZFMGFkNWRaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U4MC9EMjc4Q0E2NDlFNzcxMUVCOEMyNURCNkNDNEY5QUUwMi9mTERsZ2xFQnht VkVQeXo2c1o2RTBhZDVkWmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr5l2aaF0Oj6LsYT5AsbPgFyjjPjcoNcEVMZtwqCtzbpCVUPGPrE9n0yTcroN mSvEDlTD95pCz33m9+o81hkyq5AyB8D2/mwVG46r6rsojb94fZnbsuvYU7ZLoXot T+3opf0OhSG903L/CQjiwTt7Fd3+mTAZB2QArVKWS8OoRpd+maFYVez+DFvp3eg/ DPZD52fUHNWLBKxfMKIt8uKT+oUF/LzzNw5mJKFKBsxFO8wNLq4kDbmZFa10ftGm uJfLt2cbCGLeG87hoXcoyddsPm79SHz9A6ek1mfAyjsCtzpS/oCtAH0q+QyPmVc2 rJ9LmcxUqyMCxc5dpp32/BJa0g== -----END CERTIFICATE-----Generated at Thu Mar 26 06:58:33 2026 by rpki-client