$ rpki-client -vvf rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft File: AOQNlW1o1h2oWB5U6LjC26Fssyc.mft (raw, json) Hash identifier: qZMpt7pI4MOi1Mszde3A6yYOuWDtRqHTHsbiWKwyZiM= Subject key identifier: 5C:D9:36:60:FB:B3:1B:EA:B0:07:FB:13:FD:29:18:33:DB:6B:55:76 Authority key identifier: 00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 Certificate issuer: /CN=A918C21E/serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Certificate serial: 01F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft Manifest number: 01EF Signing time: Wed 25 Mar 2026 02:37:23 +0000 Manifest this update: Wed 25 Mar 2026 02:37:23 +0000 Manifest next update: Wed 01 Apr 2026 02:37:23 +0000 Files and hashes: 1: AOQNlW1o1h2oWB5U6LjC26Fssyc.crl (hash: INVBUmfx12swUb/2pNvwC6AtRmnKJ+LP8mQkSkIR0XA=) 2: 79A8653C32AB11EE8EEB9940C4F9AE02.roa (hash: +VGb3DLO/rVhkz02/GwA3CkCqPb4QLi9bk86uPT+tR0=) 3: 79266D5C32AB11EE8EEB9940C4F9AE02.roa (hash: Jy8XOiA0kN27oXJXLhTzYwQbS1Mw45QfiLEVZ4JMgEM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 505 (0x1f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C21E, serialNumber=00E40D956D68D61DA8581E54E8B8C2DBA16CB327 Validity Not Before: Mar 25 02:37:23 2026 GMT Not After : Apr 1 02:37:23 2026 GMT Subject: CN=69c34a63-9d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:17:5b:2f:4c:54:24:c5:1a:45:f6:2f:77:d1: 2a:9f:48:4d:81:5b:a3:53:e1:a8:1e:aa:57:57:a1: 17:d9:c3:31:ee:fb:86:be:40:e8:d2:32:a2:1f:da: b9:09:16:7a:30:dd:de:b1:1a:0e:b8:b8:28:9e:48: 74:a3:35:e3:c0:7a:fb:5e:dc:1a:04:40:54:e5:18: 60:59:67:d8:0e:9a:83:1a:71:f1:9a:85:91:15:c8: 9a:17:11:41:22:a6:09:58:98:9b:53:6a:68:6b:ed: 1e:fe:77:8f:b5:2c:de:2d:48:4d:36:c6:ef:62:6f: 4c:6e:43:14:66:9e:c2:34:f7:13:23:31:11:0b:c9: 17:b6:c0:b1:6f:29:b3:67:0c:0d:23:7c:60:cd:f4: 11:72:cd:12:8b:c3:08:ce:0c:8d:a8:d0:b8:6d:fc: 21:b4:66:bb:7f:3f:49:03:36:dc:96:09:9b:cd:97: 88:e5:10:27:5c:30:47:9b:64:9d:49:19:7b:e5:2c: ef:16:59:d7:5f:f8:0a:b0:e3:a5:05:c5:58:f5:0d: ec:61:12:4e:b4:b7:6e:7f:eb:5e:e0:26:c7:e6:11: 1c:10:f2:74:6a:33:9c:4c:2b:50:34:40:45:b1:bf: af:03:2d:e6:7b:e6:1e:62:e1:89:fc:82:da:37:85: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D9:36:60:FB:B3:1B:EA:B0:07:FB:13:FD:29:18:33:DB:6B:55:76 X509v3 Authority Key Identifier: keyid:00:E4:0D:95:6D:68:D6:1D:A8:58:1E:54:E8:B8:C2:DB:A1:6C:B3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AOQNlW1o1h2oWB5U6LjC26Fssyc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C21E/2575CFF032AA11EEA6099B3BC4F9AE02/AOQNlW1o1h2oWB5U6LjC26Fssyc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:3a:c4:15:59:46:a3:c1:24:f1:8a:ce:96:89:36:f3:e0:22: c0:e2:79:f1:20:5d:09:e9:ab:d9:4c:3b:b9:51:a0:cc:7b:f2: 31:e6:ff:e8:8b:98:95:5c:5b:01:ff:ae:66:88:55:49:91:08: e4:ee:39:08:e5:38:d9:41:5f:74:ce:29:8b:eb:15:d9:49:ec: 60:bc:d4:9e:3c:62:fc:3b:76:d6:f9:df:f9:51:03:8c:11:f3: 83:a4:af:88:71:e5:fd:d2:e3:01:1c:8a:5c:94:94:eb:52:aa: 7c:52:c0:06:e4:ec:be:74:3a:aa:8f:04:8b:d3:56:e1:14:0c: ad:13:2b:8c:8f:4a:3d:6a:b6:ec:15:ce:d4:41:f6:82:ac:41: d2:dd:2a:fc:68:8d:13:f8:46:69:53:2a:e3:6d:f0:82:f9:27: 23:9d:97:10:bf:e5:96:94:7a:e7:dc:83:f2:66:74:75:23:a3: 95:6b:45:8f:b0:70:27:49:ef:41:e9:08:a0:8c:d8:fc:2e:59: 33:69:f4:2e:72:9a:db:05:c0:79:d8:9a:bc:90:2e:03:53:76: e4:75:5b:e6:64:c4:f3:b9:1a:ed:e0:8b:66:8d:87:58:00:71: a9:36:a7:85:a0:4c:9f:e9:34:b8:6d:3e:c9:d5:87:a5:79:09: e3:8a:3d:82 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyMUUxMTAvBgNVBAUTKDAwRTQwRDk1NkQ2OEQ2MURBODU4MUU1NEU4QjhDMkRC QTE2Q0IzMjcwHhcNMjYwMzI1MDIzNzIzWhcNMjYwNDAxMDIzNzIzWjAYMRYwFAYD VQQDEw02OWMzNGE2My05ZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0hdbL0xUJMUaRfYvd9Eqn0hNgVujU+GoHqpXV6EX2cMx7vuGvkDo0jKiH9q5 CRZ6MN3esRoOuLgonkh0ozXjwHr7XtwaBEBU5RhgWWfYDpqDGnHxmoWRFciaFxFB IqYJWJibU2poa+0e/nePtSzeLUhNNsbvYm9MbkMUZp7CNPcTIzERC8kXtsCxbymz ZwwNI3xgzfQRcs0Si8MIzgyNqNC4bfwhtGa7fz9JAzbclgmbzZeI5RAnXDBHm2Sd SRl75SzvFlnXX/gKsOOlBcVY9Q3sYRJOtLduf+te4CbH5hEcEPJ0ajOcTCtQNEBF sb+vAy3me+YeYuGJ/ILaN4W6XQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFzZNmD7 sxvqsAf7E/0pGDPba1V2MB8GA1UdIwQYMBaAFADkDZVtaNYdqFgeVOi4wtuhbLMn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzIxRS8yNTc1Q0ZGMDMy QUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFoMm9XQjVVNkxqQzI2RnNz eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPUU5sVzFvMWgyb1dCNVU2TGpDMjZGc3N5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzIxRS8yNTc1Q0ZGMDMyQUExMUVFQTYwOTlCM0JDNEY5QUUwMi9BT1FObFcxbzFo Mm9XQjVVNkxqQzI2RnNzeWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhTrEFVlGo8Ek8YrOlok28+AiwOJ58SBdCemr2Uw7uVGgzHvyMeb/6IuYlVxb Af+uZohVSZEI5O45COU42UFfdM4pi+sV2UnsYLzUnjxi/Dt21vnf+VEDjBHzg6Sv iHHl/dLjARyKXJSU61KqfFLABuTsvnQ6qo8Ei9NW4RQMrRMrjI9KPWq27BXO1EH2 gqxB0t0q/GiNE/hGaVMq423wgvknI52XEL/llpR659yD8mZ0dSOjlWtFj7BwJ0nv QekIoIzY/C5ZM2n0LnKa2wXAediavJAuA1N25HVb5mTE87ka7eCLZo2HWABxqTan haBMn+k0uG0+ydWHpXkJ44o9gg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:02 2026 by rpki-client