$ rpki-client -vvf rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft File: d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft (raw, json) Hash identifier: VFOAEtzqWKjoIfywRrOPywfQj47/SPWj9mLNjhy83JQ= Subject key identifier: 24:CA:9D:7D:D2:8B:AF:85:DD:9E:F2:EA:4F:6D:76:34:FB:91:39:84 Authority key identifier: 77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C Certificate issuer: /CN=A918C2EB/serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft Manifest number: 33 Signing time: Wed 25 Mar 2026 07:51:57 +0000 Manifest this update: Wed 25 Mar 2026 07:51:56 +0000 Manifest next update: Wed 01 Apr 2026 07:51:56 +0000 Files and hashes: 1: d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl (hash: FkZIhC+oqeGjyMiQGawGn8i9mMkx2auVTKBU6hEq0ds=) 2: 9C9F9D6AE61511F0BA7CC46D6A6F56BC.roa (hash: p8eavba2zmjT8rN7Dr/GDzyItyV8Fg/l0iky6Jo7qLk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:51:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C2EB, serialNumber=77A254399026D932805E7E20BE123B3D4359DA4C Validity Not Before: Mar 25 07:51:56 2026 GMT Not After : Apr 1 07:51:56 2026 GMT Subject: CN=69c3941d-9c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c5:dd:6d:11:78:02:dc:0f:7a:2e:6e:69:3e: 8e:d7:78:c7:54:60:e6:9c:4a:0a:1a:a1:fc:ca:6d: 70:24:1b:b7:d6:ea:10:a6:28:24:ac:ab:81:77:57: 1f:45:83:c5:c6:d6:70:c2:20:25:71:ee:98:f2:f1: 49:ec:85:67:4c:85:f9:d1:24:20:da:16:ae:fc:58: 6e:33:b4:1d:3b:3b:ec:57:46:ac:1b:6f:45:2a:87: 2d:ac:5b:47:55:f1:88:13:83:e1:a7:69:34:08:52: 6f:37:ce:12:19:99:9d:93:ee:a9:ce:2b:08:40:47: 2d:5f:d1:8f:11:a3:7d:c9:7f:80:50:e6:c2:11:b1: b8:a8:22:5a:b8:cd:aa:86:50:2a:f1:73:6a:87:82: ee:a0:17:76:9a:5f:d9:3b:09:73:18:d9:b7:f5:61: 51:26:c8:96:ea:ce:38:d9:58:d8:34:2a:04:57:aa: 3f:52:93:ba:72:ed:a8:93:14:e2:75:16:1d:ce:1c: cb:9e:79:dd:2c:9d:0a:f1:6b:e5:c3:e4:4b:b1:40: b7:e6:3e:24:dd:40:13:b3:35:cf:84:8a:f5:ac:74: fe:30:ca:b3:96:6d:75:0c:be:7e:f8:d3:12:7e:14: 27:ac:49:3d:ab:05:39:dc:25:14:90:03:71:c3:1f: b4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CA:9D:7D:D2:8B:AF:85:DD:9E:F2:EA:4F:6D:76:34:FB:91:39:84 X509v3 Authority Key Identifier: keyid:77:A2:54:39:90:26:D9:32:80:5E:7E:20:BE:12:3B:3D:43:59:DA:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C2EB/91F8312EE53411F0912CFD566E6F56BC/d6JUOZAm2TKAXn4gvhI7PUNZ2kw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e4:2d:b5:58:1b:e2:61:2f:ce:83:41:66:90:0b:50:69:a6: 29:73:e6:63:db:1c:0a:2c:29:c2:3e:08:cf:a5:8b:0a:ff:45: 8d:13:81:49:7a:f5:d9:9e:51:67:0f:f5:ec:06:6e:b4:aa:cd: 33:30:f0:d4:ef:aa:7f:8a:3d:04:e2:97:14:e8:c3:78:26:d6: 53:f8:7b:49:16:9c:bb:02:90:d1:33:8b:fb:60:3e:b1:05:ba: d9:33:d5:05:b4:f1:09:9c:da:48:7f:f6:c8:ad:67:db:95:8c: 37:6b:66:4f:4f:c1:f9:89:c3:7c:77:34:0a:d0:fa:46:8e:fc: 09:46:b5:d4:69:0f:cf:d4:fd:10:79:03:22:80:aa:9b:7c:a2: fa:d9:c6:7a:d4:03:4e:ee:9f:9e:3a:a2:20:a1:fe:02:77:d5: e2:bf:cd:38:db:1c:2e:47:03:e8:e2:a2:0c:5f:9c:66:2d:be: 4c:d0:18:37:9e:92:78:62:aa:d3:7b:39:2d:10:53:6c:c6:ed: 3a:d6:98:8d:60:b3:ff:4a:f6:31:da:91:42:43:1d:96:e3:8c: 5d:8c:8b:f8:2c:3b:10:8b:b5:c7:e1:2a:e3:6a:45:cb:c0:58: fa:ca:67:48:24:3b:37:c4:4f:a4:f6:ec:39:97:66:21:d9:8f: 3d:9a:c9:f4 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QzJFQjExMC8GA1UEBRMoNzdBMjU0Mzk5MDI2RDkzMjgwNUU3RTIwQkUxMjNCM0Q0 MzU5REE0QzAeFw0yNjAzMjUwNzUxNTZaFw0yNjA0MDEwNzUxNTZaMBgxFjAUBgNV BAMTDTY5YzM5NDFkLTljNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfxd1tEXgC3A96Lm5pPo7XeMdUYOacSgoaofzKbXAkG7fW6hCmKCSsq4F3Vx9F g8XG1nDCICVx7pjy8UnshWdMhfnRJCDaFq78WG4ztB07O+xXRqwbb0Uqhy2sW0dV 8YgTg+GnaTQIUm83zhIZmZ2T7qnOKwhARy1f0Y8Ro33Jf4BQ5sIRsbioIlq4zaqG UCrxc2qHgu6gF3aaX9k7CXMY2bf1YVEmyJbqzjjZWNg0KgRXqj9Sk7py7aiTFOJ1 Fh3OHMueed0snQrxa+XD5EuxQLfmPiTdQBOzNc+EivWsdP4wyrOWbXUMvn740xJ+ FCesST2rBTncJRSQA3HDH7TJAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUJMqdfdKL r4XdnvLqT212NPuROYQwHwYDVR0jBBgwFoAUd6JUOZAm2TKAXn4gvhI7PUNZ2kww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThDMkVCLzkxRjgzMTJFRTUz NDExRjA5MTJDRkQ1NjZFNkY1NkJDL2Q2SlVPWkFtMlRLQVhuNGd2aEk3UFVOWjJr dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDZKVU9aQW0yVEtBWG40Z3ZoSTdQVU5aMmt3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThD MkVCLzkxRjgzMTJFRTUzNDExRjA5MTJDRkQ1NjZFNkY1NkJDL2Q2SlVPWkFtMlRL QVhuNGd2aEk3UFVOWjJrdy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBE5C21WBviYS/Og0FmkAtQaaYpc+Zj2xwKLCnCPgjPpYsK/0WNE4FJevXZnlFn D/XsBm60qs0zMPDU76p/ij0E4pcU6MN4JtZT+HtJFpy7ApDRM4v7YD6xBbrZM9UF tPEJnNpIf/bIrWfblYw3a2ZPT8H5icN8dzQK0PpGjvwJRrXUaQ/P1P0QeQMigKqb fKL62cZ61ANO7p+eOqIgof4Cd9Xiv8042xwuRwPo4qIMX5xmLb5M0Bg3npJ4YqrT ezktEFNsxu061piNYLP/SvYx2pFCQx2W44xdjIv4LDsQi7XH4SrjakXLwFj6ymdI JDs3xE+k9uw5l2Yh2Y89msn0 -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:28 2026 by rpki-client