$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft File: pN7tlZPlkTA6mwOYBh_o71GGZco.mft (raw, json) Hash identifier: SborNPgodscScK/uWs73YUzMLpp4kBj6T+PQ/m9ExW4= Subject key identifier: 07:8B:7A:E9:CA:4A:53:78:7E:76:24:FA:15:36:41:34:A6:A7:44:B5 Authority key identifier: A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA Certificate issuer: /CN=A918CABF/serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft Manifest number: 01D4 Signing time: Tue 24 Mar 2026 18:51:55 +0000 Manifest this update: Tue 24 Mar 2026 18:51:55 +0000 Manifest next update: Tue 31 Mar 2026 18:51:55 +0000 Files and hashes: 1: pN7tlZPlkTA6mwOYBh_o71GGZco.crl (hash: JM9Ises+/K3fW4gi5NoeaoaGvK8qngbrg4462GjFCp0=) 2: E12607CE6F0411EEA5298939C4F9AE02.roa (hash: IZDaa3RvwLLyBno3E88edLLqf6N/YltnYG0ukbjvIk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:51:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=A4DEED9593E591303A9B0398061FE8EF518665CA Validity Not Before: Mar 24 18:51:55 2026 GMT Not After : Mar 31 18:51:55 2026 GMT Subject: CN=69c2dd4b-206b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7a:e6:3e:bb:28:1f:d7:73:40:41:37:24:bb: bb:ba:e7:79:6b:f4:b5:83:a2:b6:d8:12:ab:7d:ef: 1f:a2:6e:dd:49:f9:fb:d1:92:43:60:dc:f6:3e:8b: b3:b3:50:4d:c8:17:9e:af:b4:85:7b:ed:02:ea:f1: 31:2d:68:f9:1a:25:09:65:ab:7a:da:c0:2a:44:a2: 2d:4e:79:d3:46:7e:18:e1:4b:07:0f:d5:25:ea:70: 39:ed:33:a7:2b:d9:50:67:3a:ff:0a:03:6c:e0:cf: ea:d4:09:76:89:c2:ab:e4:56:9c:8e:0f:bb:b8:40: 23:fb:9a:d3:39:cb:93:52:cc:21:db:9b:09:4b:41: 49:10:6e:b3:be:29:52:d7:9c:a3:d7:d4:41:05:2a: e1:65:19:cc:e3:ed:f9:d0:2d:f6:1b:6e:30:03:f4: 1a:53:20:24:67:c8:ac:a4:09:ca:08:5a:36:27:3a: a0:11:c7:4e:49:85:2a:25:ce:52:23:40:5e:55:6d: 60:74:ce:fb:a4:b5:92:0d:96:00:f9:7c:9a:86:e2: 7b:fe:71:44:db:0a:7c:ae:87:7a:d9:eb:13:0f:13: c2:55:cc:44:c7:c8:da:15:a5:3b:2a:d8:64:d1:4e: 4e:c6:f8:c1:fe:40:5a:63:02:0f:63:61:c3:ba:98: 66:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8B:7A:E9:CA:4A:53:78:7E:76:24:FA:15:36:41:34:A6:A7:44:B5 X509v3 Authority Key Identifier: keyid:A4:DE:ED:95:93:E5:91:30:3A:9B:03:98:06:1F:E8:EF:51:86:65:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pN7tlZPlkTA6mwOYBh_o71GGZco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/189195AC682A11EE8A9EB82FC4F9AE02/pN7tlZPlkTA6mwOYBh_o71GGZco.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:9b:6f:2f:bd:5d:ee:ac:ad:68:55:50:1c:b0:a1:9b:63:d2: 0b:28:05:93:56:2d:4d:d6:0e:67:27:3f:c1:7c:67:1f:1e:95: 06:9e:9e:5f:3d:2c:32:b8:0f:fb:ae:2a:d9:e5:f7:cc:cc:1b: 2e:57:8d:06:cf:3f:f5:4f:eb:b8:0f:54:1a:2a:50:fc:3a:41: 93:e0:7d:61:9f:64:5b:ce:e4:bf:14:25:6b:4f:18:fb:0c:49: 40:66:13:9f:f1:b3:bf:b6:ae:37:12:bc:24:f7:e3:c3:15:39: 89:c1:12:33:03:0d:df:87:db:39:c6:59:f7:c9:e5:85:a3:ab: 06:f3:e7:7c:30:17:90:f0:86:f0:bb:fe:9d:cc:8a:a1:e6:26: 40:64:3d:25:2d:2c:a0:55:87:5b:36:5f:e4:74:25:09:2c:4e: 8c:7c:7c:9d:e8:ee:2e:89:cb:0e:5b:04:32:05:66:90:ca:04: 2f:e2:79:75:54:d6:26:cd:c0:b6:68:6e:85:e7:3b:5c:be:71: c1:f4:e0:bb:c8:2d:f6:0e:6d:9b:8e:63:c8:c5:29:89:75:f7: 0d:78:2d:46:24:07:b5:4a:25:09:6b:a5:9a:c2:45:a1:98:a9: aa:3a:82:12:f8:d1:4d:c1:5a:b1:51:ba:af:0e:62:d5:09:04: b3:e3:a9:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKEE0REVFRDk1OTNFNTkxMzAzQTlCMDM5ODA2MUZFOEVG NTE4NjY1Q0EwHhcNMjYwMzI0MTg1MTU1WhcNMjYwMzMxMTg1MTU1WjAYMRYwFAYD VQQDEw02OWMyZGQ0Yi0yMDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh3rmPrsoH9dzQEE3JLu7uud5a/S1g6K22BKrfe8fom7dSfn70ZJDYNz2Pouz s1BNyBeer7SFe+0C6vExLWj5GiUJZat62sAqRKItTnnTRn4Y4UsHD9Ul6nA57TOn K9lQZzr/CgNs4M/q1Al2icKr5Facjg+7uEAj+5rTOcuTUswh25sJS0FJEG6zvilS 15yj19RBBSrhZRnM4+350C32G24wA/QaUyAkZ8ispAnKCFo2JzqgEcdOSYUqJc5S I0BeVW1gdM77pLWSDZYA+XyahuJ7/nFE2wp8rod62esTDxPCVcxEx8jaFaU7Kthk 0U5OxvjB/kBaYwIPY2HDuphm1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAeLeunK SlN4fnYk+hU2QTSmp0S1MB8GA1UdIwQYMBaAFKTe7ZWT5ZEwOpsDmAYf6O9RhmXK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi8xODkxOTVBQzY4 MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtUQTZtd09ZQmhfbzcxR0da Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BON3RsWlBsa1RBNm13T1lCaF9vNzFHR1pjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi8xODkxOTVBQzY4MkExMUVFOEE5RUI4MkZDNEY5QUUwMi9wTjd0bFpQbGtU QTZtd09ZQmhfbzcxR0daY28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMptvL71d7qytaFVQHLChm2PSCygFk1YtTdYOZyc/wXxnHx6VBp6eXz0sMrgP +64q2eX3zMwbLleNBs8/9U/ruA9UGipQ/DpBk+B9YZ9kW87kvxQla08Y+wxJQGYT n/Gzv7auNxK8JPfjwxU5icESMwMN34fbOcZZ98nlhaOrBvPnfDAXkPCG8Lv+ncyK oeYmQGQ9JS0soFWHWzZf5HQlCSxOjHx8nejuLonLDlsEMgVmkMoEL+J5dVTWJs3A tmhuhec7XL5xwfTgu8gt9g5tm45jyMUpiXX3DXgtRiQHtUolCWulmsJFoZipqjqC EvjRTcFasVG6rw5i1QkEs+Op8A== -----END CERTIFICATE-----Generated at Thu Mar 26 13:22:44 2026 by rpki-client