$ rpki-client -vvf rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft File: PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft (raw, json) Hash identifier: QAmvCyDI94cEkmhcQZb64pln+8Onifme5XU+m49XmzU= Subject key identifier: 32:06:F0:3E:03:81:21:CF:40:F1:3E:9E:12:5D:43:15:2C:7D:17:9E Authority key identifier: 3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF Certificate issuer: /CN=A918CABF/serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Certificate serial: 0BB6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft Manifest number: 0BA7 Signing time: Tue 24 Mar 2026 18:51:53 +0000 Manifest this update: Tue 24 Mar 2026 18:51:52 +0000 Manifest next update: Tue 31 Mar 2026 18:51:52 +0000 Files and hashes: 1: PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl (hash: xh+P/FwYTOO4IXKvbNGx6ZncK/6e+dubn8ipylm3K5A=) 2: 783FBEE4430711EAB1201F6BC4F9AE02.roa (hash: 31dQK67wiYiy5G3Mr5Z9I8W/2zQAHp6VfQMF8EbdjCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2998 (0xbb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CABF, serialNumber=3CDEF1692A48BB15965674BC002A313358F52FEF Validity Not Before: Mar 24 18:51:52 2026 GMT Not After : Mar 31 18:51:52 2026 GMT Subject: CN=69c2dd48-2e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:68:42:e7:c0:ca:1c:90:c5:9a:cb:8f:4e: 64:04:2b:84:9c:51:e2:2c:65:76:8c:19:68:b9:47: 54:7d:60:af:62:f1:38:29:8a:63:a9:3f:ff:3c:0f: 3e:f6:06:ba:59:c1:8c:e9:08:6d:5c:65:07:14:46: b1:11:55:06:81:67:ae:01:bd:6e:e0:33:de:48:cb: 93:70:4c:4d:4d:a3:bd:3a:97:81:5e:09:97:6c:69: 1c:81:ca:3e:89:3d:c3:fd:b1:c3:77:74:2d:b3:ee: eb:9d:c7:3f:e5:df:3e:2c:74:be:76:3c:1c:b0:45: 4f:57:d5:6c:6b:dc:26:f2:37:db:d7:ed:cd:49:83: f7:59:d2:34:cb:43:36:3f:ef:86:80:e8:ab:01:e5: 3b:6a:ad:1d:92:3f:21:ae:d1:d3:06:3f:72:15:c3: 7f:ee:f0:36:31:94:95:77:96:ec:11:82:79:03:70: 48:dc:b5:e5:e2:05:e4:f6:5a:d9:fe:c4:c1:54:3f: 63:05:e7:cf:11:00:66:54:e8:b3:af:3d:11:94:e3: 3b:0c:80:5c:39:14:41:76:cd:90:5e:a8:16:22:08: e0:6f:c1:16:0e:33:c5:22:6d:3c:c9:00:5e:fd:f9: e5:89:15:0d:44:62:6a:23:2e:05:85:b8:9a:e7:d7: 08:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:06:F0:3E:03:81:21:CF:40:F1:3E:9E:12:5D:43:15:2C:7D:17:9E X509v3 Authority Key Identifier: keyid:3C:DE:F1:69:2A:48:BB:15:96:56:74:BC:00:2A:31:33:58:F5:2F:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PN7xaSpIuxWWVnS8ACoxM1j1L-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CABF/F9952A5C430611EA85BCF56AC4F9AE02/PN7xaSpIuxWWVnS8ACoxM1j1L-8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:92:54:4b:5b:8a:08:d2:d3:81:c7:75:fb:11:38:a0:50:08: 03:a8:68:a6:7b:ed:cc:0b:ef:2a:10:8c:90:e4:f2:0c:67:36: 50:7b:d2:29:db:a9:42:b9:54:30:8b:39:d6:c9:78:40:66:d6: 7d:20:56:d5:f0:6f:67:de:fd:a5:4f:bb:20:89:5c:5d:14:a4: 8a:75:3d:c5:14:79:b5:47:e3:d8:3d:c8:99:5d:b7:f0:29:e0: b8:37:f1:88:ec:6a:04:3a:59:fe:0a:1b:d1:13:9b:39:6f:4c: 43:9e:45:64:88:f4:11:c1:c8:b6:36:bd:92:95:c5:87:c2:f6: 3e:ff:78:37:db:7e:9b:2e:12:99:98:2d:ed:e4:63:38:aa:2c: 5d:96:1f:e3:34:a2:f2:e0:11:a3:15:39:f3:32:19:a5:f8:2b: bd:b7:b7:f5:90:0b:85:ea:d8:c7:e0:0b:9b:e4:9c:b3:e4:60: f5:0a:67:86:b5:a9:3e:b0:25:be:1a:b6:d5:e1:14:a9:d3:bc: b6:84:70:2e:ba:e3:57:42:ef:55:5d:92:41:90:e6:30:b1:6f: eb:2c:14:d3:95:4d:5b:4d:fb:d4:f1:36:e9:90:33:af:e6:c1: a0:9f:b4:29:c5:01:b3:2d:21:af:b0:b3:9f:8d:cf:a6:49:9d: c3:09:de:4c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENBQkYxMTAvBgNVBAUTKDNDREVGMTY5MkE0OEJCMTU5NjU2NzRCQzAwMkEzMTMz NThGNTJGRUYwHhcNMjYwMzI0MTg1MTUyWhcNMjYwMzMxMTg1MTUyWjAYMRYwFAYD VQQDEw02OWMyZGQ0OC0yZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvgpoQufAyhyQxZrLj05kBCuEnFHiLGV2jBlouUdUfWCvYvE4KYpjqT//PA8+ 9ga6WcGM6QhtXGUHFEaxEVUGgWeuAb1u4DPeSMuTcExNTaO9OpeBXgmXbGkcgco+ iT3D/bHDd3Qts+7rncc/5d8+LHS+djwcsEVPV9Vsa9wm8jfb1+3NSYP3WdI0y0M2 P++GgOirAeU7aq0dkj8hrtHTBj9yFcN/7vA2MZSVd5bsEYJ5A3BI3LXl4gXk9lrZ /sTBVD9jBefPEQBmVOizrz0RlOM7DIBcORRBds2QXqgWIgjgb8EWDjPFIm08yQBe /fnliRUNRGJqIy4Fhbia59cIywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDIG8D4D gSHPQPE+nhJdQxUsfReeMB8GA1UdIwQYMBaAFDze8WkqSLsVllZ0vAAqMTNY9S/v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0FCRi9GOTk1MkE1QzQz MDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4V1dWblM4QUNveE0xajFM LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BON3hhU3BJdXhXV1ZuUzhBQ294TTFqMUwtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0FCRi9GOTk1MkE1QzQzMDYxMUVBODVCQ0Y1NkFDNEY5QUUwMi9QTjd4YVNwSXV4 V1dWblM4QUNveE0xajFMLTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAq5JUS1uKCNLTgcd1+xE4oFAIA6hopnvtzAvvKhCMkOTyDGc2UHvSKdupQrlU MIs51sl4QGbWfSBW1fBvZ979pU+7IIlcXRSkinU9xRR5tUfj2D3ImV238CnguDfx iOxqBDpZ/gob0RObOW9MQ55FZIj0EcHItja9kpXFh8L2Pv94N9t+my4SmZgt7eRj OKosXZYf4zSi8uARoxU58zIZpfgrvbe39ZALherYx+ALm+Scs+Rg9QpnhrWpPrAl vhq21eEUqdO8toRwLrrjV0LvVV2SQZDmMLFv6ywU05VNW0371PE26ZAzr+bBoJ+0 KcUBsy0hr7Czn43PpkmdwwneTA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:52 2026 by rpki-client