$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: NWCKXAq6OhUqPTQ5jXdwwfBlHNvQe5ppZvsMCN7vxuU= Subject key identifier: 7A:F5:FB:B1:77:8F:22:CE:29:A5:5F:E9:F6:16:27:76:14:94:A9:8D Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: B4 Signing time: Wed 25 Mar 2026 06:19:26 +0000 Manifest this update: Wed 25 Mar 2026 06:19:26 +0000 Manifest next update: Wed 01 Apr 2026 06:19:26 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: 2p4tvZtlP8xZNfsGcr4jkDmJKfG9z/6O31Xm63ZBUnI=) 2: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: BzJbMll/2nErUDx3X8m0xfulq0DUGLZUVlVIKOuCCgI=) 3: 8BACF000172811F0B074151EC4F9AE02.roa (hash: FPDvvLJ/gQTo+9W5C7JTL7cnqUEeaAN36mc784gFf6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Mar 25 06:19:26 2026 GMT Not After : Apr 1 06:19:26 2026 GMT Subject: CN=69c37e6e-641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:6a:2e:9b:58:d2:fb:25:a1:b7:aa:72:b7: e4:80:f2:a7:5d:34:97:a2:99:70:51:3f:e2:19:3b: 45:f3:ba:16:ce:be:00:96:88:64:1c:63:f5:2d:3d: 6f:27:53:1a:bc:ea:41:64:9b:9d:e5:a0:bc:b8:99: 79:d1:25:f2:1d:51:c9:1c:51:92:ee:e1:96:16:1f: 51:9b:9b:ce:57:04:87:1d:a7:dd:cf:c0:a7:5e:65: a2:31:53:c5:df:fa:32:c3:b9:7e:bb:21:2f:ab:ed: d9:a0:33:a0:bc:2d:e5:dd:ab:a3:e3:c1:1f:52:1b: 9f:34:8e:07:29:77:25:03:63:ae:20:9c:94:50:e8: 7f:ba:5a:07:c3:cf:39:ac:4a:df:5b:9b:00:f6:b8: e7:d1:0a:c6:83:bf:fd:ad:4b:74:72:aa:33:21:a8: 96:88:3b:bf:0d:d3:8d:bc:4e:87:fe:30:5c:60:dc: 05:ae:60:45:b0:45:9d:13:c1:7a:b6:c3:e0:74:23: 50:8e:22:5c:20:43:ed:31:38:8e:69:cf:79:e9:e4: 28:e6:2e:66:aa:df:03:52:e5:ab:d6:3b:e4:3d:da: 38:8b:f0:8c:b5:0c:14:84:b5:15:56:b9:39:bd:9e: 54:14:e2:75:3f:07:87:fc:0f:a3:49:03:ba:99:4e: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:FB:B1:77:8F:22:CE:29:A5:5F:E9:F6:16:27:76:14:94:A9:8D X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3d:d8:10:95:84:49:50:17:03:bf:b4:90:91:65:e4:cc:d4: a4:6c:ef:8d:7d:c0:a4:5c:05:b5:6f:40:cf:90:95:32:9e:6b: 0c:20:58:0a:77:b4:ae:03:c8:33:0f:78:0c:b1:41:d0:0f:9a: 3d:ed:79:83:31:7a:1a:f6:9f:9f:dd:7b:30:52:e8:60:36:06: d3:59:7a:49:9f:36:02:20:78:10:63:f0:f9:e7:d2:0c:a9:e2: 40:f0:c6:b0:41:a7:6b:8c:66:57:9f:98:9f:b2:20:c1:97:c0: f9:8b:55:b1:09:0a:fd:25:f6:c4:73:6f:3f:6c:5e:91:44:f1: a2:85:dd:91:c7:5d:70:97:05:ba:fa:7e:a4:1c:3c:cd:47:b2: ab:83:b9:eb:94:9d:ab:ec:21:be:f0:ee:f5:17:63:07:70:1a: 04:31:14:19:a6:7e:5c:f7:b9:ba:84:27:86:70:26:ef:ac:ee: 1b:49:d9:5c:a8:72:69:92:24:12:76:f9:19:87:90:f0:33:8c: d9:06:fe:fc:69:c9:cc:c6:82:22:f8:81:3e:fb:b9:37:66:21: 99:ad:5d:c3:7c:6c:ad:68:23:63:40:ea:64:b9:96:ac:cd:a2: 72:c9:e0:a6:ec:ab:75:bc:2a:ff:d9:b2:82:23:7b:65:54:1d: 2e:2a:d5:7c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2NjMxMTAvBgNVBAUTKDNDQUFFQUYxQjBENEJGNjMxN0FFNEYxRTU0NjM3OUJG RjM0NkNGRDMwHhcNMjYwMzI1MDYxOTI2WhcNMjYwNDAxMDYxOTI2WjAYMRYwFAYD VQQDEw02OWMzN2U2ZS02NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfJqLptY0vslobeqcrfkgPKnXTSXoplwUT/iGTtF87oWzr4AlohkHGP1LT1v J1MavOpBZJud5aC8uJl50SXyHVHJHFGS7uGWFh9Rm5vOVwSHHafdz8CnXmWiMVPF 3/oyw7l+uyEvq+3ZoDOgvC3l3auj48EfUhufNI4HKXclA2OuIJyUUOh/uloHw885 rErfW5sA9rjn0QrGg7/9rUt0cqozIaiWiDu/DdONvE6H/jBcYNwFrmBFsEWdE8F6 tsPgdCNQjiJcIEPtMTiOac956eQo5i5mqt8DUuWr1jvkPdo4i/CMtQwUhLUVVrk5 vZ5UFOJ1PweH/A+jSQO6mU5k7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHr1+7F3 jyLOKaVf6fYWJ3YUlKmNMB8GA1UdIwQYMBaAFDyq6vGw1L9jF65PHlRjeb/zRs/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY2My83QUM5Njc5RTE3 MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYyTVhyazhlVkdONXZfTkd6 OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY2My83QUM5Njc5RTE3MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYy TVhyazhlVkdONXZfTkd6OU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFj3YEJWESVAXA7+0kJFl5MzUpGzvjX3ApFwFtW9Az5CVMp5rDCBYCne0rgPI Mw94DLFB0A+aPe15gzF6Gvafn917MFLoYDYG01l6SZ82AiB4EGPw+efSDKniQPDG sEGna4xmV5+Yn7IgwZfA+YtVsQkK/SX2xHNvP2xekUTxooXdkcddcJcFuvp+pBw8 zUeyq4O565Sdq+whvvDu9RdjB3AaBDEUGaZ+XPe5uoQnhnAm76zuG0nZXKhyaZIk Enb5GYeQ8DOM2Qb+/GnJzMaCIviBPvu5N2Yhma1dw3xsrWgjY0DqZLmWrM2icsng puyrdbwq/9mygiN7ZVQdLirVfA== -----END CERTIFICATE-----Generated at Thu Mar 26 04:13:58 2026 by rpki-client