$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft File: rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json) Hash identifier: wiz56orXNZwrSwlsgtD5SRynbstuEIrsOUFp+5+crFo= Subject key identifier: A5:B0:13:7D:5C:13:FE:C3:27:1E:62:03:D7:E9:18:13:E9:C3:43:2F Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F Certificate issuer: /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Certificate serial: 0903 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft Manifest number: 08F9 Signing time: Tue 24 Mar 2026 20:06:26 +0000 Manifest this update: Tue 24 Mar 2026 20:06:26 +0000 Manifest next update: Tue 31 Mar 2026 20:06:26 +0000 Files and hashes: 1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: S4yaaOjLB93xrCL5DSp2GfjRTmSpvBo67bp72XOIKO0=) 2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:06:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2307 (0x903) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F Validity Not Before: Mar 24 20:06:26 2026 GMT Not After : Mar 31 20:06:26 2026 GMT Subject: CN=69c2eec2-bfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c8:94:da:00:72:ad:af:30:cf:77:93:8e:7b: f8:6e:9c:c6:00:a4:ec:c3:74:07:35:cf:2c:dd:44: f4:e7:5b:3b:8a:f3:0f:93:a0:fa:4f:33:fb:db:9b: 6d:bf:a8:5a:d1:fb:16:b7:a8:82:d1:7b:74:92:4e: ee:a6:62:79:b6:35:ea:2b:d6:cf:37:99:6b:e5:4d: e2:60:3a:6c:2c:46:9a:4f:e0:34:42:cd:ca:db:4c: af:bb:0d:70:b4:7a:69:7a:32:d0:8d:97:97:d1:86: cb:6a:b1:3c:ff:93:80:f5:bc:fc:a3:33:b5:a4:b9: 2e:f3:34:ce:68:9e:7f:dc:52:a3:f9:2d:a3:69:73: 03:2f:03:1f:13:56:c8:84:4e:ed:52:9f:fb:9b:72: 66:7c:dd:f4:f7:5c:ec:44:2b:e8:cd:ea:af:23:99: 6e:18:09:e1:5a:6f:69:5e:c3:9f:db:df:40:5d:f6: 0f:04:79:45:45:49:db:6e:cf:37:21:1a:2b:d8:cb: ce:33:80:38:40:8a:cf:32:58:01:12:49:67:3f:14: 66:18:67:83:d6:a4:41:ba:de:91:ce:a4:cd:41:0a: 5a:47:ba:99:e6:1f:e9:13:d1:0a:d6:4c:b1:b9:c5: 39:e9:d6:af:d3:91:d0:90:8d:01:b4:76:28:09:89: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:B0:13:7D:5C:13:FE:C3:27:1E:62:03:D7:E9:18:13:E9:C3:43:2F X509v3 Authority Key Identifier: keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:62:46:53:00:e4:a9:a8:0d:9c:42:28:19:93:55:22:82:3b: 4d:a0:fb:41:e2:aa:ff:96:0b:94:6c:27:5a:a4:b5:bd:ee:2b: 71:13:5b:7e:c5:23:1c:89:f4:fd:50:ed:dc:17:25:cf:e3:23: 0c:53:eb:7c:4b:ad:0f:63:45:7f:ce:b3:20:15:70:a7:80:68: 05:38:d0:bc:8c:02:b6:17:9b:13:0a:08:50:a7:69:85:4a:62: e3:27:3b:2f:4f:b4:71:3c:2e:0e:c0:d3:94:0f:3d:08:09:e2: d0:fd:69:ff:c5:6e:b3:76:74:62:94:41:57:45:4c:35:6c:2d: 86:cb:dc:de:68:fe:68:d9:d6:bd:08:8b:8f:88:23:2b:c0:1e: 14:c1:d7:c4:c7:53:d0:4f:4b:0b:d3:39:bc:03:e5:fa:79:25: c5:01:29:0a:bb:71:43:44:88:f3:c4:53:e7:80:3a:d2:e8:f8: c3:40:91:12:85:01:99:33:da:26:cf:bf:48:52:1e:0b:ca:5b: 90:78:b1:99:c4:4d:98:ef:1f:0e:5e:f9:0f:30:b0:89:b3:bf: 41:29:24:b4:53:65:95:28:41:68:52:15:08:15:9e:8e:0c:55: ab:56:e9:a7:62:8b:a5:24:76:86:2d:96:d1:c5:17:ba:95:24: 0d:d8:c0:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx Mjc5MTdBMkYwHhcNMjYwMzI0MjAwNjI2WhcNMjYwMzMxMjAwNjI2WjAYMRYwFAYD VQQDEw02OWMyZWVjMi1iZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnMiU2gByra8wz3eTjnv4bpzGAKTsw3QHNc8s3UT051s7ivMPk6D6TzP725tt v6ha0fsWt6iC0Xt0kk7upmJ5tjXqK9bPN5lr5U3iYDpsLEaaT+A0Qs3K20yvuw1w tHppejLQjZeX0YbLarE8/5OA9bz8ozO1pLku8zTOaJ5/3FKj+S2jaXMDLwMfE1bI hE7tUp/7m3JmfN3091zsRCvozeqvI5luGAnhWm9pXsOf299AXfYPBHlFRUnbbs83 IRor2MvOM4A4QIrPMlgBEklnPxRmGGeD1qRBut6RzqTNQQpaR7qZ5h/pE9EK1kyx ucU56dav05HQkI0BtHYoCYmwqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKWwE31c E/7DJx5iA9fpGBPpw0MvMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3 RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0 dV9aeEdYT0Vjak1TZVJlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAvmJGUwDkqagNnEIoGZNVIoI7TaD7QeKq/5YLlGwnWqS1ve4rcRNbfsUjHIn0 /VDt3Bclz+MjDFPrfEutD2NFf86zIBVwp4BoBTjQvIwCthebEwoIUKdphUpi4yc7 L0+0cTwuDsDTlA89CAni0P1p/8Vus3Z0YpRBV0VMNWwthsvc3mj+aNnWvQiLj4gj K8AeFMHXxMdT0E9LC9M5vAPl+nklxQEpCrtxQ0SI88RT54A60uj4w0CREoUBmTPa Js+/SFIeC8pbkHixmcRNmO8fDl75DzCwibO/QSkktFNllShBaFIVCBWejgxVq1bp p2KLpSR2hi2W0cUXupUkDdjAlw== -----END CERTIFICATE-----Generated at Thu Mar 26 07:16:07 2026 by rpki-client