$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft File: p3fkgYyg3MY4LlYlcG-YyB6TByA.mft (raw, json) Hash identifier: kHtfipzwPM87WmV7JeZ1JblzH38IfemfNQj6jMBFELE= Subject key identifier: 49:1B:44:E6:1A:8D:64:B8:BD:BB:2A:A0:E0:AD:4E:B0:12:72:15:EA Authority key identifier: A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 Certificate issuer: /CN=A918EF94/serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Certificate serial: 0ECD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft Manifest number: 0EC2 Signing time: Tue 24 Mar 2026 17:32:50 +0000 Manifest this update: Tue 24 Mar 2026 17:32:49 +0000 Manifest next update: Tue 31 Mar 2026 17:32:49 +0000 Files and hashes: 1: p3fkgYyg3MY4LlYlcG-YyB6TByA.crl (hash: nEwgbClQHmjijVTGCGnwvdqN5XvTzpQJFcKQFAWfwFE=) 2: EE78BE36068611EDA1C2070DC4F9AE02.roa (hash: pAr8fA1QmuWGXPOAkIJK91YR32FAAgcJ10JhZIGFapc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3789 (0xecd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF94, serialNumber=A777E4818CA0DCC6382E5625706F98C81E930720 Validity Not Before: Mar 24 17:32:49 2026 GMT Not After : Mar 31 17:32:49 2026 GMT Subject: CN=69c2cac1-44dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:84:11:88:4e:b3:70:05:b5:6b:0c:7e:81: a3:5f:27:a2:41:a4:1d:1f:84:2b:4f:f8:98:63:09: b7:3e:85:91:d5:3e:50:b8:68:d7:81:bf:c8:31:f7: 8f:a5:ff:bf:04:69:93:02:13:d8:b8:c1:42:53:00: a1:32:1d:e7:a8:39:47:4b:13:02:eb:8e:ca:0f:f1: a1:d9:9d:34:49:6d:23:4e:0c:4c:3c:ea:63:65:c0: a3:1a:98:06:52:b2:cf:93:cb:2f:e1:ff:cd:9d:cd: ae:57:6b:7b:8c:90:75:5e:9a:e5:ee:71:fd:51:73: 32:57:ca:7e:6c:46:85:46:be:7b:d8:d2:2a:ea:a8: 62:82:bf:a6:f5:80:71:3b:5a:a8:19:b9:db:72:af: d9:91:d7:b1:a3:81:70:8c:08:8c:bb:62:49:95:c6: d1:76:f4:37:da:7f:59:6d:21:ea:ed:9b:87:09:1f: 68:63:bf:47:e7:0d:12:19:bd:db:48:95:a7:f0:9b: 16:fe:73:35:23:42:d2:7d:ee:14:98:20:79:8f:67: 4a:c8:23:13:22:62:74:7c:7d:3f:43:f4:49:70:f9: e1:de:e3:0e:ee:2e:a9:ad:6c:53:8e:50:d9:d1:c6: 0b:e2:84:22:ca:e5:d4:ee:74:4e:19:b1:58:4d:26: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:44:E6:1A:8D:64:B8:BD:BB:2A:A0:E0:AD:4E:B0:12:72:15:EA X509v3 Authority Key Identifier: keyid:A7:77:E4:81:8C:A0:DC:C6:38:2E:56:25:70:6F:98:C8:1E:93:07:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p3fkgYyg3MY4LlYlcG-YyB6TByA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF94/5B24A5C8A6C111E98C379E0FC4F9AE02/p3fkgYyg3MY4LlYlcG-YyB6TByA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b5:81:b8:a3:8e:6b:ab:98:65:1a:bb:18:09:33:75:e4:c9: 3a:04:73:af:c3:be:76:42:60:ba:8a:f9:bd:de:6e:dc:47:2e: 33:f0:aa:36:2e:1b:10:bf:7b:18:95:7b:79:93:f0:bc:2e:d2: c2:e9:12:35:ea:b3:a6:1d:e3:4f:46:d6:42:2a:77:61:37:ad: 72:8f:90:51:6c:e6:34:4e:19:53:6f:f1:10:d8:99:a0:eb:9d: f6:c4:d4:6d:17:ed:40:46:d6:46:ab:21:6f:5f:de:23:10:17: 5d:67:24:38:96:78:65:a4:ee:41:5c:df:ed:b6:4c:ca:93:a0: e9:92:36:3c:0b:4a:0b:8b:06:ce:a8:31:4f:af:f6:57:d8:89: a1:39:aa:38:ce:dc:c5:76:20:07:45:ef:82:7e:ce:24:d1:42: 64:39:71:f9:ea:65:4c:d2:82:d7:e1:52:5c:78:f1:a8:78:76: 16:ed:c5:17:49:ca:85:9e:8e:51:2c:4e:d1:5f:e7:54:f2:4a: 9a:7c:e7:3b:04:38:0e:5f:16:a9:ad:b9:9b:d5:92:37:5a:2b: 44:6c:79:34:f0:58:5b:4f:e0:4a:7f:f5:1d:ad:c8:ab:47:92: 6d:eb:75:63:7a:84:c5:c1:16:f5:d8:76:c3:71:88:3b:62:1b: 91:cc:ac:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVGOTQxMTAvBgNVBAUTKEE3NzdFNDgxOENBMERDQzYzODJFNTYyNTcwNkY5OEM4 MUU5MzA3MjAwHhcNMjYwMzI0MTczMjQ5WhcNMjYwMzMxMTczMjQ5WjAYMRYwFAYD VQQDEw02OWMyY2FjMS00NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6iEEYhOs3AFtWsMfoGjXyeiQaQdH4QrT/iYYwm3PoWR1T5QuGjXgb/IMfeP pf+/BGmTAhPYuMFCUwChMh3nqDlHSxMC647KD/Gh2Z00SW0jTgxMPOpjZcCjGpgG UrLPk8sv4f/Nnc2uV2t7jJB1Xprl7nH9UXMyV8p+bEaFRr572NIq6qhigr+m9YBx O1qoGbnbcq/Zkdexo4FwjAiMu2JJlcbRdvQ32n9ZbSHq7ZuHCR9oY79H5w0SGb3b SJWn8JsW/nM1I0LSfe4UmCB5j2dKyCMTImJ0fH0/Q/RJcPnh3uMO7i6prWxTjlDZ 0cYL4oQiyuXU7nROGbFYTSY52QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEkbROYa jWS4vbsqoOCtTrASchXqMB8GA1UdIwQYMBaAFKd35IGMoNzGOC5WJXBvmMgekwcg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY5NC81QjI0QTVDOEE2 QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNNWTRMbFlsY0ctWXlCNlRC eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AzZmtnWXlnM01ZNExsWWxjRy1ZeUI2VEJ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RUY5NC81QjI0QTVDOEE2QzExMUU5OEMzNzlFMEZDNEY5QUUwMi9wM2ZrZ1l5ZzNN WTRMbFlsY0ctWXlCNlRCeUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADbWBuKOOa6uYZRq7GAkzdeTJOgRzr8O+dkJguor5vd5u3EcuM/CqNi4bEL97 GJV7eZPwvC7SwukSNeqzph3jT0bWQip3YTetco+QUWzmNE4ZU2/xENiZoOud9sTU bRftQEbWRqshb1/eIxAXXWckOJZ4ZaTuQVzf7bZMypOg6ZI2PAtKC4sGzqgxT6/2 V9iJoTmqOM7cxXYgB0Xvgn7OJNFCZDlx+eplTNKC1+FSXHjxqHh2Fu3FF0nKhZ6O USxO0V/nVPJKmnznOwQ4Dl8Wqa25m9WSN1orRGx5NPBYW0/gSn/1Ha3Iq0eSbet1 Y3qExcEW9dh2w3GIO2Ibkcys4g== -----END CERTIFICATE-----Generated at Thu Mar 26 16:59:45 2026 by rpki-client