$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft File: pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json) Hash identifier: haDDVrwwBAKxdc5dZ1hf5PcXtAFz0SxRfsupMeU+yDo= Subject key identifier: FD:93:57:90:74:13:B0:B9:18:FC:54:6C:C7:10:E2:23:63:08:46:19 Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 Certificate issuer: /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Certificate serial: 0E40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft Manifest number: 0E04 Signing time: Tue 24 Mar 2026 17:45:09 +0000 Manifest this update: Tue 24 Mar 2026 17:45:09 +0000 Manifest next update: Tue 31 Mar 2026 17:45:09 +0000 Files and hashes: 1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: dVMdAzulcaOa+kSjerNIfoz84BwDD3EhJ7rsWpMOono=) 2: 13C099EE366711F0B5877C84C4F9AE02.roa (hash: McIgsASpGkGyxbUUg/oDEhbFGdsxWQYiizXWy8fJF2Q=) 3: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: b7gH2EkdhzRI0Z6FhasKunf9OM1B3XL5SRlAsaUsy5U=) 4: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: ltbYxws7Rw/rSPye0/WcjsDqeiqLOxoMXvKf46ZTVAo=) 5: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: AaMW+LlCOA85lK0XL2X+XTiK4VwW2KOVSnP7ROjHAcg=) 6: 8E8D88CC7FF911F09985006DC4F9AE02.roa (hash: h4mHAhf5A9DDgDOZFjKTZuq9CuZjmVVongMunDCFuGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41 Validity Not Before: Mar 24 17:45:09 2026 GMT Not After : Mar 31 17:45:09 2026 GMT Subject: CN=69c2cda5-1364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:91:7d:65:40:39:11:22:f1:7f:c1:18:7e: 6b:c3:9f:b2:48:97:dd:dd:e5:85:2d:21:38:70:30: 3b:04:8c:ee:0f:81:3f:27:b3:0b:1c:50:01:4a:e6: cd:38:0d:2e:8e:b0:ed:03:27:0f:63:48:d5:a5:59: f6:b6:db:46:7f:21:40:e4:62:17:0c:a9:e6:4b:de: 75:e2:b9:a4:35:d9:4c:b7:61:65:00:0e:68:a0:4c: b7:af:f2:49:4e:2c:5b:c9:88:94:aa:15:d3:31:69: 8f:1e:40:a0:9b:c3:34:04:23:e1:ef:bf:ec:14:0a: ce:99:d5:42:63:bd:a5:4a:3b:a9:dd:0c:b2:e4:9d: dc:bc:b9:bf:37:11:37:72:85:3f:ac:bb:65:e2:02: b6:d0:51:b7:e1:ba:44:51:99:ef:49:20:79:bf:bd: 95:42:39:dc:42:5d:ad:b9:a4:65:00:45:a3:aa:7c: 8a:87:2c:24:07:83:4f:05:69:b7:a8:f4:3b:56:34: 94:fb:ad:a3:62:93:e4:9c:64:e4:80:56:a4:51:d8: 58:5e:02:92:c7:c5:48:2b:6b:ce:f4:58:ef:c7:1d: 7f:a4:24:31:bc:95:ba:b3:f4:15:fa:f2:4f:51:3b: 24:40:22:3d:e9:93:16:0a:04:4f:51:16:e1:a8:9f: f9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:93:57:90:74:13:B0:B9:18:FC:54:6C:C7:10:E2:23:63:08:46:19 X509v3 Authority Key Identifier: keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:97:9d:22:e3:d0:2e:1b:9c:a4:7f:44:47:57:ff:8d:eb: 27:b9:97:b6:15:01:77:f7:0f:e5:7d:a4:72:62:77:c7:97:a4: 3e:1a:80:1c:51:c0:17:00:cd:fb:07:f9:68:75:87:f1:87:4e: 28:88:cd:e7:eb:ef:99:85:0e:92:5f:59:f8:21:ad:2c:5d:0a: 64:3c:55:f4:71:18:5d:02:fd:aa:6a:99:5d:af:2b:d2:2d:b1: 73:44:95:ca:79:be:5b:a9:51:ab:7a:21:cc:5e:51:05:e9:c5: ab:9e:80:fe:aa:79:9c:19:a5:bc:54:32:a6:2f:e6:4a:69:a2: 34:18:61:3f:63:52:ab:c9:c4:6d:3c:ca:bd:d2:20:87:06:9a: 65:12:ad:36:bc:75:d5:e2:f4:48:fc:16:8d:12:06:f3:51:00: eb:45:94:51:ac:91:f0:ba:42:49:2c:04:7b:07:c1:6d:9d:a3: c8:64:60:b5:fe:32:f6:c8:34:b2:1a:3b:45:c8:59:52:f3:02: dc:b5:04:31:47:5e:82:77:41:ff:ef:53:57:73:04:5c:38:b3: 5b:5b:81:78:6d:43:b1:6c:53:48:5a:b5:12:5b:85:a8:3d:8b: 81:be:53:c7:6f:48:7f:ab:b7:a4:1e:60:b8:0a:06:5f:37:9a: c7:c8:82:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1 MTJBMzNGNDEwHhcNMjYwMzI0MTc0NTA5WhcNMjYwMzMxMTc0NTA5WjAYMRYwFAYD VQQDEw02OWMyY2RhNS0xMzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq6RfWVAOREi8X/BGH5rw5+ySJfd3eWFLSE4cDA7BIzuD4E/J7MLHFABSubN OA0ujrDtAycPY0jVpVn2tttGfyFA5GIXDKnmS9514rmkNdlMt2FlAA5ooEy3r/JJ TixbyYiUqhXTMWmPHkCgm8M0BCPh77/sFArOmdVCY72lSjup3Qyy5J3cvLm/NxE3 coU/rLtl4gK20FG34bpEUZnvSSB5v72VQjncQl2tuaRlAEWjqnyKhywkB4NPBWm3 qPQ7VjSU+62jYpPknGTkgFakUdhYXgKSx8VIK2vO9Fjvxx1/pCQxvJW6s/QV+vJP UTskQCI96ZMWCgRPURbhqJ/5vQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP2TV5B0 E7C5GPxUbMcQ4iNjCEYZMB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3 ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD SEhqSWdwRzczMXhSS2pQMEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARFaXnSLj0C4bnKR/REdX/43rJ7mXthUBd/cP5X2kcmJ3x5ekPhqAHFHAFwDN +wf5aHWH8YdOKIjN5+vvmYUOkl9Z+CGtLF0KZDxV9HEYXQL9qmqZXa8r0i2xc0SV ynm+W6lRq3ohzF5RBenFq56A/qp5nBmlvFQypi/mSmmiNBhhP2NSq8nEbTzKvdIg hwaaZRKtNrx11eL0SPwWjRIG81EA60WUUayR8LpCSSwEewfBbZ2jyGRgtf4y9sg0 sho7RchZUvMC3LUEMUdegndB/+9TV3MEXDizW1uBeG1DsWxTSFq1EluFqD2Lgb5T x29If6u3pB5guAoGXzeax8iCSg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:45:15 2026 by rpki-client