$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft File: ggZKEDz1DwHRlFMAajhs04c5G-Y.mft (raw, json) Hash identifier: XHRRXs4t5d5kuk3cdf086Z4WNYbBMFJEHbpPW3rhY0k= Subject key identifier: 5A:B3:C2:5D:60:1C:C6:E7:4D:51:A7:09:B1:31:92:C2:47:A0:FB:A1 Authority key identifier: 82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 Certificate issuer: /CN=A919CA1B/serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft Manifest number: 026C Signing time: Wed 25 Mar 2026 01:29:45 +0000 Manifest this update: Wed 25 Mar 2026 01:29:45 +0000 Manifest next update: Wed 01 Apr 2026 01:29:45 +0000 Files and hashes: 1: ggZKEDz1DwHRlFMAajhs04c5G-Y.crl (hash: Q4PQ04nMvf0voRws5mhKlrutvESVVBnaT4KnFUniFQQ=) 2: D318E67076CA11EDAA4FE042C4F9AE02.roa (hash: 4BA5NqaVokjWFwQzUDF6z/aNu276DFdfvc22Mig/Z84=) 3: D3B49A1676CA11EDAA4FE042C4F9AE02.roa (hash: feVu+a8lF5HfZtn0mtMt+vLIfU2xl9dTaoTUFZoVD6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CA1B, serialNumber=82064A103CF50F01D19453006A386CD387391BE6 Validity Not Before: Mar 25 01:29:45 2026 GMT Not After : Apr 1 01:29:45 2026 GMT Subject: CN=69c33a89-7c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f8:94:f8:eb:c6:7f:de:6a:ad:ef:b2:62:91: e8:86:5d:6c:df:cf:79:41:46:57:7b:ce:3e:da:b3: cb:83:42:58:11:d9:99:59:e8:0d:79:27:3f:a2:af: 4d:64:ce:43:a8:74:31:b3:b9:39:1a:ab:e6:6f:e3: 57:a6:f0:a6:c8:53:ac:7f:c2:5b:cf:46:78:20:d5: e8:4d:0b:67:5b:7a:28:f7:2a:0a:58:2c:19:05:5c: 99:57:10:a0:8a:8b:22:89:55:1d:c6:29:a5:3f:26: fc:f3:1f:cc:82:52:57:f0:ba:26:a5:eb:7e:35:70: fd:1d:38:14:8f:d2:63:2a:ad:ec:57:a3:32:19:cc: a1:5c:4a:f1:7e:85:87:d8:9d:7e:58:ab:2e:a2:09: ec:b1:81:6c:7f:5f:58:bc:c8:63:39:75:e5:3c:f7: fb:0f:c5:c9:fd:af:f0:b8:49:8f:e5:b2:f8:f5:00: bf:d2:60:9f:25:f5:46:16:07:a1:ac:47:b1:9b:fd: df:f6:65:8f:6a:05:b8:1e:4e:2b:5f:22:37:ef:64: 41:ca:2d:dc:5b:53:a7:38:86:92:88:fb:49:72:fb: 06:70:2d:7e:1d:1f:20:dd:af:cc:74:74:78:29:d5: a4:a2:7b:4a:24:61:bb:03:cc:e2:c2:02:0b:74:05: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B3:C2:5D:60:1C:C6:E7:4D:51:A7:09:B1:31:92:C2:47:A0:FB:A1 X509v3 Authority Key Identifier: keyid:82:06:4A:10:3C:F5:0F:01:D1:94:53:00:6A:38:6C:D3:87:39:1B:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggZKEDz1DwHRlFMAajhs04c5G-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA1B/1447829A76BD11EDBB48947DC4F9AE02/ggZKEDz1DwHRlFMAajhs04c5G-Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:34:6e:c6:11:37:cd:96:5d:e0:f7:ac:ef:35:42:7c:00:7b: 6a:31:5d:bf:77:5b:0c:ee:f4:64:b8:b3:8f:b3:19:d1:18:21: 0f:a2:89:59:23:96:07:f2:e0:b7:03:a0:58:ba:6f:16:10:f5: cc:4b:a0:06:96:d8:9c:db:dc:0e:91:e2:a1:5f:6b:a2:8d:82: d5:75:54:37:b8:89:15:24:e3:bf:1e:1b:8e:d9:d7:0b:33:7e: a4:c8:05:61:71:d9:91:da:cc:ce:40:4a:2e:3b:1f:43:2b:bf: 8b:f0:f7:b3:59:38:44:74:d7:25:cf:7e:fc:ed:5d:17:27:1c: 04:f7:fe:67:c3:ac:0d:b9:f8:71:fc:72:5b:4a:2e:54:64:d4: c8:ff:9d:7d:45:0a:0b:9b:30:8a:6c:2d:bb:30:83:e6:ba:ce: 5e:85:c2:d1:da:7d:d7:2c:a8:f1:35:63:00:f2:06:52:2b:eb: 1e:ce:89:ca:8d:e8:4a:1d:5a:1a:61:3a:51:13:69:e2:d0:11: 34:5f:a0:43:1f:a9:86:98:24:33:1f:32:88:ca:7d:f1:e3:d8: f2:4f:f5:62:a9:94:e2:e1:4a:aa:9c:08:7d:bb:a5:f4:78:9f: 1f:08:78:09:f3:1c:23:29:eb:d9:6e:a7:d5:f1:bb:ff:5d:7f: 08:2c:91:d4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBMUIxMTAvBgNVBAUTKDgyMDY0QTEwM0NGNTBGMDFEMTk0NTMwMDZBMzg2Q0Qz ODczOTFCRTYwHhcNMjYwMzI1MDEyOTQ1WhcNMjYwNDAxMDEyOTQ1WjAYMRYwFAYD VQQDEw02OWMzM2E4OS03YzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/iU+OvGf95qre+yYpHohl1s3895QUZXe84+2rPLg0JYEdmZWegNeSc/oq9N ZM5DqHQxs7k5Gqvmb+NXpvCmyFOsf8Jbz0Z4INXoTQtnW3oo9yoKWCwZBVyZVxCg iosiiVUdximlPyb88x/MglJX8Lompet+NXD9HTgUj9JjKq3sV6MyGcyhXErxfoWH 2J1+WKsuognssYFsf19YvMhjOXXlPPf7D8XJ/a/wuEmP5bL49QC/0mCfJfVGFgeh rEexm/3f9mWPagW4Hk4rXyI372RByi3cW1OnOIaSiPtJcvsGcC1+HR8g3a/MdHR4 KdWkontKJGG7A8ziwgILdAXXGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqzwl1g HMbnTVGnCbExksJHoPuhMB8GA1UdIwQYMBaAFIIGShA89Q8B0ZRTAGo4bNOHORvm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0ExQi8xNDQ3ODI5QTc2 QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3SFJsRk1BYWpoczA0YzVH LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWktFRHoxRHdIUmxGTUFhamhzMDRjNUctWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0ExQi8xNDQ3ODI5QTc2QkQxMUVEQkI0ODk0N0RDNEY5QUUwMi9nZ1pLRUR6MUR3 SFJsRk1BYWpoczA0YzVHLVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPTRuxhE3zZZd4Pes7zVCfAB7ajFdv3dbDO70ZLizj7MZ0RghD6KJWSOWB/Lg twOgWLpvFhD1zEugBpbYnNvcDpHioV9roo2C1XVUN7iJFSTjvx4bjtnXCzN+pMgF YXHZkdrMzkBKLjsfQyu/i/D3s1k4RHTXJc9+/O1dFyccBPf+Z8OsDbn4cfxyW0ou VGTUyP+dfUUKC5swimwtuzCD5rrOXoXC0dp91yyo8TVjAPIGUivrHs6Jyo3oSh1a GmE6URNp4tARNF+gQx+phpgkMx8yiMp98ePY8k/1YqmU4uFKqpwIfbul9HifHwh4 CfMcIynr2W6n1fG7/11/CCyR1A== -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:37 2026 by rpki-client