$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: cVSJsgK0KtKxmGHzXDplF5+TGisHuR6xekGmsY8e/84= Subject key identifier: EC:04:4F:DF:3A:07:CC:3E:59:FD:DC:F3:9E:1C:E1:A0:19:E7:2E:70 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 018B Signing time: Wed 25 Mar 2026 03:56:45 +0000 Manifest this update: Wed 25 Mar 2026 03:56:45 +0000 Manifest next update: Wed 01 Apr 2026 03:56:45 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: TtAjSEqgmcuY9OuZSlKqC4D6vGQlXFO+POIgT5KTktw=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: ZuKywPCk/DkKyCpqoZBfyKV9L6QxTxAVdxmCPTDjvq8=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: PS353luWU5EZRXf1V5KYpvKbmWd2t8tkTqJLhBlN/tY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Mar 25 03:56:45 2026 GMT Not After : Apr 1 03:56:45 2026 GMT Subject: CN=69c35cfd-1fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c4:be:bb:0b:a4:f9:f1:3e:35:a5:e4:b6:dd: 00:d8:8f:0a:b5:5b:7d:d4:b7:55:60:ca:e0:26:31: 96:ba:89:7c:86:f0:22:54:3b:9c:65:89:d5:0c:e6: 8f:df:ae:5f:ef:3d:5d:6f:ae:41:ad:67:af:fc:19: a2:16:5c:dc:02:25:cb:ee:4e:5c:55:c8:df:fc:ee: 68:fa:2d:10:23:8a:46:6b:d3:6c:eb:4d:1e:9f:bd: 5a:fb:35:ef:0d:3a:06:f3:e7:0d:3d:31:56:99:95: bd:0e:0d:ec:a6:dc:41:4c:18:8a:05:ab:32:fa:de: b3:35:db:3b:31:95:4a:13:9a:cb:77:55:1b:60:55: 13:aa:c8:fe:a0:d5:1d:db:db:7c:0a:82:98:62:b3: b0:03:cf:41:97:77:b2:6e:66:02:de:4d:6d:c6:78: 2a:08:d5:98:d8:83:e5:65:47:12:3d:d1:d4:3f:6f: a8:c7:05:b7:92:62:17:e1:d5:68:56:e8:53:e5:9f: 1c:60:f7:18:54:fc:6c:13:3d:12:e1:26:0e:e2:38: 62:5a:e6:a6:6f:b9:9d:fa:b6:5f:4d:4e:a5:ec:d1: 9d:12:1e:3a:9f:a1:8b:b6:7b:3f:dc:a1:ef:f5:69: cb:6e:bf:67:fc:27:1b:df:98:c1:8e:0f:e0:d7:45: 94:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:04:4F:DF:3A:07:CC:3E:59:FD:DC:F3:9E:1C:E1:A0:19:E7:2E:70 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:de:15:c0:a7:bb:99:d5:7c:31:14:ae:93:e7:dd:85:7a:1a: 0a:92:83:3a:24:f5:ae:7c:89:24:b2:1c:2d:1f:de:5e:8a:c1: 37:18:7d:fa:0a:cc:0f:7c:12:97:60:77:46:94:7e:aa:f4:30: af:b6:f7:e7:2a:c1:a4:f5:cf:ee:c9:87:18:6a:0e:1d:eb:ed: 55:4b:29:9a:e5:4d:e8:a1:1f:96:5e:db:3e:7d:c4:4e:7d:eb: 83:e2:33:a7:96:65:60:d2:66:5f:9c:63:57:c2:a0:e3:0c:8b: 3c:21:de:5b:da:ce:b8:2d:4f:df:1f:72:f8:50:99:79:b8:83: 45:a9:c5:d6:1f:89:74:01:83:7f:69:0d:10:b7:5e:e5:10:22: 37:a6:e6:cb:7e:0b:7a:dd:a8:88:4a:fd:e6:19:61:98:6f:05: b2:3c:09:69:b6:1e:9f:c4:35:f9:61:04:41:f3:0f:65:cc:23: 4f:97:e2:55:9a:c9:fb:35:bf:16:47:8c:25:9f:32:ea:4e:1a: 75:2d:1a:c9:6c:3f:ff:08:4a:63:11:5f:45:f3:28:32:f6:c9: 11:4b:1f:82:c6:a1:ac:ff:44:44:64:79:13:c0:20:8d:2d:2c: c7:5b:3d:39:43:a2:05:aa:35:ef:12:80:53:ec:0b:43:3b:2d: 6f:bd:c9:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjYwMzI1MDM1NjQ1WhcNMjYwNDAxMDM1NjQ1WjAYMRYwFAYD VQQDEw02OWMzNWNmZC0xZmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMS+uwuk+fE+NaXktt0A2I8KtVt91LdVYMrgJjGWuol8hvAiVDucZYnVDOaP 365f7z1db65BrWev/BmiFlzcAiXL7k5cVcjf/O5o+i0QI4pGa9Ns600en71a+zXv DToG8+cNPTFWmZW9Dg3sptxBTBiKBasy+t6zNds7MZVKE5rLd1UbYFUTqsj+oNUd 29t8CoKYYrOwA89Bl3eybmYC3k1txngqCNWY2IPlZUcSPdHUP2+oxwW3kmIX4dVo VuhT5Z8cYPcYVPxsEz0S4SYO4jhiWuamb7md+rZfTU6l7NGdEh46n6GLtns/3KHv 9WnLbr9n/Ccb35jBjg/g10WU+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOwET986 B8w+Wf3c854c4aAZ5y5wMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcd4VwKe7mdV8MRSuk+fdhXoaCpKDOiT1rnyJJLIcLR/eXorBNxh9+grMD3wS l2B3RpR+qvQwr7b35yrBpPXP7smHGGoOHevtVUspmuVN6KEfll7bPn3ETn3rg+Iz p5ZlYNJmX5xjV8Kg4wyLPCHeW9rOuC1P3x9y+FCZebiDRanF1h+JdAGDf2kNELde 5RAiN6bmy34Let2oiEr95hlhmG8FsjwJabYen8Q1+WEEQfMPZcwjT5fiVZrJ+zW/ FkeMJZ8y6k4adS0ayWw//whKYxFfRfMoMvbJEUsfgsahrP9ERGR5E8AgjS0sx1s9 OUOiBao17xKAU+wLQzstb73J5g== -----END CERTIFICATE-----Generated at Thu Mar 26 21:40:46 2026 by rpki-client