$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: WGSf/ahg6fVoS1/h7VZJC2+a9kV+YatvDgc4XMYQCYY= Subject key identifier: C4:F3:6C:8A:CC:11:5D:5A:16:85:12:19:28:8C:BD:3B:9D:6A:0D:C6 Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 0850 Signing time: Thu 26 Mar 2026 20:40:31 +0000 Manifest this update: Thu 26 Mar 2026 20:40:31 +0000 Manifest next update: Thu 02 Apr 2026 20:40:31 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: +0mgNFxdVBYI5Z6gHsgcOKv5ZpJ6dnY1wo84zS2it0g=) 2: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=) 3: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: Mar 26 20:40:31 2026 GMT Not After : Apr 2 20:40:31 2026 GMT Subject: CN=69c599bf-632e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:b8:14:41:ad:38:fa:11:65:9c:4f:0b:82: aa:84:89:5c:2e:0b:a1:a9:c9:c4:c1:b1:ed:6c:ab: 12:6b:73:7c:d0:a1:7a:6d:1c:b9:c2:1a:70:16:95: 56:15:b4:b7:35:54:d4:9a:c0:d4:e6:a3:e0:6f:9d: 8d:ad:45:c9:77:f9:22:04:a0:b8:b6:57:ce:b4:6c: ba:92:df:39:72:0a:ce:51:be:91:de:44:2e:a2:46: 7b:97:f9:80:d0:e5:26:c1:05:d7:61:3b:34:41:a1: 1c:b0:3d:fd:97:1d:bc:55:ef:e2:34:4c:29:51:ec: 0a:67:24:c8:ce:7f:76:3f:ff:67:3d:4e:73:af:89: 07:1f:50:30:da:33:dc:29:0f:f3:57:12:4f:fb:ab: a3:e6:2e:4d:e1:e8:2d:f1:bf:2d:9f:89:74:1b:ef: c5:01:59:84:15:7b:83:54:7b:c9:55:b5:aa:a5:73: c2:a0:0b:e8:00:fd:f9:38:d8:b3:24:2d:fb:b8:d6: 31:e3:c9:46:82:8d:14:5e:8a:da:ba:cc:fa:ba:1f: 80:4f:ee:68:33:b9:d8:17:9a:0f:f6:b1:0b:0c:e5: da:77:52:85:7d:fd:09:d0:de:df:c4:4c:d2:41:28: 86:43:3c:9b:3f:78:80:85:db:66:8b:03:a9:40:34: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:6C:8A:CC:11:5D:5A:16:85:12:19:28:8C:BD:3B:9D:6A:0D:C6 X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:5f:48:65:e7:92:c3:94:b9:aa:5c:1e:86:1a:74:63:58:53: 90:ba:f1:70:34:b2:f7:30:0f:7c:95:83:dc:94:7c:2e:b7:85: 91:b3:7d:25:3b:cf:97:53:af:93:2d:6a:28:19:db:25:45:59: 9e:14:10:f7:24:f7:d4:50:35:ba:a1:9b:d4:4c:32:30:d9:ba: a1:be:8c:a2:62:a8:72:a8:12:cf:05:3c:1c:e9:e3:dd:9e:e6: 0a:9c:36:b5:17:a2:71:ae:92:99:32:fd:ec:12:54:08:9a:dc: 64:65:0d:0e:57:0f:98:60:51:34:5b:16:c9:1e:52:49:15:c0: 12:bb:08:cc:6c:5e:70:00:bf:4e:12:dc:66:38:4f:04:85:24: 8d:62:96:f7:95:f9:b3:a3:0d:0a:a7:ce:3a:0b:3e:18:fa:ee: ad:4b:24:8a:0f:ee:b4:7d:34:d6:0f:7e:9a:7e:90:90:18:3b: e6:58:e4:0f:b5:75:09:52:10:cd:24:4d:1a:ca:ad:74:01:a6: ed:57:59:b0:f7:b9:e6:33:0b:16:27:5a:5a:9d:3c:a0:b1:d1: a9:78:f6:47:0c:53:d7:d2:22:2e:32:bb:72:fa:c6:f7:fe:0b: 1d:c9:de:89:62:ef:e9:9a:7a:c3:fa:52:3e:2a:9b:2f:e5:8d: 9d:cf:34:f4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjYwMzI2MjA0MDMxWhcNMjYwNDAyMjA0MDMxWjAYMRYwFAYD VQQDEw02OWM1OTliZi02MzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vC4FEGtOPoRZZxPC4KqhIlcLguhqcnEwbHtbKsSa3N80KF6bRy5whpwFpVW FbS3NVTUmsDU5qPgb52NrUXJd/kiBKC4tlfOtGy6kt85cgrOUb6R3kQuokZ7l/mA 0OUmwQXXYTs0QaEcsD39lx28Ve/iNEwpUewKZyTIzn92P/9nPU5zr4kHH1Aw2jPc KQ/zVxJP+6uj5i5N4egt8b8tn4l0G+/FAVmEFXuDVHvJVbWqpXPCoAvoAP35ONiz JC37uNYx48lGgo0UXorausz6uh+AT+5oM7nYF5oP9rELDOXad1KFff0J0N7fxEzS QSiGQzybP3iAhdtmiwOpQDSySwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMTzbIrM EV1aFoUSGSiMvTudag3GMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl19IZeeSw5S5qlwehhp0Y1hTkLrxcDSy9zAPfJWD3JR8LreFkbN9JTvPl1Ov ky1qKBnbJUVZnhQQ9yT31FA1uqGb1EwyMNm6ob6MomKocqgSzwU8HOnj3Z7mCpw2 tReica6SmTL97BJUCJrcZGUNDlcPmGBRNFsWyR5SSRXAErsIzGxecAC/ThLcZjhP BIUkjWKW95X5s6MNCqfOOgs+GPrurUskig/utH001g9+mn6QkBg75ljkD7V1CVIQ zSRNGsqtdAGm7VdZsPe55jMLFidaWp08oLHRqXj2RwxT19IiLjK7cvrG9/4LHcne iWLv6Zp6w/pSPiqbL+WNnc809A== -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:57 2026 by rpki-client