$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft File: gCx1H6mENH35yTztuX7ZUalSgoY.mft (raw, json) Hash identifier: xIfxYmHahvbt7U2VZusc8KUish/niCF37FkVOfL89z0= Subject key identifier: 04:07:FE:04:63:AD:DC:00:86:08:87:2A:88:F4:32:29:71:25:7E:44 Authority key identifier: 80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 Certificate issuer: /CN=A911AE8B/serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Certificate serial: 0DC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft Manifest number: 0D9F Signing time: Tue 10 Mar 2026 17:44:37 +0000 Manifest this update: Tue 10 Mar 2026 17:44:36 +0000 Manifest next update: Tue 17 Mar 2026 17:44:36 +0000 Files and hashes: 1: gCx1H6mENH35yTztuX7ZUalSgoY.crl (hash: ee71Obf+n2Ub2TrjSIzVwtzC2kJbIyY+vEIfqKb/ICM=) 2: 749B738AF28F11F095D4F2986B6F56BC.roa (hash: KEcoT61kbpKYaqHWHrY20ixUYzmALZ1uWpR1U4eKh3Y=) 3: 9A735F54EBE611EC82C08A11C4F9AE02.roa (hash: GtQoqjQUirpvjAYOKzxLFZEEug+qoArWCD33oXD/Vgw=) 4: 677F3316E02711E9AB669750C4F9AE02.roa (hash: ULb7MnuSpC+RNv8YH7wBDdLNbPZxB2oAuIx44Pnr+I8=) 5: C5C152D2F28211F0B78FCAB4696F56BC.roa (hash: wI1y6ntLsUWaWyufcxzOljo2NrfksupJylZSnJ7IKS8=) 6: C64AB888F28211F0B78FCAB4696F56BC.roa (hash: 21I1lPOhCB6OoTCDKwmnVs4XWHIQNSrXN0TNGGcuqdQ=) 7: AF2CB5CE101E11ED9FA78415C4F9AE02.roa (hash: ygQB2y8hsTLzbf5SF7WCvYfKunhmdLdBTxW0WpljHeM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Mar 2026 17:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3520 (0xdc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911AE8B, serialNumber=802C751FA984347DF9C93CEDB97ED951A9528286 Validity Not Before: Mar 10 17:44:36 2026 GMT Not After : Mar 17 17:44:36 2026 GMT Subject: CN=69b05884-ff5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b3:af:71:8a:7d:be:e7:e2:35:06:e7:9a:58: d9:65:49:54:82:74:d3:38:52:f9:2b:20:96:81:ff: 8a:20:50:c6:34:90:81:97:0b:26:f4:a2:5e:1d:d8: 53:2f:9e:61:9c:9b:4f:80:44:7a:c1:d0:ab:19:d0: 08:22:12:66:42:46:8a:e7:1a:08:d7:ec:6b:06:38: 77:95:81:9f:b5:60:40:83:d7:5c:fc:f6:45:3b:0b: b5:c1:76:f1:24:41:c6:1c:1c:c9:83:5a:63:a3:dc: 28:9c:b2:8a:4f:cf:74:99:d1:ea:a1:7d:c0:c3:50: c1:80:7b:4f:0a:a0:de:18:e3:54:99:1f:c0:53:9e: 22:8e:33:e5:9f:8a:9d:51:8a:26:e6:34:ba:69:4a: d4:84:03:17:dd:0d:c2:ca:63:a0:fe:3e:33:c3:95: 1a:d6:59:87:bd:37:cb:f8:1e:05:78:4a:25:6b:a2: b6:9b:05:ec:09:b7:bf:bf:32:4d:5e:72:a4:5b:89: 26:68:3e:2e:69:b0:66:d9:c4:5a:c7:45:19:91:02: de:98:2c:bc:12:88:ae:81:a0:75:8f:b7:47:97:b5: 63:3c:a4:95:5a:39:07:47:2d:38:bf:fa:2b:13:67: 36:b0:e1:2b:9a:64:b2:f7:af:34:12:f9:62:a7:a5: 85:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:07:FE:04:63:AD:DC:00:86:08:87:2A:88:F4:32:29:71:25:7E:44 X509v3 Authority Key Identifier: keyid:80:2C:75:1F:A9:84:34:7D:F9:C9:3C:ED:B9:7E:D9:51:A9:52:82:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCx1H6mENH35yTztuX7ZUalSgoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE8B/EC257CC6E02511E991A9774DC4F9AE02/gCx1H6mENH35yTztuX7ZUalSgoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3a:70:51:b7:ed:1e:5a:6a:99:3f:0c:bc:3c:91:8b:31:42: 5b:b6:c7:30:c7:00:da:c7:ea:20:fd:12:80:41:84:b4:51:e5: 8e:53:32:fc:c7:08:99:27:a7:ba:96:37:fb:95:1e:c1:a8:2d: 03:c8:b7:7e:f6:94:62:75:0c:5e:f0:53:fb:d4:e6:ef:14:68: d1:8e:62:a0:38:e5:8c:f6:02:f1:be:09:d2:4a:6b:c3:7b:12: e6:a5:04:61:be:41:eb:78:a7:27:b5:5c:df:36:e3:49:57:a2: 81:16:4d:3e:19:86:2b:89:39:36:22:0f:61:be:c4:12:1a:7a: a5:cb:c2:d7:9a:6e:92:44:c4:e3:5d:f8:4c:26:fd:24:6c:40: 6d:07:8c:30:2f:e5:d5:46:d7:34:74:02:68:e1:dc:62:d1:f3: 96:b9:ad:0a:83:87:7c:1d:f6:fc:57:87:34:a7:b8:53:6c:f8: e2:85:46:e9:23:d2:9f:fd:9d:da:be:8b:fe:bd:ec:cc:93:37: 6d:ec:1e:bd:d3:93:47:69:b6:b1:12:8e:35:6a:71:54:8c:d6: 96:af:22:03:8b:87:33:03:a1:ad:a2:ea:24:14:a0:fb:ea:03: 18:a8:0e:ae:11:21:df:93:80:7d:84:b0:86:24:a7:bf:47:6b: da:fc:63:be -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUFFOEIxMTAvBgNVBAUTKDgwMkM3NTFGQTk4NDM0N0RGOUM5M0NFREI5N0VEOTUx QTk1MjgyODYwHhcNMjYwMzEwMTc0NDM2WhcNMjYwMzE3MTc0NDM2WjAYMRYwFAYD VQQDEw02OWIwNTg4NC1mZjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrOvcYp9vufiNQbnmljZZUlUgnTTOFL5KyCWgf+KIFDGNJCBlwsm9KJeHdhT L55hnJtPgER6wdCrGdAIIhJmQkaK5xoI1+xrBjh3lYGftWBAg9dc/PZFOwu1wXbx JEHGHBzJg1pjo9wonLKKT890mdHqoX3Aw1DBgHtPCqDeGONUmR/AU54ijjPln4qd UYom5jS6aUrUhAMX3Q3CymOg/j4zw5Ua1lmHvTfL+B4FeEola6K2mwXsCbe/vzJN XnKkW4kmaD4uabBm2cRax0UZkQLemCy8EoiugaB1j7dHl7VjPKSVWjkHRy04v/or E2c2sOErmmSy9680Evlip6WFcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQH/gRj rdwAhgiHKoj0MilxJX5EMB8GA1UdIwQYMBaAFIAsdR+phDR9+ck87bl+2VGpUoKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUU4Qi9FQzI1N0NDNkUw MjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5IMzV5VHp0dVg3WlVhbFNn b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dDeDFINm1FTkgzNXlUenR1WDdaVWFsU2dvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QUU4Qi9FQzI1N0NDNkUwMjUxMUU5OTFBOTc3NERDNEY5QUUwMi9nQ3gxSDZtRU5I MzV5VHp0dVg3WlVhbFNnb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnTpwUbftHlpqmT8MvDyRizFCW7bHMMcA2sfqIP0SgEGEtFHljlMy/McImSen upY3+5UewagtA8i3fvaUYnUMXvBT+9Tm7xRo0Y5ioDjljPYC8b4J0kprw3sS5qUE Yb5B63inJ7Vc3zbjSVeigRZNPhmGK4k5NiIPYb7EEhp6pcvC15pukkTE4134TCb9 JGxAbQeMMC/l1UbXNHQCaOHcYtHzlrmtCoOHfB32/FeHNKe4U2z44oVG6SPSn/2d 2r6L/r3szJM3bewevdOTR2m2sRKONWpxVIzWlq8iA4uHMwOhraLqJBSg++oDGKgO rhEh35OAfYSwhiSnv0dr2vxjvg== -----END CERTIFICATE-----Generated at Thu Mar 12 15:24:15 2026 by rpki-client