$ rpki-client -vvf rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft File: rTRF20IBCxIVpJ5CfxrnQA14i_s.mft (raw, json) Hash identifier: n+G0eektqGnZ5AtyEDu7iDvoWx+peYEtUUO1yUo23jU= Subject key identifier: 1F:18:36:EA:FB:EF:EE:0C:6E:55:31:B7:18:A1:D7:82:2D:C3:9D:79 Authority key identifier: AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB Certificate issuer: /CN=A9155647/serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft Manifest number: 01D8 Signing time: Wed 11 Mar 2026 03:45:42 +0000 Manifest this update: Wed 11 Mar 2026 03:45:41 +0000 Manifest next update: Wed 18 Mar 2026 03:45:41 +0000 Files and hashes: 1: rTRF20IBCxIVpJ5CfxrnQA14i_s.crl (hash: oMmYUiG6uuVQUufrC78rWgpQZs3knzVAxZJlHVXfcZk=) 2: D1825C02598911F0848EA472C4F9AE02.roa (hash: AXuNEQhDZvnFZqkaW+L9U8CneqM+5lU+Ywjwx02JDnY=) 3: CD9372E687F811F0B5B27636C4F9AE02.roa (hash: 2yKTAZYnZIzr1D5gDTXkNr4QqK0s9dbV2MakqBfyRC0=) 4: 5F9F86C08ED911F0B33B5A6DC4F9AE02.roa (hash: QJ8mn8VYu6yJWP7YvnwUy8wxKdhWELvCW8UZdzTVujk=) 5: 1B9CFE48055F11F0861EE119C4F9AE02.roa (hash: s+Ins2dxN86QTHjcB8YXqLtQtxtHR/M8caRS+c+QI7U=) 6: 70A100D08ED811F09914A14BC4F9AE02.roa (hash: ZzS3J/pGs2pu0M1LkdWlVtHcUR8Uu5S0AjyVdXZhGUA=) 7: C2412F50EED211F08AE562A4736F56BC.roa (hash: 3nZXBR8iljeWoGFytP3w3yIxID7181RGS5MClxCp+Kc=) 8: 7C484C3A437F11F0BD1A1C23C4F9AE02.roa (hash: GJyC3nX3iAMpGyl1mqqZSyTlbVSzRpyiarSp6OZBQCA=) 9: A562D2B20C4111F1A1A27D5E0E3D8C67.roa (hash: VQhZgOQPriWRYMgMvVif5slfnGGWce5qBIKL9jfU4zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 03:45:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155647, serialNumber=AD3445DB42010B1215A49E427F1AE7400D788BFB Validity Not Before: Mar 11 03:45:41 2026 GMT Not After : Mar 18 03:45:41 2026 GMT Subject: CN=69b0e566-291c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:10:3e:f4:cb:42:48:4f:59:63:f8:ee:d4:c8: da:1a:60:9a:d3:22:91:4d:1b:3a:fc:d1:4d:7a:d4: 4c:bc:15:dd:dc:a3:e8:b4:27:e9:01:68:5e:01:80: 5a:82:bc:a7:ca:f2:b4:7c:1e:a3:cc:96:03:ec:3d: 5f:a2:3f:f9:ae:f1:93:a2:0f:b8:11:12:61:74:d3: 6b:1f:6c:fd:bf:45:e6:39:72:61:04:ce:65:d6:9e: ac:cd:97:de:ba:49:29:46:ed:35:2f:99:90:a3:26: 16:5c:ef:5b:71:79:ed:be:5a:19:40:64:35:7c:c9: 43:30:f7:92:9b:74:3d:d9:dc:ec:9f:d2:16:12:95: f2:c8:df:5e:24:df:91:67:6f:69:2e:a7:9e:ae:d0: 86:a2:f1:3b:7f:ed:b2:bf:4b:70:ca:03:24:63:29: 19:80:b5:40:8c:01:70:30:44:cf:92:61:1e:0b:b7: 5c:78:6d:75:a4:09:18:4b:90:16:fa:30:26:a4:a0: 74:9f:91:ae:39:95:69:c0:91:c8:3a:44:3b:a3:e5: dd:2e:95:aa:06:d6:18:38:27:0d:ca:54:ce:be:b0: 1e:93:3c:7e:3b:d5:a0:00:67:33:52:ac:45:d6:aa: 19:77:e4:1a:88:53:76:7c:94:4e:09:9e:53:af:ac: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:18:36:EA:FB:EF:EE:0C:6E:55:31:B7:18:A1:D7:82:2D:C3:9D:79 X509v3 Authority Key Identifier: keyid:AD:34:45:DB:42:01:0B:12:15:A4:9E:42:7F:1A:E7:40:0D:78:8B:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rTRF20IBCxIVpJ5CfxrnQA14i_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155647/905C1046F36F11EE9972EB79C4F9AE02/rTRF20IBCxIVpJ5CfxrnQA14i_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:f5:e9:f1:01:d5:35:cf:10:56:42:c1:fe:82:8b:3e:93:2f: 59:4f:03:74:89:6b:f3:3a:4b:65:70:5d:52:ee:da:32:d5:78: 00:d3:b1:a3:a1:1b:8f:f9:68:30:46:66:07:da:f3:aa:55:e0: 70:20:0e:50:57:80:27:8a:bd:93:2b:1d:2e:0b:fe:b0:52:98: 22:7e:97:8e:40:45:7c:55:4a:31:e0:a0:b7:53:3a:59:be:62: 7b:fa:42:5d:0d:91:fa:a1:b2:bc:c9:27:7c:5f:06:e6:2f:2f: a8:e7:f5:cb:b5:00:2f:be:94:86:8c:c4:37:71:8a:13:44:57: 15:33:4c:48:fc:bc:0a:e2:a7:20:c0:e3:0b:70:3d:26:2a:e4: dd:0b:d2:c5:af:e0:bf:09:01:75:f6:62:88:3f:54:5f:82:0c: 78:23:ef:94:61:0f:9e:4f:50:f0:2a:ff:42:e6:da:d9:2f:e9: 13:41:ee:1f:5e:07:e1:2f:08:54:3b:c1:03:43:9f:1f:7a:6b: a8:e6:77:e0:50:9c:0c:e2:e8:f3:f7:0a:1a:79:66:f7:cc:24: e5:ea:8b:b2:fb:b8:98:9a:02:20:99:dc:d7:0d:13:50:d1:39: e1:60:c8:44:a4:73:b6:8d:11:c6:bc:ee:ac:69:2c:4e:65:72: 49:29:15:35 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NDcxMTAvBgNVBAUTKEFEMzQ0NURCNDIwMTBCMTIxNUE0OUU0MjdGMUFFNzQw MEQ3ODhCRkIwHhcNMjYwMzExMDM0NTQxWhcNMjYwMzE4MDM0NTQxWjAYMRYwFAYD VQQDEw02OWIwZTU2Ni0yOTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRA+9MtCSE9ZY/ju1MjaGmCa0yKRTRs6/NFNetRMvBXd3KPotCfpAWheAYBa grynyvK0fB6jzJYD7D1foj/5rvGTog+4ERJhdNNrH2z9v0XmOXJhBM5l1p6szZfe ukkpRu01L5mQoyYWXO9bcXntvloZQGQ1fMlDMPeSm3Q92dzsn9IWEpXyyN9eJN+R Z29pLqeertCGovE7f+2yv0twygMkYykZgLVAjAFwMETPkmEeC7dceG11pAkYS5AW +jAmpKB0n5GuOZVpwJHIOkQ7o+XdLpWqBtYYOCcNylTOvrAekzx+O9WgAGczUqxF 1qoZd+QaiFN2fJROCZ5Tr6ykzQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8YNur7 7+4MblUxtxih14Itw515MB8GA1UdIwQYMBaAFK00RdtCAQsSFaSeQn8a50ANeIv7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY0Ny85MDVDMTA0NkYz NkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4SVZwSjVDZnhyblFBMTRp X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JUUkYyMElCQ3hJVnBKNUNmeHJuUUExNGlfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY0Ny85MDVDMTA0NkYzNkYxMUVFOTk3MkVCNzlDNEY5QUUwMi9yVFJGMjBJQkN4 SVZwSjVDZnhyblFBMTRpX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAd/Xp8QHVNc8QVkLB/oKLPpMvWU8DdIlr8zpLZXBdUu7aMtV4ANOxo6Ebj/lo MEZmB9rzqlXgcCAOUFeAJ4q9kysdLgv+sFKYIn6XjkBFfFVKMeCgt1M6Wb5ie/pC XQ2R+qGyvMknfF8G5i8vqOf1y7UAL76UhozEN3GKE0RXFTNMSPy8CuKnIMDjC3A9 Jirk3QvSxa/gvwkBdfZiiD9UX4IMeCPvlGEPnk9Q8Cr/Quba2S/pE0HuH14H4S8I VDvBA0OfH3prqOZ34FCcDOLo8/cKGnlm98wk5eqLsvu4mJoCIJnc1w0TUNE54WDI RKRzto0RxrzurGksTmVySSkVNQ== -----END CERTIFICATE-----Generated at Thu Mar 12 23:55:56 2026 by rpki-client