$ rpki-client -vvf rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft File: gO0g9_wH3gyfPBuOKunNP85u2yE.mft (raw, json) Hash identifier: n4cx46soQAclFqO9bJlVUI1vPRCdY1Wwsvpkjna/sm8= Subject key identifier: 8E:7D:31:C5:F4:92:A0:77:DB:A4:85:9A:65:B4:02:73:3A:CA:29:31 Authority key identifier: 80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 Certificate issuer: /CN=A915BE00/serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Certificate serial: 05E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft Manifest number: 05D8 Signing time: Thu 12 Mar 2026 22:36:55 +0000 Manifest this update: Thu 12 Mar 2026 22:36:55 +0000 Manifest next update: Thu 19 Mar 2026 22:36:55 +0000 Files and hashes: 1: gO0g9_wH3gyfPBuOKunNP85u2yE.crl (hash: adFD87FL6iI/YT0FVqDZlKDZfPrr16oav4c/lvgkeBU=) 2: 972D6576112511F08AC1A549C4F9AE02.roa (hash: cXS9kwOeIytUZvskHO0vNiq0jU3tFCH1tuVFz+pCcZU=) 3: 513D702E112511F081CC4E49C4F9AE02.roa (hash: NH/K1DDvn5aeutjluyX6sIyhLYFZZaLzJygBEDC22+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 22:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1510 (0x5e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915BE00, serialNumber=80ED20F7FC07DE0C9F3C1B8E2AE9CD3FCE6EDB21 Validity Not Before: Mar 12 22:36:55 2026 GMT Not After : Mar 19 22:36:55 2026 GMT Subject: CN=69b34007-ff04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bc:fe:b6:56:96:9d:ad:3d:e5:e5:68:fe:41: 05:10:6f:1a:51:a6:72:01:fa:8a:bd:92:f1:ea:ad: 16:69:2b:7c:7a:63:b0:e9:9f:64:23:b1:27:82:c1: 08:e6:67:19:d1:eb:c1:8f:8b:c6:94:0c:e7:d5:0c: 6f:03:aa:96:88:39:ea:2e:9d:ff:d0:f7:0b:46:24: 65:9d:93:fc:ca:7c:27:9e:9a:45:0a:05:c6:39:95: 4f:cd:cd:9e:68:bf:d8:f2:85:3b:6b:5c:e7:48:0e: b8:2f:31:81:73:ae:6e:b4:89:77:06:ca:95:49:dc: 2b:0c:a3:75:e0:f7:83:3e:a6:85:7a:71:72:29:b1: 05:f8:48:6c:b3:d4:e0:19:23:2b:f7:0f:38:0f:85: f4:57:5c:fb:95:f0:c6:e7:ac:5d:90:a9:6d:a9:d9: 71:2e:95:17:88:81:b9:65:37:b7:ca:94:86:20:e2: c6:28:4f:46:ec:e5:37:19:95:06:8c:af:eb:70:df: c9:7e:75:d7:66:67:12:ce:24:4d:e2:2d:41:30:89: ba:67:95:30:cb:51:72:02:e1:2e:92:a5:0e:d6:5e: 8f:cf:7c:88:28:1e:0d:fe:41:1b:b7:52:82:62:43: e5:0e:4a:37:c7:8a:06:48:7d:76:55:79:01:cb:86: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7D:31:C5:F4:92:A0:77:DB:A4:85:9A:65:B4:02:73:3A:CA:29:31 X509v3 Authority Key Identifier: keyid:80:ED:20:F7:FC:07:DE:0C:9F:3C:1B:8E:2A:E9:CD:3F:CE:6E:DB:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gO0g9_wH3gyfPBuOKunNP85u2yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BE00/3D0B212AF4FD11EBA52CE211C4F9AE02/gO0g9_wH3gyfPBuOKunNP85u2yE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:09:de:ef:61:fd:8f:55:df:06:a9:b2:b2:8f:4c:f9:f1:af: 3d:9c:80:58:3b:91:e0:10:d2:07:45:f9:75:73:fc:d5:b0:13: aa:19:8b:26:ec:cc:be:c5:e1:33:91:60:ff:63:cf:1d:0a:a1: fc:b1:c7:bb:34:a3:98:b9:fe:12:2d:20:00:78:15:41:0b:85: 70:26:56:3e:ee:64:d2:15:6c:1c:5d:07:b0:5f:25:7f:e1:76: 11:03:b4:1d:d2:4c:01:dc:15:9c:7a:ad:8f:9f:f4:d3:1a:b1: 53:b9:ee:f7:c7:ec:a2:81:16:4c:4b:b5:e4:c2:e2:df:11:ee: 62:7b:5e:ca:63:56:21:f8:f7:3b:a1:50:1b:f4:7f:b3:6d:0e: 50:2f:b7:4c:23:75:9f:25:ca:10:72:8d:4f:89:fd:e4:de:07: 9c:13:a2:a9:38:f4:6a:8a:e1:d5:79:0a:44:6d:20:d0:86:69: 59:d9:a6:23:3f:0e:77:1e:8b:15:01:d4:00:ff:a9:7a:d0:9d: 4e:21:86:ac:56:1e:ab:4a:45:a2:c2:ab:6e:04:5d:98:de:64: b0:b2:77:92:24:f7:ab:a3:70:1b:bb:fb:60:4f:c8:82:fa:c4: ee:79:cb:c8:ce:b1:d0:70:85:75:fc:cf:d1:28:aa:70:f0:3c: 5b:cb:9b:d1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUJFMDAxMTAvBgNVBAUTKDgwRUQyMEY3RkMwN0RFMEM5RjNDMUI4RTJBRTlDRDNG Q0U2RURCMjEwHhcNMjYwMzEyMjIzNjU1WhcNMjYwMzE5MjIzNjU1WjAYMRYwFAYD VQQDEw02OWIzNDAwNy1mZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLz+tlaWna095eVo/kEFEG8aUaZyAfqKvZLx6q0WaSt8emOw6Z9kI7EngsEI 5mcZ0evBj4vGlAzn1QxvA6qWiDnqLp3/0PcLRiRlnZP8ynwnnppFCgXGOZVPzc2e aL/Y8oU7a1znSA64LzGBc65utIl3BsqVSdwrDKN14PeDPqaFenFyKbEF+Ehss9Tg GSMr9w84D4X0V1z7lfDG56xdkKltqdlxLpUXiIG5ZTe3ypSGIOLGKE9G7OU3GZUG jK/rcN/JfnXXZmcSziRN4i1BMIm6Z5Uwy1FyAuEukqUO1l6Pz3yIKB4N/kEbt1KC YkPlDko3x4oGSH12VXkBy4bA0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI59McX0 kqB326SFmmW0AnM6yikxMB8GA1UdIwQYMBaAFIDtIPf8B94MnzwbjirpzT/Obtsh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkUwMC8zRDBCMjEyQUY0 RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNneWZQQnVPS3VuTlA4NXUy eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dPMGc5X3dIM2d5ZlBCdU9LdW5OUDg1dTJ5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QkUwMC8zRDBCMjEyQUY0RkQxMUVCQTUyQ0UyMTFDNEY5QUUwMi9nTzBnOV93SDNn eWZQQnVPS3VuTlA4NXUyeUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVAne72H9j1XfBqmyso9M+fGvPZyAWDuR4BDSB0X5dXP81bATqhmLJuzMvsXh M5Fg/2PPHQqh/LHHuzSjmLn+Ei0gAHgVQQuFcCZWPu5k0hVsHF0HsF8lf+F2EQO0 HdJMAdwVnHqtj5/00xqxU7nu98fsooEWTEu15MLi3xHuYnteymNWIfj3O6FQG/R/ s20OUC+3TCN1nyXKEHKNT4n95N4HnBOiqTj0aorh1XkKRG0g0IZpWdmmIz8Odx6L FQHUAP+petCdTiGGrFYeq0pFosKrbgRdmN5ksLJ3kiT3q6NwG7v7YE/IgvrE7nnL yM6x0HCFdfzP0SiqcPA8W8ub0Q== -----END CERTIFICATE-----Generated at Fri Mar 13 20:59:05 2026 by rpki-client