$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft File: fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft (raw, json) Hash identifier: AnUp4cDPDDNmI0bAABEoDlC5naaCsiiv4YO8Yj0KEmQ= Subject key identifier: 67:56:5C:3A:18:18:14:FE:D2:03:94:8B:55:3C:26:9B:0F:F2:74:A1 Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 Certificate issuer: /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft Manifest number: 0130 Signing time: Sat 21 Mar 2026 04:34:52 +0000 Manifest this update: Sat 21 Mar 2026 04:34:51 +0000 Manifest next update: Sat 28 Mar 2026 04:34:51 +0000 Files and hashes: 1: fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl (hash: tFB1uz0Q5tqQY+Aq4Gx8JvzLxYZ0M2yos4bmNVfScb0=) 2: 99DDC906ABCF11F09186B30FC4F9AE02.roa (hash: C0Cuj4295jMXddurmsuKdybi+VVlCTio/EAvQnqE+Cw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801 Validity Not Before: Mar 21 04:34:51 2026 GMT Not After : Mar 28 04:34:51 2026 GMT Subject: CN=69be1fec-0c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:8f:22:8c:24:95:56:8c:99:59:3f:b7:4c: dd:4a:e6:9a:97:65:eb:d5:a7:b5:cf:c4:89:ff:34: f9:9a:87:69:48:c7:d4:0c:05:11:c8:84:e9:43:6e: 2f:0f:3a:72:de:5f:d7:d3:32:e1:3b:68:f4:87:df: f7:cb:9f:bc:db:1e:71:37:98:c7:47:48:cd:59:70: 0e:41:00:d8:03:78:b1:02:03:05:2b:c5:44:c6:9a: bd:24:6e:2f:37:b8:d3:f1:fa:4f:0a:10:8d:d0:79: 41:58:a2:00:08:31:72:77:0d:83:f5:7a:49:03:6d: 72:dc:e3:bb:e8:30:73:13:1b:e4:71:6b:3e:21:5b: b4:4f:0f:04:ca:c2:40:b4:41:bc:ff:52:97:e5:5c: 85:4b:d8:9c:91:d2:38:0b:84:78:49:3c:07:44:8b: c9:40:4f:3a:03:1c:52:3f:31:22:0c:d0:67:63:b6: 46:a2:6a:53:72:92:0a:e0:2f:05:1a:c7:9e:cb:d4: 28:0b:3e:a1:1d:2d:46:2a:62:38:26:2e:a3:78:90: 2d:ec:af:e3:5a:84:90:2e:9d:b7:7d:35:10:c6:b4: e5:98:71:ad:31:c2:bb:8a:3c:6b:30:04:9e:6c:9f: 52:24:00:40:a8:a4:b6:18:1d:af:67:1b:bb:d8:c2: 5e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:56:5C:3A:18:18:14:FE:D2:03:94:8B:55:3C:26:9B:0F:F2:74:A1 X509v3 Authority Key Identifier: keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6e:0b:ff:f0:07:53:bf:ba:2b:d8:0b:af:cc:6b:8a:0f:d9: 76:b5:da:c9:a0:ca:eb:34:a9:b5:2b:41:b2:d5:d7:e5:17:e0: e3:06:de:a5:51:ef:4e:00:8c:c5:2d:ef:85:c3:5f:bc:c0:33: 30:43:33:86:8e:87:fd:e0:c2:a4:d9:b0:f8:fb:b3:c3:4d:aa: 35:0f:3c:bf:71:2e:6d:20:00:f6:ec:3f:38:09:d9:90:b5:a1: 14:9c:54:45:b7:5d:70:97:1c:1d:bb:bc:71:bb:d1:59:50:9b: bc:b2:26:31:21:fb:ed:e8:05:92:ae:9d:56:0b:03:11:49:69: 7a:ef:fb:68:30:37:d9:ba:a1:48:38:99:fb:1a:20:5a:29:3d: b7:d9:c6:2c:1a:39:1f:98:24:a9:19:5d:3d:52:01:72:93:17: 7c:1c:e5:e0:03:fc:c6:e3:e9:7a:b8:a7:cf:0b:1f:36:1e:6f: 1b:bb:03:d7:d0:d4:64:56:c0:bb:9b:6a:a0:bb:86:d2:48:67: 4b:c3:04:26:13:b6:9e:70:c3:44:22:47:e5:74:9b:f3:c9:02: 20:e3:d4:c3:16:e7:dc:f6:62:1e:bf:16:59:78:27:9e:08:16: 5d:cf:17:84:ff:b0:08:1a:6d:f8:5e:2a:53:56:64:11:2a:04: 5c:da:dd:f1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC Mjk3QkI4MDEwHhcNMjYwMzIxMDQzNDUxWhcNMjYwMzI4MDQzNDUxWjAYMRYwFAYD VQQDEw02OWJlMWZlYy0wYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zSPIowklVaMmVk/t0zdSuaal2Xr1ae1z8SJ/zT5modpSMfUDAURyITpQ24v Dzpy3l/X0zLhO2j0h9/3y5+82x5xN5jHR0jNWXAOQQDYA3ixAgMFK8VExpq9JG4v N7jT8fpPChCN0HlBWKIACDFydw2D9XpJA21y3OO76DBzExvkcWs+IVu0Tw8EysJA tEG8/1KX5VyFS9ickdI4C4R4STwHRIvJQE86AxxSPzEiDNBnY7ZGompTcpIK4C8F Gseey9QoCz6hHS1GKmI4Ji6jeJAt7K/jWoSQLp23fTUQxrTlmHGtMcK7ijxrMASe bJ9SJABAqKS2GB2vZxu72MJeRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGdWXDoY GBT+0gOUi1U8JpsP8nShMB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1 QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkyQS8wQzUyNkRDRTVEREYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdF c1VoSnZrQ1B2WjJ5bDd1QUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb24L//AHU7+6K9gLr8xrig/ZdrXayaDK6zSptStBstXX5Rfg4wbepVHvTgCM xS3vhcNfvMAzMEMzho6H/eDCpNmw+Puzw02qNQ88v3EubSAA9uw/OAnZkLWhFJxU RbddcJccHbu8cbvRWVCbvLImMSH77egFkq6dVgsDEUlpeu/7aDA32bqhSDiZ+xog Wik9t9nGLBo5H5gkqRldPVIBcpMXfBzl4AP8xuPperinzwsfNh5vG7sD19DUZFbA u5tqoLuG0khnS8MEJhO2nnDDRCJH5XSb88kCIOPUwxbn3PZiHr8WWXgnnggWXc8X hP+wCBpt+F4qU1ZkESoEXNrd8Q== -----END CERTIFICATE-----Generated at Sat Mar 21 23:45:00 2026 by rpki-client