$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft File: gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft (raw, json) Hash identifier: ejaoobTrU0xj9G/k2gxifTtcIHHBogHyWdE0LhFXTg8= Subject key identifier: D2:F1:E7:3B:22:8F:DD:69:D1:DF:B9:55:32:CD:60:F5:90:82:2D:C6 Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 Certificate issuer: /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft Manifest number: 0122 Signing time: Fri 13 Mar 2026 04:49:11 +0000 Manifest this update: Fri 13 Mar 2026 04:49:10 +0000 Manifest next update: Fri 20 Mar 2026 04:49:10 +0000 Files and hashes: 1: gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl (hash: 0gYMDy7T9lmIadfGGIxeX5ZuWcm+L1/LPd+f/HxBT44=) 2: E27B5862777E11EFB3F75352C4F9AE02.roa (hash: WpLf4AaObe+N5I2HIzmO3ifOs3a8b6pFk0v9kjWfhKo=) 3: E3C4A4EE777E11EFB3F75352C4F9AE02.roa (hash: CkipJrZk0lzhAoob2kPQd93c6/y1lAZ0Ra8Fe1utBl0=) 4: E1F3085E777E11EFB3F75352C4F9AE02.roa (hash: tbOGVdr1pGEtRNIPhw+pN+6OYD1Bg4DdAHsAJbGglfo=) 5: 752774D616A111F0B2CDBC72C4F9AE02.roa (hash: iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=) 6: E3105D04777E11EFB3F75352C4F9AE02.roa (hash: nm1Ullm2VIIXw5m4XpAUTvY39qoFFv2kQzceO6Rs4JQ=) 7: 8E00FBF2777E11EF8D0ECC4EC4F9AE02.roa (hash: zpgkPkDvpxrkSLXBoEJusQVoT2JeDQ/RaiKoNpwaUvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 04:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4 Validity Not Before: Mar 13 04:49:10 2026 GMT Not After : Mar 20 04:49:10 2026 GMT Subject: CN=69b39747-048e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f9:74:61:94:35:d3:7c:d9:17:cd:82:f7:2f: 6d:04:d9:6f:7c:c3:87:84:45:e6:e4:b6:f5:d7:1e: ef:63:a8:cb:69:5b:13:f2:71:a7:77:35:ae:54:6c: 8a:43:b8:92:9a:c9:38:17:41:a6:8a:95:9a:5e:88: b1:43:c5:3d:86:56:40:d8:30:0a:66:eb:2b:0c:94: ac:09:7e:af:c6:0f:7f:1b:4a:bb:81:89:a8:60:cf: 62:78:7c:0c:fc:ec:63:cf:2c:44:70:bd:2f:eb:22: 7b:ea:4c:16:d4:6e:97:0f:ab:4a:af:2e:68:06:1c: 0b:ec:43:ce:d1:82:7d:20:91:2b:e4:09:c9:91:ad: 10:2b:e3:37:96:8d:2d:cf:40:dc:43:e5:ab:ce:4a: 1e:12:c1:a4:1b:57:35:1c:72:5b:dc:23:15:58:77: e8:75:d0:f6:5c:bc:bf:3c:0a:10:9b:77:fc:e5:96: b4:11:3b:98:52:5b:97:c6:87:60:5a:57:63:e9:3b: ba:42:55:81:e5:08:ed:7c:43:bc:11:7d:e2:4c:6d: 1f:37:0c:fd:db:4f:db:7c:b4:cc:51:e6:de:5d:a6: 5c:c6:70:cc:09:58:65:e3:95:51:f6:0f:fd:e9:ca: ee:f8:8d:e2:00:06:0c:59:51:f6:b9:00:51:37:4c: 9b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F1:E7:3B:22:8F:DD:69:D1:DF:B9:55:32:CD:60:F5:90:82:2D:C6 X509v3 Authority Key Identifier: keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:31:57:fc:4f:e4:1c:f4:7d:cc:a2:2c:99:0c:70:52:35:ba: 70:44:81:ca:45:6a:b1:2a:5e:51:bb:f3:16:a9:5f:a6:7f:95: 67:a8:04:8f:5c:32:00:bc:cf:d7:ab:61:fa:13:56:7a:7c:38: 26:a3:6e:f8:b8:f0:b7:15:a5:de:d0:9e:0e:48:68:05:94:5a: dc:a8:64:c7:3a:0d:db:5f:6a:53:02:89:cc:e4:7c:cf:c1:5a: 66:e5:1f:38:44:c7:c0:23:e7:2c:16:a6:39:47:1c:d9:5e:f9: 6f:8a:f5:39:b0:19:46:3b:7f:f8:9a:27:e8:89:02:fb:1b:09: 72:f3:b7:54:5f:ba:2b:6a:f6:a0:62:54:b2:40:63:94:c5:f9: 2e:39:69:df:cb:1f:c9:60:4a:9d:88:9d:b0:97:15:70:c8:ab: 88:42:da:c6:c5:09:b4:22:a7:96:d4:00:29:65:13:21:7d:01: b2:02:61:84:d7:9f:da:ff:3a:47:99:c9:d0:a5:c2:91:23:f1: 80:f5:ee:44:86:83:06:45:1a:88:43:8e:f0:c2:a4:26:e7:c3: 2a:26:71:ed:9e:2b:0e:83:4e:75:23:d9:0c:8b:d8:74:66:33: df:d9:03:f4:65:8c:3c:33:27:0a:13:6e:73:b6:3e:bc:1f:79: 27:6b:94:97 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA5MkMxMTAvBgNVBAUTKDgxN0REMzgwMkYyNkU1N0VDRTgyNjVDRTg2MjZGQ0JC OUM2NEU5RDQwHhcNMjYwMzEzMDQ0OTEwWhcNMjYwMzIwMDQ0OTEwWjAYMRYwFAYD VQQDEw02OWIzOTc0Ny0wNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArPl0YZQ103zZF82C9y9tBNlvfMOHhEXm5Lb11x7vY6jLaVsT8nGndzWuVGyK Q7iSmsk4F0GmipWaXoixQ8U9hlZA2DAKZusrDJSsCX6vxg9/G0q7gYmoYM9ieHwM /OxjzyxEcL0v6yJ76kwW1G6XD6tKry5oBhwL7EPO0YJ9IJEr5AnJka0QK+M3lo0t z0DcQ+WrzkoeEsGkG1c1HHJb3CMVWHfoddD2XLy/PAoQm3f85Za0ETuYUluXxodg Wldj6Tu6QlWB5QjtfEO8EX3iTG0fNwz920/bfLTMUebeXaZcxnDMCVhl45VR9g/9 6cru+I3iAAYMWVH2uQBRN0ybYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNLx5zsi j91p0d+5VTLNYPWQgi3GMB8GA1UdIwQYMBaAFIF904AvJuV+zoJlzoYm/LucZOnU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDkyQy9FMkMwNzdERTc3 NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVYN09nbVhPaGliOHU1eGs2 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dYM1RnQzhtNVg3T2dtWE9oaWI4dTV4azZkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDkyQy9FMkMwNzdERTc3NjYxMUVGQjU1RUQyNzlDNEY5QUUwMi9nWDNUZ0M4bTVY N09nbVhPaGliOHU1eGs2ZFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfDFX/E/kHPR9zKIsmQxwUjW6cESBykVqsSpeUbvzFqlfpn+VZ6gEj1wyALzP 16th+hNWenw4JqNu+LjwtxWl3tCeDkhoBZRa3KhkxzoN219qUwKJzOR8z8FaZuUf OETHwCPnLBamOUcc2V75b4r1ObAZRjt/+Jon6IkC+xsJcvO3VF+6K2r2oGJUskBj lMX5Ljlp38sfyWBKnYidsJcVcMiriELaxsUJtCKnltQAKWUTIX0BsgJhhNef2v86 R5nJ0KXCkSPxgPXuRIaDBkUaiEOO8MKkJufDKiZx7Z4rDoNOdSPZDIvYdGYz39kD 9GWMPDMnChNuc7Y+vB95J2uUlw== -----END CERTIFICATE-----Generated at Fri Mar 13 14:33:20 2026 by rpki-client