$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft File: fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json) Hash identifier: b/8K9nLqTs9gIsCo1VFrWlUFWwS2wJFLs7B4mWRzAkk= Subject key identifier: DB:0B:7F:31:C5:FD:92:41:5A:96:D7:F3:76:D4:9E:79:C1:FA:47:FE Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 Certificate issuer: /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft Manifest number: 0843 Signing time: Mon 02 Mar 2026 11:38:58 +0000 Manifest this update: Mon 02 Mar 2026 11:38:58 +0000 Manifest next update: Mon 09 Mar 2026 11:38:58 +0000 Files and hashes: 1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: rwNhlJMUCDyeFzITVR3b8hkz++3/ICsyCAat5icfB5Q=) 2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=) 3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8 Validity Not Before: Mar 2 11:38:58 2026 GMT Not After : Mar 9 11:38:58 2026 GMT Subject: CN=69a576d2-8e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:47:0c:ab:61:58:88:9c:00:4c:80:ab:9a:7c: a4:59:1a:d8:ed:f7:ad:69:0f:1a:6a:d0:f7:eb:af: 18:f2:c9:5f:72:05:29:d6:40:e4:f7:80:60:e4:9d: 60:7f:e7:9d:35:2b:89:84:37:d7:b5:78:db:ee:7b: 0f:44:3a:5d:f0:ef:6c:c1:16:56:23:21:ee:cf:ea: 9c:f0:84:1a:b6:c6:d9:47:d2:90:cb:41:59:2b:f0: ad:27:9a:ef:13:00:5e:61:ec:8d:16:dc:bf:6d:49: b8:69:68:a6:8e:df:59:48:e3:05:b0:fd:1c:b2:8d: d8:c9:56:34:a9:e7:2d:fe:49:ab:a1:da:9a:72:02: 1c:23:18:5e:eb:dc:f1:61:a3:48:db:ac:2d:88:58: ac:75:52:89:59:ff:f3:9c:5c:6e:71:9e:7b:c3:0f: 57:85:57:9b:be:db:20:a3:81:b9:ca:30:8a:2d:3c: 6c:c5:7f:67:6c:7e:01:03:3c:ab:a5:5c:6b:ad:cd: 59:91:1b:46:a6:de:bc:10:de:08:96:eb:c4:2e:3e: 30:27:e5:94:b3:23:12:a9:c5:d7:22:83:55:43:2c: bb:6c:5e:24:e2:da:d0:47:9d:4a:bc:e1:b4:f1:13: 66:58:c8:6e:ea:82:ed:36:35:13:84:44:27:64:13: c7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0B:7F:31:C5:FD:92:41:5A:96:D7:F3:76:D4:9E:79:C1:FA:47:FE X509v3 Authority Key Identifier: keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:44:4b:ac:4d:1f:a0:61:e7:fd:bb:b8:fb:4d:c6:a5:cc:41: 00:4d:0e:91:9f:83:cf:2a:9c:be:47:4d:91:53:16:59:18:5c: 82:b1:41:5d:f2:35:5a:50:4f:0e:e6:09:fc:82:74:82:69:cc: ea:cd:d4:22:ff:43:b9:c4:12:7e:c1:7f:15:54:9b:bd:52:91: 2e:08:ba:16:f3:0c:f4:f8:8a:e9:db:15:2a:a1:2b:c4:9e:6f: 64:14:73:0a:f6:9c:dc:6f:1f:8c:59:04:05:ce:91:99:67:c1: e6:5f:9c:24:ca:2b:eb:ba:40:85:61:25:f6:07:79:7e:69:f1: 4f:de:80:21:bd:14:d7:40:47:38:76:25:7a:1f:ef:cd:17:12: db:96:50:7f:78:ed:09:7f:e4:42:f3:cd:ea:8b:b4:81:65:51: ff:58:5f:a6:59:91:3a:ab:b5:0e:43:ea:4a:47:dc:6d:be:bf: 94:8d:62:df:60:7e:57:d8:fb:3a:ee:58:4c:92:1d:ae:30:af: d2:8a:60:04:9c:e2:f5:56:fd:8b:ec:8a:52:bf:9f:46:2f:d4: 70:b3:e9:94:2c:aa:1a:59:36:00:83:5d:27:6f:71:a8:cd:e8: 46:fd:10:52:38:ac:78:72:64:5e:4f:81:c6:78:27:12:e0:9f: 94:dd:3b:f7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG MUIzOUJGRDgwHhcNMjYwMzAyMTEzODU4WhcNMjYwMzA5MTEzODU4WjAYMRYwFAYD VQQDEw02OWE1NzZkMi04ZTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA50cMq2FYiJwATICrmnykWRrY7fetaQ8aatD3668Y8slfcgUp1kDk94Bg5J1g f+edNSuJhDfXtXjb7nsPRDpd8O9swRZWIyHuz+qc8IQatsbZR9KQy0FZK/CtJ5rv EwBeYeyNFty/bUm4aWimjt9ZSOMFsP0cso3YyVY0qect/kmrodqacgIcIxhe69zx YaNI26wtiFisdVKJWf/znFxucZ57ww9XhVebvtsgo4G5yjCKLTxsxX9nbH4BAzyr pVxrrc1ZkRtGpt68EN4IluvELj4wJ+WUsyMSqcXXIoNVQyy7bF4k4trQR51KvOG0 8RNmWMhu6oLtNjUThEQnZBPHgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNsLfzHF /ZJBWpbX83bUnnnB+kf+MB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2 OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu SGxVaFZYdXdPZ0R4czV2OWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYERLrE0foGHn/bu4+03GpcxBAE0OkZ+DzyqcvkdNkVMWWRhcgrFBXfI1WlBP DuYJ/IJ0gmnM6s3UIv9DucQSfsF/FVSbvVKRLgi6FvMM9PiK6dsVKqErxJ5vZBRz Cvac3G8fjFkEBc6RmWfB5l+cJMor67pAhWEl9gd5fmnxT96AIb0U10BHOHYleh/v zRcS25ZQf3jtCX/kQvPN6ou0gWVR/1hfplmROqu1DkPqSkfcbb6/lI1i32B+V9j7 Ou5YTJIdrjCv0opgBJzi9Vb9i+yKUr+fRi/UcLPplCyqGlk2AINdJ29xqM3oRv0Q UjiseHJkXk+BxngnEuCflN079w== -----END CERTIFICATE-----Generated at Mon Mar 2 16:52:12 2026 by rpki-client