$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft File: gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft (raw, json) Hash identifier: yHzRvMmU6F6RnAYOtPlQPgCFvpERC4Zkzcsnvs+Kdho= Subject key identifier: F7:29:D9:77:BA:30:0C:E6:EC:6D:63:E1:F7:59:97:B9:CF:FB:7A:30 Authority key identifier: 80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 Certificate issuer: /CN=A911DA8C/serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Certificate serial: 03A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft Manifest number: 03A0 Signing time: Mon 02 Mar 2026 01:21:28 +0000 Manifest this update: Mon 02 Mar 2026 01:21:27 +0000 Manifest next update: Mon 09 Mar 2026 01:21:27 +0000 Files and hashes: 1: gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl (hash: 1L/23i2v4tpS8Y98IEmUq6STllHOux1SXpYdW/MVu2U=) 2: D0279B7AD10A11ECA78C081CC4F9AE02.roa (hash: rpEeJfHec6qq3m3hz9oQ0Fj5z6c+WSBf/B8pGM1lwQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 933 (0x3a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DA8C, serialNumber=8031886E7E609E4F4A346A45108110406875FEC8 Validity Not Before: Mar 2 01:21:27 2026 GMT Not After : Mar 9 01:21:27 2026 GMT Subject: CN=69a4e618-7e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5c:93:26:42:79:01:8a:88:56:c1:32:2a:25: d2:2e:b4:04:d0:44:b1:53:9c:91:71:37:ce:99:3c: 3a:17:ed:72:48:5c:af:c6:b6:0c:44:ac:d2:b1:b9: 2f:4e:dc:7c:be:2d:35:92:56:fb:b3:8b:59:92:89: f8:d8:30:cc:f3:81:0b:8b:94:51:2e:39:58:0c:ee: 47:10:26:e7:24:ef:f0:4c:d1:71:6b:0d:34:e4:d9: 24:4b:5f:70:ea:84:ac:32:be:32:a1:56:4b:f1:36: d8:07:55:86:89:58:21:7f:fa:37:56:aa:af:71:d3: 68:d0:ec:d7:a6:82:f0:2f:ea:08:95:a1:b7:cc:58: b3:8b:11:f9:37:b8:7e:f8:ad:6e:95:d4:03:e2:c7: 4d:8c:c1:4c:db:14:47:33:f1:c5:c9:7d:fc:5c:59: 5f:a6:dd:6d:9b:08:71:1f:24:dc:5f:c4:79:af:6e: c8:63:13:01:6e:79:b2:92:2a:7b:7f:dd:38:94:a7: 87:ed:97:cb:55:a4:ab:3b:f7:ee:db:02:36:16:3f: 82:20:57:dc:1b:ec:cc:ac:1b:18:62:86:46:da:23: c5:05:fb:2e:ff:05:e7:a2:fc:e0:b0:5b:6c:1f:1b: 07:8b:c6:ca:a1:50:34:06:ff:6d:9e:3d:93:38:3a: 25:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:29:D9:77:BA:30:0C:E6:EC:6D:63:E1:F7:59:97:B9:CF:FB:7A:30 X509v3 Authority Key Identifier: keyid:80:31:88:6E:7E:60:9E:4F:4A:34:6A:45:10:81:10:40:68:75:FE:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDGIbn5gnk9KNGpFEIEQQGh1_sg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA8C/F3164C20D10611ECB128F413C4F9AE02/gDGIbn5gnk9KNGpFEIEQQGh1_sg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:75:2f:fb:b5:10:05:c5:57:4e:4b:fd:b3:e2:03:c4:9f:c3: aa:7a:b0:b7:fd:44:24:19:44:c0:83:1a:76:be:19:f1:08:07: bd:f0:c4:5b:f7:08:ef:4a:f4:4b:0f:80:84:3a:48:2c:e0:7d: 4a:50:8a:ef:da:5e:70:70:ff:7b:08:0f:b4:9c:43:f2:79:4f: d1:10:9e:25:26:b6:8e:5c:14:32:d1:d1:5e:b5:3b:e7:3a:94: e2:88:ed:73:9a:c5:a3:e3:8e:45:f0:b4:e0:aa:b4:f9:24:e5: bf:8a:d7:68:1d:b5:3d:84:e3:11:a4:fd:79:5f:30:36:57:bf: dd:b8:04:fa:ce:80:0a:61:2d:b3:82:27:2b:c7:5b:dd:e6:60: 1d:bd:3c:6f:0b:e2:39:05:83:8e:dd:42:a8:75:44:cf:7c:ab: d8:54:ca:b5:53:eb:56:4a:ee:99:ec:6a:33:d9:30:da:c1:a7: cc:ea:20:de:36:1d:00:4a:e2:00:b6:e4:c5:0f:f9:08:a5:b8: fa:63:f9:c7:49:d4:79:3f:36:a9:42:77:03:51:6a:76:b5:eb: 24:9e:18:e7:d6:9a:2a:55:21:b9:1f:e1:f6:f5:d9:0a:7c:23: d0:a2:73:26:7d:ee:7b:b8:cc:e1:e3:ab:f6:7b:04:f7:ec:65: 6e:5d:b5:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MURBOEMxMTAvBgNVBAUTKDgwMzE4ODZFN0U2MDlFNEY0QTM0NkE0NTEwODExMDQw Njg3NUZFQzgwHhcNMjYwMzAyMDEyMTI3WhcNMjYwMzA5MDEyMTI3WjAYMRYwFAYD VQQDEw02OWE0ZTYxOC03ZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlVyTJkJ5AYqIVsEyKiXSLrQE0ESxU5yRcTfOmTw6F+1ySFyvxrYMRKzSsbkv Ttx8vi01klb7s4tZkon42DDM84ELi5RRLjlYDO5HECbnJO/wTNFxaw005NkkS19w 6oSsMr4yoVZL8TbYB1WGiVghf/o3VqqvcdNo0OzXpoLwL+oIlaG3zFizixH5N7h+ +K1uldQD4sdNjMFM2xRHM/HFyX38XFlfpt1tmwhxHyTcX8R5r27IYxMBbnmykip7 f904lKeH7ZfLVaSrO/fu2wI2Fj+CIFfcG+zMrBsYYoZG2iPFBfsu/wXnovzgsFts HxsHi8bKoVA0Bv9tnj2TODolvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPcp2Xe6 MAzm7G1j4fdZl7nP+3owMB8GA1UdIwQYMBaAFIAxiG5+YJ5PSjRqRRCBEEBodf7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExREE4Qy9GMzE2NEMyMEQx MDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25rOUtOR3BGRUlFUVFHaDFf c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dER0libjVnbms5S05HcEZFSUVRUUdoMV9zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx REE4Qy9GMzE2NEMyMEQxMDYxMUVDQjEyOEY0MTNDNEY5QUUwMi9nREdJYm41Z25r OUtOR3BGRUlFUVFHaDFfc2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANHUv+7UQBcVXTkv9s+IDxJ/Dqnqwt/1EJBlEwIMadr4Z8QgHvfDEW/cI70r0 Sw+AhDpILOB9SlCK79pecHD/ewgPtJxD8nlP0RCeJSa2jlwUMtHRXrU75zqU4ojt c5rFo+OORfC04Kq0+STlv4rXaB21PYTjEaT9eV8wNle/3bgE+s6ACmEts4InK8db 3eZgHb08bwviOQWDjt1CqHVEz3yr2FTKtVPrVkrumexqM9kw2sGnzOog3jYdAEri ALbkxQ/5CKW4+mP5x0nUeT82qUJ3A1FqdrXrJJ4Y59aaKlUhuR/h9vXZCnwj0KJz Jn3ue7jM4eOr9nsE9+xlbl21qw== -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:24 2026 by rpki-client