$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft File: gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json) Hash identifier: 3aRMeJoQQOdu8m/EWB8c/LGQ9th68yJvfmV/dTV/kVE= Subject key identifier: 52:99:C6:A5:20:CC:71:CB:C9:31:F9:CB:2D:C7:78:3B:83:73:B9:8D Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB Certificate issuer: /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft Manifest number: 047D Signing time: Sun 01 Mar 2026 23:22:27 +0000 Manifest this update: Sun 01 Mar 2026 23:22:25 +0000 Manifest next update: Sun 08 Mar 2026 23:22:25 +0000 Files and hashes: 1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: Nh8elac7erwVbHgsYnRTyvaic+pWZApK+VWJA554NKo=) 2: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: gw3ZKWMVOPBmgzPuWccsR8SXG2XzgGuDa8yNe9l7t9M=) 3: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: SnwEiSigQk+KbnDBrwRpxTlPdX4p3h8/RF+ekQ3H9UU=) 4: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: 47iFeZ3ErKvHzbiwS5iDjv+frLd/9sz/MxYRjxUDLlw=) 5: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: aLH1AvmivEk7WizlOlXYSpsdAmTXmH2XnGqApjHlxM0=) 6: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: ImTcO2+bYDpyceBVz0sOi75TmPB1NnlNF+YgMjojJn0=) 7: 21ECD84A856011EC924B3E58C4F9AE02.roa (hash: sfu8WqaE1CEl+AbmVvNupiQWqawsQGl2Luz8JyWSfko=) 8: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: pmi8zhqXFg2mBn5F/aX1G/x9te6L5m3n6EllOKjSqMw=) 9: A5D75708E07111ED9601E941C4F9AE02.roa (hash: 5EuRxR4B2GheCWIyWlKboSn1b5nyMGZFZDHNErx6Vu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB Validity Not Before: Mar 1 23:22:25 2026 GMT Not After : Mar 8 23:22:25 2026 GMT Subject: CN=69a4ca32-9323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:39:e2:16:85:01:23:df:9e:a3:69:07:2f:a0: 3a:35:55:fd:cf:d5:2e:d6:b2:de:b1:2e:b0:0c:16: fe:e2:72:88:51:c0:04:a9:24:11:f7:d2:66:4b:a6: d2:1b:16:6c:4b:ed:38:b6:4a:c3:2b:c7:85:b8:2b: b5:57:bd:62:b4:8a:16:3f:1b:86:e6:3f:67:cd:7a: 01:63:0c:27:fb:fa:a6:f6:af:b5:f9:27:29:84:9f: 65:bb:f8:81:8b:0f:2b:41:43:11:fe:fc:26:6e:f6: 0a:62:f4:55:07:39:5e:09:1d:f3:d2:c9:47:41:c3: f3:23:7d:56:3c:c5:b6:3d:a9:a1:09:43:c9:33:ee: 34:22:80:c7:38:9b:94:b1:bf:6c:8d:7d:dd:4c:be: 8f:ae:47:34:b6:ab:a5:95:19:f0:b3:48:1d:eb:56: b3:72:0c:86:f4:65:d5:1a:6d:be:bc:67:44:25:50: cc:b9:e2:b2:e4:6c:12:7a:cf:b8:0d:f7:d4:1c:ae: 7f:14:39:c4:82:a6:f0:ad:91:61:3f:04:06:52:09: 45:44:fc:7d:0a:91:ab:84:65:30:4e:21:86:a9:20: 31:d6:a6:44:13:50:10:a5:45:89:cd:88:a8:cb:8e: 68:4b:ce:56:f3:75:d5:c9:3f:5a:d6:1c:d7:03:8e: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:99:C6:A5:20:CC:71:CB:C9:31:F9:CB:2D:C7:78:3B:83:73:B9:8D X509v3 Authority Key Identifier: keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:a3:27:af:dd:01:18:5c:0b:ae:c5:e1:6b:a0:3b:e7:07:c3: d3:96:75:78:0d:c6:bb:7d:d9:ff:f1:e8:56:ce:89:ae:b7:15: 4a:bb:e0:71:8c:df:e5:c2:28:d3:a0:07:06:ec:0c:eb:c9:c7: c6:3f:2c:cd:fc:61:04:04:54:92:fa:0d:f7:04:eb:9d:35:98: b6:bd:ae:a6:81:09:01:fa:63:9a:47:0e:81:58:38:36:33:d1: ff:8e:10:26:3c:a9:d8:f4:f4:76:42:8e:95:87:b2:70:37:27: 8c:60:40:9e:a8:b1:8e:9d:31:8c:d7:e2:ff:92:e5:c8:68:1c: 22:fd:6e:d1:2d:04:7f:71:92:e0:1d:bc:ba:fc:fa:1b:42:2b: d3:72:2d:24:78:0f:f3:dd:0c:dd:be:17:61:2d:5d:5b:4a:e1: da:a3:43:55:37:84:ca:ee:d6:d6:0d:9d:be:9c:c8:41:09:2e: 6f:78:27:8c:cf:3b:a6:f9:d4:93:df:fe:f1:9d:89:e6:31:d5: 1c:de:f9:88:a1:26:42:47:75:db:ad:be:70:53:88:37:d3:85: 75:d6:42:bf:76:a2:6c:60:0e:fd:b5:68:d1:30:55:7c:81:03: 65:b8:35:2b:c8:6f:88:7b:e4:4e:0f:83:e5:02:74:e8:b2:a2: 26:45:19:70 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I0QkYxMTAvBgNVBAUTKDgwMzUwOTBBMDU3MzI3RTEyMDA1OTNDMjBDODhDNTE5 QTQ1QzlFQ0IwHhcNMjYwMzAxMjMyMjI1WhcNMjYwMzA4MjMyMjI1WjAYMRYwFAYD VQQDEw02OWE0Y2EzMi05MzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArTniFoUBI9+eo2kHL6A6NVX9z9Uu1rLesS6wDBb+4nKIUcAEqSQR99JmS6bS GxZsS+04tkrDK8eFuCu1V71itIoWPxuG5j9nzXoBYwwn+/qm9q+1+ScphJ9lu/iB iw8rQUMR/vwmbvYKYvRVBzleCR3z0slHQcPzI31WPMW2PamhCUPJM+40IoDHOJuU sb9sjX3dTL6Prkc0tqullRnws0gd61azcgyG9GXVGm2+vGdEJVDMueKy5GwSes+4 DffUHK5/FDnEgqbwrZFhPwQGUglFRPx9CpGrhGUwTiGGqSAx1qZEE1AQpUWJzYio y45oS85W83XVyT9a1hzXA462nwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFKZxqUg zHHLyTH5yy3HeDuDc7mNMB8GA1UdIwQYMBaAFIA1CQoFcyfhIAWTwgyIxRmkXJ7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjRCRi9COENDNjkzQzg1 NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekotRWdCWlBDRElqRkdhUmNu c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dEVUpDZ1Z6Si1FZ0JaUENESWpGR2FSY25zcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjRCRi9COENDNjkzQzg1NUMxMUVDOEUzQ0JCNTFDNEY5QUUwMi9nRFVKQ2dWekot RWdCWlBDRElqRkdhUmNuc3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIqMnr90BGFwLrsXha6A75wfD05Z1eA3Gu33Z//HoVs6JrrcVSrvgcYzf5cIo 06AHBuwM68nHxj8szfxhBARUkvoN9wTrnTWYtr2upoEJAfpjmkcOgVg4NjPR/44Q Jjyp2PT0dkKOlYeycDcnjGBAnqixjp0xjNfi/5LlyGgcIv1u0S0Ef3GS4B28uvz6 G0Ir03ItJHgP890M3b4XYS1dW0rh2qNDVTeEyu7W1g2dvpzIQQkub3gnjM87pvnU k9/+8Z2J5jHVHN75iKEmQkd1262+cFOIN9OFddZCv3aibGAO/bVo0TBVfIEDZbg1 K8hviHvkTg+D5QJ06LKiJkUZcA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:20:19 2026 by rpki-client