$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft File: em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json) Hash identifier: tuF0Dmzd0uZAEPqND3WYKXPQVagBVrJKPj8BHY0sKak= Subject key identifier: 7B:E6:1D:7F:A8:9C:F0:76:83:72:B8:4F:79:31:3F:F1:1D:4B:66:7E Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 Certificate issuer: /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Certificate serial: 18D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft Manifest number: 18AC Signing time: Mon 02 Mar 2026 03:06:33 +0000 Manifest this update: Mon 02 Mar 2026 03:06:31 +0000 Manifest next update: Mon 09 Mar 2026 03:06:31 +0000 Files and hashes: 1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: WiaNiN4kSX4/rwkctV/uG1JpUaVoW7MhhotdTOOk80o=) 2: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: F7gvzg0So++J2V4XA9vCkNOHszA1gZ0+wMtYApbJrQM=) 3: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6355 (0x18d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3 Validity Not Before: Mar 2 03:06:31 2026 GMT Not After : Mar 9 03:06:31 2026 GMT Subject: CN=69a4feb9-cee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:81:ee:dd:38:d8:a5:74:92:c8:ea:41:57: 2c:73:39:2e:10:c9:d9:bd:a4:2d:37:93:b5:df:b4: b0:3e:b1:7a:79:e5:b4:bf:74:52:68:e7:2f:80:d1: bc:0f:eb:ff:a3:e4:91:4a:c7:22:5c:56:a9:4a:68: 86:29:ef:5a:13:c3:8a:66:82:6a:87:78:a2:19:dd: 3f:7e:ff:2a:b6:4d:9e:54:8a:d9:42:df:c4:19:ee: 86:c9:c4:54:a7:d6:be:7e:c5:cc:7a:56:2e:cc:be: 58:56:15:0f:77:6d:96:29:91:cc:69:f4:06:6f:73: 70:64:8d:36:96:cb:4a:19:f9:b7:8f:e6:11:e8:35: 76:6d:e4:cf:2d:ef:3b:05:09:9c:72:fb:44:c7:4e: 75:f1:5d:5c:71:01:67:35:a0:bb:1f:14:ee:e4:0a: 9d:38:37:e6:2b:3d:fa:ff:63:2c:c2:5a:ce:21:a9: a6:e1:47:6a:0c:24:2a:b8:89:82:b1:69:b3:05:d9: 30:9d:b4:a8:5f:5b:9a:37:19:9c:e0:56:9e:0d:12: 48:28:64:07:8b:1f:50:97:4f:69:c8:22:39:76:bf: a3:b3:ec:d7:4c:c5:dc:20:65:3d:08:50:b3:ee:81: e8:77:67:10:57:94:a6:61:fb:07:cc:bc:80:62:fe: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:1D:7F:A8:9C:F0:76:83:72:B8:4F:79:31:3F:F1:1D:4B:66:7E X509v3 Authority Key Identifier: keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:97:be:3c:ce:81:c7:52:c2:d3:2a:02:04:91:2f:71:a0:de: 63:c3:8c:2f:0e:06:5f:4d:23:aa:f6:d1:ed:7d:72:d3:41:5b: 4c:19:84:21:da:07:b4:10:90:7f:bb:e0:d1:ad:69:ff:a3:79: 4d:4a:d7:4f:9c:4f:aa:13:3a:d4:fc:1d:9a:07:3f:fb:b2:b2: 1e:a6:86:b5:79:24:3a:fc:aa:21:0a:6a:af:26:9a:c8:9e:de: 67:a7:87:82:e6:63:c2:67:9f:99:5f:49:95:c5:c2:25:79:9d: de:58:26:47:a6:5d:27:4b:9d:16:f5:77:ff:63:58:fa:31:be: 0f:76:12:45:3a:ad:c8:9c:13:0e:95:32:bb:48:87:d2:ec:db: 0a:25:95:c6:ca:50:fd:d7:c7:b6:50:f7:7d:fd:99:b6:81:f7: 8e:65:59:45:92:ec:2e:b0:6b:b2:cb:fe:ae:d2:c8:07:9d:01: ff:52:93:d3:1f:a6:de:60:88:a4:e4:92:e0:bb:ab:02:f0:b7: e1:4d:00:91:6e:4d:a5:9a:b2:3a:da:da:e3:5f:07:a2:1c:7b: 73:18:ed:de:4d:34:0f:24:5d:e9:02:94:18:f1:0c:85:3b:ea: b6:6f:73:c5:bd:d2:a1:e6:4b:7f:46:73:84:b0:f6:e7:fc:5d: 06:00:72:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKDdBNkUzMDIxMDY0MkNGNEZCQjQxNzNGMzUyNzQ4RTFF QTVDMkM3QzMwHhcNMjYwMzAyMDMwNjMxWhcNMjYwMzA5MDMwNjMxWjAYMRYwFAYD VQQDEw02OWE0ZmViOS1jZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyreB7t042KV0ksjqQVcsczkuEMnZvaQtN5O137SwPrF6eeW0v3RSaOcvgNG8 D+v/o+SRSsciXFapSmiGKe9aE8OKZoJqh3iiGd0/fv8qtk2eVIrZQt/EGe6GycRU p9a+fsXMelYuzL5YVhUPd22WKZHMafQGb3NwZI02lstKGfm3j+YR6DV2beTPLe87 BQmccvtEx0518V1ccQFnNaC7HxTu5AqdODfmKz36/2MswlrOIamm4UdqDCQquImC sWmzBdkwnbSoX1uaNxmc4FaeDRJIKGQHix9Ql09pyCI5dr+js+zXTMXcIGU9CFCz 7oHod2cQV5SmYfsHzLyAYv5aGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHvmHX+o nPB2g3K4T3kxP/EdS2Z+MB8GA1UdIwQYMBaAFHpuMCEGQs9Pu0Fz81J0jh6lwsfD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy9DNkIwMzRBQUI4 OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3owLTdRWFB6VW5TT0hxWEN4 OE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VtNHdJUVpDejAtN1FYUHpVblNPSHFYQ3g4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDlGQy9DNkIwMzRBQUI4OTkxMUU3QjI2OUI4NTBDNEY5QUUwMi9lbTR3SVFaQ3ow LTdRWFB6VW5TT0hxWEN4OE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV5e+PM6Bx1LC0yoCBJEvcaDeY8OMLw4GX00jqvbR7X1y00FbTBmEIdoHtBCQ f7vg0a1p/6N5TUrXT5xPqhM61Pwdmgc/+7KyHqaGtXkkOvyqIQpqryaayJ7eZ6eH guZjwmefmV9JlcXCJXmd3lgmR6ZdJ0udFvV3/2NY+jG+D3YSRTqtyJwTDpUyu0iH 0uzbCiWVxspQ/dfHtlD3ff2ZtoH3jmVZRZLsLrBrssv+rtLIB50B/1KT0x+m3mCI pOSS4LurAvC34U0AkW5NpZqyOtra418Hohx7cxjt3k00DyRd6QKUGPEMhTvqtm9z xb3SoeZLf0ZzhLD25/xdBgByrw== -----END CERTIFICATE-----Generated at Mon Mar 2 11:46:19 2026 by rpki-client