$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: YhlYghbPDqupLSqWlveqSeyDpIMYupQaN77W4/pV4H8= Subject key identifier: 59:77:77:D2:C3:57:D9:B0:73:6C:8B:75:AF:18:CF:C8:72:9D:A4:0D Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: A6 Signing time: Sun 01 Mar 2026 08:32:08 +0000 Manifest this update: Sun 01 Mar 2026 08:32:07 +0000 Manifest next update: Sun 08 Mar 2026 08:32:07 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: xq0Tk5rsImvhTLvg+eSacVDSn3jQznZ9cICLIZb7qhk=) 2: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: XXi4HtBDPgCDEiDMleFH2KmICcdoHAtYUlHJKso9Buo=) 3: 8BACF000172811F0B074151EC4F9AE02.roa (hash: 2FTvIznxyhHUs7Uj6r+XMwe4tCmrqNjq4gDu6Ubb7G4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Mar 1 08:32:07 2026 GMT Not After : Mar 8 08:32:07 2026 GMT Subject: CN=69a3f988-4948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:02:79:86:05:8d:2c:d7:9a:13:af:aa:25:07: 10:c3:4c:56:ac:51:10:1f:25:f6:61:ab:ba:82:12: 1f:a5:b8:87:a1:8d:cb:e2:6e:ca:9b:3e:42:53:dc: fd:82:13:09:4e:19:31:13:2f:eb:d7:b4:b7:16:5d: d2:a7:7f:b4:f2:da:0e:d2:92:11:74:a5:33:58:d5: 5e:50:f8:af:8b:a1:65:16:fb:5f:57:25:13:e0:21: 3f:44:cc:a8:24:ce:64:61:2a:4f:a6:a6:b3:ee:a4: 40:eb:6b:d8:28:2b:e7:17:00:cb:6c:2c:38:01:02: 55:a6:38:ec:16:8e:c1:5b:ec:b8:66:ad:e0:d2:59: 71:89:cc:f5:dc:0a:21:cc:02:c2:5b:1a:f3:89:53: 7f:b1:a0:c0:43:70:42:5c:8b:80:47:86:27:5e:dd: 42:41:06:ea:75:5e:3f:dc:19:d0:b1:21:15:c6:43: fd:d2:ff:24:cf:ec:ea:b6:83:fd:b5:7d:06:a4:5a: 9b:e4:ad:c9:4b:e4:74:59:cb:77:46:f0:8e:6c:1e: 08:46:0f:5d:ab:bc:fc:e3:9c:bc:b5:4d:5c:91:65: bd:2f:b3:33:31:fa:1d:06:4f:99:31:3a:7b:10:61: e5:78:0f:28:b6:83:aa:c7:41:16:e7:10:b9:70:d4: f1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:77:77:D2:C3:57:D9:B0:73:6C:8B:75:AF:18:CF:C8:72:9D:A4:0D X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:35:10:56:3f:81:a8:5d:68:44:42:47:e9:0c:05:ac:50:b0: e0:72:75:b6:75:ef:0f:64:9e:d8:cb:91:a8:71:49:92:59:e3: fd:9d:e3:0c:76:e4:6e:52:2c:2c:a7:c6:e7:bf:ff:3c:91:de: 0a:9e:25:82:58:c6:b1:74:0d:79:0f:37:be:b1:db:e0:d6:de: 02:42:40:91:77:af:34:5f:83:f5:c2:77:61:bd:17:3d:4d:55: 3f:35:07:18:98:a2:cd:05:49:05:53:a8:62:b6:41:73:55:3e: b2:7e:a7:81:ce:3d:af:1e:b9:b9:20:e8:78:a6:3e:98:e6:bb: 72:9d:6d:4d:44:96:d7:18:03:0e:a7:15:c5:e6:1a:ad:00:ae: 34:a9:aa:6e:24:f4:06:11:6c:31:44:bb:af:a6:af:60:01:1f: 3f:59:76:72:6a:cd:35:75:34:aa:86:b9:40:c2:17:68:53:bf: 02:f9:e8:0b:8f:1e:d3:70:77:42:64:bb:a3:1a:ad:ea:3c:e9: 87:5f:0a:ba:88:28:a0:96:74:fc:31:62:0c:50:d0:c1:04:8f: 5d:7f:07:cd:e4:ea:9e:aa:aa:61:ea:66:62:ec:e3:35:cc:2e: c7:05:08:ca:79:cb:90:b7:15:62:67:41:8b:31:d9:de:24:b6: da:51:3e:65 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2NjMxMTAvBgNVBAUTKDNDQUFFQUYxQjBENEJGNjMxN0FFNEYxRTU0NjM3OUJG RjM0NkNGRDMwHhcNMjYwMzAxMDgzMjA3WhcNMjYwMzA4MDgzMjA3WjAYMRYwFAYD VQQDEw02OWEzZjk4OC00OTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqQJ5hgWNLNeaE6+qJQcQw0xWrFEQHyX2Yau6ghIfpbiHoY3L4m7Kmz5CU9z9 ghMJThkxEy/r17S3Fl3Sp3+08toO0pIRdKUzWNVeUPivi6FlFvtfVyUT4CE/RMyo JM5kYSpPpqaz7qRA62vYKCvnFwDLbCw4AQJVpjjsFo7BW+y4Zq3g0llxicz13Aoh zALCWxrziVN/saDAQ3BCXIuAR4YnXt1CQQbqdV4/3BnQsSEVxkP90v8kz+zqtoP9 tX0GpFqb5K3JS+R0Wct3RvCObB4IRg9dq7z845y8tU1ckWW9L7MzMfodBk+ZMTp7 EGHleA8otoOqx0EW5xC5cNTxIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFl3d9LD V9mwc2yLda8Yz8hynaQNMB8GA1UdIwQYMBaAFDyq6vGw1L9jF65PHlRjeb/zRs/T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY2My83QUM5Njc5RTE3 MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYyTVhyazhlVkdONXZfTkd6 OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY2My83QUM5Njc5RTE3MjAxMUYwQjc0MjIzNEVDNEY5QUUwMi9QS3JxOGJEVXYy TVhyazhlVkdONXZfTkd6OU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHTUQVj+BqF1oREJH6QwFrFCw4HJ1tnXvD2Se2MuRqHFJklnj/Z3jDHbkblIs LKfG57//PJHeCp4lgljGsXQNeQ83vrHb4NbeAkJAkXevNF+D9cJ3Yb0XPU1VPzUH GJiizQVJBVOoYrZBc1U+sn6ngc49rx65uSDoeKY+mOa7cp1tTUSW1xgDDqcVxeYa rQCuNKmqbiT0BhFsMUS7r6avYAEfP1l2cmrNNXU0qoa5QMIXaFO/AvnoC48e03B3 QmS7oxqt6jzph18KuogooJZ0/DFiDFDQwQSPXX8HzeTqnqqqYepmYuzjNcwuxwUI ynnLkLcVYmdBizHZ3iS22lE+ZQ== -----END CERTIFICATE-----Generated at Sun Mar 1 20:35:18 2026 by rpki-client