$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft File: j6hk_qmvHMBaicsQ6i43MXBt8_U.mft (raw, json) Hash identifier: XkTq6hoMW/fS9zfssfFP2WDqtYJID3rhHaNlwMRNLig= Subject key identifier: A3:75:F1:8B:95:72:B7:8B:11:CF:B0:FC:0D:B0:8B:EC:90:9E:9F:C7 Authority key identifier: 8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5 Certificate issuer: /CN=A918DAF5/serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5 Certificate serial: 57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft Manifest number: 52 Signing time: Sun 01 Mar 2026 09:39:20 +0000 Manifest this update: Sun 01 Mar 2026 09:39:20 +0000 Manifest next update: Sun 08 Mar 2026 09:39:20 +0000 Files and hashes: 1: j6hk_qmvHMBaicsQ6i43MXBt8_U.crl (hash: UpPPjIjgzVFePlVr/Y0iK8TIb68PkzZC1rfdK8NO8EA=) 2: 0B1E45B49DF711F09C653340C4F9AE02.roa (hash: 7+YdjM9gFK3hryB2+5BK2I9keyHGk2n71CdoBSjLrzM=) 3: 8121DCA49DF611F0B7D5393FC4F9AE02.roa (hash: OAaGxOEj+HkGkCRcYE/e+DYsPmEKThEStnL8sV8Vrlg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DAF5, serialNumber=8FA864FEA9AF1CC05A89CB10EA2E3731706DF3F5 Validity Not Before: Mar 1 09:39:20 2026 GMT Not After : Mar 8 09:39:20 2026 GMT Subject: CN=69a40948-b0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:10:c4:38:78:18:4f:8b:9b:1c:a2:10:be:cc: 92:96:72:0b:72:c7:b8:63:54:c8:44:4e:77:6d:2f: 26:de:a2:c8:2d:90:b8:b7:db:70:3d:38:08:d6:45: 1a:e3:1b:3c:8f:a6:15:49:67:ee:47:80:22:1a:2f: bb:9e:c7:ce:96:e3:82:92:58:f3:5d:66:1d:82:a6: 12:0c:ab:ad:85:c7:b9:4c:2d:fa:0f:c0:43:79:8e: 4c:03:6b:3f:db:58:2e:ac:61:5f:2d:d4:17:16:ef: 59:d0:d9:02:29:b6:2f:23:34:4c:26:c0:b9:3e:fd: 94:f0:24:d9:0d:d1:a4:54:63:c0:4f:0d:2d:5f:db: 5a:ae:a1:62:85:52:ab:26:4b:03:ae:bf:95:7e:e5: a7:e5:70:32:7f:94:4f:ee:39:a4:1f:18:d8:7f:ea: 27:47:ec:a4:2a:78:9f:0e:6c:0d:9e:33:3d:86:79: d5:ae:78:66:e7:80:12:c5:90:46:e6:4c:32:a3:0a: b7:a0:01:b5:b0:92:95:2e:2c:d3:9b:8c:ee:d1:1d: e9:b0:d5:0a:82:b2:69:f9:0a:ed:27:f2:7b:c9:19: 3f:97:ef:72:38:41:33:83:14:d2:02:72:40:a2:e9: 7b:ae:55:af:ac:83:a9:4d:9c:a5:b6:f1:29:99:1c: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:F1:8B:95:72:B7:8B:11:CF:B0:FC:0D:B0:8B:EC:90:9E:9F:C7 X509v3 Authority Key Identifier: keyid:8F:A8:64:FE:A9:AF:1C:C0:5A:89:CB:10:EA:2E:37:31:70:6D:F3:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j6hk_qmvHMBaicsQ6i43MXBt8_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAF5/7CD42A689DF511F09A2B6620C4F9AE02/j6hk_qmvHMBaicsQ6i43MXBt8_U.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:8c:fb:f6:33:9b:2a:bc:9f:1d:3e:0b:0e:d7:43:5c:2e:28: 23:aa:24:ae:fc:34:7c:18:47:ee:53:e7:eb:8e:ce:06:83:54: f6:50:b5:3c:63:82:21:0a:8a:1d:95:01:42:e0:49:03:ae:d9: a2:11:d3:59:29:aa:07:2d:93:3b:82:f5:b2:a0:be:38:93:5a: 86:2c:94:19:c5:49:50:bd:41:3f:20:15:7b:60:30:02:08:46: de:43:64:a0:7a:d9:3f:3d:aa:5e:ee:b9:c3:87:b9:0d:69:82: 16:48:b7:17:e7:eb:d1:dd:6a:44:e9:04:69:df:69:12:f2:74: 7a:06:9c:07:75:34:9e:c3:b9:68:1b:6a:b2:1a:8d:a0:ad:54: c9:c1:26:d3:53:3c:b1:1c:69:74:28:3c:ad:55:f4:8d:6a:3f: 13:23:b0:66:5e:93:69:70:84:b8:ac:58:dc:25:9a:a9:76:5f: 10:dc:86:3e:40:3d:e7:40:9c:c0:3c:7f:8f:41:be:ef:34:eb: 58:0e:cd:f9:2f:ae:b1:b8:9d:1d:c2:e8:61:7e:9b:56:e2:c8: 0d:48:37:c0:1c:5a:5a:ef:13:6a:02:2d:f7:e5:63:58:13:e4: 48:8c:cb:c1:b0:41:17:fc:1d:41:87:00:e1:44:48:59:e6:4d: 4c:24:0b:5c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBVzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 REFGNTExMC8GA1UEBRMoOEZBODY0RkVBOUFGMUNDMDVBODlDQjEwRUEyRTM3MzE3 MDZERjNGNTAeFw0yNjAzMDEwOTM5MjBaFw0yNjAzMDgwOTM5MjBaMBgxFjAUBgNV BAMTDTY5YTQwOTQ4LWIwY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnEMQ4eBhPi5scohC+zJKWcgtyx7hjVMhETndtLybeosgtkLi323A9OAjWRRrj GzyPphVJZ+5HgCIaL7uex86W44KSWPNdZh2CphIMq62Fx7lMLfoPwEN5jkwDaz/b WC6sYV8t1BcW71nQ2QIpti8jNEwmwLk+/ZTwJNkN0aRUY8BPDS1f21quoWKFUqsm SwOuv5V+5aflcDJ/lE/uOaQfGNh/6idH7KQqeJ8ObA2eMz2GedWueGbngBLFkEbm TDKjCregAbWwkpUuLNObjO7RHemw1QqCsmn5Cu0n8nvJGT+X73I4QTODFNICckCi 6XuuVa+sg6lNnKW28SmZHIHHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUo3Xxi5Vy t4sRz7D8DbCL7JCen8cwHwYDVR0jBBgwFoAUj6hk/qmvHMBaicsQ6i43MXBt8/Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUY1LzdDRDQyQTY4OURG NTExRjA5QTJCNjYyMEM0RjlBRTAyL2o2aGtfcW12SE1CYWljc1E2aTQzTVhCdDhf VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvajZoa19xbXZITUJhaWNzUTZpNDNNWEJ0OF9VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE QUY1LzdDRDQyQTY4OURGNTExRjA5QTJCNjYyMEM0RjlBRTAyL2o2aGtfcW12SE1C YWljc1E2aTQzTVhCdDhfVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBbjPv2M5sqvJ8dPgsO10NcLigjqiSu/DR8GEfuU+frjs4Gg1T2ULU8Y4IhCood lQFC4EkDrtmiEdNZKaoHLZM7gvWyoL44k1qGLJQZxUlQvUE/IBV7YDACCEbeQ2Sg etk/Pape7rnDh7kNaYIWSLcX5+vR3WpE6QRp32kS8nR6BpwHdTSew7loG2qyGo2g rVTJwSbTUzyxHGl0KDytVfSNaj8TI7BmXpNpcIS4rFjcJZqpdl8Q3IY+QD3nQJzA PH+PQb7vNOtYDs35L66xuJ0dwuhhfptW4sgNSDfAHFpa7xNqAi335WNYE+RIjMvB sEEX/B1BhwDhREhZ5k1MJAtc -----END CERTIFICATE-----Generated at Mon Mar 2 08:13:20 2026 by rpki-client