$ rpki-client -vvf rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft File: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft (raw, json) Hash identifier: nc40jQGXLc/tuhbA4R1OdtrmsxB0QW0yP88O8+Glhyw= Subject key identifier: 1A:0D:4E:42:20:BF:D0:B6:88:68:4A:34:D0:DF:3C:73:2E:E9:E5:52 Authority key identifier: 82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 Certificate issuer: /CN=A919D222/serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft Manifest number: D7 Signing time: Sun 01 Mar 2026 07:48:41 +0000 Manifest this update: Sun 01 Mar 2026 07:48:41 +0000 Manifest next update: Sun 08 Mar 2026 07:48:41 +0000 Files and hashes: 1: ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl (hash: 5mdSH6O3+F8swr1JLGWA+s95NaW/iijKlR1KUgtFBsk=) 2: 18B90242CD8011EF8728D139C4F9AE02.roa (hash: aBWrylStgB8UpPGQsd4Khtzv8Z8tqWdm+knkAVWtLuU=) 3: 1852A5B0CD8011EF8728D139C4F9AE02.roa (hash: DF7CNfyNaFKpDVnLxStQDZlI02OuUbS/a5OtdycSWIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D222, serialNumber=8205E9796EC69A0C73DC3B5B3CE12C48192B4577 Validity Not Before: Mar 1 07:48:41 2026 GMT Not After : Mar 8 07:48:41 2026 GMT Subject: CN=69a3ef59-b15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:20:3a:48:03:c3:57:23:ad:77:ce:1b:11:51: df:ff:54:a4:80:15:5e:2e:70:b7:3b:b4:95:cb:1d: 58:f2:95:03:1f:98:a3:56:54:43:94:76:6b:97:c2: 71:2a:85:e5:87:d5:b1:b1:cd:e4:6c:33:b6:76:91: 35:a8:13:11:79:7d:82:ab:9b:e9:23:b0:2f:d1:b4: 43:df:73:cd:90:32:56:54:2f:61:df:f2:e9:13:d8: e1:4c:ac:a9:2b:0d:7e:b8:57:75:b0:e8:6d:68:63: e9:d9:1d:ea:82:da:e1:e6:8a:8e:39:d8:f8:71:c4: 7e:cf:10:f1:bf:42:c8:8c:ed:bf:f4:51:f8:db:b5: 89:8a:36:ed:0c:dd:74:14:8e:71:46:f3:e6:a2:c2: 0b:e5:18:40:1f:0a:a5:e2:f2:ba:b5:2b:d5:9a:e0: b5:c7:4b:a9:8a:bb:52:e3:b1:91:23:87:24:d4:3c: b1:48:91:4d:0e:7c:23:da:ac:cb:32:96:34:5d:e5: cf:4b:c1:bd:84:40:bd:05:4c:e5:0d:07:fa:80:73: 58:c8:62:21:56:82:3f:a8:92:43:60:9d:cf:84:51: 31:0c:73:79:ff:26:e1:5a:5e:40:ba:15:c1:48:3f: a6:64:5e:41:1c:fa:23:92:1f:9b:de:17:b8:43:77: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:0D:4E:42:20:BF:D0:B6:88:68:4A:34:D0:DF:3C:73:2E:E9:E5:52 X509v3 Authority Key Identifier: keyid:82:05:E9:79:6E:C6:9A:0C:73:DC:3B:5B:3C:E1:2C:48:19:2B:45:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D222/8764489CCD7F11EFA5848838C4F9AE02/ggXpeW7Gmgxz3DtbPOEsSBkrRXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:08:8f:4e:0c:c0:46:29:80:3e:f6:40:fe:3e:33:28:34:c9: bb:28:7b:f7:73:86:37:0d:98:67:c3:f4:5f:6d:36:97:f5:cd: dc:09:a4:68:62:18:3c:1b:50:62:26:ca:10:17:d5:1f:70:3c: 46:22:59:1b:33:21:12:52:4a:df:fe:d2:1b:ed:53:bf:11:da: 44:ca:7a:34:73:21:b4:81:94:d6:25:5f:a4:d0:e2:8e:9a:e4: b2:8c:78:f6:05:aa:a7:da:52:fd:23:ee:60:9d:39:4f:a6:b4: e0:0b:31:a0:c0:f8:f4:38:fc:82:14:31:9c:fc:d2:b1:a1:64: b3:c9:6d:0f:30:4f:54:d7:0f:1c:f0:76:40:78:5e:ec:51:9c: f3:7e:85:2a:52:0d:8a:76:fd:c3:cd:ea:79:e2:50:e3:62:ee: fe:5e:7c:fe:a5:a8:ac:21:aa:ce:57:97:df:23:bb:ef:b1:88: 2a:7d:28:fa:0b:94:3a:20:0f:a6:aa:96:4d:20:a8:08:9e:05: a4:47:4d:be:5f:64:71:60:43:4b:45:8b:d5:65:04:f8:7b:0a: 74:7e:06:80:ba:20:41:ef:70:8c:76:fe:e3:db:0b:68:b3:cb: 01:e5:b7:ce:3f:a4:45:f1:41:df:bb:d7:82:89:6a:09:28:38: 23:25:75:94 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyMjIxMTAvBgNVBAUTKDgyMDVFOTc5NkVDNjlBMEM3M0RDM0I1QjNDRTEyQzQ4 MTkyQjQ1NzcwHhcNMjYwMzAxMDc0ODQxWhcNMjYwMzA4MDc0ODQxWjAYMRYwFAYD VQQDEw02OWEzZWY1OS1iMTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApSA6SAPDVyOtd84bEVHf/1SkgBVeLnC3O7SVyx1Y8pUDH5ijVlRDlHZrl8Jx KoXlh9Wxsc3kbDO2dpE1qBMReX2Cq5vpI7Av0bRD33PNkDJWVC9h3/LpE9jhTKyp Kw1+uFd1sOhtaGPp2R3qgtrh5oqOOdj4ccR+zxDxv0LIjO2/9FH427WJijbtDN10 FI5xRvPmosIL5RhAHwql4vK6tSvVmuC1x0upirtS47GRI4ck1DyxSJFNDnwj2qzL MpY0XeXPS8G9hEC9BUzlDQf6gHNYyGIhVoI/qJJDYJ3PhFExDHN5/ybhWl5AuhXB SD+mZF5BHPojkh+b3he4Q3dRXQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBoNTkIg v9C2iGhKNNDfPHMu6eVSMB8GA1UdIwQYMBaAFIIF6XluxpoMc9w7WzzhLEgZK0V3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDIyMi84NzY0NDg5Q0NE N0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21neHozRHRiUE9Fc1NCa3JS WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnWHBlVzdHbWd4ejNEdGJQT0VzU0JrclJYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDIyMi84NzY0NDg5Q0NEN0YxMUVGQTU4NDg4MzhDNEY5QUUwMi9nZ1hwZVc3R21n eHozRHRiUE9Fc1NCa3JSWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGAiPTgzARimAPvZA/j4zKDTJuyh793OGNw2YZ8P0X202l/XN3AmkaGIYPBtQ YibKEBfVH3A8RiJZGzMhElJK3/7SG+1TvxHaRMp6NHMhtIGU1iVfpNDijprksox4 9gWqp9pS/SPuYJ05T6a04AsxoMD49Dj8ghQxnPzSsaFks8ltDzBPVNcPHPB2QHhe 7FGc836FKlINinb9w83qeeJQ42Lu/l58/qWorCGqzleX3yO777GIKn0o+guUOiAP pqqWTSCoCJ4FpEdNvl9kcWBDS0WL1WUE+HsKdH4GgLogQe9wjHb+49sLaLPLAeW3 zj+kRfFB37vXgolqCSg4IyV1lA== -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:38 2026 by rpki-client