$ rpki-client -vvf rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft File: weInZRraO_vBh3GuyLYAJnI7YK0.mft (raw, json) Hash identifier: kFoICX3LHg0df2bucQQ4YBBZ/MEZaJvo62uZLQwwdOU= Subject key identifier: 67:1D:4A:D8:27:FE:32:4F:F4:47:2F:36:B0:95:5D:FD:89:58:06:B6 Authority key identifier: C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD Certificate issuer: /CN=A9112707/serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Certificate serial: 29B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft Manifest number: 2974 Signing time: Tue 24 Mar 2026 15:32:20 +0000 Manifest this update: Tue 24 Mar 2026 15:32:20 +0000 Manifest next update: Tue 31 Mar 2026 15:32:20 +0000 Files and hashes: 1: weInZRraO_vBh3GuyLYAJnI7YK0.crl (hash: YkbiSIyxmrtkPVywWeS7mWM9SgHm0K46bWpvmFV23bE=) 2: C3876BD8589D11EC9CF19A41C4F9AE02.roa (hash: er4abjooP2pzYLbFn4zXYhItU6fj/FaQ5TH/f8stFqc=) 3: 39932724578611EA8CC3B124C4F9AE02.roa (hash: 5xVxyBLTVv6TTJwr4d6CRZOAj/oOkKXh9D4XacOHsAU=) 4: 3AB3F80E578611EA8CC3B124C4F9AE02.roa (hash: C5FmIwbgprkig61fqNmKWaJWuBinr8tfV+3G1uObZOs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10672 (0x29b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112707, serialNumber=C1E227651ADA3BFBC18771AEC8B60026723B60AD Validity Not Before: Mar 24 15:32:20 2026 GMT Not After : Mar 31 15:32:20 2026 GMT Subject: CN=69c2ae84-d247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:02:e5:4e:6d:28:14:1b:fe:d0:13:f6:c5: 76:cc:6b:9d:39:f1:de:f1:14:ff:c4:20:2e:6b:20: 8d:94:fb:fd:9f:dc:4b:f5:ba:e9:88:8c:89:d0:e9: 68:b2:01:05:7f:17:ee:6f:a4:72:09:db:59:06:ec: a4:a1:ae:6d:b0:70:f3:dd:34:35:fa:36:31:7d:67: 7a:71:66:1d:eb:61:dd:3d:aa:b5:90:8d:dd:64:36: e8:6e:4d:04:05:9d:f0:53:da:c6:43:a9:6d:a4:75: e2:69:01:39:86:a4:6d:fa:22:c8:73:21:b6:a4:89: fa:42:89:71:77:51:99:e3:b0:b5:cd:dc:8b:f0:46: 9f:97:3d:1e:76:36:cf:63:94:3e:5c:e1:6c:59:04: b0:6d:f3:00:34:7c:40:2f:7c:32:ec:e7:e7:13:31: 1e:6b:34:a5:44:51:08:e6:df:e2:f5:48:74:ec:c5: 00:7e:f5:32:b0:a5:3d:1a:6b:28:07:e1:23:f3:12: c4:80:64:a8:2c:38:e3:06:5d:21:f9:4c:3d:f8:34: c9:2c:16:90:3b:a0:2f:b4:45:d2:14:2e:02:e0:9e: a3:4c:73:ea:5a:8e:8a:ce:56:09:5d:25:8d:ee:2a: 6b:e5:7b:51:38:99:d4:61:15:e4:40:46:db:65:a8: 64:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1D:4A:D8:27:FE:32:4F:F4:47:2F:36:B0:95:5D:FD:89:58:06:B6 X509v3 Authority Key Identifier: keyid:C1:E2:27:65:1A:DA:3B:FB:C1:87:71:AE:C8:B6:00:26:72:3B:60:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/weInZRraO_vBh3GuyLYAJnI7YK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112707/B4ACE16470B611E49CCAF16FC4F9AE02/weInZRraO_vBh3GuyLYAJnI7YK0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:4d:b8:91:bc:d1:61:3a:80:66:61:e8:34:a7:cf:5d:00:c9: 36:dd:36:c9:f5:75:bd:5d:3a:06:c3:e7:17:1d:38:fb:49:e1: ab:e3:02:be:13:55:3c:c9:09:a1:a8:ac:aa:92:ad:0b:75:35: 1d:bc:c9:0c:2a:a5:27:5b:72:53:36:eb:5a:05:86:f4:4b:60: 98:a6:c5:1b:84:e2:16:16:25:88:5e:c8:08:71:6c:fe:72:d8: 0b:12:4e:69:1b:e7:49:e8:1f:8c:55:37:3e:e6:e9:e4:f3:87: fa:b5:02:e6:8e:52:d7:9a:e1:6e:4b:01:53:e8:7f:8b:63:f0: ba:2b:e9:e5:be:1d:95:0e:e8:3b:5f:0e:24:87:83:e7:1e:b3: f1:12:15:f2:79:37:f4:d5:5d:e5:93:6a:07:e0:93:6a:59:eb: 54:90:f3:dd:8a:eb:d5:ff:cb:7f:e3:fb:2f:71:92:a0:6d:92: cb:c7:23:96:68:62:e0:13:ac:3c:e1:f6:fa:39:27:01:f3:e9: 58:2a:c1:7d:ad:69:5e:6b:89:fe:ca:6e:6f:fd:65:ee:a1:48: 42:e4:58:1b:c9:af:33:a9:04:45:84:c8:40:78:73:3d:59:82: 00:fc:87:41:7c:ba:68:8d:40:e8:5c:52:11:70:b9:ce:a2:e5: 17:bf:33:e6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICKbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI3MDcxMTAvBgNVBAUTKEMxRTIyNzY1MUFEQTNCRkJDMTg3NzFBRUM4QjYwMDI2 NzIzQjYwQUQwHhcNMjYwMzI0MTUzMjIwWhcNMjYwMzMxMTUzMjIwWjAYMRYwFAYD VQQDEw02OWMyYWU4NC1kMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArIYC5U5tKBQb/tAT9sV2zGudOfHe8RT/xCAuayCNlPv9n9xL9brpiIyJ0Olo sgEFfxfub6RyCdtZBuykoa5tsHDz3TQ1+jYxfWd6cWYd62HdPaq1kI3dZDbobk0E BZ3wU9rGQ6ltpHXiaQE5hqRt+iLIcyG2pIn6Qolxd1GZ47C1zdyL8Eaflz0edjbP Y5Q+XOFsWQSwbfMANHxAL3wy7OfnEzEeazSlRFEI5t/i9Uh07MUAfvUysKU9Gmso B+Ej8xLEgGSoLDjjBl0h+Uw9+DTJLBaQO6AvtEXSFC4C4J6jTHPqWo6KzlYJXSWN 7ipr5XtROJnUYRXkQEbbZahk+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGcdStgn /jJP9EcvNrCVXf2JWAa2MB8GA1UdIwQYMBaAFMHiJ2Ua2jv7wYdxrsi2ACZyO2Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjcwNy9CNEFDRTE2NDcw QjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9fdkJoM0d1eUxZQUpuSTdZ SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dlSW5aUnJhT192QmgzR3V5TFlBSm5JN1lLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjcwNy9CNEFDRTE2NDcwQjYxMUU0OUNDQUYxNkZDNEY5QUUwMi93ZUluWlJyYU9f dkJoM0d1eUxZQUpuSTdZSzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApU24kbzRYTqAZmHoNKfPXQDJNt02yfV1vV06BsPnFx04+0nhq+MCvhNVPMkJ oaisqpKtC3U1HbzJDCqlJ1tyUzbrWgWG9EtgmKbFG4TiFhYliF7ICHFs/nLYCxJO aRvnSegfjFU3Pubp5POH+rUC5o5S15rhbksBU+h/i2Pwuivp5b4dlQ7oO18OJIeD 5x6z8RIV8nk39NVd5ZNqB+CTalnrVJDz3Yrr1f/Lf+P7L3GSoG2Sy8cjlmhi4BOs POH2+jknAfPpWCrBfa1pXmuJ/spub/1l7qFIQuRYG8mvM6kERYTIQHhzPVmCAPyH QXy6aI1A6FxSEXC5zqLlF78z5g== -----END CERTIFICATE-----Generated at Thu Mar 26 03:33:18 2026 by rpki-client