$ rpki-client -vvf rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft File: 40soVCBWzp4GUP78CrEkIWy1-cE.mft (raw, json) Hash identifier: zs8yh/HvBMcR+AORoe3hyFNlk0TUDVMIlfIshsJqIPs= Subject key identifier: 08:05:D1:65:D6:00:72:59:57:23:74:03:5C:A9:B9:0E:92:46:52:8A Authority key identifier: E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 Certificate issuer: /CN=A911C6E1/serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft Manifest number: 0376 Signing time: Wed 25 Mar 2026 00:30:14 +0000 Manifest this update: Wed 25 Mar 2026 00:30:14 +0000 Manifest next update: Wed 01 Apr 2026 00:30:14 +0000 Files and hashes: 1: 40soVCBWzp4GUP78CrEkIWy1-cE.crl (hash: EKsG/1lvc2xoLK+y0NGmSyiSmUcF87H18XceriLt/3I=) 2: FB1BF574E7E411EC84283679C4F9AE02.roa (hash: bukBEThLb8LLsXrODRbnH9Gix64A0cuXZRIF6w/C3PQ=) 3: FBB9FE90E7E411EC84283679C4F9AE02.roa (hash: EnYUnwhxxmGS1rufxU7RsXLHu/nIHXPSapF4Xv6tzXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C6E1, serialNumber=E34B28542056CE9E0650FEFC0AB124216CB5F9C1 Validity Not Before: Mar 25 00:30:14 2026 GMT Not After : Apr 1 00:30:14 2026 GMT Subject: CN=69c32c96-f066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:17:ad:a0:96:fb:10:cf:ae:c9:c4:5c:56: ae:dc:22:26:78:d9:6f:9a:00:2d:9a:6e:ce:0d:bf: 8b:b3:0b:79:b2:04:2d:e5:64:19:20:68:ec:6d:81: 7e:62:c2:b7:4d:7c:73:58:23:1f:ac:6f:5a:97:47: 5e:c3:7d:fd:cc:0b:32:4c:b6:37:00:d8:3e:98:9d: 3b:83:a2:b8:e8:0c:10:0c:3a:15:6e:3c:0f:0c:50: 90:f3:ee:a0:df:02:ff:d2:c9:ed:6c:5a:c8:38:60: c8:87:e4:da:9b:23:e4:36:10:18:cd:79:45:7d:72: a1:1f:6b:a8:1e:24:c2:bf:21:df:cd:ea:65:a3:89: 0f:ce:61:46:2c:f6:72:e4:4a:e8:52:cd:23:2b:89: 41:ec:5d:73:3d:12:94:72:75:a3:af:75:73:df:d1: 3d:68:40:9f:c7:f5:30:32:f9:b5:cd:42:e5:31:ea: 8a:aa:5e:f1:73:7d:4a:42:52:33:99:9c:91:4a:45: ec:8b:da:b4:f0:09:e3:86:9f:5c:a2:1c:bc:a0:73: 4d:2d:76:6b:d8:c3:5e:b1:cc:4d:d5:8e:d6:f5:a1: 5c:95:e1:dc:35:be:00:d3:03:a9:84:8d:01:c2:9b: 16:17:7e:e9:ff:3f:60:ea:bc:63:26:42:5d:0e:42: a9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:05:D1:65:D6:00:72:59:57:23:74:03:5C:A9:B9:0E:92:46:52:8A X509v3 Authority Key Identifier: keyid:E3:4B:28:54:20:56:CE:9E:06:50:FE:FC:0A:B1:24:21:6C:B5:F9:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/40soVCBWzp4GUP78CrEkIWy1-cE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C6E1/A57D86D8E7DE11EC8D8C5C5DC4F9AE02/40soVCBWzp4GUP78CrEkIWy1-cE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:82:6e:e2:ba:c7:fb:e4:74:a7:21:98:96:fb:bc:a2:82:d0: bb:d9:a1:f5:c6:ed:c4:53:d8:37:b8:06:73:1b:91:73:a5:26: 55:7a:f7:4f:15:42:80:b6:d9:17:d3:bd:4e:c8:19:6b:18:37: d2:16:fe:de:40:c4:42:bb:6d:b7:51:c6:26:36:3b:37:f2:03: 3a:c2:7c:e2:3d:33:b5:f2:9e:a7:dc:b3:ae:12:f5:54:d3:09: 2e:53:06:9d:eb:6a:55:f3:88:f5:2c:1b:ab:ec:2d:24:e5:96: 77:01:96:5b:b5:c8:b8:1f:62:5c:17:7a:95:d9:0b:53:35:66: 8e:ae:08:ca:2b:a5:4e:49:e7:2f:6f:00:17:e6:b5:b9:fd:21: ab:9b:a7:b5:de:bf:bd:e4:f8:e1:5d:97:84:9c:cf:28:46:e4: 4d:f7:c8:58:58:39:3e:29:d9:02:45:7f:6a:b8:45:33:ad:59: a6:21:5c:d1:8c:a2:ab:8c:b0:cb:61:7a:39:f5:ae:bf:b9:f9: 1a:ec:60:8f:a4:5b:86:48:91:aa:4f:65:81:22:09:3d:b4:fa: b7:50:61:8a:c2:17:40:eb:9f:29:83:45:5b:77:9b:ff:88:a6: 09:05:9d:5a:63:33:b6:71:79:27:48:0c:6d:05:16:68:40:1c: 73:eb:8d:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2RTExMTAvBgNVBAUTKEUzNEIyODU0MjA1NkNFOUUwNjUwRkVGQzBBQjEyNDIx NkNCNUY5QzEwHhcNMjYwMzI1MDAzMDE0WhcNMjYwNDAxMDAzMDE0WjAYMRYwFAYD VQQDEw02OWMzMmM5Ni1mMDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe0XraCW+xDPrsnEXFau3CImeNlvmgAtmm7ODb+Lswt5sgQt5WQZIGjsbYF+ YsK3TXxzWCMfrG9al0dew339zAsyTLY3ANg+mJ07g6K46AwQDDoVbjwPDFCQ8+6g 3wL/0sntbFrIOGDIh+TamyPkNhAYzXlFfXKhH2uoHiTCvyHfzeplo4kPzmFGLPZy 5EroUs0jK4lB7F1zPRKUcnWjr3Vz39E9aECfx/UwMvm1zULlMeqKql7xc31KQlIz mZyRSkXsi9q08Anjhp9cohy8oHNNLXZr2MNescxN1Y7W9aFcleHcNb4A0wOphI0B wpsWF37p/z9g6rxjJkJdDkKpnwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAgF0WXW AHJZVyN0A1ypuQ6SRlKKMB8GA1UdIwQYMBaAFONLKFQgVs6eBlD+/AqxJCFstfnB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzZFMS9BNTdEODZEOEU3 REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pwNEdVUDc4Q3JFa0lXeTEt Y0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQwc29WQ0JXenA0R1VQNzhDckVrSVd5MS1jRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzZFMS9BNTdEODZEOEU3REUxMUVDOEQ4QzVDNURDNEY5QUUwMi80MHNvVkNCV3pw NEdVUDc4Q3JFa0lXeTEtY0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEoJu4rrH++R0pyGYlvu8ooLQu9mh9cbtxFPYN7gGcxuRc6UmVXr3TxVCgLbZ F9O9TsgZaxg30hb+3kDEQrttt1HGJjY7N/IDOsJ84j0ztfKep9yzrhL1VNMJLlMG netqVfOI9Swbq+wtJOWWdwGWW7XIuB9iXBd6ldkLUzVmjq4IyiulTknnL28AF+a1 uf0hq5untd6/veT44V2XhJzPKEbkTffIWFg5PinZAkV/arhFM61ZpiFc0Yyiq4yw y2F6OfWuv7n5Guxgj6RbhkiRqk9lgSIJPbT6t1BhisIXQOufKYNFW3eb/4imCQWd WmMztnF5J0gMbQUWaEAcc+uNCw== -----END CERTIFICATE-----Generated at Thu Mar 26 12:26:49 2026 by rpki-client