$ rpki-client -vvf rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft File: p0YFy51QccoXKdkIeDRAfxTqhXA.mft (raw, json) Hash identifier: 9PSFgLXTq2S/XFm2nRtWOZwup+Cwn73DxoyUvud/0p4= Subject key identifier: 1B:57:4A:87:E9:82:2B:A8:78:00:66:34:4E:FF:5E:D1:CB:75:D7:06 Authority key identifier: A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 Certificate issuer: /CN=A911FABE/serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Certificate serial: 0CC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft Manifest number: 0CBC Signing time: Tue 24 Mar 2026 18:17:10 +0000 Manifest this update: Tue 24 Mar 2026 18:17:10 +0000 Manifest next update: Tue 31 Mar 2026 18:17:10 +0000 Files and hashes: 1: p0YFy51QccoXKdkIeDRAfxTqhXA.crl (hash: DgseQ5EAfqpq9nFroecJETFKYkw7r7FdiuepVskL8eA=) 2: 3E51F73E0C5111EAAF46A23FC4F9AE02.roa (hash: uaZx4UT5TdPMfrcPW0R83sm6zgQCWLRIUviUfv851Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3271 (0xcc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FABE, serialNumber=A74605CB9D5071CA1729D9087834407F14EA8570 Validity Not Before: Mar 24 18:17:10 2026 GMT Not After : Mar 31 18:17:10 2026 GMT Subject: CN=69c2d526-a0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:df:d4:09:61:5c:46:8e:44:7c:a6:99:17:3a: 6f:8d:82:7a:3e:c9:05:e6:85:2b:09:6b:87:63:27: 39:3f:de:52:c5:69:bc:ff:95:41:2a:7a:39:0e:63: bc:59:ce:d7:b0:5a:19:37:cc:47:d9:98:87:fc:53: c6:72:ce:df:77:00:fc:14:52:89:4e:09:d1:da:d2: ad:41:fa:cd:fd:94:81:ec:2f:ee:c4:1b:71:c0:89: 90:ca:18:70:80:24:c1:92:4d:ea:db:9e:f7:3b:ca: 88:f5:fa:c2:bd:6a:cf:63:c3:3b:4f:98:d1:8f:51: 70:32:97:29:41:04:62:98:52:a4:45:1f:32:a9:04: 8a:eb:f6:3f:e3:77:fd:90:f2:77:89:7e:33:e0:ea: 6c:44:b4:9a:b9:fa:c0:5f:26:af:57:16:4b:6d:bb: a1:ce:fb:a5:ae:9f:45:b2:e6:71:4c:84:63:ed:21: 1c:f1:05:97:eb:f4:4e:cf:5d:81:a0:29:ef:7e:be: df:63:5b:e6:2c:4a:4f:46:47:c9:a9:7d:76:87:8b: 31:43:bb:3a:18:71:44:67:fe:b1:8d:5a:be:2b:62: 1b:5e:e7:10:cf:5c:50:5b:34:ab:c3:93:88:24:0d: 09:f3:47:51:b4:e3:d6:d8:b9:dd:60:c2:12:97:a6: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:4A:87:E9:82:2B:A8:78:00:66:34:4E:FF:5E:D1:CB:75:D7:06 X509v3 Authority Key Identifier: keyid:A7:46:05:CB:9D:50:71:CA:17:29:D9:08:78:34:40:7F:14:EA:85:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0YFy51QccoXKdkIeDRAfxTqhXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FABE/A3F509F20C4F11EAA8C6B13CC4F9AE02/p0YFy51QccoXKdkIeDRAfxTqhXA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:86:90:d9:56:98:ac:e3:34:77:27:2c:90:ab:fd:80:f5:be: 2b:5f:c1:dc:3a:cb:a4:be:10:42:d5:e0:49:e1:22:e8:82:fd: 86:d9:16:9c:f7:50:1a:b1:af:84:ab:84:8b:6a:1a:20:f4:42: 80:7a:1d:c9:8b:7a:5b:b6:f8:e9:bf:89:23:5b:77:d4:a6:a2: 20:3e:49:e2:a9:8e:62:1f:91:af:61:1e:b8:2b:ab:95:2d:de: 66:87:d7:8f:5a:97:8f:0e:7f:72:b7:5b:1d:83:5c:0b:a7:b9: 17:07:cf:b7:99:41:ec:d0:3b:c9:07:5f:7e:8a:96:7c:15:55: 63:6e:f4:04:73:2e:25:29:8c:12:cf:de:e3:91:65:f1:e5:81: d1:32:3f:e5:3d:81:fe:b7:f5:b0:05:13:c6:e5:c5:f9:2c:b7: 3b:ff:75:65:34:8f:95:10:db:ac:8d:26:35:51:57:c9:6a:b7: ca:04:fd:82:30:0c:30:f3:79:50:4e:46:8c:5b:94:2c:8a:a4: 69:19:43:70:db:f5:d9:78:a2:13:23:e3:d2:5c:2c:ff:a8:97: 76:63:e0:09:c4:f0:37:fb:5e:a0:a6:66:f5:82:d1:9e:48:f6: c0:17:a0:82:f7:13:9e:73:49:0e:d0:e9:fe:a7:dd:42:18:b9: ff:64:43:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBQkUxMTAvBgNVBAUTKEE3NDYwNUNCOUQ1MDcxQ0ExNzI5RDkwODc4MzQ0MDdG MTRFQTg1NzAwHhcNMjYwMzI0MTgxNzEwWhcNMjYwMzMxMTgxNzEwWjAYMRYwFAYD VQQDEw02OWMyZDUyNi1hMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5t/UCWFcRo5EfKaZFzpvjYJ6PskF5oUrCWuHYyc5P95SxWm8/5VBKno5DmO8 Wc7XsFoZN8xH2ZiH/FPGcs7fdwD8FFKJTgnR2tKtQfrN/ZSB7C/uxBtxwImQyhhw gCTBkk3q2573O8qI9frCvWrPY8M7T5jRj1FwMpcpQQRimFKkRR8yqQSK6/Y/43f9 kPJ3iX4z4OpsRLSaufrAXyavVxZLbbuhzvulrp9FsuZxTIRj7SEc8QWX6/ROz12B oCnvfr7fY1vmLEpPRkfJqX12h4sxQ7s6GHFEZ/6xjVq+K2IbXucQz1xQWzSrw5OI JA0J80dRtOPW2LndYMISl6bQ3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBtXSofp giuoeABmNE7/XtHLddcGMB8GA1UdIwQYMBaAFKdGBcudUHHKFynZCHg0QH8U6oVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkFCRS9BM0Y1MDlGMjBD NEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNjb1hLZGtJZURSQWZ4VHFo WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwWUZ5NTFRY2NvWEtka0llRFJBZnhUcWhYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkFCRS9BM0Y1MDlGMjBDNEYxMUVBQThDNkIxM0NDNEY5QUUwMi9wMFlGeTUxUWNj b1hLZGtJZURSQWZ4VHFoWEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcIaQ2VaYrOM0dycskKv9gPW+K1/B3DrLpL4QQtXgSeEi6IL9htkWnPdQGrGv hKuEi2oaIPRCgHodyYt6W7b46b+JI1t31KaiID5J4qmOYh+Rr2EeuCurlS3eZofX j1qXjw5/crdbHYNcC6e5FwfPt5lB7NA7yQdffoqWfBVVY270BHMuJSmMEs/e45Fl 8eWB0TI/5T2B/rf1sAUTxuXF+Sy3O/91ZTSPlRDbrI0mNVFXyWq3ygT9gjAMMPN5 UE5GjFuULIqkaRlDcNv12XiiEyPj0lws/6iXdmPgCcTwN/teoKZm9YLRnkj2wBeg gvcTnnNJDtDp/qfdQhi5/2RDig== -----END CERTIFICATE-----Generated at Thu Mar 26 00:50:44 2026 by rpki-client