$ rpki-client -vvf rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft File: MNcZ-cbTfirJ9NbUsffZeOwqMok.mft (raw, json) Hash identifier: mdWFmG6c7FeQ6MCz25LSOPwQe9eG+6TAnqj56EC2cnQ= Subject key identifier: 4F:8C:51:25:B5:52:9E:43:6C:E1:23:7A:A4:90:8F:5B:94:14:20:C7 Authority key identifier: 30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 Certificate issuer: /CN=A912434D/serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft Manifest number: 8C Signing time: Wed 25 Mar 2026 06:47:35 +0000 Manifest this update: Wed 25 Mar 2026 06:47:34 +0000 Manifest next update: Wed 01 Apr 2026 06:47:34 +0000 Files and hashes: 1: MNcZ-cbTfirJ9NbUsffZeOwqMok.crl (hash: 16QA5GdV+nS4U+4X+93uDukZVGZhO2ry/IxPaZDcpQI=) 2: CD9B554E58DF11F0A0F08D09C4F9AE02.roa (hash: OaRClTNTWcQXYlnD4cBkGyCqgiY8xb8R1pIP6cxJg0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912434D, serialNumber=30D719F9C6D37E2AC9F4D6D4B1F7D978EC2A3289 Validity Not Before: Mar 25 06:47:34 2026 GMT Not After : Apr 1 06:47:34 2026 GMT Subject: CN=69c38507-0cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:63:a6:99:c4:1e:34:a1:a9:9f:6b:29:52:d1: 53:a1:aa:ba:ea:df:bd:fe:75:a7:f8:20:8c:ed:7a: 95:ea:8d:57:e4:95:0b:5a:2e:83:f2:70:fa:35:52: 09:bd:e7:7f:9e:6e:96:dc:8f:ea:dd:9c:ae:9a:d1: 0a:69:fb:e9:62:d6:32:32:8d:5d:41:65:f2:af:57: ac:72:a6:85:27:1c:43:3a:60:57:70:fb:46:a2:e7: 0a:8b:5c:66:ef:53:49:cf:bd:2f:ce:a8:8b:3c:11: 2d:66:1d:08:84:6a:54:b6:50:84:28:a8:e5:de:e9: 9e:25:5e:a0:6a:75:59:87:d7:30:eb:29:0a:44:d3: 53:48:78:a9:e0:94:3c:ff:a5:90:d0:c0:5c:0d:3d: 6b:c2:28:c0:51:5b:e3:f5:b2:cc:64:25:9d:79:c5: 80:b5:7f:8f:86:ff:e6:90:ae:a3:95:9b:4e:4a:06: 2b:a4:fa:2e:0d:94:b0:dc:d4:9c:5a:df:f8:b9:77: 43:cf:af:d0:03:99:1d:db:d2:ea:dc:e4:53:3d:9b: 99:6e:c3:6f:6b:d1:dd:7e:b4:f2:b3:87:f7:e1:bc: c0:bb:18:80:4d:b7:27:ab:ee:fd:4f:17:21:ee:a8: 05:63:8e:dd:f4:52:b2:35:ea:e5:67:7c:fc:d8:65: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:51:25:B5:52:9E:43:6C:E1:23:7A:A4:90:8F:5B:94:14:20:C7 X509v3 Authority Key Identifier: keyid:30:D7:19:F9:C6:D3:7E:2A:C9:F4:D6:D4:B1:F7:D9:78:EC:2A:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MNcZ-cbTfirJ9NbUsffZeOwqMok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912434D/FC20913858DD11F08FAADE66C4F9AE02/MNcZ-cbTfirJ9NbUsffZeOwqMok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ff:12:5d:6d:7d:49:46:e8:5a:41:54:d8:83:5e:09:a5:8a: 4e:78:56:33:6b:42:91:a0:3a:85:53:20:9c:7a:df:bb:55:67: 30:a6:84:ea:ed:c2:5c:da:88:5c:66:64:13:6c:19:69:81:13: 15:88:53:42:81:15:83:54:23:00:bb:58:f8:52:a4:72:20:fc: 9b:52:a4:f3:01:8b:d4:fe:15:fb:37:08:3a:33:34:b6:b1:6a: a2:e1:56:dd:1d:43:f9:79:87:f5:49:26:96:7a:f3:92:e3:b7: d1:f7:2c:4c:1d:30:da:00:29:94:26:49:42:f0:51:0e:c7:bb: 0f:a7:3f:69:e9:0b:c3:c9:b6:a5:ce:22:80:62:ba:69:63:33: 60:b0:70:f2:68:c0:cb:ab:f4:b6:20:81:98:4e:94:e3:81:91: 3a:7e:9f:8e:a2:89:be:aa:59:ff:88:68:64:96:11:14:72:2c: 37:96:37:ee:1e:8b:d8:c6:a1:a9:28:e3:e1:c8:bb:42:c4:5c: fc:2d:64:f8:5b:ab:31:7d:ed:54:77:0c:89:95:a9:0a:18:f7: 4f:32:cb:07:96:f7:1d:db:19:b5:4e:19:22:6f:c6:ae:cd:e1: f6:90:b4:15:42:21:21:50:b3:26:54:db:86:49:15:eb:39:c9: 8e:5a:da:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQzNEQxMTAvBgNVBAUTKDMwRDcxOUY5QzZEMzdFMkFDOUY0RDZENEIxRjdEOTc4 RUMyQTMyODkwHhcNMjYwMzI1MDY0NzM0WhcNMjYwNDAxMDY0NzM0WjAYMRYwFAYD VQQDEw02OWMzODUwNy0wY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm2OmmcQeNKGpn2spUtFToaq66t+9/nWn+CCM7XqV6o1X5JULWi6D8nD6NVIJ ved/nm6W3I/q3ZyumtEKafvpYtYyMo1dQWXyr1escqaFJxxDOmBXcPtGoucKi1xm 71NJz70vzqiLPBEtZh0IhGpUtlCEKKjl3umeJV6ganVZh9cw6ykKRNNTSHip4JQ8 /6WQ0MBcDT1rwijAUVvj9bLMZCWdecWAtX+Phv/mkK6jlZtOSgYrpPouDZSw3NSc Wt/4uXdDz6/QA5kd29Lq3ORTPZuZbsNva9HdfrTys4f34bzAuxiATbcnq+79Txch 7qgFY47d9FKyNerlZ3z82GV23wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE+MUSW1 Up5DbOEjeqSQj1uUFCDHMB8GA1UdIwQYMBaAFDDXGfnG034qyfTW1LH32XjsKjKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDM0RC9GQzIwOTEzODU4 REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZpcko5TmJVc2ZmWmVPd3FN b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01OY1otY2JUZmlySjlOYlVzZmZaZU93cU1vay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDM0RC9GQzIwOTEzODU4REQxMUYwOEZBQURFNjZDNEY5QUUwMi9NTmNaLWNiVGZp cko5TmJVc2ZmWmVPd3FNb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIf8SXW19SUboWkFU2INeCaWKTnhWM2tCkaA6hVMgnHrfu1VnMKaE6u3CXNqI XGZkE2wZaYETFYhTQoEVg1QjALtY+FKkciD8m1Kk8wGL1P4V+zcIOjM0trFqouFW 3R1D+XmH9UkmlnrzkuO30fcsTB0w2gAplCZJQvBRDse7D6c/aekLw8m2pc4igGK6 aWMzYLBw8mjAy6v0tiCBmE6U44GROn6fjqKJvqpZ/4hoZJYRFHIsN5Y37h6L2Mah qSjj4ci7QsRc/C1k+FurMX3tVHcMiZWpChj3TzLLB5b3HdsZtU4ZIm/Grs3h9pC0 FUIhIVCzJlTbhkkV6znJjlraTQ== -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:37 2026 by rpki-client