$ rpki-client -vvf rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft File: PSzMkYN0TcaWqFVry5BDhI6V33A.mft (raw, json) Hash identifier: yhS4JiZP+m4DUrWR+FHzs1ETx2MyqStEOTCbvB8+vxE= Subject key identifier: B3:6B:15:45:D6:71:DC:46:D4:31:CD:BB:19:AB:3E:01:28:C0:B4:D3 Authority key identifier: 3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 Certificate issuer: /CN=A912D826/serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft Manifest number: 040C Signing time: Wed 25 Mar 2026 00:05:55 +0000 Manifest this update: Wed 25 Mar 2026 00:05:54 +0000 Manifest next update: Wed 01 Apr 2026 00:05:54 +0000 Files and hashes: 1: PSzMkYN0TcaWqFVry5BDhI6V33A.crl (hash: zDbJxL0LWgv2xH6oHiKd3Bd6AkG2eVdEQIrgdiZjQnY=) 2: 804B03560A7211EE8FA2CD58C4F9AE02.roa (hash: z2OhdPMwGARwsygkXKL5+seQhn3qhypW7aqEbjuQNjw=) 3: 69A20286514B11F0B8A8C66DC4F9AE02.roa (hash: UqMTyedDOgPXx2/ApOobJtWh/Yn3PViSxGTlstMiJvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D826, serialNumber=3D2CCC9183744DC696A8556BCB9043848E95DF70 Validity Not Before: Mar 25 00:05:54 2026 GMT Not After : Apr 1 00:05:54 2026 GMT Subject: CN=69c326e3-e05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b2:75:a4:76:69:ff:55:89:20:37:3d:c3:8a: 14:c5:73:a2:19:8e:fc:32:d9:11:6c:ed:41:e4:23: 46:07:3e:0d:65:09:ec:ff:a2:46:db:9b:81:63:a0: 85:4b:20:2a:25:56:90:e3:cf:78:a9:0d:10:43:75: f5:35:6c:02:51:07:f4:2c:ee:da:10:15:83:b2:2d: 71:05:e1:22:fc:1b:cf:7a:ee:f2:d2:8e:f9:50:41: 24:01:fa:35:b4:01:03:f5:78:bc:7d:00:0d:d4:3e: b5:9e:fb:5f:97:76:e4:cf:9a:a2:07:58:93:a7:da: e3:30:51:5c:5f:e8:b3:e6:b8:44:32:b1:17:2d:a6: 96:19:db:ae:a9:ce:7d:4b:48:a7:75:3e:2f:7c:c2: 45:fd:95:ce:09:0f:e6:71:74:48:df:90:3e:8b:8d: 32:66:2c:91:03:28:2c:af:40:10:73:36:63:16:5d: e4:51:cc:f1:73:5e:a7:00:3e:53:a0:1d:00:82:3c: 82:c5:49:66:39:33:b9:23:18:84:dd:5a:4b:d7:3b: 3b:d4:6d:cc:d7:d0:b4:31:99:95:c4:13:b1:5f:f0: 07:05:15:c3:42:67:e6:90:5c:db:2a:ea:83:60:1e: 6c:40:25:10:09:ee:cf:41:dd:76:34:11:4a:7a:8f: 07:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6B:15:45:D6:71:DC:46:D4:31:CD:BB:19:AB:3E:01:28:C0:B4:D3 X509v3 Authority Key Identifier: keyid:3D:2C:CC:91:83:74:4D:C6:96:A8:55:6B:CB:90:43:84:8E:95:DF:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSzMkYN0TcaWqFVry5BDhI6V33A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D826/CF4E1D74AE4A11EC846F3F68C4F9AE02/PSzMkYN0TcaWqFVry5BDhI6V33A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:73:6c:4e:91:a4:af:44:d1:0c:2c:54:7a:04:17:76:5d:bd: 8f:60:e1:75:ab:45:8c:c1:08:5e:d9:9d:15:fd:58:96:ac:08: 6d:1a:67:df:8b:3e:a5:3e:60:41:13:48:ef:04:7e:36:7b:de: 5c:e9:b5:99:86:2c:93:77:63:0e:c1:d1:a3:6f:63:84:02:f5: e0:7c:c7:38:78:bb:3e:f2:12:b8:bd:65:e4:aa:d6:e7:bb:fe: 55:d4:b7:ea:11:0d:17:6d:de:d8:95:da:ed:ea:83:5b:9f:0f: ea:9d:53:6a:48:a0:8e:7d:d2:52:a6:24:ee:b6:db:86:b7:ad: 51:9d:f7:9a:b9:c2:da:0e:eb:e9:9c:2a:e8:e9:ba:27:4a:a0: a4:62:c9:29:aa:6b:f9:24:32:7b:e6:52:3d:39:b5:43:8e:5e: 78:d5:b3:58:af:ec:e5:4b:52:2d:76:62:29:8e:ff:7a:e3:36: 51:d3:f7:0f:b8:ef:ce:3b:01:d2:e5:ca:18:24:fb:d9:24:b9: 1a:ab:bc:2b:d3:aa:e1:f1:c9:e0:c8:ba:bc:80:91:e3:c8:3c: d0:23:8b:a9:e1:6d:56:23:65:74:4f:e1:d8:59:44:6b:3f:e4: be:84:ae:d4:4e:b5:07:f6:20:ea:29:db:69:64:cc:f1:cc:de: 11:95:1a:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ4MjYxMTAvBgNVBAUTKDNEMkNDQzkxODM3NDREQzY5NkE4NTU2QkNCOTA0Mzg0 OEU5NURGNzAwHhcNMjYwMzI1MDAwNTU0WhcNMjYwNDAxMDAwNTU0WjAYMRYwFAYD VQQDEw02OWMzMjZlMy1lMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrJ1pHZp/1WJIDc9w4oUxXOiGY78MtkRbO1B5CNGBz4NZQns/6JG25uBY6CF SyAqJVaQ4894qQ0QQ3X1NWwCUQf0LO7aEBWDsi1xBeEi/BvPeu7y0o75UEEkAfo1 tAED9Xi8fQAN1D61nvtfl3bkz5qiB1iTp9rjMFFcX+iz5rhEMrEXLaaWGduuqc59 S0indT4vfMJF/ZXOCQ/mcXRI35A+i40yZiyRAygsr0AQczZjFl3kUczxc16nAD5T oB0AgjyCxUlmOTO5IxiE3VpL1zs71G3M19C0MZmVxBOxX/AHBRXDQmfmkFzbKuqD YB5sQCUQCe7PQd12NBFKeo8H9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLNrFUXW cdxG1DHNuxmrPgEowLTTMB8GA1UdIwQYMBaAFD0szJGDdE3GlqhVa8uQQ4SOld9w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDgyNi9DRjRFMUQ3NEFF NEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRjYVdxRlZyeTVCRGhJNlYz M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTek1rWU4wVGNhV3FGVnJ5NUJEaEk2VjMzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDgyNi9DRjRFMUQ3NEFFNEExMUVDODQ2RjNGNjhDNEY5QUUwMi9QU3pNa1lOMFRj YVdxRlZyeTVCRGhJNlYzM0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjXNsTpGkr0TRDCxUegQXdl29j2DhdatFjMEIXtmdFf1YlqwIbRpn34s+pT5g QRNI7wR+NnveXOm1mYYsk3djDsHRo29jhAL14HzHOHi7PvISuL1l5KrW57v+VdS3 6hENF23e2JXa7eqDW58P6p1Takigjn3SUqYk7rbbhretUZ33mrnC2g7r6Zwq6Om6 J0qgpGLJKapr+SQye+ZSPTm1Q45eeNWzWK/s5UtSLXZiKY7/euM2UdP3D7jvzjsB 0uXKGCT72SS5Gqu8K9Oq4fHJ4Mi6vICR48g80COLqeFtViNldE/h2FlEaz/kvoSu 1E61B/Yg6inbaWTM8czeEZUasw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:37 2026 by rpki-client