$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft File: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft (raw, json) Hash identifier: HU3mHi4nI/ugEDQbP4JtQF3FOx+1bhSZQe3QrUK9Rjs= Subject key identifier: AF:57:07:D1:3E:C3:EB:83:6F:54:10:EB:5D:C5:E2:04:D9:BF:8C:0E Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Certificate serial: 0E0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft Manifest number: 0DC1 Signing time: Tue 24 Mar 2026 17:49:17 +0000 Manifest this update: Tue 24 Mar 2026 17:49:17 +0000 Manifest next update: Tue 31 Mar 2026 17:49:17 +0000 Files and hashes: 1: pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl (hash: c6dvJ8ipAh0Q6qg385xD/WBJjtEpUd8wWrxuCzEeRxc=) 2: 2CB6A79C3C6411F098BE6F2EC4F9AE02.roa (hash: RuLZBRWd/+t6mmzM5XIVRxFhH72vtVTpt1H02OxGyCU=) 3: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (hash: ystXqmcXsJu+zcIezcCOloYKjrlcgYih0bHHJpAVghU=) 4: 938E408897E011EB8870DB29C4F9AE02.roa (hash: QYBeeWDToObu5YeRRiPoZJxNZpiaZK2fKH61yIoBXno=) 5: 27F7A40AE4FD11E990830B62C4F9AE02.roa (hash: H2PKNA7ln5Tm1QO2PuY9P2UE8JnCTTe09zyZ/hYdcgw=) 6: 2BF876B43C6411F098BE6F2EC4F9AE02.roa (hash: 1banGzm3MHHPGNLwGEl4a4TqEDqIBnphlYgtOeIrAtM=) 7: 82F618E6187311F0A89EDE11C4F9AE02.roa (hash: xIQORAl53eQLWRRXQOIoiissQk7N3FpNzgw3AMp5Aho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3599 (0xe0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF Validity Not Before: Mar 24 17:49:17 2026 GMT Not After : Mar 31 17:49:17 2026 GMT Subject: CN=69c2ce9d-346f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:89:4e:31:56:a0:50:54:e6:0a:f3:a8:a6: ce:ab:ac:68:72:0b:9e:9b:86:a4:f0:95:be:fe:97: 33:ae:ac:42:4d:a8:e3:e4:3b:9b:2b:48:5b:18:60: 5e:14:b4:34:49:e7:ac:ba:76:82:8b:fb:c7:f2:5f: 67:25:9b:5b:af:57:ed:7a:5f:6f:08:71:30:c4:7a: 8e:a1:12:ca:b1:65:4f:99:f9:92:12:21:e6:51:80: 2d:b3:5a:c6:5a:a2:6a:63:60:90:5c:aa:e2:8a:6c: e9:e0:35:a9:74:5f:9c:68:3f:91:a0:87:fb:3b:90: cc:a9:10:57:0f:8f:ba:45:bd:34:c4:8e:63:1b:f9: 89:a8:44:57:e4:87:78:a6:f4:a2:f3:93:3c:82:db: d3:39:7e:e5:7d:c8:a0:f0:67:8e:da:d0:5a:2c:84: b5:38:1e:9a:45:f2:1b:aa:31:d4:98:bc:1d:eb:78: 7e:52:3d:52:5e:35:88:25:56:82:66:f4:b5:ea:a6: d9:dc:a9:19:76:58:27:2d:86:9c:7c:04:ae:d3:52: 31:5e:d3:ca:92:e2:5b:8c:d0:50:f9:04:a3:a5:a1: 56:df:57:a2:7c:1e:42:64:40:81:fd:28:96:ae:f4: 8f:4f:cf:e5:8a:92:0c:53:03:34:78:0f:ce:9c:a9: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:57:07:D1:3E:C3:EB:83:6F:54:10:EB:5D:C5:E2:04:D9:BF:8C:0E X509v3 Authority Key Identifier: keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a6:a7:3f:10:cc:63:f8:7b:b3:3d:fa:5a:2c:18:37:db:50: c2:88:b9:15:c5:7a:e1:73:fb:08:a4:6b:cf:a7:9c:b6:5c:1f: 2a:93:00:ce:6f:3e:bf:ea:8c:1d:d7:4e:cf:11:ad:6e:a3:25: a3:31:bb:94:0d:5a:ae:d6:ae:53:e2:42:57:01:af:2d:78:f9: 66:7b:91:26:e5:dd:f0:6a:dc:ed:9c:8c:76:56:a2:87:be:93: f4:6c:4b:a4:1b:ab:dd:75:b1:3f:02:8e:70:6d:9b:f3:b4:e8: a0:f2:9e:12:5e:68:38:f3:2d:3e:18:9b:ca:5b:05:ce:ff:41: f6:1a:f2:5d:95:c8:20:9b:c9:1f:90:6a:2a:a3:73:34:4e:19: 7c:48:0d:0f:87:b2:e5:06:13:af:1f:39:72:46:a9:5d:26:e1: c6:16:2c:7c:d7:8b:b6:3b:ae:a2:eb:bf:81:8a:bb:e9:53:14: 0d:6e:1b:4a:9b:cb:3d:b2:85:0b:3a:84:37:13:d4:d5:51:fe: b3:65:39:3b:46:73:c7:37:87:57:b7:0d:0a:eb:98:9a:b8:b3: 88:57:76:87:65:17:70:e3:c8:af:65:f7:52:9e:21:b0:4c:8a: 3d:55:1c:00:da:c6:f3:25:91:20:a6:d4:ed:34:da:56:dd:be: a5:d4:5d:6d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw ODc0OEQwREYwHhcNMjYwMzI0MTc0OTE3WhcNMjYwMzMxMTc0OTE3WjAYMRYwFAYD VQQDEw02OWMyY2U5ZC0zNDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmImJTjFWoFBU5grzqKbOq6xocguem4ak8JW+/pczrqxCTajj5DubK0hbGGBe FLQ0SeesunaCi/vH8l9nJZtbr1ftel9vCHEwxHqOoRLKsWVPmfmSEiHmUYAts1rG WqJqY2CQXKriimzp4DWpdF+caD+RoIf7O5DMqRBXD4+6Rb00xI5jG/mJqERX5Id4 pvSi85M8gtvTOX7lfcig8GeO2tBaLIS1OB6aRfIbqjHUmLwd63h+Uj1SXjWIJVaC ZvS16qbZ3KkZdlgnLYacfASu01IxXtPKkuJbjNBQ+QSjpaFW31eifB5CZECB/SiW rvSPT8/lipIMUwM0eA/OnKkkEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK9XB9E+ w+uDb1QQ613F4gTZv4wOMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0 RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REM0NC8yOUI2QkVEQUU0RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2 ZTkzX2kxTnhtMWdJZEkwTjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6anPxDMY/h7sz36WiwYN9tQwoi5FcV64XP7CKRrz6ectlwfKpMAzm8+v+qM HddOzxGtbqMlozG7lA1artauU+JCVwGvLXj5ZnuRJuXd8Grc7ZyMdlaih76T9GxL pBur3XWxPwKOcG2b87TooPKeEl5oOPMtPhibylsFzv9B9hryXZXIIJvJH5BqKqNz NE4ZfEgND4ey5QYTrx85ckapXSbhxhYsfNeLtjuuouu/gYq76VMUDW4bSpvLPbKF CzqENxPU1VH+s2U5O0ZzxzeHV7cNCuuYmriziFd2h2UXcOPIr2X3Up4hsEyKPVUc ANrG8yWRIKbU7TTaVt2+pdRdbQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:29:30 2026 by rpki-client