$ rpki-client -vvf rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft File: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft (raw, json) Hash identifier: w/yx1w4o6p359xF8T+f/nHEpT2iOPhtw541vPcPd8WY= Subject key identifier: 1F:3F:CF:2B:C5:A6:D4:A4:DE:A5:D9:4D:42:4F:55:C0:62:48:1E:42 Authority key identifier: FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 Certificate issuer: /CN=A912E80C/serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft Manifest number: 0173 Signing time: Wed 25 Mar 2026 04:03:03 +0000 Manifest this update: Wed 25 Mar 2026 04:03:03 +0000 Manifest next update: Wed 01 Apr 2026 04:03:03 +0000 Files and hashes: 1: _rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl (hash: OAWav0QGQ9/RAhMb+rCFk1HQaF73uAK1txOlxrleiJA=) 2: 32E0DD6C08B711F093F40267C4F9AE02.roa (hash: 2ellNRlwY42MkXpWnmM+ozSlo+CKpxRxxIeyECBplIk=) 3: 00A86A6CFBFD11EE9D83BD5AC4F9AE02.roa (hash: tOBXs2mwjQoINSIsKvJ/8CO3orjAsprqjGJFiI6hOtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E80C, serialNumber=FEBB4276675A04754A5353D5707E57921CDF4392 Validity Not Before: Mar 25 04:03:03 2026 GMT Not After : Apr 1 04:03:03 2026 GMT Subject: CN=69c35e77-0c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3a:4c:5a:95:55:13:70:aa:57:87:24:f0:ca: 17:40:8f:46:8d:ff:80:7f:bd:1e:ee:0a:47:e2:f0: 0d:bf:74:3a:67:99:6a:99:d8:46:c6:3f:b2:d7:e8: 30:43:87:5f:65:8a:b1:d2:31:7b:a4:d3:5b:aa:44: 12:31:93:a6:9a:5e:3b:5e:f8:b3:11:a0:16:78:e4: c0:dc:d1:45:1f:15:2b:34:38:20:83:6f:8c:51:e0: ab:f7:fe:c3:51:cf:61:bd:1a:26:5f:98:fe:5e:74: db:04:5c:31:cd:a4:74:60:f5:f9:9b:24:bf:f9:5b: 24:3f:6d:a0:15:ac:5d:1b:44:08:fe:4f:3f:16:25: a6:da:1f:2c:b1:f4:f2:6c:7e:4d:5a:cc:b7:76:46: 86:8d:1c:2e:b6:55:c8:4d:63:d0:00:17:0f:0e:9e: 9c:01:4e:c7:a1:ae:6a:bb:e2:e2:05:c1:ad:00:30: 76:67:f8:53:68:2a:97:8b:95:77:e5:c4:35:fd:93: 76:dc:e8:21:10:13:68:4a:fd:3d:6a:fa:79:50:f9: 61:a3:3e:0b:4b:c3:a4:28:e5:c7:35:e8:df:8e:cf: c4:10:4a:5e:0e:2a:a3:00:12:15:bb:e8:63:22:07: 0b:0b:1f:65:3d:41:7f:e8:52:67:fc:3a:07:b5:39: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3F:CF:2B:C5:A6:D4:A4:DE:A5:D9:4D:42:4F:55:C0:62:48:1E:42 X509v3 Authority Key Identifier: keyid:FE:BB:42:76:67:5A:04:75:4A:53:53:D5:70:7E:57:92:1C:DF:43:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E80C/9AD8B554FBFA11EEAEE5FE1EC4F9AE02/_rtCdmdaBHVKU1PVcH5XkhzfQ5I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4f:a1:b6:f6:03:1c:55:52:52:5a:5a:41:57:e5:e2:38:2b: 35:6f:15:b6:26:67:c7:00:b2:69:37:21:ee:d1:c8:19:da:ff: e3:ab:fd:11:7c:43:b2:74:b4:d7:c3:bf:73:72:81:41:4d:07: 14:06:8b:a2:77:77:4e:c5:ba:17:8b:d7:a6:9d:67:1b:ab:16: 87:07:0b:f0:ce:13:c5:aa:0c:a3:33:71:fa:87:b8:1e:03:91: 96:61:27:28:21:32:f1:f1:e6:ee:42:1e:d8:cd:a2:6b:7e:5f: f6:a9:56:cb:35:30:cf:35:4e:d7:c5:92:ab:7a:45:69:4f:ab: 46:0b:ca:b5:7f:a2:f4:3f:2e:9c:b1:41:84:29:82:2c:8a:14: b5:3f:c8:e0:e7:ba:ca:ec:ed:80:cd:04:65:98:d6:de:7b:1b: 1b:7e:5c:e3:c6:8f:e6:ae:de:ec:c9:cc:a1:75:47:c6:fa:23: 45:3e:28:db:8e:90:83:d8:dc:aa:4d:0f:76:89:14:e0:13:b1: f4:91:c7:65:c6:14:f0:3e:da:5c:6f:16:e5:91:be:f9:f1:81: fe:6c:ef:c0:b0:f2:7c:85:39:29:a5:a6:26:7d:66:31:dc:43: 5d:6f:5a:df:57:8d:19:78:64:46:38:54:38:a3:b2:c5:f1:de: 99:c4:46:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4MEMxMTAvBgNVBAUTKEZFQkI0Mjc2Njc1QTA0NzU0QTUzNTNENTcwN0U1Nzky MUNERjQzOTIwHhcNMjYwMzI1MDQwMzAzWhcNMjYwNDAxMDQwMzAzWjAYMRYwFAYD VQQDEw02OWMzNWU3Ny0wYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjpMWpVVE3CqV4ck8MoXQI9Gjf+Af70e7gpH4vANv3Q6Z5lqmdhGxj+y1+gw Q4dfZYqx0jF7pNNbqkQSMZOmml47XvizEaAWeOTA3NFFHxUrNDggg2+MUeCr9/7D Uc9hvRomX5j+XnTbBFwxzaR0YPX5myS/+VskP22gFaxdG0QI/k8/FiWm2h8ssfTy bH5NWsy3dkaGjRwutlXITWPQABcPDp6cAU7Hoa5qu+LiBcGtADB2Z/hTaCqXi5V3 5cQ1/ZN23OghEBNoSv09avp5UPlhoz4LS8OkKOXHNejfjs/EEEpeDiqjABIVu+hj IgcLCx9lPUF/6FJn/DoHtTmfwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB8/zyvF ptSk3qXZTUJPVcBiSB5CMB8GA1UdIwQYMBaAFP67QnZnWgR1SlNT1XB+V5Ic30OS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTgwQy85QUQ4QjU1NEZC RkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJIVktVMVBWY0g1WGtoemZR NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ydENkbWRhQkhWS1UxUFZjSDVYa2h6ZlE1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTgwQy85QUQ4QjU1NEZCRkExMUVFQUVFNUZFMUVDNEY5QUUwMi9fcnRDZG1kYUJI VktVMVBWY0g1WGtoemZRNUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtE+htvYDHFVSUlpaQVfl4jgrNW8VtiZnxwCyaTch7tHIGdr/46v9EXxDsnS0 18O/c3KBQU0HFAaLond3TsW6F4vXpp1nG6sWhwcL8M4TxaoMozNx+oe4HgORlmEn KCEy8fHm7kIe2M2ia35f9qlWyzUwzzVO18WSq3pFaU+rRgvKtX+i9D8unLFBhCmC LIoUtT/I4Oe6yuztgM0EZZjW3nsbG35c48aP5q7e7MnMoXVHxvojRT4o246Qg9jc qk0PdokU4BOx9JHHZcYU8D7aXG8W5ZG++fGB/mzvwLDyfIU5KaWmJn1mMdxDXW9a 31eNGXhkRjhUOKOyxfHemcRGmA== -----END CERTIFICATE-----Generated at Thu Mar 26 06:11:06 2026 by rpki-client