$ rpki-client -vvf rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft File: -0cfhBMIntcBvatArmPHiPUmq28.mft (raw, json) Hash identifier: Rsjd79Km7tWkhJ6nv4HNX82J3hCXiSXHOPibuAQ44V8= Subject key identifier: 62:02:32:EC:6E:B8:78:86:2A:CB:A4:0D:4F:31:83:F4:E1:68:95:83 Authority key identifier: FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F Certificate issuer: /CN=A91300DF/serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft Manifest number: 45 Signing time: Fri 27 Mar 2026 08:00:03 +0000 Manifest this update: Fri 27 Mar 2026 08:00:02 +0000 Manifest next update: Fri 03 Apr 2026 08:00:02 +0000 Files and hashes: 1: -0cfhBMIntcBvatArmPHiPUmq28.crl (hash: +gDc4D+uBHnvRHJQQPPDrrYYzh7ytWl71q5puJ3ELyA=) 2: 3824BA7ECBD411F08255F875C4F9AE02.roa (hash: ld7P2PELFqfVNXiU+jG2B0uLi23klkJ5bfoslPWrnms=) 3: 2EF9180CCBD211F0B173C128C4F9AE02.roa (hash: 89NQPcLshXPkKgPq6c+ywAb5yirtq9AA9hqm/7FcBQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:00:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300DF, serialNumber=FB471F8413089ED701BDAB40AE63C788F526AB6F Validity Not Before: Mar 27 08:00:02 2026 GMT Not After : Apr 3 08:00:02 2026 GMT Subject: CN=69c63903-9e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:03:38:e5:00:ad:88:c5:44:81:bd:3d:b4:d5: 64:f4:28:eb:c7:90:6d:83:e2:df:a7:91:5d:6b:0d: 20:e1:25:e4:6e:e8:95:2f:9f:60:7c:2b:93:e0:a7: 4a:30:e2:ba:a6:f6:92:b6:32:8f:f1:90:aa:44:8f: 61:0d:d9:88:24:5d:db:b1:c4:ae:8a:8e:07:75:14: 83:20:3e:47:37:a4:1e:e7:d8:01:f2:91:01:cc:bd: a5:04:45:fc:e5:f8:0d:2b:e5:38:c2:7f:b0:1f:a7: a0:24:cc:e4:b0:9d:4e:40:a2:ff:e3:58:e1:60:9e: 3b:21:37:ff:1f:50:15:fe:6d:26:24:71:d6:c4:43: 95:af:5b:f3:6e:67:b7:fc:42:55:e5:3f:c8:90:07: ff:d5:2a:19:ec:66:f2:49:fe:f8:62:f7:d1:5c:3e: e5:60:74:cf:ee:5d:bf:5e:b0:b8:59:13:f9:87:db: d3:50:79:85:6b:3c:f2:30:22:96:16:0f:4c:60:28: 80:24:90:b1:53:08:84:3e:37:29:07:1e:2d:9f:47: ed:66:50:b5:9a:c6:d1:fc:1e:eb:10:49:0c:7b:f2: ce:e9:38:e9:e5:cb:9d:a4:90:19:96:14:b4:33:a4: e6:cf:e2:10:59:3d:80:f3:4f:79:03:1f:51:72:d1: 29:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:02:32:EC:6E:B8:78:86:2A:CB:A4:0D:4F:31:83:F4:E1:68:95:83 X509v3 Authority Key Identifier: keyid:FB:47:1F:84:13:08:9E:D7:01:BD:AB:40:AE:63:C7:88:F5:26:AB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0cfhBMIntcBvatArmPHiPUmq28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300DF/27778F38CBD111F0A76FFD26C4F9AE02/-0cfhBMIntcBvatArmPHiPUmq28.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:22:37:4d:59:0c:b8:ec:4a:a8:d2:3f:0a:5a:cb:95:0d:23: 67:f9:05:a1:48:7a:ed:63:36:66:02:29:25:ed:42:f5:b7:93: ef:a8:bd:5c:3c:8e:13:47:4f:f6:58:86:04:d1:bb:81:cb:84: 2e:e9:05:a0:66:3e:9f:c9:e6:0b:4b:13:72:57:ed:db:bb:87: ca:44:40:57:89:85:f1:ea:0a:f5:20:6a:35:91:bf:c0:a0:4a: 5d:6d:ce:52:a4:79:74:bb:28:da:c6:bb:72:5a:54:d1:e7:27: ce:cf:a2:54:23:40:df:72:58:f4:59:be:ae:ea:7d:47:5b:66: 9f:8f:a7:c3:5b:08:1d:f2:24:b6:95:a8:a7:bd:a0:81:77:b3: b7:51:8c:76:d7:ff:45:d4:c7:1e:84:55:1e:3d:28:0c:1f:c4: d0:80:16:96:ae:c4:80:c3:cf:d4:74:6a:1d:8f:09:b5:a6:ab: ba:11:c0:f6:f9:70:51:10:9b:9d:18:56:2e:4a:90:8d:e7:80: 2f:3f:b7:60:93:43:c8:27:ff:90:10:34:ef:bb:79:bf:a2:9b: ce:65:24:9a:03:08:85:62:0d:8b:9b:9e:f8:1a:fc:26:b0:9c: b0:37:b0:00:15:a0:6c:07:4a:7c:75:77:c3:78:1e:14:61:ff: c5:14:a2:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDBERjExMC8GA1UEBRMoRkI0NzFGODQxMzA4OUVENzAxQkRBQjQwQUU2M0M3ODhG NTI2QUI2RjAeFw0yNjAzMjcwODAwMDJaFw0yNjA0MDMwODAwMDJaMBgxFjAUBgNV BAMTDTY5YzYzOTAzLTllM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOAzjlAK2IxUSBvT201WT0KOvHkG2D4t+nkV1rDSDhJeRu6JUvn2B8K5Pgp0ow 4rqm9pK2Mo/xkKpEj2EN2YgkXduxxK6Kjgd1FIMgPkc3pB7n2AHykQHMvaUERfzl +A0r5TjCf7Afp6AkzOSwnU5Aov/jWOFgnjshN/8fUBX+bSYkcdbEQ5WvW/NuZ7f8 QlXlP8iQB//VKhnsZvJJ/vhi99FcPuVgdM/uXb9esLhZE/mH29NQeYVrPPIwIpYW D0xgKIAkkLFTCIQ+NykHHi2fR+1mULWaxtH8HusQSQx78s7pOOnly52kkBmWFLQz pObP4hBZPYDzT3kDH1Fy0SnhAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUYgIy7G64 eIYqy6QNTzGD9OFolYMwHwYDVR0jBBgwFoAU+0cfhBMIntcBvatArmPHiPUmq28w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwMERGLzI3Nzc4RjM4Q0JE MTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRjQnZhdEFybVBIaVBVbXEy OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTBjZmhCTUludGNCdmF0QXJtUEhpUFVtcTI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw MERGLzI3Nzc4RjM4Q0JEMTExRjBBNzZGRkQyNkM0RjlBRTAyLy0wY2ZoQk1JbnRj QnZhdEFybVBIaVBVbXEyOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBxIjdNWQy47Eqo0j8KWsuVDSNn+QWhSHrtYzZmAikl7UL1t5PvqL1cPI4TR0/2 WIYE0buBy4Qu6QWgZj6fyeYLSxNyV+3bu4fKREBXiYXx6gr1IGo1kb/AoEpdbc5S pHl0uyjaxrtyWlTR5yfOz6JUI0Dfclj0Wb6u6n1HW2afj6fDWwgd8iS2lainvaCB d7O3UYx21/9F1McehFUePSgMH8TQgBaWrsSAw8/UdGodjwm1pqu6EcD2+XBREJud GFYuSpCN54AvP7dgk0PIJ/+QEDTvu3m/opvOZSSaAwiFYg2Lm574GvwmsJywN7AA FaBsB0p8dXfDeB4UYf/FFKJO -----END CERTIFICATE-----Generated at Sat Mar 28 10:29:38 2026 by rpki-client