$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft File: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json) Hash identifier: st/kN8cbVyFILrd22u5g7P/WGUH9puQbbqripwUGPHQ= Subject key identifier: 44:65:2B:DD:77:B7:03:48:71:38:D6:34:31:73:54:33:C4:F1:14:8B Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A Certificate issuer: /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Certificate serial: 0406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft Manifest number: 03E4 Signing time: Wed 25 Mar 2026 00:14:24 +0000 Manifest this update: Wed 25 Mar 2026 00:14:23 +0000 Manifest next update: Wed 01 Apr 2026 00:14:23 +0000 Files and hashes: 1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: rw0q6xTlcFXTcEy9a2PIDmvL60NyD5ckBN8o8TjSvIE=) 2: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=) 3: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=) 4: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:14:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1030 (0x406) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A Validity Not Before: Mar 25 00:14:23 2026 GMT Not After : Apr 1 00:14:23 2026 GMT Subject: CN=69c328e0-529d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:36:93:38:d4:53:4e:44:1f:8a:a9:42:49:a1: f9:16:21:da:b4:0d:d5:52:d6:60:f7:e3:dc:6c:52: e3:c1:5a:6c:c0:4b:fa:ce:d0:9a:8f:b7:ed:2a:b5: fb:55:bf:46:58:4d:26:ea:69:4a:a4:ab:cb:c7:5c: f6:99:da:49:67:b0:a4:8f:80:ff:37:a6:52:89:38: f9:09:cf:9c:9e:03:c9:ab:08:1f:71:1f:15:d8:1d: 6a:52:06:06:4e:cd:04:cd:9a:ef:ce:a4:3b:f3:13: 5e:52:ab:af:82:be:a9:0b:bd:ad:30:39:3f:3a:f5: 68:47:f4:eb:ce:67:c4:25:56:ad:93:e3:81:e1:88: 44:c9:61:01:c1:0e:e7:cd:6f:55:f8:08:d7:90:35: a8:a3:26:1d:1e:0f:e1:57:46:f3:42:da:9b:91:31: d8:ee:76:40:4e:20:43:31:49:81:3b:b6:c2:aa:14: 8f:90:17:a3:dc:86:dd:1b:33:7b:15:cf:db:9d:36: 94:a8:e9:f2:ad:9f:a3:5f:09:2b:3a:45:2f:1e:8f: 72:e3:86:60:f9:41:eb:3a:47:e6:3e:7a:8d:01:4d: 3b:4f:55:33:08:00:76:61:e2:87:2d:6f:42:f1:c6: 15:54:80:36:e7:d0:eb:99:56:45:5c:e7:7d:e7:df: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:2B:DD:77:B7:03:48:71:38:D6:34:31:73:54:33:C4:F1:14:8B X509v3 Authority Key Identifier: keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:2d:91:13:c1:e9:72:8a:ea:a5:6d:b7:0a:2a:bd:dd:8a:7c: b6:2d:d4:e9:f3:ba:f0:d6:2f:35:ad:9f:88:dc:f4:1e:04:97: 43:b2:1b:ed:c5:f1:32:9f:f3:5d:07:54:80:c1:44:87:a6:3b: fd:47:84:f8:8d:27:54:d0:10:7e:f5:c3:df:99:6e:64:59:d6: 03:e5:2d:f9:e5:6d:fc:eb:a8:34:43:5e:b8:15:97:0f:0c:bb: bd:a3:a0:e2:f6:99:34:e3:7c:4b:83:d1:9a:fb:96:51:cb:cc: 03:be:4b:2c:37:aa:dc:69:08:89:2c:91:ab:98:05:5d:64:d4: a5:95:82:ba:36:df:c3:b6:27:f0:59:2a:4d:ef:50:9d:19:8e: f4:95:88:40:0e:47:4f:31:ca:32:59:58:fa:40:12:84:d0:3e: e4:1b:2c:53:6e:ac:0e:43:80:47:33:74:67:e2:37:49:4c:0f: cf:9d:58:24:43:dc:0c:e9:20:6e:a4:ca:90:87:7a:c4:8c:32: df:9c:c0:f8:7b:8d:5f:3a:45:df:4f:f9:80:a1:00:57:2d:40: bf:15:ed:54:b9:67:23:37:ad:82:fd:fc:31:bd:83:a8:37:f7: bb:4b:89:55:a8:32:b1:5f:9d:c3:54:65:1e:bf:a4:03:47:ce: df:34:6f:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxMzgxMTAvBgNVBAUTKDRFODFFMEY2QTgzQURDMkFENTIzMjY2NEE5NTREMjY3 Q0I0M0Q5MEEwHhcNMjYwMzI1MDAxNDIzWhcNMjYwNDAxMDAxNDIzWjAYMRYwFAYD VQQDEw02OWMzMjhlMC01MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zaTONRTTkQfiqlCSaH5FiHatA3VUtZg9+PcbFLjwVpswEv6ztCaj7ftKrX7 Vb9GWE0m6mlKpKvLx1z2mdpJZ7Ckj4D/N6ZSiTj5Cc+cngPJqwgfcR8V2B1qUgYG Ts0EzZrvzqQ78xNeUquvgr6pC72tMDk/OvVoR/TrzmfEJVatk+OB4YhEyWEBwQ7n zW9V+AjXkDWooyYdHg/hV0bzQtqbkTHY7nZATiBDMUmBO7bCqhSPkBej3IbdGzN7 Fc/bnTaUqOnyrZ+jXwkrOkUvHo9y44Zg+UHrOkfmPnqNAU07T1UzCAB2YeKHLW9C 8cYVVIA259DrmVZFXOd959/b0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFERlK913 twNIcTjWNDFzVDPE8RSLMB8GA1UdIwQYMBaAFE6B4PaoOtwq1SMmZKlU0mfLQ9kK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDEzOC82M0E0RDFCQ0M0 N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjNDclZJeVprcVZUU1o4dEQy UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvSGc5cWc2M0NyVkl5WmtxVlRTWjh0RDJRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDEzOC82M0E0RDFCQ0M0N0ExMUVDOEIzNDQ5NjRDNEY5QUUwMi9Ub0hnOXFnNjND clZJeVprcVZUU1o4dEQyUW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMC2RE8HpcorqpW23Ciq93Yp8ti3U6fO68NYvNa2fiNz0HgSXQ7Ib7cXxMp/z XQdUgMFEh6Y7/UeE+I0nVNAQfvXD35luZFnWA+Ut+eVt/OuoNENeuBWXDwy7vaOg 4vaZNON8S4PRmvuWUcvMA75LLDeq3GkIiSyRq5gFXWTUpZWCujbfw7Yn8FkqTe9Q nRmO9JWIQA5HTzHKMllY+kAShNA+5BssU26sDkOARzN0Z+I3SUwPz51YJEPcDOkg bqTKkId6xIwy35zA+HuNXzpF30/5gKEAVy1AvxXtVLlnIzetgv38Mb2DqDf3u0uJ VagysV+dw1RlHr+kA0fO3zRvGw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:50:00 2026 by rpki-client