$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft File: RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json) Hash identifier: 3DAUas95ZSJy+gAqY+8ki8YvScTd4omi9ySr8RLf258= Subject key identifier: 05:99:EB:7F:00:6C:76:BD:BB:B6:AB:1E:C5:50:7B:C8:3D:91:6E:70 Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 Certificate issuer: /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Certificate serial: 15C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft Manifest number: 156D Signing time: Tue 24 Mar 2026 16:42:57 +0000 Manifest this update: Tue 24 Mar 2026 16:42:56 +0000 Manifest next update: Tue 31 Mar 2026 16:42:56 +0000 Files and hashes: 1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: GMa5/WL3qHoA5mCiU6c7NKmhDWuKVx6nyBnSdU2MOzM=) 2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: uunzcGKaSPqYnL/UQi/ljisWrhQUZt40iwsEWEtnXRI=) 3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: GXMJ3iSV7mMNI938z3e/TfdeTTGCTZ/1gTTNfE5Mcdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5571 (0x15c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59 Validity Not Before: Mar 24 16:42:56 2026 GMT Not After : Mar 31 16:42:56 2026 GMT Subject: CN=69c2bf11-f19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a6:e6:9b:8a:75:32:55:b3:c6:12:0f:2b:41: 4c:b6:65:24:a5:f1:8c:d7:b4:d2:ff:c0:a0:01:57: 61:a0:13:18:4b:f3:c2:c2:ad:82:bd:32:3a:d8:30: 15:8a:a3:96:8f:bf:65:fb:9c:32:24:b2:93:0b:b5: de:75:46:23:95:64:c9:e4:d9:cf:5b:37:f2:c6:b8: 3c:bd:9b:9d:a6:61:d0:b6:74:88:74:46:16:4e:fc: b2:78:f7:ab:6d:80:e6:56:89:49:e8:3f:fa:29:17: 43:9c:52:1e:de:b1:84:d4:6b:7a:c4:57:27:fd:9b: 15:26:b7:38:82:01:ea:36:a9:5b:3b:c2:b5:68:11: 8a:17:3e:d6:b7:20:54:82:0a:33:fd:75:2a:d8:2e: 31:71:f9:07:b1:15:25:25:c0:8f:29:3d:ec:67:1b: c3:b7:47:f5:19:f5:6e:ac:f5:bb:31:33:38:b6:9a: c5:b7:b9:e5:42:87:7a:19:ea:8c:63:48:84:56:79: f5:ab:e6:dd:cd:26:6a:c3:83:23:d8:67:63:da:ac: 4f:a2:39:60:f9:a9:02:d2:b6:13:f7:06:42:64:22: d0:fb:2e:6b:89:a7:75:6d:09:0d:8b:37:0a:97:bc: aa:4d:73:47:9a:07:29:f6:c0:8c:79:83:db:fb:0c: 35:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:99:EB:7F:00:6C:76:BD:BB:B6:AB:1E:C5:50:7B:C8:3D:91:6E:70 X509v3 Authority Key Identifier: keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:65:2c:72:f2:4d:e4:02:c4:8e:4d:d4:bb:f8:d4:6b:14:37: 79:ec:23:2f:65:47:2b:dd:64:af:6a:34:5d:c8:72:d5:70:3f: 0e:d6:a7:c4:16:1a:68:c5:39:08:47:3f:20:4d:5c:71:c0:7b: 2e:3d:f0:ae:1b:8d:e3:56:4e:30:5e:7d:ee:13:20:23:64:cb: aa:11:c5:68:97:70:27:8f:c4:01:8f:f6:11:f5:fb:b7:32:94: 32:22:aa:95:73:c0:5b:d6:eb:d3:a9:4f:9c:49:68:cc:c3:6e: 4b:b8:0b:57:1a:c9:4b:5a:33:99:ff:33:df:46:21:c3:a4:68: 06:92:bc:00:60:a0:8b:87:09:c2:81:9b:e6:a3:56:b5:88:7f: 4c:f0:cf:e5:94:b8:40:bf:dc:03:3e:d3:f3:4c:84:ff:64:6d: 7f:60:99:7f:b0:e8:f4:4d:35:c9:93:75:f1:26:58:27:9c:34: 64:07:f0:20:5e:ac:5b:1e:ef:52:e8:95:c1:96:86:bf:12:e7: b8:4e:7e:b6:64:74:73:ef:ef:c0:a0:e8:91:a0:d8:b3:4f:ee: a2:c3:58:cd:a3:b8:ef:0a:fe:7f:f1:e7:87:a0:2b:1c:63:52: f4:ec:c2:35:04:4c:fb:39:d5:ee:9c:cb:0c:c4:45:d8:99:49: c8:97:82:a6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAxRDUxMTAvBgNVBAUTKDQ0OEJEOTcxQTMwNkFCMDM2Mzk5RTcxNkRDMjIxQ0Ez MzhGNThCNTkwHhcNMjYwMzI0MTY0MjU2WhcNMjYwMzMxMTY0MjU2WjAYMRYwFAYD VQQDEw02OWMyYmYxMS1mMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Kbmm4p1MlWzxhIPK0FMtmUkpfGM17TS/8CgAVdhoBMYS/PCwq2CvTI62DAV iqOWj79l+5wyJLKTC7XedUYjlWTJ5NnPWzfyxrg8vZudpmHQtnSIdEYWTvyyePer bYDmVolJ6D/6KRdDnFIe3rGE1Gt6xFcn/ZsVJrc4ggHqNqlbO8K1aBGKFz7WtyBU ggoz/XUq2C4xcfkHsRUlJcCPKT3sZxvDt0f1GfVurPW7MTM4tprFt7nlQod6GeqM Y0iEVnn1q+bdzSZqw4Mj2Gdj2qxPojlg+akC0rYT9wZCZCLQ+y5riad1bQkNizcK l7yqTXNHmgcp9sCMeYPb+ww19QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAWZ638A bHa9u7arHsVQe8g9kW5wMB8GA1UdIwQYMBaAFESL2XGjBqsDY5nnFtwiHKM49YtZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDFENS9ENEJFMDBENDYz RTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3TmptZWNXM0NJY296ajFp MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JJdlpjYU1HcXdOam1lY1czQ0ljb3pqMWkxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDFENS9ENEJFMDBENDYzRTUxMUU4QjVDRkU0MUFDNEY5QUUwMi9SSXZaY2FNR3F3 TmptZWNXM0NJY296ajFpMWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg2UscvJN5ALEjk3Uu/jUaxQ3eewjL2VHK91kr2o0Xchy1XA/DtanxBYaaMU5 CEc/IE1cccB7Lj3wrhuN41ZOMF597hMgI2TLqhHFaJdwJ4/EAY/2EfX7tzKUMiKq lXPAW9br06lPnElozMNuS7gLVxrJS1ozmf8z30Yhw6RoBpK8AGCgi4cJwoGb5qNW tYh/TPDP5ZS4QL/cAz7T80yE/2Rtf2CZf7Do9E01yZN18SZYJ5w0ZAfwIF6sWx7v UuiVwZaGvxLnuE5+tmR0c+/vwKDokaDYs0/uosNYzaO47wr+f/Hnh6ArHGNS9OzC NQRM+znV7pzLDMRF2JlJyJeCpg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:30:44 2026 by rpki-client