$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft File: 3604bKySNIOAxXSS2xjyvIScUoY.mft (raw, json) Hash identifier: dWaUi9aml0t29akBG5ZPsK5oaxFOyDLWCmh/jjt/PC8= Subject key identifier: 7F:90:58:F2:21:55:37:8F:90:A2:14:15:76:D2:1C:9A:0D:CC:A7:17 Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 Certificate issuer: /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Certificate serial: 09EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft Manifest number: 09D1 Signing time: Tue 24 Mar 2026 19:42:16 +0000 Manifest this update: Tue 24 Mar 2026 19:42:16 +0000 Manifest next update: Tue 31 Mar 2026 19:42:16 +0000 Files and hashes: 1: 3604bKySNIOAxXSS2xjyvIScUoY.crl (hash: C0jeFj6o/vbemoIz6pybNNHp/jWUQ+HaBVmfaAFf5No=) 2: 9F155A86125111F1BDB1E8192A3D8C67.roa (hash: Xp6J4EN8UBByITq+gCFf5DSbouyROjD+ka1UZdn7rcI=) 3: 361E40F8B7B411F09BC03F67C4F9AE02.roa (hash: ZLV8EGcNrcT7gsZ4PlTT+xsnBeM4Q23N20Z6Aox07W4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:42:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2540 (0x9ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286 Validity Not Before: Mar 24 19:42:16 2026 GMT Not After : Mar 31 19:42:16 2026 GMT Subject: CN=69c2e918-21f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a9:0d:4b:39:cb:19:80:84:5e:b4:d2:71:b9: 78:1f:0a:c9:d1:3d:d8:7c:6c:93:52:e5:f2:fd:c4: 91:fe:2f:90:ea:ef:19:93:49:0a:f7:b8:63:65:9e: a4:2a:d3:3a:f8:e0:6c:92:2b:75:97:11:8b:df:e0: 49:a1:eb:c9:a0:58:17:2f:ef:d2:da:42:f8:4c:57: 7c:eb:33:4b:de:be:29:a2:79:53:1e:09:ce:f1:f3: cd:ba:63:1f:be:51:73:87:ae:78:9b:28:ef:11:e7: 1b:1c:1b:71:14:c2:04:97:4c:d7:bf:3a:8a:e2:d7: 1e:32:cf:4c:b8:7d:9f:4b:90:ac:9f:fd:45:8a:ae: 2b:65:7d:f8:f3:19:22:28:19:58:8f:4e:8c:31:70: c6:ac:43:39:3c:cb:ae:12:52:b2:04:c0:d5:48:b4: 6a:00:fe:3a:b3:52:c2:f1:ba:08:63:d1:8d:8e:c0: ca:38:f1:a8:7f:b8:19:09:86:b3:14:7d:a0:8f:d0: cc:53:99:a7:d7:b3:b9:3c:5d:33:5a:b4:d7:08:15: 2d:1d:39:20:3d:32:c0:6d:72:20:ad:0d:9d:3a:e0: 01:22:ca:da:d9:a5:35:0c:46:09:ce:db:1b:bd:8d: 9c:a8:fb:19:f5:30:33:2d:68:f7:c3:75:a6:8f:e5: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:58:F2:21:55:37:8F:90:A2:14:15:76:D2:1C:9A:0D:CC:A7:17 X509v3 Authority Key Identifier: keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:99:63:89:3d:80:c2:cc:33:9c:04:ed:91:b1:3e:03:45:68: 2d:e7:59:04:c8:18:c9:98:1d:7d:2a:39:3e:52:c9:1d:12:06: 46:57:d1:c2:56:c4:af:b0:30:a1:f2:60:8b:bb:74:c0:a0:fd: 4e:e0:69:dc:17:4a:1f:29:33:0f:bc:1e:6a:61:ea:c4:8a:1c: ed:0e:9f:ef:b4:18:be:f1:2d:b4:3f:97:5b:9a:fc:fc:b3:7f: 6e:55:7a:c3:1c:b0:a7:db:71:85:c5:96:5d:57:3e:b7:f0:f5: 29:fc:27:f1:05:22:ea:ff:4a:59:bc:57:c4:fe:70:d5:e1:f6: 6e:d4:b0:3c:22:17:db:bc:4e:31:06:3d:86:b6:ee:db:25:a7: dd:91:57:80:b9:86:b7:88:9c:5b:de:af:bc:0a:ae:f2:fb:dc: 71:0a:a0:f7:f0:88:ed:d2:f6:7b:ae:da:32:7e:63:21:73:ec: 1b:4d:f7:6a:3a:72:da:d8:ed:8e:21:59:05:08:29:fd:ca:6c: 0e:db:90:92:01:37:f1:54:99:e8:ee:19:ce:dc:00:88:2a:0f: 4c:af:a6:1d:cd:1a:bc:e8:89:b5:94:67:02:6a:6a:fd:f1:dc: 7f:45:97:e7:39:4c:f0:9b:d9:f1:e1:cc:2c:60:5a:a2:e0:cc: 83:c8:c7:2b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0UzNkIxMTAvBgNVBAUTKERGQUQzODZDQUM5MjM0ODM4MEM1NzQ5MkRCMThGMkJD ODQ5QzUyODYwHhcNMjYwMzI0MTk0MjE2WhcNMjYwMzMxMTk0MjE2WjAYMRYwFAYD VQQDEw02OWMyZTkxOC0yMWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjakNSznLGYCEXrTScbl4HwrJ0T3YfGyTUuXy/cSR/i+Q6u8Zk0kK97hjZZ6k KtM6+OBskit1lxGL3+BJoevJoFgXL+/S2kL4TFd86zNL3r4ponlTHgnO8fPNumMf vlFzh654myjvEecbHBtxFMIEl0zXvzqK4tceMs9MuH2fS5Csn/1Fiq4rZX348xki KBlYj06MMXDGrEM5PMuuElKyBMDVSLRqAP46s1LC8boIY9GNjsDKOPGof7gZCYaz FH2gj9DMU5mn17O5PF0zWrTXCBUtHTkgPTLAbXIgrQ2dOuABIsra2aU1DEYJztsb vY2cqPsZ9TAzLWj3w3Wmj+UtLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH+QWPIh VTePkKIUFXbSHJoNzKcXMB8GA1UdIwQYMBaAFN+tOGyskjSDgMV0ktsY8ryEnFKG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTM2Qi83QzJDNjI0MEEw OTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05JT0F4WFNTMnhqeXZJU2NV b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM2MDRiS3lTTklPQXhYU1MyeGp5dklTY1VvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTM2Qi83QzJDNjI0MEEwOTExMUVBQTk0MjdDNDRDNEY5QUUwMi8zNjA0Ykt5U05J T0F4WFNTMnhqeXZJU2NVb1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAepljiT2AwswznATtkbE+A0VoLedZBMgYyZgdfSo5PlLJHRIGRlfRwlbEr7Aw ofJgi7t0wKD9TuBp3BdKHykzD7weamHqxIoc7Q6f77QYvvEttD+XW5r8/LN/blV6 wxywp9txhcWWXVc+t/D1Kfwn8QUi6v9KWbxXxP5w1eH2btSwPCIX27xOMQY9hrbu 2yWn3ZFXgLmGt4icW96vvAqu8vvccQqg9/CI7dL2e67aMn5jIXPsG033ajpy2tjt jiFZBQgp/cpsDtuQkgE38VSZ6O4ZztwAiCoPTK+mHc0avOiJtZRnAmpq/fHcf0WX 5zlM8JvZ8eHMLGBaouDMg8jHKw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:12:48 2026 by rpki-client