$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft File: 0e69FiTc3lGUEO1dZObVE5hLd9A.mft (raw, json) Hash identifier: 1tI/i7qtiXTnhIYidxlnuVsu9ZILxL0+XQBVGYTpTek= Subject key identifier: 50:40:1A:D6:66:9B:BD:2E:56:B3:95:7F:04:94:F8:09:D3:45:32:D8 Authority key identifier: D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 Certificate issuer: /CN=A913F2BD/serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft Manifest number: 0145 Signing time: Wed 25 Mar 2026 04:28:11 +0000 Manifest this update: Wed 25 Mar 2026 04:28:11 +0000 Manifest next update: Wed 01 Apr 2026 04:28:11 +0000 Files and hashes: 1: 0e69FiTc3lGUEO1dZObVE5hLd9A.crl (hash: c9hbm+MK7lg6D8WRifnsdhFZyzAgaR6Ds3u8EXPIfKc=) 2: D0B078FA389611EF909AF237C4F9AE02.roa (hash: 6hllB+BhAvPyfA1E4UvoCy4BNkepXgO0emT4SO5EHvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=D1EEBD1624DCDE519410ED5D64E6D513984B77D0 Validity Not Before: Mar 25 04:28:11 2026 GMT Not After : Apr 1 04:28:11 2026 GMT Subject: CN=69c3645b-cf58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:eb:2f:98:cb:7f:a7:a4:e5:81:6b:a2:02:cb: 1a:d4:cb:57:bd:ce:e2:f3:e0:3e:b1:72:1a:21:d7: 4b:9d:fc:af:1f:ff:20:dc:a0:61:80:bf:6c:06:c8: 0b:40:39:71:12:f9:d8:ad:3d:cd:f6:24:94:b1:b5: 62:06:d2:73:09:98:e1:2b:01:bd:34:13:c5:f8:ea: e7:5d:63:5f:c2:36:bb:9a:46:fa:fb:eb:f7:27:b9: f2:98:e4:5f:7a:d5:69:b3:3f:c2:ec:16:e5:42:d0: a4:17:fd:1a:3b:3a:65:8d:54:53:01:aa:80:99:f6: 75:e2:80:1f:88:cf:b6:6e:3f:45:45:1f:0e:8c:6d: 30:3e:05:69:bd:c4:27:bd:e0:dd:89:1c:28:49:b3: 70:0e:73:d7:0d:f5:29:25:c1:db:78:e0:a9:83:27: 4e:cb:e2:88:03:33:c4:de:51:09:61:c5:cd:98:68: dc:ff:c5:39:d4:14:76:2e:4c:eb:19:00:4c:53:af: cc:65:ee:37:f7:b1:05:18:b2:41:bf:70:61:2d:7f: 19:6a:9e:76:fc:cd:90:a7:ae:af:2a:d5:d8:8a:45: 8c:81:05:e1:ec:97:1e:6a:d7:d8:5d:48:ab:44:fa: 33:7e:02:3b:10:6f:d2:b2:31:f4:04:79:c2:7f:33: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:40:1A:D6:66:9B:BD:2E:56:B3:95:7F:04:94:F8:09:D3:45:32:D8 X509v3 Authority Key Identifier: keyid:D1:EE:BD:16:24:DC:DE:51:94:10:ED:5D:64:E6:D5:13:98:4B:77:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0e69FiTc3lGUEO1dZObVE5hLd9A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/3EE27676389611EF9EDE8136C4F9AE02/0e69FiTc3lGUEO1dZObVE5hLd9A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:83:98:c1:dc:c9:cb:c8:4f:b7:ec:14:4e:61:8b:ac:7f:31: 46:c4:99:6a:22:a0:d8:82:6e:0b:a3:50:f2:41:82:62:6a:34: 13:d5:0f:b6:72:12:72:98:f6:92:c3:32:08:ef:a4:12:87:cf: 60:9e:dd:95:72:34:18:b5:c5:9b:1d:5c:09:69:a4:c4:a0:c5: 81:e9:1d:01:a5:7c:41:38:95:07:c8:77:e3:ab:37:53:4f:72: 51:82:0b:a2:d5:0e:60:c6:23:df:ae:e0:5c:67:97:93:f5:50: 94:c2:1c:61:bd:96:ef:d5:6f:d5:42:f9:86:92:d7:7a:b1:54: 0a:4d:c0:98:44:3d:60:64:df:22:32:38:6f:b9:46:97:ad:b8: d6:41:bd:ce:85:7b:76:95:fd:78:ba:65:55:ef:70:46:93:66: 68:27:26:4e:d8:c6:60:7e:c6:d8:7b:22:ed:64:ab:82:17:cd: 70:39:4b:df:f8:58:54:84:40:8c:4b:db:ee:58:f9:c6:2d:27: ec:d8:31:f3:56:f1:29:f4:91:9c:2a:b4:dd:6c:38:fa:5f:e0: 35:ce:26:fb:60:ba:f2:3e:2b:bb:78:09:04:84:f7:99:79:05: 16:e9:6a:d2:7b:8c:61:3d:e9:8b:2e:35:29:fa:31:19:01:f3: 50:02:69:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKEQxRUVCRDE2MjREQ0RFNTE5NDEwRUQ1RDY0RTZENTEz OTg0Qjc3RDAwHhcNMjYwMzI1MDQyODExWhcNMjYwNDAxMDQyODExWjAYMRYwFAYD VQQDEw02OWMzNjQ1Yi1jZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+svmMt/p6TlgWuiAssa1MtXvc7i8+A+sXIaIddLnfyvH/8g3KBhgL9sBsgL QDlxEvnYrT3N9iSUsbViBtJzCZjhKwG9NBPF+OrnXWNfwja7mkb6++v3J7nymORf etVpsz/C7BblQtCkF/0aOzpljVRTAaqAmfZ14oAfiM+2bj9FRR8OjG0wPgVpvcQn veDdiRwoSbNwDnPXDfUpJcHbeOCpgydOy+KIAzPE3lEJYcXNmGjc/8U51BR2Lkzr GQBMU6/MZe4397EFGLJBv3BhLX8Zap52/M2Qp66vKtXYikWMgQXh7JceatfYXUir RPozfgI7EG/SsjH0BHnCfzNAPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFBAGtZm m70uVrOVfwSU+AnTRTLYMB8GA1UdIwQYMBaAFNHuvRYk3N5RlBDtXWTm1ROYS3fQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC8zRUUyNzY3NjM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNsR1VFTzFkWk9iVkU1aExk OUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBlNjlGaVRjM2xHVUVPMWRaT2JWRTVoTGQ5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC8zRUUyNzY3NjM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi8wZTY5RmlUYzNs R1VFTzFkWk9iVkU1aExkOUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAt4OYwdzJy8hPt+wUTmGLrH8xRsSZaiKg2IJuC6NQ8kGCYmo0E9UPtnIScpj2 ksMyCO+kEofPYJ7dlXI0GLXFmx1cCWmkxKDFgekdAaV8QTiVB8h346s3U09yUYIL otUOYMYj367gXGeXk/VQlMIcYb2W79Vv1UL5hpLXerFUCk3AmEQ9YGTfIjI4b7lG l6241kG9zoV7dpX9eLplVe9wRpNmaCcmTtjGYH7G2Hsi7WSrghfNcDlL3/hYVIRA jEvb7lj5xi0n7Ngx81bxKfSRnCq03Ww4+l/gNc4m+2C68j4ru3gJBIT3mXkFFulq 0nuMYT3piy41KfoxGQHzUAJpRw== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:46 2026 by rpki-client