$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft File: -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json) Hash identifier: Ys9q5IE3nIGFYKqd2rodXD8lEY6YtHgXHk5CRBwhZ4U= Subject key identifier: DC:20:69:39:8D:C5:F6:3B:87:56:5F:A0:62:09:C8:6C:43:F9:0C:07 Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB Certificate issuer: /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft Manifest number: DE Signing time: Wed 25 Mar 2026 05:46:31 +0000 Manifest this update: Wed 25 Mar 2026 05:46:30 +0000 Manifest next update: Wed 01 Apr 2026 05:46:30 +0000 Files and hashes: 1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: 3Vw8+GdzIVCII4Uix1XaRIlRlcsfsR5K8CJkCtzj6es=) 2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: X5o4ErE3QQgVkIVQBrSsijB4A+S0bRzh86+XXBSLAYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:46:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB Validity Not Before: Mar 25 05:46:30 2026 GMT Not After : Apr 1 05:46:30 2026 GMT Subject: CN=69c376b7-f85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:d3:b2:32:4b:9b:9c:89:99:3b:15:57:e7: 44:57:83:f2:45:4b:ef:42:aa:bb:19:1d:b0:a9:90: bd:34:3f:8b:b1:a1:61:44:9b:e9:12:fd:82:e3:95: 03:37:a7:8e:92:b4:3c:86:7d:a4:56:45:fa:9c:e2: 3e:0b:56:a3:22:f1:f5:8e:3f:43:cc:1b:41:d8:14: a1:2f:e7:12:e8:df:78:8b:28:f5:db:af:49:7a:54: 9b:c9:ac:3e:4e:d7:9c:29:d4:30:10:fa:be:cd:cc: 49:f6:a5:2c:bf:1d:9f:5e:8e:f2:73:58:01:99:6f: 27:9b:bc:7a:86:18:cd:29:12:2e:d7:33:70:15:3f: e1:a6:e6:82:3e:59:b2:98:b8:61:95:35:b2:53:17: d2:16:7b:99:30:d8:b6:5e:6c:aa:fe:2f:0f:a7:35: c4:86:78:5f:2a:c7:74:34:9e:f5:cd:2f:56:3d:e6: 3d:45:56:9a:ff:52:e5:66:10:5a:8c:ef:9d:06:95: 00:80:1c:29:91:af:59:de:63:9e:dc:0a:eb:18:46: 03:9d:36:23:01:32:e6:fe:0e:0c:a8:e9:21:f2:09: 59:a1:13:d4:3c:23:65:f4:c3:33:e4:e1:00:50:17: 10:54:8a:76:34:cd:0e:be:08:6f:61:4a:ec:e4:7d: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:20:69:39:8D:C5:F6:3B:87:56:5F:A0:62:09:C8:6C:43:F9:0C:07 X509v3 Authority Key Identifier: keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:95:59:91:f7:f0:6a:71:f5:d4:84:02:b2:32:94:5b:e9:bc: da:b7:41:79:a5:b7:80:8c:21:2a:ff:9c:49:ec:f7:ea:8b:48: 8d:3d:e0:f4:0a:b9:76:d6:f8:c2:18:16:1d:80:b1:9d:28:44: df:b5:39:d2:60:b2:58:0d:31:dc:8e:c8:9f:26:58:70:81:d2: fc:70:21:8a:b0:37:de:27:4a:52:eb:88:0e:64:3a:c0:77:a6: e0:8a:c2:5f:8c:11:55:67:1f:f0:6b:df:9c:43:24:cb:24:8d: 81:3a:45:5b:9d:35:ef:10:c7:02:bd:9f:6c:9b:96:8e:3c:48: 13:4c:77:06:34:ee:47:57:47:8a:d0:27:7c:35:65:e6:cd:bf: 90:f9:f3:10:b7:d5:4b:6b:fa:ed:7c:d0:50:e3:77:30:c0:f3: 05:2f:42:c0:2c:3c:49:dd:df:f3:cd:26:34:d1:94:f3:94:1b: c4:4a:95:d0:8d:7d:ad:ab:ac:83:9a:aa:bf:aa:68:da:b8:5b: 23:2b:28:23:d9:5a:38:ed:eb:bb:e5:65:7f:e8:ab:ac:23:ef: d8:11:c3:14:24:54:1d:f0:1c:1b:05:83:88:15:7c:8e:c7:62: 74:d4:69:29:66:f6:52:fe:aa:1a:2d:43:0b:0c:ec:d7:c4:5b: 40:20:3f:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ1OUQxMTAvBgNVBAUTKEZCNDg4NTY4RTc1MjBCQzc4MkExMTk4OTc2MjkwMzBF RDA2OTVDREIwHhcNMjYwMzI1MDU0NjMwWhcNMjYwNDAxMDU0NjMwWjAYMRYwFAYD VQQDEw02OWMzNzZiNy1mODVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAus7TsjJLm5yJmTsVV+dEV4PyRUvvQqq7GR2wqZC9ND+LsaFhRJvpEv2C45UD N6eOkrQ8hn2kVkX6nOI+C1ajIvH1jj9DzBtB2BShL+cS6N94iyj1269JelSbyaw+ TtecKdQwEPq+zcxJ9qUsvx2fXo7yc1gBmW8nm7x6hhjNKRIu1zNwFT/hpuaCPlmy mLhhlTWyUxfSFnuZMNi2Xmyq/i8PpzXEhnhfKsd0NJ71zS9WPeY9RVaa/1LlZhBa jO+dBpUAgBwpka9Z3mOe3ArrGEYDnTYjATLm/g4MqOkh8glZoRPUPCNl9MMz5OEA UBcQVIp2NM0OvghvYUrs5H3VmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNwgaTmN xfY7h1ZfoGIJyGxD+QwHMB8GA1UdIwQYMBaAFPtIhWjnUgvHgqEZiXYpAw7QaVzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDU5RC8wQjNGNjY1QUQ2 MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4ZUNvUm1KZGlrRER0QnBY TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0waUZhT2RTQzhlQ29SbUpkaWtERHRCcFhOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDU5RC8wQjNGNjY1QUQ2MEYxMUVGQjBGQTUzM0ZDNEY5QUUwMi8tMGlGYU9kU0M4 ZUNvUm1KZGlrRER0QnBYTnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAkJVZkffwanH11IQCsjKUW+m82rdBeaW3gIwhKv+cSez36otIjT3g9Aq5dtb4 whgWHYCxnShE37U50mCyWA0x3I7InyZYcIHS/HAhirA33idKUuuIDmQ6wHem4IrC X4wRVWcf8GvfnEMkyySNgTpFW5017xDHAr2fbJuWjjxIE0x3BjTuR1dHitAnfDVl 5s2/kPnzELfVS2v67XzQUON3MMDzBS9CwCw8Sd3f880mNNGU85QbxEqV0I19raus g5qqv6po2rhbIysoI9laOO3ru+Vlf+irrCPv2BHDFCRUHfAcGwWDiBV8jsdidNRp KWb2Uv6qGi1DCwzs18RbQCA/PA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:46:52 2026 by rpki-client