$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: ibb2ut4+1D9ogCikZ1LO2NX2l/rfNZp/oNku/d0JqWo= Subject key identifier: 04:38:EF:36:FC:86:0F:7E:13:F1:05:BD:38:EE:55:6C:39:70:D7:83 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 35C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 357F Signing time: Thu 26 Mar 2026 14:21:50 +0000 Manifest this update: Thu 26 Mar 2026 14:21:49 +0000 Manifest next update: Thu 02 Apr 2026 14:21:49 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: PspRuBNXKHyOXTH3WT3+PLku3SWbd9D+YW7ug4nR5sw=) 2: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=) 3: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=) 4: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: ylTDDWhoDCYbcojJAKclLssIhT1ZiJ6CbE3tkJEsYzs=) 5: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=) 6: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=) 7: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=) 8: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13766 (0x35c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Mar 26 14:21:49 2026 GMT Not After : Apr 2 14:21:49 2026 GMT Subject: CN=69c540fd-b3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8f:41:b2:ba:d3:5e:16:59:7c:e5:67:12:3b: fc:45:89:7a:f3:de:b6:2d:c7:22:58:af:f5:94:7a: ea:f3:37:23:f1:d9:6f:9c:08:88:96:ee:25:18:5b: ff:59:ca:74:65:ce:ec:5a:a8:b0:de:68:f5:a3:71: 26:e0:54:8b:ce:a1:ac:1b:a2:68:7a:56:01:97:e8: a8:42:05:93:d8:55:10:51:84:11:41:8e:df:f5:9b: 60:c1:e8:ae:33:ee:49:93:51:f2:5e:94:c1:40:53: 5f:f9:dd:3b:74:c0:91:5d:44:b7:f8:70:56:aa:e2: 29:b2:15:40:d2:c1:61:fc:6c:43:03:a0:68:a9:3d: 5c:22:09:9b:40:eb:d5:bd:ec:43:5f:e6:b8:5c:a2: 2a:29:c4:ea:ff:2a:48:2c:ec:46:97:2c:47:c4:1a: f1:57:e7:7c:31:7d:75:c8:3f:d0:0d:be:e8:18:2b: 67:21:aa:f0:a3:cd:43:ed:ca:ae:15:8d:91:a3:eb: 1b:10:c6:83:b2:ff:2b:1a:28:95:33:4b:d1:87:93: 19:db:20:50:c8:1e:56:dd:9b:e7:47:f2:53:e4:c8: ee:de:d0:14:ea:28:d6:1e:28:77:d4:7a:f1:24:bc: 00:c6:8e:b5:9c:81:bd:c4:35:36:a9:a8:32:cb:de: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:38:EF:36:FC:86:0F:7E:13:F1:05:BD:38:EE:55:6C:39:70:D7:83 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ab:61:c4:cb:74:38:b7:f0:01:05:e2:04:74:d6:c1:96:33: fe:de:04:a7:51:ae:f9:92:7b:5b:e5:41:2b:57:69:e8:88:9d: 47:51:18:18:33:93:ad:77:50:9d:a1:f8:d9:89:2d:a7:8a:d9: 8d:30:38:05:0b:31:c9:0e:7c:da:8b:7f:ff:c2:46:f2:9a:11: e5:c0:4d:02:9e:58:1b:5a:b0:5b:c8:4f:ee:47:18:c3:96:d3: 37:e7:b4:df:a9:21:7a:63:0b:85:57:59:33:65:e6:8c:77:5e: 29:34:37:76:72:a1:16:86:a8:f7:bd:ee:3b:ec:ff:9d:10:48: be:c7:e9:60:77:ae:ff:a4:20:d5:c0:1a:73:19:8c:18:42:7b: 96:9a:5c:43:fc:d8:86:a4:89:db:2a:b3:00:e6:b6:6e:ee:ee: 39:ae:a4:ee:c5:eb:62:7f:72:c3:17:c3:e0:1e:bb:54:22:69: 6f:36:41:f3:21:96:de:bb:9c:c9:cb:1b:18:c0:20:88:c0:8b: 49:73:b4:f2:9a:49:b1:46:e5:76:df:54:63:42:31:52:ee:52: 64:63:68:6c:38:f9:bb:39:9b:4b:47:ca:d3:85:8c:0b:f9:e3: fe:81:c3:45:8a:2b:e1:8a:92:ec:1c:28:36:66:cd:94:e4:ae: d8:f2:ee:53 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwMzI2MTQyMTQ5WhcNMjYwNDAyMTQyMTQ5WjAYMRYwFAYD VQQDEw02OWM1NDBmZC1iM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8I9BsrrTXhZZfOVnEjv8RYl68962LcciWK/1lHrq8zcj8dlvnAiIlu4lGFv/ Wcp0Zc7sWqiw3mj1o3Em4FSLzqGsG6JoelYBl+ioQgWT2FUQUYQRQY7f9Ztgweiu M+5Jk1HyXpTBQFNf+d07dMCRXUS3+HBWquIpshVA0sFh/GxDA6BoqT1cIgmbQOvV vexDX+a4XKIqKcTq/ypILOxGlyxHxBrxV+d8MX11yD/QDb7oGCtnIarwo81D7cqu FY2Ro+sbEMaDsv8rGiiVM0vRh5MZ2yBQyB5W3ZvnR/JT5Mju3tAU6ijWHih31Hrx JLwAxo61nIG9xDU2qagyy97UPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAQ47zb8 hg9+E/EFvTjuVWw5cNeDMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAr6thxMt0OLfwAQXiBHTWwZYz/t4Ep1Gu+ZJ7W+VBK1dp6IidR1EYGDOTrXdQ naH42Yktp4rZjTA4BQsxyQ582ot//8JG8poR5cBNAp5YG1qwW8hP7kcYw5bTN+e0 36khemMLhVdZM2XmjHdeKTQ3dnKhFoao973uO+z/nRBIvsfpYHeu/6Qg1cAacxmM GEJ7lppcQ/zYhqSJ2yqzAOa2bu7uOa6k7sXrYn9ywxfD4B67VCJpbzZB8yGW3ruc ycsbGMAgiMCLSXO08ppJsUbldt9UY0IxUu5SZGNobDj5uzmbS0fK04WMC/nj/oHD RYor4YqS7BwoNmbNlOSu2PLuUw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:34 2026 by rpki-client