$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: N3dNHu8Q8eEDapFwGi630erqHYr1+DxoWN0w0SRmQKs= Subject key identifier: 63:4A:2B:65:94:34:E0:EA:8A:5F:BE:23:62:B8:5A:CC:3F:15:48:0C Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 35C5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 357E Signing time: Tue 24 Mar 2026 14:21:54 +0000 Manifest this update: Tue 24 Mar 2026 14:21:54 +0000 Manifest next update: Tue 31 Mar 2026 14:21:54 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: tlthkmMRLpwHA0xNCMrFhCHPuRJgHQeWAQoDfavVkmU=) 2: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=) 3: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=) 4: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=) 5: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=) 6: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: ylTDDWhoDCYbcojJAKclLssIhT1ZiJ6CbE3tkJEsYzs=) 7: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=) 8: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13765 (0x35c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Mar 24 14:21:54 2026 GMT Not After : Mar 31 14:21:54 2026 GMT Subject: CN=69c29e02-ac09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:ac:89:6f:bf:ee:7c:21:43:38:93:a0:c9: 1c:e8:54:d7:74:a4:40:25:29:4e:fb:4f:8d:1d:13: 24:59:34:d6:aa:b9:7f:82:2c:a2:6d:e6:75:c8:15: dc:c9:43:78:3a:27:4f:4c:6d:14:a0:f8:53:39:93: 16:d4:c5:37:05:36:de:dc:89:e3:1b:d9:b6:64:3a: a5:33:18:03:a5:8c:9b:4f:15:a6:65:80:c9:c0:54: b4:58:29:d8:94:fe:e3:c7:4e:0e:85:e4:6a:b8:ef: 82:06:c2:e6:96:13:60:b5:24:ec:c5:4b:03:60:ea: 5f:1a:b4:a0:1b:61:0a:16:67:2d:5c:05:c3:a3:a9: 85:05:ab:ef:f2:b8:f0:7b:a2:90:54:96:a1:77:f5: 9c:29:3f:a6:d2:62:ee:57:59:3d:58:f0:16:f8:a7: 74:04:d0:44:78:d2:e4:2a:a9:86:a1:c9:a9:2d:3c: 6a:a2:ec:72:5c:ec:5d:c7:7b:5c:86:19:7e:b6:67: 22:e0:16:17:55:00:b3:bd:5a:a6:13:67:6f:bc:f3: 7d:2e:c2:16:77:ca:38:de:dc:40:4f:fc:b2:00:09: 24:55:6b:39:23:b2:6a:cf:36:d3:83:22:8c:b3:c5: b5:c9:3f:69:87:5a:99:1b:64:74:e7:f3:99:3d:4e: 9a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:4A:2B:65:94:34:E0:EA:8A:5F:BE:23:62:B8:5A:CC:3F:15:48:0C X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:70:33:f1:49:b0:24:40:d6:da:fc:f6:23:65:b2:09:0f:df: 82:09:39:da:d8:cb:55:72:6d:19:6e:a0:67:fd:5d:e7:2d:3b: 3a:34:42:4c:56:e9:e5:f4:4a:31:87:7c:09:c7:11:b6:b0:17: 57:f8:38:a2:58:3e:cf:2a:89:1e:3e:3b:80:29:1f:0a:aa:b2: a1:21:9c:b9:68:ea:6c:09:c9:a0:3f:77:94:0f:fc:a6:95:a0: b9:90:a6:de:d9:77:03:36:a2:6e:e2:29:9b:73:94:68:3d:3f: 09:eb:a5:49:b5:62:bd:c5:be:fc:38:54:20:20:0a:23:8f:b7: f0:ca:bd:58:79:68:0c:05:8d:76:e3:89:df:80:f9:eb:8d:e7: 1a:19:f3:9a:da:0c:89:db:49:93:7c:20:e6:8b:e2:61:b8:00: 5e:b2:ae:b9:56:7f:c5:5b:c1:b7:c9:ce:6a:8d:7a:0a:69:2f: e8:ce:7b:ea:76:0c:33:ec:88:ca:2b:18:34:5b:28:79:ed:42: 37:eb:b7:57:55:b8:e6:a8:ff:20:eb:a0:08:34:cf:97:00:74: 8b:de:a0:9e:15:19:b0:1d:82:87:85:3c:ec:35:94:e7:a1:5c: 20:60:d8:27:3e:34:45:71:1c:72:17:d4:7f:48:d3:36:25:5c: c8:8b:a0:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwMzI0MTQyMTU0WhcNMjYwMzMxMTQyMTU0WjAYMRYwFAYD VQQDEw02OWMyOWUwMi1hYzA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnasiW+/7nwhQziToMkc6FTXdKRAJSlO+0+NHRMkWTTWqrl/giyibeZ1yBXc yUN4OidPTG0UoPhTOZMW1MU3BTbe3InjG9m2ZDqlMxgDpYybTxWmZYDJwFS0WCnY lP7jx04OheRquO+CBsLmlhNgtSTsxUsDYOpfGrSgG2EKFmctXAXDo6mFBavv8rjw e6KQVJahd/WcKT+m0mLuV1k9WPAW+Kd0BNBEeNLkKqmGocmpLTxqouxyXOxdx3tc hhl+tmci4BYXVQCzvVqmE2dvvPN9LsIWd8o43txAT/yyAAkkVWs5I7JqzzbTgyKM s8W1yT9ph1qZG2R05/OZPU6aowIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGNKK2WU NODqil++I2K4Wsw/FUgMMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfHAz8UmwJEDW2vz2I2WyCQ/fggk52tjLVXJtGW6gZ/1d5y07OjRCTFbp5fRK MYd8CccRtrAXV/g4olg+zyqJHj47gCkfCqqyoSGcuWjqbAnJoD93lA/8ppWguZCm 3tl3AzaibuIpm3OUaD0/CeulSbVivcW+/DhUICAKI4+38Mq9WHloDAWNduOJ34D5 643nGhnzmtoMidtJk3wg5oviYbgAXrKuuVZ/xVvBt8nOao16Cmkv6M576nYMM+yI yisYNFsoee1CN+u3V1W45qj/IOugCDTPlwB0i96gnhUZsB2Ch4U87DWU56FcIGDY Jz40RXEcchfUf0jTNiVcyIughQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:13 2026 by rpki-client