$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft File: o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft (raw, json) Hash identifier: jrLypG/EySn0sq4acEQzD3uzQ86FVlE6/dN3llU5EXw= Subject key identifier: 38:3B:74:7A:38:FF:40:17:09:D8:59:00:E9:BE:17:A0:5A:91:0A:BD Authority key identifier: A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E Certificate issuer: /CN=A914E3B7/serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft Manifest number: 42 Signing time: Tue 24 Mar 2026 15:06:39 +0000 Manifest this update: Tue 24 Mar 2026 15:06:38 +0000 Manifest next update: Tue 31 Mar 2026 15:06:38 +0000 Files and hashes: 1: o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl (hash: 96+xHhN/cTnRo8TrWbKDlHZrXeMK3svCpPHVubaKaw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:06:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3B7, serialNumber=A3AD82B24C7FF8EFF54C927988C7CA3A5A8C445E Validity Not Before: Mar 24 15:06:38 2026 GMT Not After : Mar 31 15:06:38 2026 GMT Subject: CN=69c2a87f-f26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:07:ca:6b:c3:2d:28:17:2f:76:41:58:6d: f5:71:ac:23:6a:cc:4e:5e:b9:58:38:5b:89:53:6f: 43:2b:2f:b5:81:b8:07:02:ef:34:25:34:a9:d9:d9: b1:28:8c:82:84:56:eb:2a:ec:1e:b8:d7:2f:c0:40: 77:96:b0:4b:64:ce:ff:de:41:db:4b:2b:fe:e7:37: 9f:5f:6c:40:7d:18:4f:2a:62:ce:0d:da:88:82:e4: b6:27:57:8c:b0:55:64:8a:db:10:c6:77:b8:b4:7e: 1b:a1:c5:31:a6:39:bd:30:c0:ad:52:0a:1c:af:a6: 39:0c:a5:d2:bd:3b:e2:a9:79:68:b5:55:d5:89:2f: 69:80:be:60:7c:e1:64:0c:d9:9a:1c:92:fb:81:d2: 48:22:51:f3:1a:58:64:e5:89:a9:c3:32:d3:e4:83: 63:d0:46:47:22:88:a5:99:04:5f:16:f7:18:94:3d: 6f:55:6e:1b:fd:96:20:86:ff:a8:d0:6b:9f:92:04: af:2f:c1:a0:18:1b:03:41:c6:85:56:ec:49:34:2f: 70:34:bd:ed:6f:5f:e8:e7:a6:93:f8:de:af:2d:f0: 3b:b3:8b:57:7b:c4:a0:c0:89:8e:05:a5:b6:97:06: 6e:73:9b:dd:d2:a2:d1:a4:83:2a:38:6f:a6:65:0c: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:3B:74:7A:38:FF:40:17:09:D8:59:00:E9:BE:17:A0:5A:91:0A:BD X509v3 Authority Key Identifier: keyid:A3:AD:82:B2:4C:7F:F8:EF:F5:4C:92:79:88:C7:CA:3A:5A:8C:44:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o62Cskx_-O_1TJJ5iMfKOlqMRF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/EF44231EC9A111F0A7E2764BC4F9AE02/o62Cskx_-O_1TJJ5iMfKOlqMRF4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:7d:c2:e4:70:5e:99:ff:db:53:26:64:a7:02:92:a4:b6:a0: b0:84:44:aa:07:55:32:b9:34:81:74:57:ae:58:ff:b3:30:20: 32:fe:b0:3b:84:7d:cb:72:98:1d:5f:a5:eb:52:aa:cc:2a:8c: 5a:c2:bf:b9:db:a7:1b:06:f1:82:ee:7d:3b:6e:5e:9e:3c:ce: f2:65:3d:76:ed:f4:4c:6a:f9:1a:b4:f1:0e:60:89:ae:3e:c0: df:cf:e9:04:0b:39:66:8e:b0:a0:f5:0d:81:8c:33:94:b9:31: 67:9b:f6:51:c9:59:89:29:32:10:b3:ed:98:b5:77:6c:6e:54: a2:9d:b0:a2:b5:fb:d1:23:58:1a:c0:59:34:49:1b:c6:10:80: c1:39:df:3c:3d:54:e6:96:c4:bc:27:45:f3:7d:61:b8:ea:e6: 08:06:2d:b2:40:4b:33:75:95:2d:20:e8:49:9e:56:c7:45:19: 4d:e1:11:96:24:e0:ca:db:80:42:b6:0f:ce:01:ca:d6:bf:5d: bd:09:b9:2f:b7:a2:f9:8e:14:3e:7b:25:ab:97:04:5b:04:f0: 99:2b:76:e9:f7:6a:e6:35:e1:ca:f8:76:1d:7a:b9:4b:f8:22: 7e:2c:42:fd:97:cb:e0:68:d4:e7:6c:36:95:f5:85:25:7b:2f: 4c:01:90:3b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTNCNzExMC8GA1UEBRMoQTNBRDgyQjI0QzdGRjhFRkY1NEM5Mjc5ODhDN0NBM0E1 QThDNDQ1RTAeFw0yNjAzMjQxNTA2MzhaFw0yNjAzMzExNTA2MzhaMBgxFjAUBgNV BAMTDTY5YzJhODdmLWYyNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAOgfKa8MtKBcvdkFYbfVxrCNqzE5euVg4W4lTb0MrL7WBuAcC7zQlNKnZ2bEo jIKEVusq7B641y/AQHeWsEtkzv/eQdtLK/7nN59fbEB9GE8qYs4N2oiC5LYnV4yw VWSK2xDGd7i0fhuhxTGmOb0wwK1SChyvpjkMpdK9O+KpeWi1VdWJL2mAvmB84WQM 2ZockvuB0kgiUfMaWGTlianDMtPkg2PQRkciiKWZBF8W9xiUPW9Vbhv9liCG/6jQ a5+SBK8vwaAYGwNBxoVW7Ek0L3A0ve1vX+jnppP43q8t8Duzi1d7xKDAiY4FpbaX Bm5zm93SotGkgyo4b6ZlDLX/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUODt0ejj/ QBcJ2FkA6b4XoFqRCr0wHwYDVR0jBBgwFoAUo62Cskx/+O/1TJJ5iMfKOlqMRF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFM0I3L0VGNDQyMzFFQzlB MTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hfLU9fMVRKSjVpTWZLT2xxTVJG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbzYyQ3NreF8tT18xVEpKNWlNZktPbHFNUkY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF M0I3L0VGNDQyMzFFQzlBMTExRjBBN0UyNzY0QkM0RjlBRTAyL282MkNza3hfLU9f MVRKSjVpTWZLT2xxTVJGNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQByfcLkcF6Z/9tTJmSnApKktqCwhESqB1UyuTSBdFeuWP+zMCAy/rA7hH3Lcpgd X6XrUqrMKoxawr+526cbBvGC7n07bl6ePM7yZT127fRMavkatPEOYImuPsDfz+kE CzlmjrCg9Q2BjDOUuTFnm/ZRyVmJKTIQs+2YtXdsblSinbCitfvRI1gawFk0SRvG EIDBOd88PVTmlsS8J0XzfWG46uYIBi2yQEszdZUtIOhJnlbHRRlN4RGWJODK24BC tg/OAcrWv129Cbkvt6L5jhQ+eyWrlwRbBPCZK3bp92rmNeHK+HYderlL+CJ+LEL9 l8vgaNTnbDaV9YUley9MAZA7 -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:00 2026 by rpki-client