$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft File: RNKGOHOg4Xndk_snhK0EhGYj5-4.mft (raw, json) Hash identifier: xjVdAMaN0Lo8RXcrYnIG/6OIpXVCKQrK3IG/LHxg14g= Subject key identifier: C3:97:25:19:03:21:17:52:BE:7D:9C:2D:55:64:31:2D:FD:B2:A2:F2 Authority key identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE Certificate issuer: /CN=A914E4E2/serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft Manifest number: 3A Signing time: Fri 27 Mar 2026 08:09:05 +0000 Manifest this update: Fri 27 Mar 2026 08:09:05 +0000 Manifest next update: Fri 03 Apr 2026 08:09:05 +0000 Files and hashes: 1: RNKGOHOg4Xndk_snhK0EhGYj5-4.crl (hash: O/MY7kOsmm5cxIoUtNGGafv41FdJvgSj0Elgv51v56Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 08:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E4E2, serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE Validity Not Before: Mar 27 08:09:05 2026 GMT Not After : Apr 3 08:09:05 2026 GMT Subject: CN=69c63b21-d068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:f7:59:f1:92:d8:69:51:c5:d5:70:a2:58: ee:2d:71:7f:8e:66:d4:bd:22:a5:61:95:47:0d:27: a8:94:b7:e6:91:3a:c8:e4:6c:19:99:7e:5a:7d:7a: 14:46:3d:e4:b9:e8:42:e2:86:2a:b9:8e:b3:4d:ce: 00:76:c0:09:a9:9d:27:a9:63:5d:8c:6d:1f:69:a7: 20:8f:d4:4c:29:9e:68:5b:7c:1d:49:38:ad:21:59: 3d:66:d7:09:ef:1c:e0:ae:b1:39:e5:2e:41:6a:6d: a2:fb:83:01:32:c9:94:2d:e3:b0:a1:c4:b5:64:3f: 19:36:b9:7b:39:ee:a6:eb:ab:4b:f6:c3:bb:c4:01: ba:51:02:04:04:b7:0c:86:d0:da:55:5d:88:98:2b: 29:8c:50:77:2a:0f:bb:61:5f:70:ea:0c:0f:d7:f3: 40:bd:80:ef:15:64:ca:05:90:38:61:f1:ab:52:c8: 23:3d:af:83:61:4f:2b:b5:96:5c:57:ea:19:2b:f4: 30:ad:46:82:dc:7b:64:e0:02:0a:fc:67:a4:ad:04: a9:37:26:41:b3:b5:c9:ba:de:e7:f6:13:17:d1:90: b4:69:a2:f7:b8:67:5c:0a:72:02:1d:6e:28:97:36: 14:ab:39:a7:97:e0:9e:de:97:b6:15:40:0a:2c:b2: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:97:25:19:03:21:17:52:BE:7D:9C:2D:55:64:31:2D:FD:B2:A2:F2 X509v3 Authority Key Identifier: keyid:44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:59:20:84:42:5d:5f:7c:9d:69:e0:5a:8e:8f:c0:e4:8f:fe: 5b:6a:9c:fe:f2:b4:18:00:7e:7a:7f:59:e8:12:58:b8:09:35: dc:cd:ab:96:d9:e7:ad:dd:84:0c:44:3b:45:f9:64:b9:38:9a: 61:0c:82:e6:6f:88:ae:24:44:4e:52:c3:e8:1b:7f:0a:f0:6e: 2d:15:05:d6:a4:c4:60:25:e7:86:23:36:ab:b0:a9:64:4a:8e: 22:7b:63:16:7d:24:81:36:e8:3d:13:36:6f:8a:29:2a:07:8d: cd:1e:e6:4f:9a:7b:4a:b3:24:c8:8b:ea:e8:e3:f9:b4:43:60: c1:8c:ef:04:1f:28:ce:59:1a:c7:2c:d3:0a:72:4a:12:e8:eb: 70:8b:8d:10:89:37:81:9f:b9:c9:e5:76:5d:18:1f:d3:0e:07: 23:40:0c:94:9d:55:35:59:4d:a8:0d:64:7b:70:d4:d8:15:53: 09:ad:a1:11:a4:47:73:e0:cd:ff:c1:96:c1:ef:8a:a8:f3:93: 8e:87:37:92:55:5c:0f:7a:f8:2f:3a:c0:c8:6f:a9:23:81:a0: 96:19:e3:61:13:f3:bb:8a:c3:5e:77:12:a5:c5:f6:a0:19:e5: fa:90:83:42:73:8b:15:94:f8:b6:2f:df:b5:6e:c1:a2:9e:d7: c5:06:08:b9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 RTRFMjExMC8GA1UEBRMoNDREMjg2Mzg3M0EwRTE3OUREOTNGQjI3ODRBRDA0ODQ2 NjIzRTdFRTAeFw0yNjAzMjcwODA5MDVaFw0yNjA0MDMwODA5MDVaMBgxFjAUBgNV BAMTDTY5YzYzYjIxLWQwNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAz/dZ8ZLYaVHF1XCiWO4tcX+OZtS9IqVhlUcNJ6iUt+aROsjkbBmZflp9ehRG PeS56ELihiq5jrNNzgB2wAmpnSepY12MbR9ppyCP1EwpnmhbfB1JOK0hWT1m1wnv HOCusTnlLkFqbaL7gwEyyZQt47ChxLVkPxk2uXs57qbrq0v2w7vEAbpRAgQEtwyG 0NpVXYiYKymMUHcqD7thX3DqDA/X80C9gO8VZMoFkDhh8atSyCM9r4NhTyu1llxX 6hkr9DCtRoLce2TgAgr8Z6StBKk3JkGztcm63uf2ExfRkLRpove4Z1wKcgIdbiiX NhSrOaeX4J7el7YVQAossk/lAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUw5clGQMh F1K+fZwtVWQxLf2yovIwHwYDVR0jBBgwFoAURNKGOHOg4Xndk/snhK0EhGYj5+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzRCREVGNUQ2REFG QTExRjA5QUY2MTYyMDdDRDM2NDFEL1JOS0dPSE9nNFhuZGtfc25oSzBFaEdZajUt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUk5LR09IT2c0WG5ka19zbmhLMEVoR1lqNS00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF NEUyLzRCREVGNUQ2REFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL1JOS0dPSE9nNFhu ZGtfc25oSzBFaEdZajUtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQApWSCEQl1ffJ1p4FqOj8Dkj/5bapz+8rQYAH56f1noEli4CTXczauW2eet3YQM RDtF+WS5OJphDILmb4iuJEROUsPoG38K8G4tFQXWpMRgJeeGIzarsKlkSo4ie2MW fSSBNug9EzZviikqB43NHuZPmntKsyTIi+ro4/m0Q2DBjO8EHyjOWRrHLNMKckoS 6Otwi40QiTeBn7nJ5XZdGB/TDgcjQAyUnVU1WU2oDWR7cNTYFVMJraERpEdz4M3/ wZbB74qo85OOhzeSVVwPevgvOsDIb6kjgaCWGeNhE/O7isNedxKlxfagGeX6kINC c4sVlPi2L9+1bsGintfFBgi5 -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:17 2026 by rpki-client