$ rpki-client -vvf rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft File: enhVXghERXV_vNAN3R10w2nLoLA.mft (raw, json) Hash identifier: g8nPlVPEzKLARRdcQSg2EgEaJgFk928pdAC0Q7EnCwQ= Subject key identifier: D5:79:48:74:2E:FF:51:B4:28:58:00:71:25:B0:5B:E3:D6:BB:49:3D Authority key identifier: 7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 Certificate issuer: /CN=A914E6AA/serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Certificate serial: 01E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft Manifest number: 0B45 Signing time: Tue 24 Mar 2026 22:10:38 +0000 Manifest this update: Tue 24 Mar 2026 22:10:38 +0000 Manifest next update: Tue 31 Mar 2026 22:10:38 +0000 Files and hashes: 1: enhVXghERXV_vNAN3R10w2nLoLA.crl (hash: bQh2kQfJ8ifmJubxivkxnJ7i1VB5kOlQgfNfWyQO2Sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 485 (0x1e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E6AA, serialNumber=7A78555E084445757FBCD00DDD1D74C369CBA0B0 Validity Not Before: Mar 24 22:10:38 2026 GMT Not After : Mar 31 22:10:38 2026 GMT Subject: CN=69c30bde-7042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:13:e7:8a:41:b8:b7:b5:4f:27:76:27:e9: 93:5f:bb:fa:35:9d:ac:84:fd:5b:4d:d5:ef:ca:d2: 1e:76:73:b4:62:7b:17:12:ce:2f:7d:28:e4:7b:42: cb:fe:d5:4f:f7:c0:78:6c:7a:d2:6b:a1:2b:32:9b: a7:9c:d7:13:75:2a:8d:89:9f:26:28:55:76:d8:6b: cc:f6:d0:60:30:0b:82:86:95:42:21:f6:01:2a:c8: 32:c8:b9:7e:57:30:2a:df:54:0a:b1:96:23:95:c3: ec:14:70:9c:f5:2c:2d:31:d4:e6:4c:73:bc:b0:a9: 58:a8:c1:17:c6:12:b1:20:ed:cf:55:27:b4:41:77: 77:c6:d9:ac:ec:e3:8a:96:20:2c:72:54:bb:b6:53: c9:c3:b2:a6:34:99:37:e8:b4:e9:4a:c3:64:b3:d9: 31:70:98:76:db:9b:1e:92:d9:a8:21:66:ca:2b:d3: 66:12:20:c1:40:56:7d:86:ec:ea:ac:41:bc:af:93: b1:1b:83:57:70:7a:bf:44:97:b2:d5:38:f3:4f:0b: b1:8b:81:fa:34:e4:fd:74:4a:f3:3c:52:77:44:cc: 5b:7d:c0:41:8a:86:24:84:3b:b8:a4:77:cf:9e:df: 28:af:df:04:34:69:99:c0:ce:ba:d1:3d:ee:07:66: 7c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:79:48:74:2E:FF:51:B4:28:58:00:71:25:B0:5B:E3:D6:BB:49:3D X509v3 Authority Key Identifier: keyid:7A:78:55:5E:08:44:45:75:7F:BC:D0:0D:DD:1D:74:C3:69:CB:A0:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/enhVXghERXV_vNAN3R10w2nLoLA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E6AA/8EDB107EADA811EBA7C9F567C4F9AE02/enhVXghERXV_vNAN3R10w2nLoLA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e1:ff:6b:b1:e6:d2:c9:77:ef:27:4a:e2:75:ea:0c:a0:32: 40:2d:f1:91:ef:d3:f3:d2:97:0c:dd:4f:34:0f:50:50:a9:38: c6:1f:d9:96:02:64:f9:b2:96:d0:d4:f3:30:c6:3a:d5:e7:02: 5f:99:60:dc:7f:c5:56:e9:e6:8e:fe:fa:40:ad:02:cf:b6:33: 9f:c7:45:cb:c1:dc:ac:f5:2e:e3:b3:5f:e4:c8:54:10:a8:8c: c1:ac:42:8a:ec:54:90:5d:83:44:55:5e:4c:72:b8:a3:7d:c5: 64:1a:cf:45:70:ce:6d:0c:00:fe:45:e1:67:1f:b6:e1:d0:05: b8:c0:18:a1:8c:04:c9:58:70:47:a7:ef:45:a8:e8:5a:c3:2c: 48:fe:2d:cc:c7:69:b5:ec:50:00:8c:e6:9b:bf:f6:e3:18:09: fd:c8:b2:73:a0:20:2f:85:6b:ec:57:2c:92:47:9e:81:c3:58: 7b:b1:2e:37:36:87:45:c0:fe:d1:68:5b:01:67:be:64:7a:f2: 82:e4:4b:e3:37:fc:3d:f1:1b:0a:34:95:30:b1:15:62:e1:72: 55:29:7b:a1:a5:b7:cc:4f:32:7e:a0:5b:14:48:9f:31:07:b1: 70:0b:6f:a7:bd:f7:ba:3a:03:e1:29:0b:af:88:cb:64:e1:3b: e5:ac:d7:59 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU2QUExMTAvBgNVBAUTKDdBNzg1NTVFMDg0NDQ1NzU3RkJDRDAwREREMUQ3NEMz NjlDQkEwQjAwHhcNMjYwMzI0MjIxMDM4WhcNMjYwMzMxMjIxMDM4WjAYMRYwFAYD VQQDEw02OWMzMGJkZS03MDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm0UT54pBuLe1Tyd2J+mTX7v6NZ2shP1bTdXvytIednO0YnsXEs4vfSjke0LL /tVP98B4bHrSa6ErMpunnNcTdSqNiZ8mKFV22GvM9tBgMAuChpVCIfYBKsgyyLl+ VzAq31QKsZYjlcPsFHCc9SwtMdTmTHO8sKlYqMEXxhKxIO3PVSe0QXd3xtms7OOK liAsclS7tlPJw7KmNJk36LTpSsNks9kxcJh225sektmoIWbKK9NmEiDBQFZ9huzq rEG8r5OxG4NXcHq/RJey1TjzTwuxi4H6NOT9dErzPFJ3RMxbfcBBioYkhDu4pHfP nt8or98ENGmZwM660T3uB2Z8rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNV5SHQu /1G0KFgAcSWwW+PWu0k9MB8GA1UdIwQYMBaAFHp4VV4IREV1f7zQDd0ddMNpy6Cw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTZBQS84RURCMTA3RUFE QTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJYVl92TkFOM1IxMHcybkxv TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VuaFZYZ2hFUlhWX3ZOQU4zUjEwdzJuTG9MQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTZBQS84RURCMTA3RUFEQTgxMUVCQTdDOUY1NjdDNEY5QUUwMi9lbmhWWGdoRVJY Vl92TkFOM1IxMHcybkxvTEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMuH/a7Hm0sl37ydK4nXqDKAyQC3xke/T89KXDN1PNA9QUKk4xh/ZlgJk+bKW 0NTzMMY61ecCX5lg3H/FVunmjv76QK0Cz7Yzn8dFy8HcrPUu47Nf5MhUEKiMwaxC iuxUkF2DRFVeTHK4o33FZBrPRXDObQwA/kXhZx+24dAFuMAYoYwEyVhwR6fvRajo WsMsSP4tzMdptexQAIzmm7/24xgJ/ciyc6AgL4Vr7FcskkeegcNYe7EuNzaHRcD+ 0WhbAWe+ZHryguRL4zf8PfEbCjSVMLEVYuFyVSl7oaW3zE8yfqBbFEifMQexcAtv p733ujoD4SkLr4jLZOE75azXWQ== -----END CERTIFICATE-----Generated at Thu Mar 26 05:25:27 2026 by rpki-client