$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft File: L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft (raw, json) Hash identifier: VXQxgZj93c/AR8H5Qz2SHmYpzGgHSgssKx6PK9gN3WY= Subject key identifier: A2:28:14:FF:03:2A:52:E2:92:E3:97:73:7B:83:8D:B9:EF:1A:89:E2 Authority key identifier: 2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 Certificate issuer: /CN=A9152D1E/serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft Manifest number: 047F Signing time: Tue 24 Mar 2026 23:42:00 +0000 Manifest this update: Tue 24 Mar 2026 23:41:59 +0000 Manifest next update: Tue 31 Mar 2026 23:41:59 +0000 Files and hashes: 1: L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl (hash: q5bzPA71JNzEVPo9UFsE9z6gKc80QlQwaVir0M0d9k0=) 2: 74D78D2AB28F11EFB915BB1BC4F9AE02.roa (hash: N+WDRVK1GCgpC7/SSOzfsvjQlOUQfUPMZGxcGp5tWsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152D1E, serialNumber=2FC46019EE52D1E91BB1D1D8E17E998A715B7244 Validity Not Before: Mar 24 23:41:59 2026 GMT Not After : Mar 31 23:41:59 2026 GMT Subject: CN=69c32147-8628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:06:5a:ac:6b:28:d8:3a:84:f6:83:b3:5d: 28:b2:03:62:bf:3b:6c:05:a7:8d:67:e7:15:e7:63: 26:cc:2c:b8:2f:16:07:30:16:f8:7e:20:6c:ae:25: 4b:3d:fb:25:4a:9e:7c:24:c3:11:d6:d7:6f:d3:f1: 11:60:dc:1b:54:2d:c4:21:c1:1f:db:35:f7:e7:78: d8:46:14:c7:a4:3e:7b:33:d8:68:a9:c1:ce:53:b7: 43:1e:71:01:ba:1f:1c:20:62:30:b4:1f:9c:ea:5d: 0d:b2:34:39:d9:20:8a:07:a2:5c:e3:3f:17:8d:a7: 40:3f:8b:e5:87:8d:c4:13:73:c8:7b:51:7e:30:9d: ce:d3:40:d6:10:03:f8:36:c2:4e:9b:8f:e8:b4:8b: 07:a3:16:9a:6b:cd:25:55:d4:06:2b:c5:23:a7:8c: 01:1f:1a:24:77:45:dd:b2:20:d2:ef:0c:c0:d9:79: 0a:f5:fc:f3:bc:8c:c4:ee:6d:fa:33:ca:96:51:0b: a7:44:5b:e5:1d:f5:56:0a:7a:60:9b:c8:68:83:6f: eb:ba:33:26:64:da:77:7a:c6:ab:1c:1d:32:02:c1: b0:b7:f1:30:0c:42:9d:9a:40:61:f7:84:a1:13:2d: 41:c7:2b:d1:6b:1c:2a:b1:98:8f:81:e7:34:85:a6: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:28:14:FF:03:2A:52:E2:92:E3:97:73:7B:83:8D:B9:EF:1A:89:E2 X509v3 Authority Key Identifier: keyid:2F:C4:60:19:EE:52:D1:E9:1B:B1:D1:D8:E1:7E:99:8A:71:5B:72:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8RgGe5S0ekbsdHY4X6ZinFbckQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D1E/C7C0C1DA7D6011ECAD965030C4F9AE02/L8RgGe5S0ekbsdHY4X6ZinFbckQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:c8:ce:56:7e:c8:35:0c:3d:3f:dd:99:82:a0:cb:d3:a7:52: 03:33:28:95:a2:40:ef:57:f2:c6:0b:97:3e:c1:a7:05:37:08: 57:e7:23:09:ce:e6:09:e3:02:3f:c4:08:8a:30:fa:08:d5:6e: 59:6c:ff:47:4f:a0:52:b2:14:81:b1:aa:80:73:73:13:3c:d6: cb:c2:a3:d2:d8:be:29:71:e0:e8:1b:fb:9d:07:1f:9b:28:75: 44:40:ad:79:7e:2d:f1:ad:60:16:f3:3e:6d:33:c2:cf:5b:1a: 26:59:8c:a1:71:fb:41:ea:29:c7:f1:b4:a6:eb:18:08:da:fd: c6:0f:4d:aa:a3:e5:e3:bf:1e:cd:02:92:30:5f:7b:d4:01:9e: 17:3f:3e:ec:f9:e8:c8:f9:2b:a5:cf:f4:a0:01:c8:a5:ac:6c: c7:14:cd:fa:29:0d:0a:1b:3c:48:c4:69:84:95:dc:b8:df:a3: 59:16:da:7c:58:2a:b5:65:55:1c:ef:ff:4c:e8:bc:c3:e8:1f: 62:7f:84:81:cf:08:b4:8b:f7:37:14:72:94:5b:90:16:60:75: cf:c5:02:c6:62:3a:f7:d2:c9:f7:33:06:98:fe:00:eb:9a:8d: fd:04:19:a7:da:2c:02:4a:bc:b8:95:76:14:bf:97:ec:fa:0d: 93:87:3d:d9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJEMUUxMTAvBgNVBAUTKDJGQzQ2MDE5RUU1MkQxRTkxQkIxRDFEOEUxN0U5OThB NzE1QjcyNDQwHhcNMjYwMzI0MjM0MTU5WhcNMjYwMzMxMjM0MTU5WjAYMRYwFAYD VQQDEw02OWMzMjE0Ny04NjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k4GWqxrKNg6hPaDs10osgNivztsBaeNZ+cV52MmzCy4LxYHMBb4fiBsriVL PfslSp58JMMR1tdv0/ERYNwbVC3EIcEf2zX353jYRhTHpD57M9hoqcHOU7dDHnEB uh8cIGIwtB+c6l0NsjQ52SCKB6Jc4z8XjadAP4vlh43EE3PIe1F+MJ3O00DWEAP4 NsJOm4/otIsHoxaaa80lVdQGK8Ujp4wBHxokd0XdsiDS7wzA2XkK9fzzvIzE7m36 M8qWUQunRFvlHfVWCnpgm8hog2/rujMmZNp3esarHB0yAsGwt/EwDEKdmkBh94Sh Ey1BxyvRaxwqsZiPgec0habGywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKIoFP8D KlLikuOXc3uDjbnvGoniMB8GA1UdIwQYMBaAFC/EYBnuUtHpG7HR2OF+mYpxW3JE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkQxRS9DN0MwQzFEQTdE NjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBla2JzZEhZNFg2WmluRmJj a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UmdHZTVTMGVrYnNkSFk0WDZaaW5GYmNrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkQxRS9DN0MwQzFEQTdENjAxMUVDQUQ5NjUwMzBDNEY5QUUwMi9MOFJnR2U1UzBl a2JzZEhZNFg2WmluRmJja1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAScjOVn7INQw9P92ZgqDL06dSAzMolaJA71fyxguXPsGnBTcIV+cjCc7mCeMC P8QIijD6CNVuWWz/R0+gUrIUgbGqgHNzEzzWy8Kj0ti+KXHg6Bv7nQcfmyh1RECt eX4t8a1gFvM+bTPCz1saJlmMoXH7Qeopx/G0pusYCNr9xg9NqqPl478ezQKSMF97 1AGeFz8+7PnoyPkrpc/0oAHIpaxsxxTN+ikNChs8SMRphJXcuN+jWRbafFgqtWVV HO//TOi8w+gfYn+Egc8ItIv3NxRylFuQFmB1z8UCxmI699LJ9zMGmP4A65qN/QQZ p9osAkq8uJV2FL+X7PoNk4c92Q== -----END CERTIFICATE-----Generated at Thu Mar 26 08:23:03 2026 by rpki-client