$ rpki-client -vvf rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft File: 0ba-fNUVRYE-wxdmgHrN2YepD98.mft (raw, json) Hash identifier: R+vyLsE4AnoXa+0TZjnOcD8D3oQiw+xEqPRtUxRGwUU= Subject key identifier: E2:0B:C1:34:E9:CB:34:BE:BF:14:49:61:FF:40:9F:00:37:95:B5:45 Authority key identifier: D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF Certificate issuer: /CN=A915418F/serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Certificate serial: 098A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft Manifest number: 097B Signing time: Tue 24 Mar 2026 19:50:30 +0000 Manifest this update: Tue 24 Mar 2026 19:50:30 +0000 Manifest next update: Tue 31 Mar 2026 19:50:30 +0000 Files and hashes: 1: 0ba-fNUVRYE-wxdmgHrN2YepD98.crl (hash: 1jodXIdpx50l2INKa1dhEDiK8HmIjWN6KMwfxY1jG0E=) 2: 3BEF1820AFBA11EA8449B980C4F9AE02.roa (hash: xhNjPqA73OpL8U8u4dVTjHBcy8FV6vJPVW6N4NhLK5I=) 3: F4757B1018C811EB94A5327AC4F9AE02.roa (hash: 5TJ8fpI/hph92A8Cw9TwpRY9J8n0ZIFo0zChXcOf4qo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2442 (0x98a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915418F, serialNumber=D1B6BE7CD51545813EC31766807ACDD987A90FDF Validity Not Before: Mar 24 19:50:30 2026 GMT Not After : Mar 31 19:50:30 2026 GMT Subject: CN=69c2eb06-0f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f4:4c:52:5e:c6:d2:34:e6:3c:ee:c4:99:77: 2d:e6:68:3a:7d:5d:d0:d4:1b:c0:71:26:6a:4c:12: 33:9e:43:18:1d:5c:62:13:98:a2:23:49:ef:1d:79: 2d:44:aa:b4:cf:55:4b:ca:75:bb:3f:66:9b:58:eb: 2e:94:67:f2:29:fe:5f:d8:b3:42:92:01:55:19:55: 9e:59:3a:be:e9:30:3d:9c:0a:f0:ee:06:56:e1:04: cb:2f:5d:61:ac:8c:26:e1:95:34:e2:ee:ca:cd:6e: 10:5f:7a:76:e1:f5:a5:11:3e:d2:92:da:a3:f0:69: b1:35:90:0a:d9:9c:50:a3:1a:27:d1:d7:4c:35:3d: 88:d8:44:f2:36:cf:de:b8:40:25:c2:ae:5b:6c:41: d0:48:34:77:cd:06:5f:7e:b5:47:e0:6d:cb:ec:8a: 31:4a:35:d0:f4:69:68:51:a9:b5:8d:a8:44:ab:0b: 22:5d:21:1b:5e:81:a6:db:90:1a:00:02:08:1c:0f: 6f:0d:d8:91:01:20:48:55:bf:c8:35:5d:97:96:5d: 96:8b:7c:75:08:fa:96:fe:04:16:f8:a2:07:bd:0d: fc:a1:be:d4:c0:30:2d:5f:6d:97:0c:aa:54:45:ba: 36:4b:15:6c:31:c8:39:91:ee:1b:86:fc:72:26:19: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0B:C1:34:E9:CB:34:BE:BF:14:49:61:FF:40:9F:00:37:95:B5:45 X509v3 Authority Key Identifier: keyid:D1:B6:BE:7C:D5:15:45:81:3E:C3:17:66:80:7A:CD:D9:87:A9:0F:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ba-fNUVRYE-wxdmgHrN2YepD98.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915418F/75B90D24AFB811EAA76E5E7BC4F9AE02/0ba-fNUVRYE-wxdmgHrN2YepD98.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a7:ec:d2:c0:2f:31:f0:d1:a5:c0:6a:e3:f5:a4:f1:96:18: c3:78:97:fa:4d:f8:09:59:cd:bd:80:25:81:ea:8d:6f:18:85: b6:b3:36:9e:a9:56:71:1c:c7:82:65:94:c2:98:ca:0b:90:b5: e5:76:ea:d7:f2:94:41:92:9e:35:00:37:ca:33:37:f2:62:55: a8:e9:9c:7e:a4:da:0a:5a:d8:da:75:6f:90:09:98:d0:29:4a: 5c:b4:de:d1:7e:5e:d4:46:50:5c:a1:27:4f:8e:fb:d7:b0:eb: 69:ed:43:df:85:f2:e0:01:7b:b9:6e:31:bf:69:08:0b:12:b4: a1:ec:e7:31:2a:7d:10:9e:5a:57:04:61:a7:f2:47:97:a3:b5: b2:ce:d3:96:cc:91:f6:da:be:97:ce:a7:d6:b5:60:08:44:44: b2:5b:15:56:4f:2e:86:87:84:05:07:7f:d1:d1:34:aa:83:3a: c9:87:8f:f1:28:4e:6c:2f:5e:a2:eb:0a:89:16:fe:92:dc:e5: 0e:e2:54:1c:2f:e1:93:7c:6a:67:ba:23:cc:8d:3d:3c:df:99: c1:67:3d:19:d5:4e:7b:75:88:8b:31:9d:f6:3d:b3:9c:9d:b5: 15:2a:e6:2e:82:b8:8e:b1:b1:2e:57:ef:11:21:b6:63:4c:96: 23:18:ea:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQxOEYxMTAvBgNVBAUTKEQxQjZCRTdDRDUxNTQ1ODEzRUMzMTc2NjgwN0FDREQ5 ODdBOTBGREYwHhcNMjYwMzI0MTk1MDMwWhcNMjYwMzMxMTk1MDMwWjAYMRYwFAYD VQQDEw02OWMyZWIwNi0wZjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPRMUl7G0jTmPO7EmXct5mg6fV3Q1BvAcSZqTBIznkMYHVxiE5iiI0nvHXkt RKq0z1VLynW7P2abWOsulGfyKf5f2LNCkgFVGVWeWTq+6TA9nArw7gZW4QTLL11h rIwm4ZU04u7KzW4QX3p24fWlET7Sktqj8GmxNZAK2ZxQoxon0ddMNT2I2ETyNs/e uEAlwq5bbEHQSDR3zQZffrVH4G3L7IoxSjXQ9GloUam1jahEqwsiXSEbXoGm25Aa AAIIHA9vDdiRASBIVb/INV2Xll2Wi3x1CPqW/gQW+KIHvQ38ob7UwDAtX22XDKpU Rbo2SxVsMcg5ke4bhvxyJhk9mQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOILwTTp yzS+vxRJYf9AnwA3lbVFMB8GA1UdIwQYMBaAFNG2vnzVFUWBPsMXZoB6zdmHqQ/f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDE4Ri83NUI5MEQyNEFG QjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZRS13eGRtZ0hyTjJZZXBE OTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBiYS1mTlVWUllFLXd4ZG1nSHJOMlllcEQ5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDE4Ri83NUI5MEQyNEFGQjgxMUVBQTc2RTVFN0JDNEY5QUUwMi8wYmEtZk5VVlJZ RS13eGRtZ0hyTjJZZXBEOTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAqfs0sAvMfDRpcBq4/Wk8ZYYw3iX+k34CVnNvYAlgeqNbxiFtrM2nqlWcRzH gmWUwpjKC5C15Xbq1/KUQZKeNQA3yjM38mJVqOmcfqTaClrY2nVvkAmY0ClKXLTe 0X5e1EZQXKEnT47717Drae1D34Xy4AF7uW4xv2kICxK0oeznMSp9EJ5aVwRhp/JH l6O1ss7TlsyR9tq+l86n1rVgCEREslsVVk8uhoeEBQd/0dE0qoM6yYeP8ShObC9e ousKiRb+ktzlDuJUHC/hk3xqZ7ojzI09PN+ZwWc9GdVOe3WIizGd9j2znJ21FSrm LoK4jrGxLlfvESG2Y0yWIxjqOg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:40 2026 by rpki-client