$ rpki-client -vvf rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft File: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft (raw, json) Hash identifier: U93/gQS0CZeCEGL8bmhGjGIbDfhyZ5LRjS8QY74WXQE= Subject key identifier: 28:9A:BB:90:AE:72:5E:6C:A9:FB:23:11:0A:83:68:FD:C1:E3:DB:80 Authority key identifier: D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 Certificate issuer: /CN=A915617E/serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Certificate serial: 0E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft Manifest number: 0E0F Signing time: Thu 26 Mar 2026 17:46:08 +0000 Manifest this update: Thu 26 Mar 2026 17:46:07 +0000 Manifest next update: Thu 02 Apr 2026 17:46:07 +0000 Files and hashes: 1: 0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl (hash: pSRKIpgZCYbuoyBiwsDLoQLtnOvRT3pzRB78kXrb0bA=) 2: 3F67E64E62BD11EE8F393D25C4F9AE02.roa (hash: gEMIOBcajdhE7ILa/lRfnCIRCgvUIHfApcn6AAUhQyc=) 3: DBDAFF6CC99611E9A41BCF75C4F9AE02.roa (hash: LJdsn8M+8WOyn3xfnVOerz5lCaK7ncj5KJBGdZ3Z5os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3613 (0xe1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915617E, serialNumber=D28C52ED090C539C10F222DEECD9A73C49A16804 Validity Not Before: Mar 26 17:46:07 2026 GMT Not After : Apr 2 17:46:07 2026 GMT Subject: CN=69c570e0-6f7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c1:8c:92:8c:4c:ce:b3:73:07:2f:46:68:e8: d5:89:3b:32:d5:2b:16:8d:93:ee:de:33:7f:f4:79: 8e:51:e9:7a:5b:72:40:de:93:26:c5:85:e7:32:73: 59:c9:68:46:e9:35:ee:0d:07:30:4e:33:f5:d6:a8: 18:84:01:c9:4d:a2:80:92:e3:3e:ed:68:83:e1:26: be:95:38:d2:16:cc:13:68:01:42:d5:da:88:e2:e6: e8:1c:49:b1:1b:11:f0:0c:5a:8d:c7:3d:4a:10:bf: 66:30:f0:3b:4f:36:41:d6:35:0e:2c:76:00:54:9c: cf:c3:85:d5:16:49:05:05:8b:8d:f8:45:15:ba:e1: 51:ed:d4:2d:13:ea:68:25:5d:0f:af:27:da:71:d2: 23:90:4f:26:30:20:1c:51:dd:13:97:e9:ad:cc:ff: 2d:7f:f3:88:f2:46:35:f2:1e:30:67:0d:8b:48:5a: ff:d4:e7:63:81:5f:e1:39:15:68:a0:b7:4c:86:6e: d6:f7:06:15:00:af:72:95:5a:0c:66:a2:b1:fb:b7: 9d:a0:13:df:64:fd:9b:77:eb:77:27:f2:f3:ed:62: 03:2c:54:a8:e7:7b:9a:e7:70:6a:66:e6:2b:72:33: f6:b5:47:73:c2:4d:6b:1c:96:b2:43:6a:70:b4:a8: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:BB:90:AE:72:5E:6C:A9:FB:23:11:0A:83:68:FD:C1:E3:DB:80 X509v3 Authority Key Identifier: keyid:D2:8C:52:ED:09:0C:53:9C:10:F2:22:DE:EC:D9:A7:3C:49:A1:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915617E/E1ADB746C99511E9BAAAB174C4F9AE02/0oxS7QkMU5wQ8iLe7NmnPEmhaAQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:f0:9a:fb:72:7a:1f:d2:28:2f:47:40:46:17:be:7e:68:a2: 00:6a:6b:fe:94:eb:51:a0:16:d5:26:59:0e:21:9b:11:eb:da: f8:ef:0f:01:20:14:77:25:7e:ab:17:4f:18:5f:1e:f5:13:3d: 2a:b0:13:dc:19:b3:ca:dc:86:26:b4:48:af:c5:d4:86:0b:ae: 9e:58:b6:83:6b:44:81:ef:87:99:8c:f0:80:b3:60:05:4b:4d: 19:9e:86:13:a9:ab:74:08:05:5f:3c:e6:a1:81:9f:e9:0b:aa: 24:58:51:66:cc:88:31:60:a2:31:79:a7:7e:06:c3:a3:89:09: c8:62:d5:ad:92:1b:53:4a:57:f1:98:92:29:9e:6b:ff:f9:c0: 91:1b:42:c1:17:3e:ef:db:c1:fa:b0:9b:22:20:84:bc:4d:58: 57:9d:73:47:46:bf:83:6d:4b:d0:a2:d1:51:c4:ca:88:5b:11: 10:46:93:24:a2:2b:77:09:ad:c2:90:3b:a4:c3:85:68:de:2c: 9d:7d:2b:3c:7d:bb:22:18:66:da:5a:1e:3a:36:8a:36:83:a2: 4b:06:74:79:ad:29:b8:64:df:8d:e8:2b:28:e1:89:0a:6f:95: d6:83:66:0f:42:6d:98:44:03:e0:60:df:4c:af:fc:39:ed:7d: e3:2c:6d:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTYxN0UxMTAvBgNVBAUTKEQyOEM1MkVEMDkwQzUzOUMxMEYyMjJERUVDRDlBNzND NDlBMTY4MDQwHhcNMjYwMzI2MTc0NjA3WhcNMjYwNDAyMTc0NjA3WjAYMRYwFAYD VQQDEw02OWM1NzBlMC02ZjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cGMkoxMzrNzBy9GaOjViTsy1SsWjZPu3jN/9HmOUel6W3JA3pMmxYXnMnNZ yWhG6TXuDQcwTjP11qgYhAHJTaKAkuM+7WiD4Sa+lTjSFswTaAFC1dqI4uboHEmx GxHwDFqNxz1KEL9mMPA7TzZB1jUOLHYAVJzPw4XVFkkFBYuN+EUVuuFR7dQtE+po JV0PryfacdIjkE8mMCAcUd0Tl+mtzP8tf/OI8kY18h4wZw2LSFr/1OdjgV/hORVo oLdMhm7W9wYVAK9ylVoMZqKx+7edoBPfZP2bd+t3J/Lz7WIDLFSo53ua53BqZuYr cjP2tUdzwk1rHJayQ2pwtKh5QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCiau5Cu cl5sqfsjEQqDaP3B49uAMB8GA1UdIwQYMBaAFNKMUu0JDFOcEPIi3uzZpzxJoWgE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjE3RS9FMUFEQjc0NkM5 OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1d1E4aUxlN05tblBFbWhh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBveFM3UWtNVTV3UThpTGU3Tm1uUEVtaGFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjE3RS9FMUFEQjc0NkM5OTUxMUU5QkFBQUIxNzRDNEY5QUUwMi8wb3hTN1FrTVU1 d1E4aUxlN05tblBFbWhhQVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWvCa+3J6H9IoL0dARhe+fmiiAGpr/pTrUaAW1SZZDiGbEeva+O8PASAUdyV+ qxdPGF8e9RM9KrAT3BmzytyGJrRIr8XUhguunli2g2tEge+HmYzwgLNgBUtNGZ6G E6mrdAgFXzzmoYGf6QuqJFhRZsyIMWCiMXmnfgbDo4kJyGLVrZIbU0pX8ZiSKZ5r //nAkRtCwRc+79vB+rCbIiCEvE1YV51zR0a/g21L0KLRUcTKiFsREEaTJKIrdwmt wpA7pMOFaN4snX0rPH27Ihhm2loeOjaKNoOiSwZ0ea0puGTfjegrKOGJCm+V1oNm D0JtmEQD4GDfTK/8Oe194yxtUQ== -----END CERTIFICATE-----Generated at Fri Mar 27 05:11:08 2026 by rpki-client