$ rpki-client -vvf rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft File: 3YIYybgUroW5QGU2YHJQx6ruyAk.mft (raw, json) Hash identifier: 39cIdqt+7CINg4v386jT4lwlI27ftWVgQSmj8qkyplA= Subject key identifier: AE:44:8F:D2:EC:94:B7:13:56:69:CA:EF:3A:70:18:E0:7B:B6:AD:10 Authority key identifier: DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 Certificate issuer: /CN=A915ABD7/serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft Manifest number: 03E5 Signing time: Wed 25 Mar 2026 00:12:09 +0000 Manifest this update: Wed 25 Mar 2026 00:12:08 +0000 Manifest next update: Wed 01 Apr 2026 00:12:08 +0000 Files and hashes: 1: 3YIYybgUroW5QGU2YHJQx6ruyAk.crl (hash: uAEqwzy291FS2VufPSN3wHyngPVFPskvRu7Tv5olwAk=) 2: 88F3C02C045611EFB93F1F33C4F9AE02.roa (hash: YoChpX9w4FCCtAPtS4tdDvkJcAqQRe8NPjFDFUXSQH8=) 3: A4F1EAECC09211EC8950E57AC4F9AE02.roa (hash: bbFe9zajQ0g2zhaT+BLjCcFN40wGnYAdz85LZxbirZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915ABD7, serialNumber=DD8218C9B814AE85B9406536607250C7AAEEC809 Validity Not Before: Mar 25 00:12:08 2026 GMT Not After : Apr 1 00:12:08 2026 GMT Subject: CN=69c32859-6f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:87:3e:83:4c:58:ce:46:1c:e0:8d:a8:b6: a0:98:b8:23:b8:08:fb:61:d7:0a:ba:e2:c5:a2:4e: 93:95:14:48:79:88:17:34:d4:be:43:5f:3a:c1:2f: 48:01:03:91:62:6a:fd:f2:8b:e3:ac:42:81:5d:fd: f4:54:b5:29:43:f1:58:32:63:5a:f2:1c:f7:e2:5f: dd:48:ce:e0:fc:4d:9c:5e:83:b2:b9:5b:13:5f:2c: 61:db:4a:39:09:d2:81:dc:a9:6a:4e:d0:fb:58:8a: 2c:b4:f0:f1:91:f6:37:bb:89:cc:b6:ac:df:2c:17: 14:9d:95:3e:e8:e4:f0:c8:dd:8c:6e:67:dc:36:4b: 17:1c:c4:90:c0:95:2c:ba:ad:82:e2:18:fa:fb:ca: f2:2f:76:49:33:ca:3d:42:c1:bd:5d:cb:8e:85:f9: 6c:a6:25:63:be:e5:a2:90:21:f8:69:a6:a3:1f:8c: d9:09:6c:31:e6:9e:4c:04:f6:bf:d6:4d:09:21:0d: e1:5e:23:63:64:9d:91:c8:35:df:5e:a9:50:63:1f: 0e:f8:7b:fc:c2:69:ee:50:dd:92:ee:4f:f3:58:2f: db:d7:a2:c1:6e:f8:3e:86:a7:97:c0:35:6f:3e:fc: 8d:d3:81:8b:f6:61:1b:79:d9:c9:6d:f5:ea:a8:e8: c2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:44:8F:D2:EC:94:B7:13:56:69:CA:EF:3A:70:18:E0:7B:B6:AD:10 X509v3 Authority Key Identifier: keyid:DD:82:18:C9:B8:14:AE:85:B9:40:65:36:60:72:50:C7:AA:EE:C8:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3YIYybgUroW5QGU2YHJQx6ruyAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915ABD7/5F49AA68BEC411EC878CC166C4F9AE02/3YIYybgUroW5QGU2YHJQx6ruyAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:da:a4:8d:89:d6:a3:0a:f9:f8:d5:bc:b8:c7:27:e3:11: 82:d3:94:a3:0e:7d:33:f8:01:a0:a7:b6:28:78:6f:7c:a5:2f: dc:32:dc:1b:97:3c:2a:82:07:a5:3e:8b:f7:1e:de:32:83:a9: e9:e5:89:97:e5:53:2c:45:c1:7e:d2:ff:f9:c3:32:f9:1d:7c: df:89:06:35:11:d8:67:f7:c9:06:09:a0:57:8a:e6:90:c5:e2: d9:a1:ee:e9:b4:01:73:09:30:65:3c:a8:74:82:bd:1e:17:8f: f6:c1:8c:5b:ba:67:33:04:f9:c0:85:6e:56:57:c8:71:5e:2b: e9:19:76:2d:9a:f7:d7:10:3e:b9:9a:f2:0c:b4:d8:f9:13:08: 65:e0:d4:58:41:3b:62:5c:c8:7d:75:e5:04:f3:86:32:83:54: b2:94:7d:0c:16:fe:5c:f4:e8:78:19:82:6f:be:6d:5b:a1:01: 11:3a:ed:83:76:d3:86:05:b8:56:68:7d:21:cc:9a:58:19:b3: b6:3d:5b:74:74:09:93:42:e8:17:ea:32:a2:54:d6:10:09:10: 26:11:93:a6:26:2b:96:97:ad:24:97:c8:ce:33:1d:a5:78:e7: 0b:37:a1:76:8c:7a:1b:c3:37:be:41:65:7e:e4:e2:2f:9c:4d: 1b:22:e1:7f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFCRDcxMTAvBgNVBAUTKEREODIxOEM5QjgxNEFFODVCOTQwNjUzNjYwNzI1MEM3 QUFFRUM4MDkwHhcNMjYwMzI1MDAxMjA4WhcNMjYwNDAxMDAxMjA4WjAYMRYwFAYD VQQDEw02OWMzMjg1OS02ZjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQqHPoNMWM5GHOCNqLagmLgjuAj7YdcKuuLFok6TlRRIeYgXNNS+Q186wS9I AQORYmr98ovjrEKBXf30VLUpQ/FYMmNa8hz34l/dSM7g/E2cXoOyuVsTXyxh20o5 CdKB3KlqTtD7WIostPDxkfY3u4nMtqzfLBcUnZU+6OTwyN2MbmfcNksXHMSQwJUs uq2C4hj6+8ryL3ZJM8o9QsG9XcuOhflspiVjvuWikCH4aaajH4zZCWwx5p5MBPa/ 1k0JIQ3hXiNjZJ2RyDXfXqlQYx8O+Hv8wmnuUN2S7k/zWC/b16LBbvg+hqeXwDVv PvyN04GL9mEbednJbfXqqOjC8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5Ej9Ls lLcTVmnK7zpwGOB7tq0QMB8GA1UdIwQYMBaAFN2CGMm4FK6FuUBlNmByUMeq7sgJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUJENy81RjQ5QUE2OEJF QzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJvVzVRR1UyWUhKUXg2cnV5 QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNZSVl5YmdVcm9XNVFHVTJZSEpReDZydXlBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUJENy81RjQ5QUE2OEJFQzQxMUVDODc4Q0MxNjZDNEY5QUUwMi8zWUlZeWJnVXJv VzVRR1UyWUhKUXg2cnV5QWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY4/apI2J1qMK+fjVvLjHJ+MRgtOUow59M/gBoKe2KHhvfKUv3DLcG5c8KoIH pT6L9x7eMoOp6eWJl+VTLEXBftL/+cMy+R1834kGNRHYZ/fJBgmgV4rmkMXi2aHu 6bQBcwkwZTyodIK9HheP9sGMW7pnMwT5wIVuVlfIcV4r6Rl2LZr31xA+uZryDLTY +RMIZeDUWEE7YlzIfXXlBPOGMoNUspR9DBb+XPToeBmCb75tW6EBETrtg3bThgW4 Vmh9IcyaWBmztj1bdHQJk0LoF+oyolTWEAkQJhGTpiYrlpetJJfIzjMdpXjnCzeh dox6G8M3vkFlfuTiL5xNGyLhfw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:26 2026 by rpki-client