$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: ed38Sh4lO+gu516DXvoEpyRAQ2wsx+hcfOft2bBiDSc= Subject key identifier: EC:DD:4A:DE:6C:5A:F1:F3:92:6E:E4:74:D9:D6:04:A3:5A:4C:B0:A0 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1F57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1EE6 Signing time: Tue 24 Mar 2026 15:58:26 +0000 Manifest this update: Tue 24 Mar 2026 15:58:26 +0000 Manifest next update: Tue 31 Mar 2026 15:58:26 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: 310tuCe3G+pfjX3mJIKbmsyZNdN+xd5kkjV8vW/5snE=) 2: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: 4Y9gx7b0d2VBJn+ulAGE25AcgiQlddwNfL8IsfHDlxU=) 3: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: yrw/Wliea2v/nhT95C1H6CHn+Y9xHNL1DsyB2AthFt4=) 4: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: orzccmiNSicAop/OpjFFJ2tGr1eSdfKFi4jU7YLYc30=) 5: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: R0F5zzc+BpzP1/ZU/NVRkNdsAgNiR161974QmuBaZJM=) 6: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 8+HVn+1aDWLHtIQalu+KT6alxAIGWOxLQB3VgePG+TU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:58:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8023 (0x1f57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Mar 24 15:58:26 2026 GMT Not After : Mar 31 15:58:26 2026 GMT Subject: CN=69c2b4a2-d59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5e:13:d2:33:47:cc:e5:fe:33:df:f8:92:26: ec:46:b4:8f:80:b7:c5:02:5f:b9:68:45:aa:ce:72: e3:da:0e:4a:8f:1b:be:da:62:23:e2:18:b7:07:69: 48:32:ef:67:75:fc:25:be:3c:49:14:c3:77:65:59: 64:ce:31:c8:fb:fb:9f:31:ae:cd:73:e7:09:6f:60: 94:8d:e6:8f:32:b2:8f:cb:ee:a5:17:57:44:ce:a6: bc:03:37:01:ea:47:35:9e:22:92:36:f1:54:d5:de: 36:9b:bb:24:17:ff:e0:f9:a7:c0:b6:fb:4e:04:9c: cd:c3:dc:df:3f:84:d5:fa:c8:88:4b:cf:90:88:4f: fa:31:7d:2d:9e:92:e3:f1:5e:0c:65:ab:30:29:b2: 1c:56:7b:69:f2:45:20:0f:0c:8f:c8:46:5a:01:d3: 82:e1:f5:53:1c:c1:6b:f8:72:4c:fc:93:68:a0:c6: 35:1b:ea:68:9d:d9:89:20:78:c3:3d:f7:78:86:7e: 06:78:11:23:e6:8a:65:02:38:f9:cd:ce:15:fc:5e: df:0e:d9:8a:49:b0:e5:2e:f0:2e:da:73:fc:28:d4: 30:92:9d:19:c6:ed:bf:10:64:a9:28:76:5b:80:61: 16:29:e9:19:e7:8e:e2:0d:c1:d0:81:44:81:74:fc: ba:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DD:4A:DE:6C:5A:F1:F3:92:6E:E4:74:D9:D6:04:A3:5A:4C:B0:A0 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2d:9b:87:44:67:a1:2b:34:85:96:13:93:eb:90:eb:85:3e: 63:8d:e5:cf:41:16:de:7b:c5:41:a3:1b:28:11:c8:84:69:cb: 5b:d6:c1:df:88:e3:04:09:63:1b:d8:12:dd:08:a6:47:a7:2c: fe:89:19:fa:16:42:87:12:44:10:3e:07:61:28:94:05:b0:ba: 86:c7:df:17:b7:18:e7:18:24:ba:65:6f:12:71:7e:a6:f8:68: f9:e0:57:6d:7f:32:1e:2d:87:42:3e:73:80:ba:1b:01:be:74: 8f:6a:49:99:58:d5:27:83:de:17:e4:46:d5:69:20:e4:a0:14: 17:c5:0c:45:8f:ea:df:47:c4:01:f1:b9:ac:36:54:56:77:df: 71:f9:95:7a:6f:f0:4f:8d:fb:62:68:f4:ed:1f:33:67:10:8c: 00:02:d1:94:80:04:dc:fe:01:51:fd:7e:e0:6e:10:11:de:d1: 21:1e:7f:cf:f7:05:38:de:35:14:89:4b:d7:ac:89:64:c9:c0: 02:88:8f:3f:1a:78:28:73:20:c4:c6:1a:29:28:61:51:07:c9: bc:6a:af:70:a3:ef:8b:fa:df:67:01:b2:ec:55:59:89:5d:f7: 3c:8b:8f:86:bd:c8:c2:0f:c1:7e:c1:f3:79:83:9c:c7:14:39: b3:40:34:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICH1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjYwMzI0MTU1ODI2WhcNMjYwMzMxMTU1ODI2WjAYMRYwFAYD VQQDEw02OWMyYjRhMi1kNTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6F4T0jNHzOX+M9/4kibsRrSPgLfFAl+5aEWqznLj2g5Kjxu+2mIj4hi3B2lI Mu9ndfwlvjxJFMN3ZVlkzjHI+/ufMa7Nc+cJb2CUjeaPMrKPy+6lF1dEzqa8AzcB 6kc1niKSNvFU1d42m7skF//g+afAtvtOBJzNw9zfP4TV+siIS8+QiE/6MX0tnpLj 8V4MZaswKbIcVntp8kUgDwyPyEZaAdOC4fVTHMFr+HJM/JNooMY1G+pondmJIHjD Pfd4hn4GeBEj5oplAjj5zc4V/F7fDtmKSbDlLvAu2nP8KNQwkp0Zxu2/EGSpKHZb gGEWKekZ547iDcHQgUSBdPy67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOzdSt5s WvHzkm7kdNnWBKNaTLCgMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJy2bh0RnoSs0hZYTk+uQ64U+Y43lz0EW3nvFQaMbKBHIhGnLW9bB34jjBAlj G9gS3QimR6cs/okZ+hZChxJEED4HYSiUBbC6hsffF7cY5xgkumVvEnF+pvho+eBX bX8yHi2HQj5zgLobAb50j2pJmVjVJ4PeF+RG1Wkg5KAUF8UMRY/q30fEAfG5rDZU VnffcfmVem/wT437Ymj07R8zZxCMAALRlIAE3P4BUf1+4G4QEd7RIR5/z/cFON41 FIlL16yJZMnAAoiPPxp4KHMgxMYaKShhUQfJvGqvcKPvi/rfZwGy7FVZiV33PIuP hr3Iwg/BfsHzeYOcxxQ5s0A0lQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:21:42 2026 by rpki-client