$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: WAJtVRIAK9GkSWOV1hbGshBBOGdUQAgMmRcmoKC3u04= Subject key identifier: 16:7E:39:C2:B1:37:B3:AE:72:E5:AC:09:90:B8:7D:3F:26:85:7C:F2 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 04B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 0498 Signing time: Tue 24 Mar 2026 23:42:20 +0000 Manifest this update: Tue 24 Mar 2026 23:42:19 +0000 Manifest next update: Tue 31 Mar 2026 23:42:19 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: BONUEw+6tJIvgwiAggfFM5eD8CMDa2dPgmZGELU1ScU=) 2: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: bzANKnbyeKHQq6L/luZgy8RCyHrFKy2/gJCau298tQs=) 3: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: mocm69lqZdjVVtWbDT8lrUYvlh6Uzdf4NnBQ902rsro=) 4: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: M/opGFmlb9jaN3RmTRwWVxME38lrA5KzlqcKDnyMekw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1206 (0x4b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Mar 24 23:42:19 2026 GMT Not After : Mar 31 23:42:19 2026 GMT Subject: CN=69c3215b-fe75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:dd:66:9f:89:8e:c7:87:84:31:bd:e6:29: e6:d5:f6:c2:62:d9:10:3b:53:f2:51:30:61:15:5b: 76:b8:24:d5:81:ee:94:be:8d:a4:4f:8b:7c:cf:74: 4e:bd:c0:2b:bc:e4:05:ba:6c:e7:47:c0:a9:54:fa: 3b:6d:3d:d6:ed:90:ca:81:ff:1c:10:a5:0e:ac:2f: bf:9b:f4:32:b1:e2:2f:9a:b3:28:2c:8b:cd:1d:26: f5:a8:6c:92:70:d1:f7:30:64:b8:d6:26:48:e9:31: cb:0f:16:31:ef:3e:12:25:92:8f:f2:83:41:ba:0d: 95:68:91:a1:e3:12:2a:1c:3f:44:9e:f3:1f:ff:13: 60:14:eb:37:b4:8f:12:f9:48:48:ed:f4:be:9e:0a: 91:7f:f2:0d:5d:59:1a:07:44:43:56:84:81:0a:b2: 1a:4b:1f:61:59:3c:f2:8c:a0:4e:6b:31:42:06:34: 3e:20:90:31:57:ef:b4:a5:02:3a:b4:b7:3e:76:00: e0:4a:cb:36:9e:39:f8:37:46:1f:73:96:11:0d:7d: 7f:7c:48:0d:e9:d0:4a:34:c0:d0:69:2c:3b:53:2f: 18:04:62:80:77:d9:f7:56:2b:22:3d:44:7e:3b:e6: fb:f3:4b:aa:b6:cb:9f:cb:96:99:57:c5:f0:49:5c: 76:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7E:39:C2:B1:37:B3:AE:72:E5:AC:09:90:B8:7D:3F:26:85:7C:F2 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:70:76:d2:0b:72:d8:76:15:58:2e:94:f4:ad:38:46:1a:80: 55:7c:ad:7f:92:c2:0c:77:aa:3f:5e:82:20:cc:bb:59:57:31: 5f:03:28:16:d4:80:a6:e3:de:76:2b:9f:d4:0a:3c:91:99:35: 0f:40:fb:5e:aa:65:4b:fe:bb:e6:ed:75:47:8c:25:e6:18:9c: 0e:5c:0d:0c:ea:dd:b5:3a:1e:42:ab:24:f9:0a:e3:5f:8e:ad: 6d:84:45:b4:b0:93:6f:2c:db:84:00:12:0c:a6:f9:39:cb:33: fd:30:18:47:a0:78:3b:4c:4a:2f:e5:61:fb:3e:27:4f:bd:48: ec:cb:a4:c3:e3:a4:8d:45:a3:1c:a9:9a:39:1f:ae:1a:68:50: 7f:ac:1d:08:14:18:e1:12:f9:e8:96:2e:54:bc:02:8a:51:a5: 8d:aa:54:28:af:74:0e:34:c5:da:bb:ab:0a:a0:84:ce:02:4a: 8f:19:12:8a:66:7f:c8:44:97:fc:5e:ff:e7:d3:e4:9b:2a:75: 4f:9a:04:2d:9e:68:19:80:b0:67:69:91:e7:d7:73:81:c0:6f: cb:f4:9d:52:2a:5f:42:71:db:6f:2a:16:cd:f5:d5:ec:0c:a1: a0:9f:a9:29:35:8e:24:20:50:69:0e:08:42:3d:93:c9:a3:32: 6a:0c:93:ea -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYwMzI0MjM0MjE5WhcNMjYwMzMxMjM0MjE5WjAYMRYwFAYD VQQDEw02OWMzMjE1Yi1mZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstfdZp+JjseHhDG95inm1fbCYtkQO1PyUTBhFVt2uCTVge6Uvo2kT4t8z3RO vcArvOQFumznR8CpVPo7bT3W7ZDKgf8cEKUOrC+/m/QyseIvmrMoLIvNHSb1qGyS cNH3MGS41iZI6THLDxYx7z4SJZKP8oNBug2VaJGh4xIqHD9EnvMf/xNgFOs3tI8S +UhI7fS+ngqRf/INXVkaB0RDVoSBCrIaSx9hWTzyjKBOazFCBjQ+IJAxV++0pQI6 tLc+dgDgSss2njn4N0Yfc5YRDX1/fEgN6dBKNMDQaSw7Uy8YBGKAd9n3VisiPUR+ O+b780uqtsufy5aZV8XwSVx2YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBZ+OcKx N7OucuWsCZC4fT8mhXzyMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVXB20gty2HYVWC6U9K04RhqAVXytf5LCDHeqP16CIMy7WVcxXwMoFtSApuPe diuf1Ao8kZk1D0D7XqplS/675u11R4wl5hicDlwNDOrdtToeQqsk+QrjX46tbYRF tLCTbyzbhAASDKb5Ocsz/TAYR6B4O0xKL+Vh+z4nT71I7Mukw+OkjUWjHKmaOR+u GmhQf6wdCBQY4RL56JYuVLwCilGljapUKK90DjTF2rurCqCEzgJKjxkSimZ/yESX /F7/59Pkmyp1T5oELZ5oGYCwZ2mR59dzgcBvy/SdUipfQnHbbyoWzfXV7AyhoJ+p KTWOJCBQaQ4IQj2TyaMyagyT6g== -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:09 2026 by rpki-client