$ rpki-client -vvf rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft File: up0lGkqfrMTkpmOHdQooZioxAFc.mft (raw, json) Hash identifier: nLJbpb4gopDcc6jUTNteVCoGJN9m16z36JXViCBspaY= Subject key identifier: AD:D4:52:18:7E:0D:A3:56:C8:05:FB:25:67:B1:1E:F9:84:B7:5B:4E Authority key identifier: BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 Certificate issuer: /CN=A915B581/serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Certificate serial: 354E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft Manifest number: 3538 Signing time: Thu 26 Mar 2026 14:48:45 +0000 Manifest this update: Thu 26 Mar 2026 14:48:45 +0000 Manifest next update: Thu 02 Apr 2026 14:48:45 +0000 Files and hashes: 1: up0lGkqfrMTkpmOHdQooZioxAFc.crl (hash: rFM73DXErQDdZRU9uMQMfRokNsaEGl2XLmmuJhRi378=) 2: 7A38D6B854F311E7AC64ED3AC4F9AE02.roa (hash: wpF9ptajaxcFCU5XYXYL7kAycTSdDrhOWM0Rnpw1Xnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13646 (0x354e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B581, serialNumber=BA9D251A4A9FACC4E4A66387750A28662A310057 Validity Not Before: Mar 26 14:48:45 2026 GMT Not After : Apr 2 14:48:45 2026 GMT Subject: CN=69c5474d-c254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:c8:38:4c:02:69:98:23:4d:a3:c2:14:db: 3f:ae:ea:49:ed:ed:47:c7:b6:4d:15:c8:c8:ba:7c: 51:bc:09:57:ad:91:42:1d:fd:77:f1:69:c9:b1:3e: 0e:f2:34:95:1a:c7:8f:79:d0:61:46:46:8e:dd:40: 27:fe:e3:d2:48:b4:2a:56:19:ca:87:c6:10:28:da: 59:26:4f:87:e1:80:24:67:73:d7:35:05:3c:71:29: 5c:1c:5d:ff:ee:9c:e4:9f:c9:37:3f:43:60:6a:2e: cd:83:1f:60:26:f0:48:97:33:e8:ef:cd:57:4d:2a: 90:e7:2f:17:bb:1b:ec:4b:4f:be:9d:22:45:64:2e: 0a:d1:bc:58:fd:13:ce:91:04:69:1f:71:f6:4a:c6: 8c:ab:90:87:3b:fc:e7:04:a0:8f:94:84:2b:0c:59: 96:d4:ab:38:e4:d0:93:22:db:11:14:5a:bb:02:6c: 08:41:e0:04:51:7f:9d:bf:64:0f:4b:be:36:b4:7a: 64:20:ba:ce:fa:b2:93:36:4d:76:3e:9f:cf:9a:6e: f8:75:b8:06:58:56:ec:9e:50:5f:a5:d3:a9:1b:7e: 4d:8d:e3:98:b7:e2:1d:69:59:36:63:ba:89:08:28: 4e:ed:43:d0:c4:10:a3:43:9d:5a:64:de:91:ba:81: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:52:18:7E:0D:A3:56:C8:05:FB:25:67:B1:1E:F9:84:B7:5B:4E X509v3 Authority Key Identifier: keyid:BA:9D:25:1A:4A:9F:AC:C4:E4:A6:63:87:75:0A:28:66:2A:31:00:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/up0lGkqfrMTkpmOHdQooZioxAFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B581/BB8FDFFE1D9311E2A9638AF708B02CD2/up0lGkqfrMTkpmOHdQooZioxAFc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:00:ed:64:a1:5c:d2:77:f7:86:ee:e5:ef:f6:12:09:e1:55: 0c:94:ef:85:4c:16:84:01:73:bd:00:c5:26:a6:96:77:52:e3: 28:55:52:26:d4:1c:36:d9:04:43:79:ed:4e:29:6c:18:d3:14: c4:49:90:0f:8a:7d:b7:f2:7f:5d:16:65:d2:86:df:b2:a3:18: c8:cf:c3:2e:0f:f4:c0:36:58:76:87:63:49:89:0c:c5:e0:9e: 78:bb:d0:f1:72:28:d6:ec:bd:97:77:10:ce:98:9b:b2:00:a1: ea:4f:c8:43:78:94:a8:ff:a0:16:a8:52:b9:53:c0:51:b2:66: 05:63:80:29:dc:30:49:6e:b2:c8:26:a6:68:f0:26:5f:74:15: 40:70:93:f8:b7:c6:2f:6e:79:a5:54:6a:30:f4:88:4a:4a:ab: 20:43:31:87:cf:1f:b2:ae:d6:83:5a:96:e1:40:aa:2b:8b:d3: 32:ee:6e:68:a3:30:f3:e3:50:62:2b:95:e0:f4:34:db:e5:50: 55:88:b0:e0:7d:db:e0:f7:4d:59:43:0d:87:f3:42:ea:ea:45: 13:fd:db:10:e4:ea:8f:8a:54:d5:05:c1:5c:6c:3a:e4:1e:77: cc:c8:61:15:95:3d:c9:39:08:f8:26:2e:cb:ce:d3:78:51:1f: 9f:d1:ac:85 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1ODExMTAvBgNVBAUTKEJBOUQyNTFBNEE5RkFDQzRFNEE2NjM4Nzc1MEEyODY2 MkEzMTAwNTcwHhcNMjYwMzI2MTQ0ODQ1WhcNMjYwNDAyMTQ0ODQ1WjAYMRYwFAYD VQQDEw02OWM1NDc0ZC1jMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4WnIOEwCaZgjTaPCFNs/rupJ7e1Hx7ZNFcjIunxRvAlXrZFCHf138WnJsT4O 8jSVGsePedBhRkaO3UAn/uPSSLQqVhnKh8YQKNpZJk+H4YAkZ3PXNQU8cSlcHF3/ 7pzkn8k3P0Ngai7Ngx9gJvBIlzPo781XTSqQ5y8XuxvsS0++nSJFZC4K0bxY/RPO kQRpH3H2SsaMq5CHO/znBKCPlIQrDFmW1Ks45NCTItsRFFq7AmwIQeAEUX+dv2QP S742tHpkILrO+rKTNk12Pp/Pmm74dbgGWFbsnlBfpdOpG35NjeOYt+IdaVk2Y7qJ CChO7UPQxBCjQ51aZN6RuoF+6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK3UUhh+ DaNWyAX7JWexHvmEt1tOMB8GA1UdIwQYMBaAFLqdJRpKn6zE5KZjh3UKKGYqMQBX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU4MS9CQjhGREZGRTFE OTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJNVGtwbU9IZFFvb1ppb3hB RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VwMGxHa3Fmck1Ua3BtT0hkUW9vWmlveEFGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU4MS9CQjhGREZGRTFEOTMxMUUyQTk2MzhBRjcwOEIwMkNEMi91cDBsR2txZnJN VGtwbU9IZFFvb1ppb3hBRmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEANgDtZKFc0nf3hu7l7/YSCeFVDJTvhUwWhAFzvQDFJqaWd1LjKFVSJtQcNtkE Q3ntTilsGNMUxEmQD4p9t/J/XRZl0obfsqMYyM/DLg/0wDZYdodjSYkMxeCeeLvQ 8XIo1uy9l3cQzpibsgCh6k/IQ3iUqP+gFqhSuVPAUbJmBWOAKdwwSW6yyCamaPAm X3QVQHCT+LfGL255pVRqMPSISkqrIEMxh88fsq7Wg1qW4UCqK4vTMu5uaKMw8+NQ YiuV4PQ02+VQVYiw4H3b4PdNWUMNh/NC6upFE/3bEOTqj4pU1QXBXGw65B53zMhh FZU9yTkI+CYuy87TeFEfn9GshQ== -----END CERTIFICATE-----Generated at Sat Mar 28 08:43:43 2026 by rpki-client