$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft File: cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json) Hash identifier: 9n5td/t3VgTusYlX42J9cISmR1NaFHcxd3tZYNr5epA= Subject key identifier: 56:BB:3E:C0:DA:75:F2:69:1D:41:EC:01:FD:12:D3:09:32:D2:03:4B Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 Certificate issuer: /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Certificate serial: 0B00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft Manifest number: 0AE8 Signing time: Tue 24 Mar 2026 19:13:11 +0000 Manifest this update: Tue 24 Mar 2026 19:13:10 +0000 Manifest next update: Tue 31 Mar 2026 19:13:10 +0000 Files and hashes: 1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: 6AnnCyQeWSV205Brzpms1AyDvQ5YHcWXBzi5GTPoNbY=) 2: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 8RfREkb1TfRtm9mZNRjcCr0gSCyT+B9RHPPp4JceAOY=) 3: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: m6x4cKoG0z5IGxS+jgyTdR66s445veI9JdXQ3dKCikw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:13:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2816 (0xb00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19 Validity Not Before: Mar 24 19:13:10 2026 GMT Not After : Mar 31 19:13:10 2026 GMT Subject: CN=69c2e247-64a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:a1:fa:4a:52:03:9e:c6:7e:3d:9b:04:6e: d5:ed:1b:ea:09:ad:e6:f3:cf:14:c8:c9:ea:e5:18: 5a:5e:ef:f6:84:c5:5d:07:a2:6a:a5:2b:0f:9f:8b: f9:65:1e:fe:b8:04:b5:a9:f3:f4:d9:ab:76:16:f8: 2f:4a:bb:30:27:07:15:ec:e3:44:8f:60:1c:c2:4f: 4b:44:91:d5:b7:53:4b:ce:0b:e7:b2:07:99:66:4c: fe:2a:ef:6f:62:7e:d0:82:9f:47:fe:35:2f:1f:65: c9:ba:d4:97:20:2b:ea:fb:5c:cb:87:be:99:69:f8: 95:31:73:98:c4:ea:7a:05:56:81:97:43:dd:67:2f: 8a:9a:f8:35:5e:c3:d8:a5:ae:73:5a:33:a3:a8:22: f9:16:45:d8:94:35:13:0b:90:1a:08:43:f5:32:af: 97:03:67:d9:15:1f:f3:de:88:04:e0:c2:1f:dc:b6: 10:f6:04:f7:3e:18:fd:11:85:b0:32:c5:ef:52:b8: 36:93:85:4f:10:0a:a5:e9:ef:01:0d:ab:f0:9b:cc: e2:8c:63:1a:8f:37:f4:a4:ca:72:d5:65:df:b4:30: d3:12:02:35:9f:00:e5:e6:b8:f4:97:a4:da:85:c0: 36:9a:47:61:b5:79:a9:86:f4:0f:c1:5d:c8:da:e8: d7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BB:3E:C0:DA:75:F2:69:1D:41:EC:01:FD:12:D3:09:32:D2:03:4B X509v3 Authority Key Identifier: keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:42:c0:d5:7f:9f:25:7b:46:44:5f:ab:70:9d:5a:73:e8: 7f:43:bd:ff:fe:32:89:76:15:3e:ae:94:fd:21:8c:e1:86:3d: 10:90:32:07:5d:2a:a9:1c:7d:6e:00:a9:f8:80:c6:2c:9d:3c: 91:ff:8b:ba:75:8c:67:88:b4:12:1b:a6:6c:9d:b1:b2:0f:e2: 59:e2:18:87:6c:03:8b:b5:cf:63:f9:ab:92:a7:ce:d8:60:2b: 2c:8e:49:5d:b7:19:6b:86:b9:c8:a6:df:12:d5:1a:d1:3c:bc: da:61:b2:a5:d0:7a:bb:4b:7f:27:f0:73:56:0e:eb:1e:2a:9f: b6:d1:84:aa:83:44:39:dd:ad:af:1a:bd:73:70:52:73:b6:b0: 2e:69:b1:48:80:a8:e7:a0:4c:58:66:c3:86:7a:79:67:71:78: a7:cc:58:65:0e:34:db:29:f5:95:c8:fa:8e:87:29:93:9c:50: e8:8b:17:c2:f9:82:29:e6:2a:16:5d:e6:d6:ed:02:f8:c8:b5: 29:fb:eb:2c:e6:34:af:a5:bd:d6:dc:f6:4f:1c:64:24:15:8c: ba:76:73:d4:12:bf:8b:c8:28:53:ce:5d:8c:43:bc:8e:0f:99: 6e:55:97:69:3f:cf:02:e9:c4:2f:9e:9d:cf:29:58:52:35:9f: 1f:9f:0c:4e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2 ODBDMDhDMTkwHhcNMjYwMzI0MTkxMzEwWhcNMjYwMzMxMTkxMzEwWjAYMRYwFAYD VQQDEw02OWMyZTI0Ny02NGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDah+kpSA57Gfj2bBG7V7RvqCa3m888UyMnq5RhaXu/2hMVdB6JqpSsPn4v5 ZR7+uAS1qfP02at2FvgvSrswJwcV7ONEj2Acwk9LRJHVt1NLzgvnsgeZZkz+Ku9v Yn7Qgp9H/jUvH2XJutSXICvq+1zLh76ZafiVMXOYxOp6BVaBl0PdZy+Kmvg1XsPY pa5zWjOjqCL5FkXYlDUTC5AaCEP1Mq+XA2fZFR/z3ogE4MIf3LYQ9gT3Phj9EYWw MsXvUrg2k4VPEAql6e8BDavwm8zijGMajzf0pMpy1WXftDDTEgI1nwDl5rj0l6Ta hcA2mkdhtXmphvQPwV3I2ujXPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFa7PsDa dfJpHUHsAf0S0wky0gNLMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5 QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r VnNNV0JBaTI1X3RvREFqQmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVLZCwNV/nyV7RkRfq3CdWnPof0O9//4yiXYVPq6U/SGM4YY9EJAyB10qqRx9 bgCp+IDGLJ08kf+LunWMZ4i0EhumbJ2xsg/iWeIYh2wDi7XPY/mrkqfO2GArLI5J XbcZa4a5yKbfEtUa0Ty82mGypdB6u0t/J/BzVg7rHiqfttGEqoNEOd2trxq9c3BS c7awLmmxSICo56BMWGbDhnp5Z3F4p8xYZQ402yn1lcj6jocpk5xQ6IsXwvmCKeYq Fl3m1u0C+Mi1KfvrLOY0r6W91tz2TxxkJBWMunZz1BK/i8goU85djEO8jg+ZblWX aT/PAunEL56dzylYUjWfH58MTg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:04 2026 by rpki-client