$ rpki-client -vvf rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft File: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft (raw, json) Hash identifier: 3wFVVh6UQ2bfqtWNgTKGB0dxNVfKLzF6IWLB57JmfPA= Subject key identifier: AE:5B:F0:EE:B6:58:28:49:3C:08:E2:65:8A:A1:DA:0E:49:89:86:05 Authority key identifier: 72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A Certificate issuer: /CN=A915D010/serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Certificate serial: 0E43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft Manifest number: 0E38 Signing time: Tue 24 Mar 2026 17:40:00 +0000 Manifest this update: Tue 24 Mar 2026 17:40:00 +0000 Manifest next update: Tue 31 Mar 2026 17:40:00 +0000 Files and hashes: 1: ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl (hash: 6Pwr4Aau4pa1fwrbxjft3vS0Mx97cUFuF+Gg9anmIS4=) 2: BB691FBE889111F09BDDFE1FC4F9AE02.roa (hash: aKgTE44Ui4Km2SlMzbMZshdm2FGBkzXAI+GmGPjCfyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:39:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3651 (0xe43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D010, serialNumber=722178D591D9859689E4B92F2D0C87FA47E35E0A Validity Not Before: Mar 24 17:40:00 2026 GMT Not After : Mar 31 17:40:00 2026 GMT Subject: CN=69c2cc70-8d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:b6:52:82:b9:98:26:63:30:73:51:e9:bd: f4:33:9a:5d:2d:79:52:fe:6d:82:63:03:3e:ca:67: 19:9e:c9:6e:c6:c0:1a:2a:5b:36:b1:f4:c1:33:54: a2:93:a0:d9:f8:68:b8:73:89:a5:b2:66:6c:22:be: e6:2d:f1:51:33:4f:63:a0:95:8a:ec:81:5d:18:3f: f5:74:70:93:67:9a:aa:e5:c9:a7:c7:f0:92:2f:5c: cc:65:8b:37:eb:4d:65:0f:bf:f3:f8:b3:c2:da:fa: b9:57:96:b2:a1:18:bd:fe:54:fa:6e:9e:ba:ea:4e: ec:68:83:98:4e:a4:07:69:76:0d:22:cc:da:36:20: 03:53:13:82:ea:9d:a2:32:52:9b:97:2a:ea:de:02: 4f:0c:5b:82:bc:35:0f:d4:a5:22:19:10:af:1e:f0: 92:d2:d6:28:41:90:68:43:a6:05:dc:bd:a5:2f:46: 7a:a7:67:74:d0:43:b0:e0:16:3e:bc:87:bb:ea:72: ef:ac:59:c5:65:b1:94:4d:97:07:5c:52:9d:97:04: a3:e2:67:97:e0:6d:a4:da:75:90:f4:d6:28:74:72: c3:03:ab:4a:05:91:d9:7e:f7:d7:90:a6:93:ed:39: 41:6c:92:53:d6:f3:69:4b:22:96:83:6f:e2:17:09: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:F0:EE:B6:58:28:49:3C:08:E2:65:8A:A1:DA:0E:49:89:86:05 X509v3 Authority Key Identifier: keyid:72:21:78:D5:91:D9:85:96:89:E4:B9:2F:2D:0C:87:FA:47:E3:5E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D010/57B7671AC21C11E984A15D12C4F9AE02/ciF41ZHZhZaJ5LkvLQyH-kfjXgo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:dc:5f:29:1f:a2:75:83:b2:cd:ca:0d:e5:7e:4a:e8:cd:fe: 27:02:9b:0d:02:fd:7b:6c:a0:81:26:dd:e1:35:14:74:d6:40: f7:9e:a0:d9:30:da:78:38:ae:a4:91:87:ae:5a:e1:ab:c4:eb: e8:40:cb:c9:05:a8:56:a9:8e:50:19:99:64:6d:92:5d:76:f4: 4f:c8:3f:70:b6:18:11:7e:ac:e1:a2:82:66:e8:ba:49:42:5c: 8d:44:22:cd:30:9c:16:57:be:28:ff:8d:b8:d7:10:cb:53:83: 84:00:3c:7e:74:48:09:73:d9:64:c9:43:aa:a1:7c:73:c6:d3: 9d:8e:1c:86:98:1c:c1:89:89:fe:02:e3:76:4c:86:ac:18:ba: ff:32:c0:7a:63:fa:b2:24:c4:98:73:1d:34:61:34:d7:e6:a8: 0d:e7:7c:b5:82:13:12:51:6d:f0:29:cd:c2:45:d8:25:ae:94: cd:f3:6b:44:69:f3:11:9f:bf:a8:2e:9d:4e:34:2e:fe:20:33: 10:72:be:fb:df:ba:cc:aa:cf:54:10:06:8d:1c:26:85:26:4b: 88:d1:4e:38:f4:9c:6b:eb:10:4c:51:cf:d2:13:85:dd:86:e5: dc:d8:0a:45:5e:54:73:2f:fe:f8:f5:c0:ce:8a:48:2f:6b:93: 68:6e:ea:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwMTAxMTAvBgNVBAUTKDcyMjE3OEQ1OTFEOTg1OTY4OUU0QjkyRjJEMEM4N0ZB NDdFMzVFMEEwHhcNMjYwMzI0MTc0MDAwWhcNMjYwMzMxMTc0MDAwWjAYMRYwFAYD VQQDEw02OWMyY2M3MC04ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxge2UoK5mCZjMHNR6b30M5pdLXlS/m2CYwM+ymcZnsluxsAaKls2sfTBM1Si k6DZ+Gi4c4mlsmZsIr7mLfFRM09joJWK7IFdGD/1dHCTZ5qq5cmnx/CSL1zMZYs3 601lD7/z+LPC2vq5V5ayoRi9/lT6bp666k7saIOYTqQHaXYNIszaNiADUxOC6p2i MlKblyrq3gJPDFuCvDUP1KUiGRCvHvCS0tYoQZBoQ6YF3L2lL0Z6p2d00EOw4BY+ vIe76nLvrFnFZbGUTZcHXFKdlwSj4meX4G2k2nWQ9NYodHLDA6tKBZHZfvfXkKaT 7TlBbJJT1vNpSyKWg2/iFwkY9wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK5b8O62 WChJPAjiZYqh2g5JiYYFMB8GA1UdIwQYMBaAFHIheNWR2YWWieS5Ly0Mh/pH414K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDAxMC81N0I3NjcxQUMy MUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmhaYUo1TGt2TFF5SC1rZmpY Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpRjQxWkhaaFphSjVMa3ZMUXlILWtmalhnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDAxMC81N0I3NjcxQUMyMUMxMUU5ODRBMTVEMTJDNEY5QUUwMi9jaUY0MVpIWmha YUo1TGt2TFF5SC1rZmpYZ28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmtxfKR+idYOyzcoN5X5K6M3+JwKbDQL9e2yggSbd4TUUdNZA956g2TDaeDiu pJGHrlrhq8Tr6EDLyQWoVqmOUBmZZG2SXXb0T8g/cLYYEX6s4aKCZui6SUJcjUQi zTCcFle+KP+NuNcQy1ODhAA8fnRICXPZZMlDqqF8c8bTnY4chpgcwYmJ/gLjdkyG rBi6/zLAemP6siTEmHMdNGE01+aoDed8tYITElFt8CnNwkXYJa6UzfNrRGnzEZ+/ qC6dTjQu/iAzEHK++9+6zKrPVBAGjRwmhSZLiNFOOPSca+sQTFHP0hOF3Ybl3NgK RV5Ucy/++PXAzopIL2uTaG7qDw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:45:54 2026 by rpki-client