$ rpki-client -vvf rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft File: cMi9ot54lZUFNllLrr8mKQ2boGU.mft (raw, json) Hash identifier: p97eswYM8wdL8pm63Od7jEEaYCRsHh/5lyFNAClrYMw= Subject key identifier: A3:12:6D:AE:CF:6C:4D:E4:15:E7:86:AA:C4:80:AE:DE:F6:54:1A:74 Authority key identifier: 70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 Certificate issuer: /CN=A915D10D/serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft Manifest number: 023F Signing time: Wed 25 Mar 2026 02:00:54 +0000 Manifest this update: Wed 25 Mar 2026 02:00:53 +0000 Manifest next update: Wed 01 Apr 2026 02:00:53 +0000 Files and hashes: 1: cMi9ot54lZUFNllLrr8mKQ2boGU.crl (hash: RDJ+IzSFAb8fH73uqkIHuAGFQ/7Lx/Oa7wu5xwuALNU=) 2: 2EC1CE78CDB611ED8E2C0844C4F9AE02.roa (hash: UUPPLcKEvUEhkpvRtioLB7LEWMQls2sTWKjKgUgudGc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D10D, serialNumber=70C8BDA2DE7895950536594BAEBF26290D9BA065 Validity Not Before: Mar 25 02:00:53 2026 GMT Not After : Apr 1 02:00:53 2026 GMT Subject: CN=69c341d5-8fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:40:ba:a6:d9:34:5e:a8:f1:c3:55:ce:d8:c6: 7f:df:61:6f:19:93:29:54:98:ce:b4:db:b3:0e:17: 2f:cc:5b:1f:52:4f:81:26:42:0d:c7:1b:ff:41:1f: 33:08:5a:04:d3:19:69:ae:cc:e0:42:54:0f:58:f0: ac:33:81:5a:61:5a:a7:f1:81:4c:69:1a:e5:33:98: 49:db:b1:b0:1e:0b:84:4d:2d:49:07:83:43:f8:24: a9:e1:08:ac:6a:a5:6e:de:ee:8e:9a:27:31:b8:0b: e9:9b:43:4f:fe:81:2b:0e:ed:b4:66:50:7a:8e:4a: 1e:0b:ea:a3:3f:e5:bc:fb:32:12:3d:78:ff:14:97: ca:2f:92:3c:30:14:03:e3:be:5e:74:a6:1f:ab:92: a0:7b:7d:59:a4:2e:64:84:11:6c:40:09:80:4c:70: fa:9d:23:db:f3:e1:dd:85:e9:90:73:87:f1:7e:9a: 70:bf:71:28:48:a3:96:f7:ed:86:74:72:45:54:fd: 8c:d1:77:a3:0f:2d:c6:fb:23:50:d1:de:80:73:47: 42:90:45:de:68:b1:f2:d4:9e:fb:48:cb:87:56:03: fc:06:dd:6b:b3:6b:10:12:84:88:0d:08:6b:9d:93: 91:6a:9b:97:28:98:57:a8:8e:bd:7e:9d:a3:7f:d3: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:12:6D:AE:CF:6C:4D:E4:15:E7:86:AA:C4:80:AE:DE:F6:54:1A:74 X509v3 Authority Key Identifier: keyid:70:C8:BD:A2:DE:78:95:95:05:36:59:4B:AE:BF:26:29:0D:9B:A0:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cMi9ot54lZUFNllLrr8mKQ2boGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D10D/9F712614CDB111EDB6DF913BC4F9AE02/cMi9ot54lZUFNllLrr8mKQ2boGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ed:bb:2e:6a:4e:b1:0e:7d:62:4a:86:bb:a1:3e:94:4e:81: f6:84:48:a8:cf:15:26:dd:8c:3f:f1:95:5c:e5:35:4e:a5:36: 73:7e:01:68:86:82:37:4c:c3:c8:9f:83:42:4b:27:91:3e:b2: 95:f2:2d:de:6a:0e:cd:e5:b0:53:8b:5d:8b:76:d7:72:7a:79: 65:46:95:65:3b:0f:7c:cf:d9:bd:c1:03:51:f2:95:20:61:cb: b1:87:08:bb:2b:d8:5f:5e:38:b1:d5:55:ae:91:c7:0a:dd:0e: 0f:15:05:96:06:1a:bc:f7:65:37:c0:94:a9:65:4f:2e:a8:bf: 6c:d1:09:b0:1b:8e:84:96:2e:4d:d4:e7:9d:81:ec:f9:6c:96: 93:31:61:75:53:fc:9e:71:29:99:e0:b5:09:a9:f5:b8:56:85: b9:25:8a:12:82:8f:d6:09:56:35:b7:33:a9:d2:7e:f8:42:27: 86:05:2e:a7:5c:0c:5d:dc:6d:06:f0:ae:15:a6:cc:dc:b9:24: 77:d8:91:b4:ab:0a:5d:c1:47:29:9d:d6:64:50:63:37:b6:05: ef:7e:7b:10:e8:f6:76:ce:16:a7:f8:91:27:b9:b1:a0:ce:ba: 5e:b7:ce:00:a7:d6:e3:83:53:70:17:28:e3:2f:8c:90:48:f9: 1a:33:32:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQxMEQxMTAvBgNVBAUTKDcwQzhCREEyREU3ODk1OTUwNTM2NTk0QkFFQkYyNjI5 MEQ5QkEwNjUwHhcNMjYwMzI1MDIwMDUzWhcNMjYwNDAxMDIwMDUzWjAYMRYwFAYD VQQDEw02OWMzNDFkNS04ZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3kC6ptk0Xqjxw1XO2MZ/32FvGZMpVJjOtNuzDhcvzFsfUk+BJkINxxv/QR8z CFoE0xlprszgQlQPWPCsM4FaYVqn8YFMaRrlM5hJ27GwHguETS1JB4ND+CSp4Qis aqVu3u6OmicxuAvpm0NP/oErDu20ZlB6jkoeC+qjP+W8+zISPXj/FJfKL5I8MBQD 475edKYfq5Kge31ZpC5khBFsQAmATHD6nSPb8+HdhemQc4fxfppwv3EoSKOW9+2G dHJFVP2M0XejDy3G+yNQ0d6Ac0dCkEXeaLHy1J77SMuHVgP8Bt1rs2sQEoSIDQhr nZORapuXKJhXqI69fp2jf9MjiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKMSba7P bE3kFeeGqsSArt72VBp0MB8GA1UdIwQYMBaAFHDIvaLeeJWVBTZZS66/JikNm6Bl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDEwRC85RjcxMjYxNENE QjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxaVUZObGxMcnI4bUtRMmJv R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNaTlvdDU0bFpVRk5sbExycjhtS1EyYm9HVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDEwRC85RjcxMjYxNENEQjExMUVEQjZERjkxM0JDNEY5QUUwMi9jTWk5b3Q1NGxa VUZObGxMcnI4bUtRMmJvR1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbO27LmpOsQ59YkqGu6E+lE6B9oRIqM8VJt2MP/GVXOU1TqU2c34BaIaCN0zD yJ+DQksnkT6ylfIt3moOzeWwU4tdi3bXcnp5ZUaVZTsPfM/ZvcEDUfKVIGHLsYcI uyvYX144sdVVrpHHCt0ODxUFlgYavPdlN8CUqWVPLqi/bNEJsBuOhJYuTdTnnYHs +WyWkzFhdVP8nnEpmeC1Can1uFaFuSWKEoKP1glWNbczqdJ++EInhgUup1wMXdxt BvCuFabM3Lkkd9iRtKsKXcFHKZ3WZFBjN7YF7357EOj2ds4Wp/iRJ7mxoM66XrfO AKfW44NTcBco4y+MkEj5GjMyMA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:08:36 2026 by rpki-client