$ rpki-client -vvf rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft File: sRd7K0wt-LMG0UpkMAcob4nWnMA.mft (raw, json) Hash identifier: LoIqJzHT274EsKuKybqr0/LfpWQCHf1+C2vB5XnfJu8= Subject key identifier: D9:9C:60:4B:5C:02:01:75:84:94:47:7E:D0:29:FC:F6:2A:39:99:6C Authority key identifier: B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 Certificate issuer: /CN=A915DA5A/serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Certificate serial: 0D13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft Manifest number: 0CFB Signing time: Tue 24 Mar 2026 18:03:20 +0000 Manifest this update: Tue 24 Mar 2026 18:03:20 +0000 Manifest next update: Tue 31 Mar 2026 18:03:20 +0000 Files and hashes: 1: sRd7K0wt-LMG0UpkMAcob4nWnMA.crl (hash: HtHKfc4ASu9pcrBNeEUzcLBXvGXr3RX4DdAJbHHRVkQ=) 2: 5952728A100E11F18DCC78E3113D8C67.roa (hash: 4DhZatB6LL4lAu55O0tTy0XQ+dQbCozW4+CmbLY+jDk=) 3: A869B800367611F088B7726AC4F9AE02.roa (hash: h0vzLBO9AmONx7Qad7DB4zJWcKBNkWxmiiTY+i7XavM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3347 (0xd13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915DA5A, serialNumber=B1177B2B4C2DF8B306D14A643007286F89D69CC0 Validity Not Before: Mar 24 18:03:20 2026 GMT Not After : Mar 31 18:03:20 2026 GMT Subject: CN=69c2d1e8-efba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9a:1c:bd:71:98:8c:85:67:2a:9e:f9:1b:76: 7f:df:f4:5a:46:69:8c:1a:7b:db:78:cc:99:a7:a0: 1c:7a:55:75:54:cb:e7:0a:ba:94:51:83:e0:61:87: c2:78:ca:da:74:0d:f4:4e:47:89:5a:d2:f4:dd:74: e9:34:2f:05:8e:f9:63:cd:1f:6c:05:68:f1:9c:d4: 4c:fe:bd:14:89:33:b5:03:08:8e:bf:0c:6e:67:52: 8a:f4:8f:e6:77:e9:0b:52:63:ed:a3:0e:d0:1f:73: b3:8b:71:48:df:9b:de:b9:3a:89:18:d9:da:66:2f: 31:40:c2:be:d0:09:c0:bf:64:3e:a4:02:c2:70:97: 4a:0b:6d:5d:0c:bf:7b:5d:56:6a:1f:06:23:70:f3: 8f:e2:7c:d2:6a:02:a8:bf:ae:df:88:24:f7:81:46: a1:34:74:ab:43:60:36:45:5c:62:2e:d8:34:37:bc: 6f:fe:a3:6b:40:0a:72:f9:28:13:7b:85:af:7a:72: cd:26:2e:05:cb:90:42:d6:43:89:7f:2e:67:2f:b0: ad:a0:86:b6:f6:de:51:d5:eb:a2:19:94:1e:a7:56: ab:99:d7:83:8a:99:55:f3:62:b0:b8:6b:f5:e5:51: ce:e2:0c:e7:66:63:93:ec:3b:61:ad:b1:ee:bf:7e: e4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:9C:60:4B:5C:02:01:75:84:94:47:7E:D0:29:FC:F6:2A:39:99:6C X509v3 Authority Key Identifier: keyid:B1:17:7B:2B:4C:2D:F8:B3:06:D1:4A:64:30:07:28:6F:89:D6:9C:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sRd7K0wt-LMG0UpkMAcob4nWnMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915DA5A/44E770B203EE11EABCA1A16EC4F9AE02/sRd7K0wt-LMG0UpkMAcob4nWnMA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:19:e8:38:64:ba:34:46:de:a2:e5:ee:b2:69:69:16:4c:b7: 2d:78:73:ed:c5:87:d4:80:35:bf:2d:0b:c4:49:77:f3:52:a6: 77:28:de:20:60:5d:96:2d:e2:64:4d:59:d3:58:24:27:c4:f7: 68:8e:2d:cc:f5:68:07:fa:34:75:db:ec:52:be:1e:cb:b5:10: 77:dc:0c:eb:64:ec:32:56:61:e8:59:14:ad:ba:d8:b1:aa:ee: 92:34:cc:80:f2:b3:70:7a:93:c4:8b:ae:93:ff:8b:47:ab:76: 33:b4:39:15:1d:f7:37:d1:a9:db:b9:a7:40:8f:3e:38:04:91: c4:43:3d:0d:87:ba:f9:d9:8a:72:91:65:50:3e:0e:e8:ee:99: b8:43:6d:ed:e5:bf:0b:9e:d0:d2:51:c6:17:bb:bf:f2:00:0f: 55:c1:6d:2c:d2:b7:1e:f8:50:c9:75:9c:de:bd:25:7d:78:c4: b3:68:e7:00:ca:72:c5:aa:b4:6f:11:cc:90:91:75:88:db:dd: 0c:f4:59:60:20:a3:fc:4d:3f:10:4a:7d:b6:fd:2b:7b:a7:6f: 6a:fa:ba:66:30:7c:a0:5c:96:74:eb:c3:c6:70:ce:00:fa:20: bd:8b:93:a0:6f:97:01:3f:ae:dd:85:46:40:33:18:cd:a4:cd: dd:bc:70:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NURBNUExMTAvBgNVBAUTKEIxMTc3QjJCNEMyREY4QjMwNkQxNEE2NDMwMDcyODZG ODlENjlDQzAwHhcNMjYwMzI0MTgwMzIwWhcNMjYwMzMxMTgwMzIwWjAYMRYwFAYD VQQDEw02OWMyZDFlOC1lZmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8ZocvXGYjIVnKp75G3Z/3/RaRmmMGnvbeMyZp6AcelV1VMvnCrqUUYPgYYfC eMradA30TkeJWtL03XTpNC8FjvljzR9sBWjxnNRM/r0UiTO1AwiOvwxuZ1KK9I/m d+kLUmPtow7QH3Ozi3FI35veuTqJGNnaZi8xQMK+0AnAv2Q+pALCcJdKC21dDL97 XVZqHwYjcPOP4nzSagKov67fiCT3gUahNHSrQ2A2RVxiLtg0N7xv/qNrQApy+SgT e4WvenLNJi4Fy5BC1kOJfy5nL7CtoIa29t5R1euiGZQep1armdeDiplV82KwuGv1 5VHO4gznZmOT7DthrbHuv37kWQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNmcYEtc AgF1hJRHftAp/PYqOZlsMB8GA1UdIwQYMBaAFLEXeytMLfizBtFKZDAHKG+J1pzA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1REE1QS80NEU3NzBCMjAz RUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1MTUcwVXBrTUFjb2I0bldu TUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NSZDdLMHd0LUxNRzBVcGtNQWNvYjRuV25NQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 REE1QS80NEU3NzBCMjAzRUUxMUVBQkNBMUExNkVDNEY5QUUwMi9zUmQ3SzB3dC1M TUcwVXBrTUFjb2I0blduTUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqxnoOGS6NEbeouXusmlpFky3LXhz7cWH1IA1vy0LxEl381KmdyjeIGBdli3i ZE1Z01gkJ8T3aI4tzPVoB/o0ddvsUr4ey7UQd9wM62TsMlZh6FkUrbrYsarukjTM gPKzcHqTxIuuk/+LR6t2M7Q5FR33N9Gp27mnQI8+OASRxEM9DYe6+dmKcpFlUD4O 6O6ZuENt7eW/C57Q0lHGF7u/8gAPVcFtLNK3HvhQyXWc3r0lfXjEs2jnAMpyxaq0 bxHMkJF1iNvdDPRZYCCj/E0/EEp9tv0re6dvavq6ZjB8oFyWdOvDxnDOAPogvYuT oG+XAT+u3YVGQDMYzaTN3bxwCw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:19:42 2026 by rpki-client