$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: o22iL8UCjuwLDSOdnTmdiPSmAUT42DPnoVcYI2bBXpk= Subject key identifier: FF:15:F2:D7:DF:A0:67:D8:71:13:DF:7A:C4:76:60:24:64:30:12:34 Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 0A00 Signing time: Tue 24 Mar 2026 20:06:58 +0000 Manifest this update: Tue 24 Mar 2026 20:06:57 +0000 Manifest next update: Tue 31 Mar 2026 20:06:57 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: 2+NXDOVzNY998ovi5Wh1ZfZb6nmmZd1j1Pnx573jCJI=) 2: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=) 3: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=) 4: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=) 5: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=) 6: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=) 7: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: k6n/b8uPYd+AiCnOzUingvkJYhO7VLfxKO8V9R5dnkQ=) 8: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=) 9: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=) 10: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Mar 24 20:06:57 2026 GMT Not After : Mar 31 20:06:57 2026 GMT Subject: CN=69c2eee2-258a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:98:0e:67:c9:3b:f2:a9:09:8c:ea:63:0f:2d: c0:07:5b:f4:f0:58:29:3e:33:c6:d7:87:45:ef:55: 79:4c:13:08:fd:7c:46:4f:09:95:71:47:f2:ab:c5: fe:08:19:dc:6e:77:d3:c8:87:2c:60:58:f8:4b:4f: 9c:e7:54:c8:2f:af:08:ce:8a:a2:fa:33:cf:0e:6a: 3b:30:a9:2f:5e:65:05:35:95:9f:92:fe:8b:9d:cb: 34:fe:76:7b:18:3d:7d:0d:22:55:94:df:bc:0c:ad: 16:2e:d1:aa:f5:3a:06:6e:9f:41:7a:b9:96:0e:7a: 08:11:30:78:d6:a8:8c:e2:52:a6:b5:21:29:e7:20: 3d:07:b2:b8:32:57:3e:06:6f:9d:c5:c5:88:03:35: 43:90:8d:d8:8c:75:d5:6d:e9:ac:9e:8a:7f:9c:0a: e5:4d:f4:0f:22:5d:7c:e3:20:b7:2d:9b:80:1a:e8: 6b:95:bb:0a:e9:c2:ec:0c:2d:df:4c:26:d3:b7:f8: 3c:ba:cc:43:14:02:31:c1:85:8f:b2:c0:de:81:d8: c4:83:67:90:09:40:1a:cd:2c:82:da:30:fb:4f:bb: dc:b7:f6:56:c3:0b:d8:7e:4c:22:dd:08:9a:b3:8e: 6b:1a:ec:47:d3:06:60:46:60:84:09:4d:c2:d6:9f: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:15:F2:D7:DF:A0:67:D8:71:13:DF:7A:C4:76:60:24:64:30:12:34 X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7b:3b:ee:ed:5e:7f:71:53:87:56:df:eb:2b:b4:70:c3:8e: fd:9c:8b:48:e0:fb:78:62:bd:cd:a1:da:a7:9a:79:f5:e1:55: 5c:24:8a:b6:df:99:53:e7:8b:93:99:1f:2c:14:f2:3c:2e:43: e5:3f:d6:4e:ee:e2:1c:29:e0:9a:75:04:70:4e:2a:63:73:c7: b7:32:51:e4:ee:92:7e:c7:dd:b8:d0:96:53:31:fb:d0:b7:c2: 5a:e7:ed:03:73:7e:bc:d6:ce:65:b7:75:30:74:12:58:4e:28: 6f:39:f9:47:34:02:68:c9:f3:66:15:f8:b4:2a:5e:b5:91:23: 64:2b:75:42:0c:52:81:ee:6d:eb:53:3a:17:aa:45:d6:64:94: 0f:54:7b:b8:b9:ec:d2:76:0d:a5:33:ee:a1:b9:da:78:2f:19: dc:8f:ac:2b:20:7f:fe:dd:6d:a7:cd:18:cb:f0:cc:49:8b:ee: eb:a1:f8:88:93:27:75:e0:7f:ae:57:79:80:ce:86:62:65:59: e1:c2:60:5b:4e:26:2f:c3:b3:9d:72:bb:8e:94:98:ba:bf:c2: 5e:58:23:d8:31:1c:5c:e3:ee:72:1f:ac:50:3f:21:0e:aa:e8: b7:cf:26:29:5f:4c:ba:7a:53:c3:68:70:5f:e2:2a:47:fc:68: a5:a6:45:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjYwMzI0MjAwNjU3WhcNMjYwMzMxMjAwNjU3WjAYMRYwFAYD VQQDEw02OWMyZWVlMi0yNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpgOZ8k78qkJjOpjDy3AB1v08FgpPjPG14dF71V5TBMI/XxGTwmVcUfyq8X+ CBncbnfTyIcsYFj4S0+c51TIL68Izoqi+jPPDmo7MKkvXmUFNZWfkv6Lncs0/nZ7 GD19DSJVlN+8DK0WLtGq9ToGbp9BermWDnoIETB41qiM4lKmtSEp5yA9B7K4Mlc+ Bm+dxcWIAzVDkI3YjHXVbemsnop/nArlTfQPIl184yC3LZuAGuhrlbsK6cLsDC3f TCbTt/g8usxDFAIxwYWPssDegdjEg2eQCUAazSyC2jD7T7vct/ZWwwvYfkwi3Qia s45rGuxH0wZgRmCECU3C1p86kwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8V8tff oGfYcRPfesR2YCRkMBI0MB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjns77u1ef3FTh1bf6yu0cMOO/ZyLSOD7eGK9zaHap5p59eFVXCSKtt+ZU+eL k5kfLBTyPC5D5T/WTu7iHCngmnUEcE4qY3PHtzJR5O6SfsfduNCWUzH70LfCWuft A3N+vNbOZbd1MHQSWE4obzn5RzQCaMnzZhX4tCpetZEjZCt1QgxSge5t61M6F6pF 1mSUD1R7uLns0nYNpTPuobnaeC8Z3I+sKyB//t1tp80Yy/DMSYvu66H4iJMndeB/ rld5gM6GYmVZ4cJgW04mL8OznXK7jpSYur/CXlgj2DEcXOPuch+sUD8hDqrot88m KV9MunpTw2hwX+IqR/xopaZFdA== -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:21 2026 by rpki-client