$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: ac17xG0vR+JAoBXTNJ2JWZUfCmdwcLpHNk4y0ADusVs= Subject key identifier: DB:74:FF:AF:0C:1F:93:87:8B:18:75:90:1D:2B:73:8B:60:26:01:15 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: F5 Signing time: Wed 25 Mar 2026 05:31:46 +0000 Manifest this update: Wed 25 Mar 2026 05:31:46 +0000 Manifest next update: Wed 01 Apr 2026 05:31:46 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: JpKbz94fsRjDL5EQpiDEVEG/XFKylTq2/lZU+sxBQnE=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: ajdGzJbwz5TOYdIi82plxkghmo/zXY3H1Me9aI3spR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Mar 25 05:31:46 2026 GMT Not After : Apr 1 05:31:46 2026 GMT Subject: CN=69c37342-e057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:b0:5f:9c:04:cd:43:89:f0:b8:45:d1:ee: ea:b0:60:1e:b1:af:4d:03:66:fa:08:fc:03:ac:33: ba:0b:7b:11:0b:37:af:c4:a8:0c:de:6a:9b:a2:5f: f8:70:30:20:40:f3:fa:a4:28:13:b1:2c:d7:1f:e2: 05:9f:40:82:aa:01:c9:f9:2d:00:b8:fe:b6:19:8d: a1:09:5a:9f:04:a9:4e:21:dd:87:cd:d1:ad:63:69: 22:bd:2b:17:aa:8e:02:cf:96:c3:73:14:f5:44:fc: 0f:ec:26:d3:a9:1e:2c:89:db:ca:ff:6d:0b:02:b6: 7f:d6:49:11:f0:b7:24:45:c1:2f:19:5b:0b:bc:f9: 46:aa:e0:00:56:a7:68:6a:36:e8:86:61:bd:90:a8: 11:71:f6:81:3b:7e:dd:b7:e2:ad:38:87:7d:72:e4: e7:80:70:97:34:cb:09:aa:cb:15:45:4c:d6:49:84: 62:c3:92:7a:61:53:f3:34:f9:99:e7:fb:af:8d:df: 5f:15:db:39:29:a5:81:3f:2a:c9:18:53:e5:ee:47: f9:18:71:2b:31:aa:58:f4:69:cf:1a:4c:89:52:4a: b6:a8:68:50:5e:bb:4e:47:03:6e:83:c8:22:df:d1: c8:3f:4b:76:df:e2:39:df:4f:b7:40:22:6b:49:30: a6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:74:FF:AF:0C:1F:93:87:8B:18:75:90:1D:2B:73:8B:60:26:01:15 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:80:28:4d:c3:84:1c:40:fc:46:84:7f:10:5c:b1:cc:23:4c: 99:5b:49:c1:f2:fc:99:00:a4:61:94:70:9b:17:26:b8:12:cf: 98:95:9d:1d:58:58:3e:f8:d4:75:65:e7:f7:9f:3a:ad:1f:f0: ef:f1:da:6d:98:86:ae:c3:79:31:6c:b6:d8:43:f5:90:2c:53: d9:fc:46:e1:77:31:e3:f2:de:8e:77:27:d6:78:59:5e:ef:f7: 72:41:05:91:ed:0e:6a:fb:aa:8a:a1:ae:5c:67:db:2b:72:6b: 20:8f:a8:8e:05:11:a8:c7:26:02:3d:b5:e0:1a:7e:17:49:47: f3:09:32:b8:59:4e:bb:e9:87:b6:75:df:11:ef:20:81:0c:26: 88:f1:f8:f0:ac:07:94:d3:c7:d2:71:68:3a:00:ea:15:7d:87: 20:a6:ef:3e:91:da:25:16:d2:d9:42:fb:6c:e4:fb:f5:16:a1: d9:81:0a:e6:b0:f5:f0:03:aa:75:70:ad:ea:4b:0e:a3:8b:65: 7e:83:ca:3a:87:83:5d:7d:b8:2d:a0:43:fb:49:4d:d7:e2:c2: 6e:b7:c5:95:da:7f:6e:ca:0b:a0:e3:b1:d8:49:56:7d:53:4c: 48:c3:96:d9:27:8b:a1:14:f5:57:e1:31:70:27:04:19:4d:17: 14:8c:94:e2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZBOTYxMTAvBgNVBAUTKERBRUZBNTQzNThGNEJDQzBEODQ3Q0M2REM5Q0FGNzhC QzVFMDk5NkUwHhcNMjYwMzI1MDUzMTQ2WhcNMjYwNDAxMDUzMTQ2WjAYMRYwFAYD VQQDEw02OWMzNzM0Mi1lMDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjpKwX5wEzUOJ8LhF0e7qsGAesa9NA2b6CPwDrDO6C3sRCzevxKgM3mqbol/4 cDAgQPP6pCgTsSzXH+IFn0CCqgHJ+S0AuP62GY2hCVqfBKlOId2HzdGtY2kivSsX qo4Cz5bDcxT1RPwP7CbTqR4sidvK/20LArZ/1kkR8LckRcEvGVsLvPlGquAAVqdo ajbohmG9kKgRcfaBO37dt+KtOId9cuTngHCXNMsJqssVRUzWSYRiw5J6YVPzNPmZ 5/uvjd9fFds5KaWBPyrJGFPl7kf5GHErMapY9GnPGkyJUkq2qGhQXrtORwNug8gi 39HIP0t23+I530+3QCJrSTCmPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNt0/68M H5OHixh1kB0rc4tgJgEVMB8GA1UdIwQYMBaAFNrvpUNY9LzA2EfMbcnK94vF4Jlu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkE5Ni84QTM1MDkwQ0I1 RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZNRFlSOHh0eWNyM2k4WGdt VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21XNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkE5Ni84QTM1MDkwQ0I1RUQxMUVGOUQyMDY5MEVDNEY5QUUwMi8ydS1sUTFqMHZN RFlSOHh0eWNyM2k4WGdtVzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmoAoTcOEHED8RoR/EFyxzCNMmVtJwfL8mQCkYZRwmxcmuBLPmJWdHVhYPvjU dWXn9586rR/w7/HabZiGrsN5MWy22EP1kCxT2fxG4Xcx4/Lejncn1nhZXu/3ckEF ke0OavuqiqGuXGfbK3JrII+ojgURqMcmAj214Bp+F0lH8wkyuFlOu+mHtnXfEe8g gQwmiPH48KwHlNPH0nFoOgDqFX2HIKbvPpHaJRbS2UL7bOT79Rah2YEK5rD18AOq dXCt6ksOo4tlfoPKOoeDXX24LaBD+0lN1+LCbrfFldp/bsoLoOOx2ElWfVNMSMOW 2SeLoRT1V+ExcCcEGU0XFIyU4g== -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:58 2026 by rpki-client