$ rpki-client -vvf rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft File: aMW6vfwSOWbQX4DD-kI3lELEIgw.mft (raw, json) Hash identifier: 1XtuP1q5pSFLd2x48u33VlTeNyRkuMyty+VbPBA0+JU= Subject key identifier: 23:7A:4A:9B:79:55:DD:36:63:BD:F3:0D:9B:0D:06:9B:8A:10:F2:A1 Authority key identifier: 68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C Certificate issuer: /CN=A917201D/serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Certificate serial: 3557 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft Manifest number: 3535 Signing time: Thu 26 Mar 2026 14:47:17 +0000 Manifest this update: Thu 26 Mar 2026 14:47:16 +0000 Manifest next update: Thu 02 Apr 2026 14:47:16 +0000 Files and hashes: 1: aMW6vfwSOWbQX4DD-kI3lELEIgw.crl (hash: IKidggZk7kM0YkfO5aXmMCZrMV4Lg50BeYjPKdwapbg=) 2: 73438FF06DED11E9A21D1341C4F9AE02.roa (hash: wkiRfCu/XLYyXw4TOm6YezOpImuhMfUU+dENf0r96zI=) 3: E05FE99AB0D511E5B4F68B09C4F9AE02.roa (hash: cbOF25KS3Ii1neQB3lO33xPaJIbgxTebcwnMlxfjqmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13655 (0x3557) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917201D, serialNumber=68C5BABDFC123966D05F80C3FA42379442C4220C Validity Not Before: Mar 26 14:47:16 2026 GMT Not After : Apr 2 14:47:16 2026 GMT Subject: CN=69c546f5-fb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:4f:0d:3c:8e:0e:15:0e:db:6b:ea:fd:26: a5:3d:96:58:4e:15:65:de:01:ce:e1:57:67:3d:6d: 9c:7e:ec:a7:85:fa:53:0f:fd:02:37:73:8e:53:48: 58:ed:4e:f5:14:a7:25:af:9e:e2:78:63:52:e0:da: 0a:d2:ea:e2:6d:a2:ab:97:26:69:a6:04:4f:a9:f4: 7d:4f:13:29:49:84:2f:67:1b:82:ec:a8:27:04:93: 02:36:6c:7f:35:69:72:82:4c:df:92:45:97:74:f8: f7:ae:a3:89:47:29:09:ce:80:95:ba:46:be:cf:dc: a1:2b:2b:a0:ae:17:9f:78:c4:d4:78:e1:ff:81:3d: dc:4b:2f:c8:48:af:d2:2b:ae:8e:74:89:8b:9e:b4: 6e:5e:4f:03:74:7e:73:9c:37:b5:a7:db:9c:c9:8f: 25:6f:d3:89:de:e6:16:01:46:22:ba:3a:32:a7:42: 92:be:93:b6:4f:f9:02:e8:69:e6:d3:e6:74:9d:6f: a3:d1:ca:6c:d2:f9:d2:80:6e:42:de:cf:12:fe:43: e8:18:43:c7:f5:2f:6b:52:9e:b0:51:52:4e:82:31: dc:44:5f:9f:ec:14:d2:d8:ea:91:70:1a:8f:09:ec: 9a:80:1c:21:f1:27:58:93:20:8f:dc:8a:08:32:ab: 4c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7A:4A:9B:79:55:DD:36:63:BD:F3:0D:9B:0D:06:9B:8A:10:F2:A1 X509v3 Authority Key Identifier: keyid:68:C5:BA:BD:FC:12:39:66:D0:5F:80:C3:FA:42:37:94:42:C4:22:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMW6vfwSOWbQX4DD-kI3lELEIgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917201D/CD1E29481D9211E2A3B1F4F508B02CD2/aMW6vfwSOWbQX4DD-kI3lELEIgw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:eb:79:75:62:91:db:2f:35:5b:db:56:41:b6:f0:94:70:10: b6:b7:ae:2f:d0:73:46:39:f6:4c:41:8b:d9:65:72:45:27:68: e3:36:cf:70:cc:75:35:66:95:79:2e:10:25:e3:01:f2:14:49: b8:f5:c8:cb:ae:e3:fd:c6:12:aa:0a:8d:78:58:f8:47:a1:8f: 4f:ad:c0:ac:1f:9f:7e:a5:fd:2d:8e:84:fc:db:36:f2:e6:6b: 93:93:0d:e7:7e:0f:1b:c4:c4:00:4e:30:2e:02:a9:cd:cc:5e: ad:0d:3b:04:ab:c5:38:06:7e:8d:bc:e4:e0:e8:ab:0b:ec:8a: 82:21:34:27:be:a7:c9:8a:38:5e:01:81:51:3a:13:77:93:8b: 00:a2:e2:db:ab:c3:72:81:30:5f:7e:0e:a2:4f:92:ce:e5:e1: ee:25:82:11:38:94:43:58:c9:d1:b1:d7:5a:a0:91:5d:08:d6: 76:f1:12:2b:b0:57:52:6e:5c:18:68:55:8d:7e:0d:45:c2:7c: 76:e2:ea:ec:eb:93:27:4a:37:db:00:7b:3f:09:54:ba:b8:30: 7b:0d:57:0e:0f:b3:ba:cf:6e:66:7a:37:d6:c3:1c:22:ea:6d: 98:52:72:4e:a1:3e:40:c4:fa:c5:ee:c2:6d:08:4c:aa:81:47: 43:e2:b0:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzIwMUQxMTAvBgNVBAUTKDY4QzVCQUJERkMxMjM5NjZEMDVGODBDM0ZBNDIzNzk0 NDJDNDIyMEMwHhcNMjYwMzI2MTQ0NzE2WhcNMjYwNDAyMTQ0NzE2WjAYMRYwFAYD VQQDEw02OWM1NDZmNS1mYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYFPDTyODhUO22vq/SalPZZYThVl3gHO4VdnPW2cfuynhfpTD/0CN3OOU0hY 7U71FKclr57ieGNS4NoK0uribaKrlyZppgRPqfR9TxMpSYQvZxuC7KgnBJMCNmx/ NWlygkzfkkWXdPj3rqOJRykJzoCVuka+z9yhKyugrhefeMTUeOH/gT3cSy/ISK/S K66OdImLnrRuXk8DdH5znDe1p9ucyY8lb9OJ3uYWAUYiujoyp0KSvpO2T/kC6Gnm 0+Z0nW+j0cps0vnSgG5C3s8S/kPoGEPH9S9rUp6wUVJOgjHcRF+f7BTS2OqRcBqP CeyagBwh8SdYkyCP3IoIMqtMPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCN6Spt5 Vd02Y73zDZsNBpuKEPKhMB8GA1UdIwQYMBaAFGjFur38Ejlm0F+Aw/pCN5RCxCIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjAxRC9DRDFFMjk0ODFE OTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09XYlFYNERELWtJM2xFTEVJ Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FNVzZ2ZndTT1diUVg0REQta0kzbEVMRUlndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjAxRC9DRDFFMjk0ODFEOTIxMUUyQTNCMUY0RjUwOEIwMkNEMi9hTVc2dmZ3U09X YlFYNERELWtJM2xFTEVJZ3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeOt5dWKR2y81W9tWQbbwlHAQtreuL9BzRjn2TEGL2WVyRSdo4zbPcMx1NWaV eS4QJeMB8hRJuPXIy67j/cYSqgqNeFj4R6GPT63ArB+ffqX9LY6E/Ns28uZrk5MN 534PG8TEAE4wLgKpzcxerQ07BKvFOAZ+jbzk4OirC+yKgiE0J76nyYo4XgGBUToT d5OLAKLi26vDcoEwX34Ook+SzuXh7iWCETiUQ1jJ0bHXWqCRXQjWdvESK7BXUm5c GGhVjX4NRcJ8duLq7OuTJ0o32wB7PwlUurgwew1XDg+zus9uZno31sMcIuptmFJy TqE+QMT6xe7CbQhMqoFHQ+Kwtg== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:06 2026 by rpki-client