$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: zM+c+ZO9vORomzg45pvxICZ3uIyPJvh657WERNvkVdU= Subject key identifier: CB:20:E9:E5:8A:D5:D4:94:E6:A9:12:FD:57:E5:02:36:B2:05:27:C0 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0FBB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0FAC Signing time: Thu 26 Mar 2026 17:28:37 +0000 Manifest this update: Thu 26 Mar 2026 17:28:36 +0000 Manifest next update: Thu 02 Apr 2026 17:28:36 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: mGcSwKI1IpsPrUxiGer5oc5btdYWe6dQx829FQ/IfQ8=) 2: F6B0145ACD2011F0B3EB5B69C4F9AE02.roa (hash: /IS4YM9w5ydj5jQwxn3DGGKdeny8JyV0qrmFMYEg2lc=) 3: AA75695ACD2011F0B214A868C4F9AE02.roa (hash: MRRSvyAs4nXdOy4NirT/FV+CCoUxnvEKIcU+qHvpGa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4027 (0xfbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Mar 26 17:28:36 2026 GMT Not After : Apr 2 17:28:36 2026 GMT Subject: CN=69c56cc4-89ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:c8:18:20:9d:86:14:9c:49:d2:62:03:bb: 0a:79:a3:59:8c:51:8c:4c:a1:e3:82:6b:bb:76:f1: 92:c4:fd:c5:90:63:4c:8a:c3:82:9c:60:41:03:b0: d1:47:82:80:3a:3f:a5:3e:dc:34:14:d4:1f:84:cb: 17:86:7a:82:07:02:63:39:d3:4f:5d:cc:00:11:75: ee:72:90:dc:27:b1:fd:e6:c4:81:9f:f4:f9:d8:7a: ed:a3:f1:c6:e1:c6:3b:44:ea:bd:26:5d:b8:84:45: 52:46:8a:68:24:31:fb:dc:8b:12:13:e7:bf:ea:c6: f9:e1:70:7f:92:a4:c7:84:97:c8:ca:c3:57:6b:7a: ad:76:c6:d4:03:d3:10:ad:a8:6e:10:76:d2:fc:20: 2f:73:9f:68:54:1f:0a:91:fb:99:b2:81:55:71:23: 13:09:a8:19:7b:4a:81:76:8e:c7:a9:88:83:d9:89: 88:11:ac:34:cf:e6:be:fe:a5:80:fb:19:ee:a7:51: ef:e9:63:dc:e1:79:43:8f:da:51:6c:c9:c3:e5:39: fc:b8:65:58:43:1f:32:96:62:13:a0:87:16:ed:92: a4:bb:c6:08:98:91:a7:30:a2:0c:25:8c:a9:96:1f: a8:83:8f:43:7e:75:df:57:17:38:75:7e:fc:e7:27: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:20:E9:E5:8A:D5:D4:94:E6:A9:12:FD:57:E5:02:36:B2:05:27:C0 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:87:93:8f:2a:16:c4:f6:ae:21:8f:78:0a:71:0a:e7:88:a1: d9:e9:15:80:88:9d:d3:53:85:52:bb:71:58:aa:12:7f:9f:68: 02:96:81:a1:3c:66:4c:53:9a:6c:1e:e4:81:2b:dc:c3:97:f0: f0:a9:00:a9:1c:cb:02:8b:64:f2:b4:8c:50:e4:ae:2e:7a:87: b0:f3:69:8f:ec:68:c8:17:19:29:5c:5e:70:16:97:84:51:eb: b1:58:7a:9b:4d:63:d2:cc:76:ad:53:56:b3:e8:3a:29:ec:06: b5:24:f0:96:32:de:4d:a8:95:5b:2f:d5:dc:f6:b5:95:08:b3: a3:24:43:d1:f6:1a:60:8f:97:00:f6:de:0e:37:8a:e8:b8:08: d7:fd:db:d5:83:42:a6:7e:8f:e7:ca:b0:89:f1:17:f1:66:30: b8:ba:ca:5e:c1:fe:a3:3b:5b:62:c5:6c:eb:5a:1e:9b:0c:f7: 30:21:64:7c:17:b7:cc:81:60:14:31:db:5b:de:6a:9d:4a:29: 94:0a:09:00:cc:37:c6:f3:6b:b8:e1:8c:2e:a2:84:82:f7:e6: 1d:ff:5f:ad:34:bb:93:62:b0:98:ee:15:8b:02:66:4f:4a:9c: 6d:d9:f6:6a:cd:30:e6:2b:ce:40:07:15:c0:7a:6c:b7:1e:b2: f4:35:69:cf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjYwMzI2MTcyODM2WhcNMjYwNDAyMTcyODM2WjAYMRYwFAYD VQQDEw02OWM1NmNjNC04OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4bHIGCCdhhScSdJiA7sKeaNZjFGMTKHjgmu7dvGSxP3FkGNMisOCnGBBA7DR R4KAOj+lPtw0FNQfhMsXhnqCBwJjOdNPXcwAEXXucpDcJ7H95sSBn/T52Hrto/HG 4cY7ROq9Jl24hEVSRopoJDH73IsSE+e/6sb54XB/kqTHhJfIysNXa3qtdsbUA9MQ rahuEHbS/CAvc59oVB8KkfuZsoFVcSMTCagZe0qBdo7HqYiD2YmIEaw0z+a+/qWA +xnup1Hv6WPc4XlDj9pRbMnD5Tn8uGVYQx8ylmIToIcW7ZKku8YImJGnMKIMJYyp lh+og49DfnXfVxc4dX785ydbNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMsg6eWK 1dSU5qkS/VflAjayBSfAMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwYeTjyoWxPauIY94CnEK54ih2ekVgIid01OFUrtxWKoSf59oApaBoTxmTFOa bB7kgSvcw5fw8KkAqRzLAotk8rSMUOSuLnqHsPNpj+xoyBcZKVxecBaXhFHrsVh6 m01j0sx2rVNWs+g6KewGtSTwljLeTaiVWy/V3Pa1lQizoyRD0fYaYI+XAPbeDjeK 6LgI1/3b1YNCpn6P58qwifEX8WYwuLrKXsH+oztbYsVs61oemwz3MCFkfBe3zIFg FDHbW95qnUoplAoJAMw3xvNruOGMLqKEgvfmHf9frTS7k2KwmO4ViwJmT0qcbdn2 as0w5ivOQAcVwHpstx6y9DVpzw== -----END CERTIFICATE-----Generated at Thu Mar 26 23:21:42 2026 by rpki-client