$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft File: rRUDmr5-BIRna8sqkCopVqgDzs8.mft (raw, json) Hash identifier: 7RJi/1vsFsj4isisXGzZm6DSnloNolV8/fe4Bp0HwSo= Subject key identifier: 0E:56:E0:F4:E8:62:47:98:DC:02:C8:67:09:46:B1:04:17:78:04:C4 Authority key identifier: AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF Certificate issuer: /CN=A917C876/serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft Manifest number: 14 Signing time: Wed 25 Mar 2026 08:13:21 +0000 Manifest this update: Wed 25 Mar 2026 08:13:21 +0000 Manifest next update: Wed 01 Apr 2026 08:13:21 +0000 Files and hashes: 1: rRUDmr5-BIRna8sqkCopVqgDzs8.crl (hash: 45pzJymVklLrwcqghqvwINc0NoZ8jiI4LiOMrjItP3A=) 2: 85126BD6109111F19502AD2A353D8C67.roa (hash: T5GMIPyPaLrmTYrRWcGwkxKhGNJdhN+jLIOEn2RD910=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C876, serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF Validity Not Before: Mar 25 08:13:21 2026 GMT Not After : Apr 1 08:13:21 2026 GMT Subject: CN=69c39921-5505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:bb:75:2d:21:35:99:38:79:c3:45:a9:5f: 42:34:d4:cd:ee:10:b5:ac:97:86:e2:07:66:de:1f: 53:05:bb:ca:af:36:b2:0d:98:fc:e6:78:53:33:89: 1c:9e:d4:70:7d:4a:70:76:5a:d4:98:51:b2:cf:9f: 50:e6:1f:82:e0:5c:f8:f7:d6:7b:58:7b:42:71:5a: 18:68:9b:46:48:d3:e2:5c:7f:20:d6:30:d2:86:89: 02:4d:f6:94:f1:03:5f:4f:a3:5b:0f:d9:39:9d:78: bb:1f:78:7a:54:7c:c7:f8:d3:e0:f6:96:95:f9:0a: 35:0f:63:1c:cd:28:00:a4:e1:77:2b:91:25:2f:da: 5e:e9:fb:93:ba:3d:94:cd:57:b1:97:1a:2c:4e:69: a2:b5:ff:6b:40:17:26:8e:fc:c4:d2:be:b6:5b:64: 5b:88:a8:30:1f:71:7e:f6:a0:06:b6:ee:a4:75:43: c5:c1:09:1f:e5:81:08:51:d6:9f:db:c4:e8:ad:cf: 5f:58:b6:22:5b:85:7c:6a:e2:53:a9:1a:d6:25:1a: 6b:af:21:f2:53:64:3a:d0:11:7c:81:a6:f1:95:75: 72:82:11:87:92:76:71:ab:77:3e:83:66:76:ce:c1: dd:c6:0a:d1:4f:6d:81:5f:df:5b:26:75:08:d0:4a: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:E0:F4:E8:62:47:98:DC:02:C8:67:09:46:B1:04:17:78:04:C4 X509v3 Authority Key Identifier: keyid:AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:80:87:97:cc:1e:0d:fc:9b:27:4d:4d:fb:7a:bc:99:13:26: 3b:58:98:51:c6:de:b4:c2:58:0c:14:e1:4b:5c:06:38:26:ee: 9a:35:7b:f2:27:9d:22:b7:a0:2b:a1:eb:03:22:55:5a:67:0b: 86:fc:88:7c:29:1f:1d:d7:27:50:8c:fb:60:7f:56:ba:29:fc: 81:98:84:ff:a2:36:cc:2c:f2:1b:7b:38:00:0c:d2:3a:26:a4: 6f:71:47:e4:be:e7:bc:65:f8:5e:07:b0:a6:22:38:00:dc:b9: 0d:19:d2:37:55:64:af:a0:df:d5:07:14:dc:29:85:fe:23:ea: b5:9c:71:a5:27:ea:8b:ed:50:7f:ea:4e:d1:13:b7:fd:ec:d1: 83:d6:8e:3a:74:2e:5d:be:5f:5d:4f:34:60:ca:62:ac:ec:43: 2f:6c:9e:61:65:2e:f5:17:9a:48:8d:15:3c:7f:cd:b0:09:fe: c1:0f:c8:77:96:fd:a7:6f:4f:b3:ec:95:87:72:71:60:90:93: a6:e3:2a:d5:6c:44:58:25:4f:53:70:fa:23:e2:d6:d6:3e:b5: 09:e4:51:05:c5:f9:28:61:d4:77:80:05:ba:95:22:50:69:b9: d8:28:10:be:a4:74:9e:07:21:a1:55:57:a8:a5:74:b4:22:89: 82:68:f0:39 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 Qzg3NjExMC8GA1UEBRMoQUQxNTAzOUFCRTdFMDQ4NDY3NkJDQjJBOTAyQTI5NTZB ODAzQ0VDRjAeFw0yNjAzMjUwODEzMjFaFw0yNjA0MDEwODEzMjFaMBgxFjAUBgNV BAMTDTY5YzM5OTIxLTU1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb77t1LSE1mTh5w0WpX0I01M3uELWsl4biB2beH1MFu8qvNrINmPzmeFMziRye 1HB9SnB2WtSYUbLPn1DmH4LgXPj31ntYe0JxWhhom0ZI0+JcfyDWMNKGiQJN9pTx A19Po1sP2TmdeLsfeHpUfMf40+D2lpX5CjUPYxzNKACk4XcrkSUv2l7p+5O6PZTN V7GXGixOaaK1/2tAFyaO/MTSvrZbZFuIqDAfcX72oAa27qR1Q8XBCR/lgQhR1p/b xOitz19YtiJbhXxq4lOpGtYlGmuvIfJTZDrQEXyBpvGVdXKCEYeSdnGrdz6DZnbO wd3GCtFPbYFf31smdQjQSpalAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDlbg9Ohi R5jcAshnCUaxBBd4BMQwHwYDVR0jBBgwFoAUrRUDmr5+BIRna8sqkCopVqgDzs8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDODc2L0RCQTFENTVBMTA5 MDExRjE4MEJCQkZGRjMzM0Q4QzY3L3JSVURtcjUtQklSbmE4c3FrQ29wVnFnRHpz OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclJVRG1yNS1CSVJuYThzcWtDb3BWcWdEenM4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD ODc2L0RCQTFENTVBMTA5MDExRjE4MEJCQkZGRjMzM0Q4QzY3L3JSVURtcjUtQklS bmE4c3FrQ29wVnFnRHpzOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6gIeXzB4N/JsnTU37eryZEyY7WJhRxt60wlgMFOFLXAY4Ju6aNXvyJ50it6Ar oesDIlVaZwuG/Ih8KR8d1ydQjPtgf1a6KfyBmIT/ojbMLPIbezgADNI6JqRvcUfk vue8ZfheB7CmIjgA3LkNGdI3VWSvoN/VBxTcKYX+I+q1nHGlJ+qL7VB/6k7RE7f9 7NGD1o46dC5dvl9dTzRgymKs7EMvbJ5hZS71F5pIjRU8f82wCf7BD8h3lv2nb0+z 7JWHcnFgkJOm4yrVbERYJU9TcPoj4tbWPrUJ5FEFxfkoYdR3gAW6lSJQabnYKBC+ pHSeByGhVVeopXS0IomCaPA5 -----END CERTIFICATE-----Generated at Thu Mar 26 19:18:37 2026 by rpki-client