$ rpki-client -vvf rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft File: -mtidXvK1FesoHClHEgItLfJM3A.mft (raw, json) Hash identifier: Rho8BdjOvpemb5NrTYlNi0xc+QpXLcXOoEEho7Qq2Ss= Subject key identifier: 8F:F3:41:4E:C6:63:B2:68:44:96:04:CB:43:4F:58:F0:57:84:D4:6B Authority key identifier: FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70 Certificate issuer: /CN=A917E322/serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft Manifest number: 0D Signing time: Wed 25 Mar 2026 08:18:19 +0000 Manifest this update: Wed 25 Mar 2026 08:18:18 +0000 Manifest next update: Wed 01 Apr 2026 08:18:18 +0000 Files and hashes: 1: -mtidXvK1FesoHClHEgItLfJM3A.crl (hash: cCZGAu0AAtFXb42vhzulOob6ZqK7vnC4tYXPBNKUbvk=) 2: 824F8AD0187711F1AF6111A7363D8C67.roa (hash: /rBFDP4ucRayd+6pogF2vcfXHdX6dh/y/lIPddm4CdM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E322, serialNumber=FA6B62757BCAD457ACA070A51C4808B4B7C93370 Validity Not Before: Mar 25 08:18:18 2026 GMT Not After : Apr 1 08:18:18 2026 GMT Subject: CN=69c39a4a-f04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e1:3b:97:1d:d9:f0:28:39:8c:6f:f2:14:83: 48:29:c4:09:a0:15:2c:98:63:96:e4:f2:23:32:78: 91:81:a4:8c:77:6b:23:93:d8:f2:0d:83:d7:bd:bc: d2:3f:68:83:42:35:23:03:42:3d:af:ec:d5:22:f5: d9:6e:d5:61:15:10:bd:18:7c:72:fb:61:2f:68:65: af:34:3d:6e:5a:37:cb:3c:65:af:9e:e6:42:c9:35: cd:50:84:5e:33:dc:89:7b:e0:35:3c:48:f8:1d:08: 4e:fb:0c:e5:94:37:e9:e2:85:91:08:4c:ff:d2:13: cd:eb:f0:4e:9f:9f:16:1d:eb:e8:a7:09:0d:a2:f4: bc:5d:94:2c:71:ba:24:7e:4d:b9:86:91:e2:c4:c5: ad:bd:63:46:60:d0:44:28:69:b4:51:42:9a:f9:13: a2:a5:5c:7c:50:34:04:d5:63:4f:e5:9a:de:93:36: 55:fa:3c:ba:03:0b:6d:b9:ea:ab:10:8b:ee:b6:e2: 97:85:41:89:45:f3:03:f2:b5:82:2b:5c:ea:54:5d: 7d:cf:4e:46:44:bd:43:59:b1:30:27:d4:7b:5a:5e: c9:29:21:36:c4:74:cd:94:63:35:4d:ff:25:df:08: 99:6c:60:21:bb:21:27:cc:93:fe:9d:db:32:eb:f7: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F3:41:4E:C6:63:B2:68:44:96:04:CB:43:4F:58:F0:57:84:D4:6B X509v3 Authority Key Identifier: keyid:FA:6B:62:75:7B:CA:D4:57:AC:A0:70:A5:1C:48:08:B4:B7:C9:33:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-mtidXvK1FesoHClHEgItLfJM3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E322/C9C2AAD8187611F186284E4E363D8C67/-mtidXvK1FesoHClHEgItLfJM3A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:90:95:b0:bb:5b:b3:3f:2b:f4:81:66:8a:f4:d7:6a:00:33: 36:16:ec:b6:88:7c:39:76:90:bd:a1:4c:aa:ac:ea:9b:70:1b: 24:a0:d4:17:26:56:e7:bc:a8:c1:b0:e2:38:a9:bc:e4:2d:9d: 25:e8:9d:59:83:c3:db:34:23:bb:4e:83:ff:93:be:4b:98:e7: 1d:e8:13:ef:b9:8c:71:53:94:79:e4:0c:46:49:28:94:12:6e: 93:db:cc:9e:9e:56:d2:4d:44:5d:db:04:a1:59:57:33:22:ac: 0f:63:00:5c:2f:3f:4f:b3:dd:27:5f:05:c4:21:7a:56:2a:f9: ab:e7:ac:42:7e:22:46:7c:25:6c:81:56:c7:c3:88:d1:a7:8b: 70:4c:1b:c9:d0:06:b8:87:2a:6b:8c:34:69:09:50:4a:3f:02: a5:97:71:3b:9d:b1:f3:7d:07:e2:62:36:26:37:97:f0:4b:f7: 4f:1d:49:1d:98:ae:be:bd:21:29:f4:c6:47:ee:a4:c7:e8:e7: c1:69:07:8e:ad:63:1c:f2:15:ec:9f:0c:be:d0:85:95:10:98: 41:9f:5c:91:13:c1:1b:48:06:b8:29:d5:d0:f5:23:64:44:ab: 9c:0b:4d:ec:32:b2:46:ee:7c:e6:18:88:d5:68:36:49:9f:16: 45:d7:63:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTMyMjExMC8GA1UEBRMoRkE2QjYyNzU3QkNBRDQ1N0FDQTA3MEE1MUM0ODA4QjRC N0M5MzM3MDAeFw0yNjAzMjUwODE4MThaFw0yNjA0MDEwODE4MThaMBgxFjAUBgNV BAMTDTY5YzM5YTRhLWYwNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD4TuXHdnwKDmMb/IUg0gpxAmgFSyYY5bk8iMyeJGBpIx3ayOT2PINg9e9vNI/ aINCNSMDQj2v7NUi9dlu1WEVEL0YfHL7YS9oZa80PW5aN8s8Za+e5kLJNc1QhF4z 3Il74DU8SPgdCE77DOWUN+nihZEITP/SE83r8E6fnxYd6+inCQ2i9LxdlCxxuiR+ TbmGkeLExa29Y0Zg0EQoabRRQpr5E6KlXHxQNATVY0/lmt6TNlX6PLoDC2256qsQ i+624peFQYlF8wPytYIrXOpUXX3PTkZEvUNZsTAn1HtaXskpITbEdM2UYzVN/yXf CJlsYCG7ISfMk/6d2zLr94TlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUj/NBTsZj smhElgTLQ09Y8FeE1GswHwYDVR0jBBgwFoAU+mtidXvK1FesoHClHEgItLfJM3Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMzIyL0M5QzJBQUQ4MTg3 NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZlc29IQ2xIRWdJdExmSk0z QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLW10aWRYdksxRmVzb0hDbEhFZ0l0TGZKTTNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MzIyL0M5QzJBQUQ4MTg3NjExRjE4NjI4NEU0RTM2M0Q4QzY3Ly1tdGlkWHZLMUZl c29IQ2xIRWdJdExmSk0zQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA6kJWwu1uzPyv0gWaK9NdqADM2Fuy2iHw5dpC9oUyqrOqbcBskoNQXJlbnvKjB sOI4qbzkLZ0l6J1Zg8PbNCO7ToP/k75LmOcd6BPvuYxxU5R55AxGSSiUEm6T28ye nlbSTURd2wShWVczIqwPYwBcLz9Ps90nXwXEIXpWKvmr56xCfiJGfCVsgVbHw4jR p4twTBvJ0Aa4hyprjDRpCVBKPwKll3E7nbHzfQfiYjYmN5fwS/dPHUkdmK6+vSEp 9MZH7qTH6OfBaQeOrWMc8hXsnwy+0IWVEJhBn1yRE8EbSAa4KdXQ9SNkRKucC03s MrJG7nzmGIjVaDZJnxZF12Mm -----END CERTIFICATE-----Generated at Thu Mar 26 01:57:53 2026 by rpki-client