$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: +SYl+YzcSIH+i+rRVdiKA7zio7lUiGFNx5N78k79kos= Subject key identifier: 03:A0:6C:B1:A5:C9:42:8C:1B:F0:15:6D:61:80:7A:8B:AB:2A:5D:83 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 242A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 23E3 Signing time: Tue 24 Mar 2026 15:44:51 +0000 Manifest this update: Tue 24 Mar 2026 15:44:50 +0000 Manifest next update: Tue 31 Mar 2026 15:44:50 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: wkyl6bQaOxE1LUu83PnhKA64r7X+PmMf9/6MZbJe0p0=) 2: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=) 3: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=) 4: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=) 5: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: E8onjnN6iimBzZDHgmtWpBoYlonlzj7tjyMVxIXY934=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9258 (0x242a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Mar 24 15:44:50 2026 GMT Not After : Mar 31 15:44:50 2026 GMT Subject: CN=69c2b173-e9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:3d:af:85:0e:36:64:73:cb:7a:a3:fd:ff: c8:bc:b4:60:63:29:7c:0e:1d:92:60:cc:79:5c:6f: b0:a0:7e:6a:22:14:62:95:33:3f:a8:d6:7d:4f:54: e8:d9:2d:c4:83:dc:bb:48:d1:85:e3:a2:65:67:be: 04:46:65:10:28:9f:ca:d1:30:38:2c:6d:a8:7a:e2: cb:46:37:6c:b8:82:24:23:b6:f2:f1:b9:c7:10:14: cd:11:6f:83:01:4c:1f:90:fc:88:24:51:38:31:2f: 17:85:1c:4c:39:c7:9c:8c:b6:19:a8:c2:cf:3f:68: c7:e7:2c:4b:ef:d8:b8:7b:b3:07:78:5a:1d:7d:39: 7a:da:42:6f:00:eb:66:4b:ba:7d:52:7a:44:da:6a: 97:80:a4:e3:ec:f0:75:4a:86:01:c3:ae:01:05:f1: 93:ff:cf:2c:45:95:bc:51:b2:04:48:b9:d0:a5:9c: c5:70:37:32:67:32:8b:d5:3f:38:52:d2:93:d9:bb: 60:d8:fe:6f:fa:6f:ab:cf:8e:27:f1:08:1a:45:0c: 63:c8:35:8d:0d:c9:75:e8:a2:00:3a:4c:35:bd:43: 23:19:9c:fb:e4:5b:59:77:03:99:f0:1d:b1:59:14: 15:06:d8:1d:a7:73:0f:93:ee:42:7a:4c:0f:93:ef: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A0:6C:B1:A5:C9:42:8C:1B:F0:15:6D:61:80:7A:8B:AB:2A:5D:83 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:4b:76:16:43:61:02:ae:c1:a1:b2:4e:7b:4f:dc:c6:14:04: 17:cd:8c:8d:ae:5d:5d:bc:03:72:ad:0c:ec:ec:c0:c6:34:5f: 58:fd:e8:24:ee:22:03:0d:d2:1c:b9:6c:35:b6:d1:39:9e:7c: 97:a0:44:84:6c:73:42:13:e2:49:4f:5f:aa:71:9f:9f:7b:57: 73:cb:d5:a3:84:20:31:02:29:5c:13:d1:59:fc:62:b5:7b:63: fe:d8:69:fe:67:80:c8:d4:13:c6:70:5f:b7:62:f8:8f:8d:f2: 59:fc:1f:31:87:e2:c9:25:f0:86:bf:03:e2:1f:c7:e6:f7:34: 09:a2:fe:5d:48:01:ea:08:2e:94:a0:2f:53:a2:a1:a6:ee:66: f7:38:6d:73:0e:1b:55:18:d5:a2:2f:ff:eb:bc:9a:79:9b:65: 60:b3:81:08:13:b1:22:63:27:6b:92:8f:eb:8b:d9:34:dd:64: 51:6e:ae:bd:ef:47:a8:dc:68:36:ff:f2:af:43:45:8b:da:31: fd:43:39:18:e1:99:5e:e1:30:47:37:b8:fe:07:94:c7:9f:b2: f3:9c:d8:a1:3a:28:7c:1c:76:65:d4:5e:89:4c:d4:14:ac:e2: 9f:14:45:c8:b0:95:d8:f8:8e:b8:cf:71:3e:67:2e:49:99:c6: c6:2f:91:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjYwMzI0MTU0NDUwWhcNMjYwMzMxMTU0NDUwWjAYMRYwFAYD VQQDEw02OWMyYjE3My1lOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ro9r4UONmRzy3qj/f/IvLRgYyl8Dh2SYMx5XG+woH5qIhRilTM/qNZ9T1To 2S3Eg9y7SNGF46JlZ74ERmUQKJ/K0TA4LG2oeuLLRjdsuIIkI7by8bnHEBTNEW+D AUwfkPyIJFE4MS8XhRxMOcecjLYZqMLPP2jH5yxL79i4e7MHeFodfTl62kJvAOtm S7p9UnpE2mqXgKTj7PB1SoYBw64BBfGT/88sRZW8UbIESLnQpZzFcDcyZzKL1T84 UtKT2btg2P5v+m+rz44n8QgaRQxjyDWNDcl16KIAOkw1vUMjGZz75FtZdwOZ8B2x WRQVBtgdp3MPk+5CekwPk+/F4QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAOgbLGl yUKMG/AVbWGAeourKl2DMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH0t2FkNhAq7BobJOe0/cxhQEF82Mja5dXbwDcq0M7OzAxjRfWP3oJO4iAw3S HLlsNbbROZ58l6BEhGxzQhPiSU9fqnGfn3tXc8vVo4QgMQIpXBPRWfxitXtj/thp /meAyNQTxnBft2L4j43yWfwfMYfiySXwhr8D4h/H5vc0CaL+XUgB6ggulKAvU6Kh pu5m9zhtcw4bVRjVoi//67yaeZtlYLOBCBOxImMna5KP64vZNN1kUW6uve9HqNxo Nv/yr0NFi9ox/UM5GOGZXuEwRze4/geUx5+y85zYoToofBx2ZdReiUzUFKzinxRF yLCV2PiOuM9xPmcuSZnGxi+Rxw== -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:08 2026 by rpki-client