$ rpki-client -vvf rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft File: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft (raw, json) Hash identifier: yOy0LT1x0Drf8kHrrGGPO1TFUY9jCruVEVBY+53qTg0= Subject key identifier: 31:87:48:16:D1:01:D7:EE:C3:8C:FC:EB:97:A0:3C:A1:BE:7D:BD:28 Authority key identifier: 2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 Certificate issuer: /CN=A9183496/serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Certificate serial: 0CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft Manifest number: 0CA8 Signing time: Thu 26 Mar 2026 18:24:20 +0000 Manifest this update: Thu 26 Mar 2026 18:24:19 +0000 Manifest next update: Thu 02 Apr 2026 18:24:19 +0000 Files and hashes: 1: L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl (hash: XZGSyZ4oZ5y7Vcj+/+hH62GFV06nuKpX9VHMOaP5Z+s=) 2: 68A35F78831411EC90E07C19C4F9AE02.roa (hash: xD5ELxyj4bWF9z+q/0VL9OifUcgzca/SexnDM+WQXMA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3250 (0xcb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183496, serialNumber=2F7A1C1DD27EA78158CE21A94DBBFB9072FB1734 Validity Not Before: Mar 26 18:24:19 2026 GMT Not After : Apr 2 18:24:19 2026 GMT Subject: CN=69c579d4-02c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:39:d2:36:dd:c0:02:fc:5a:95:97:02:03: 6f:26:66:fa:e9:58:b2:b5:61:80:ac:8f:22:db:96: 21:60:06:64:cd:2c:d0:2e:8a:71:e4:d4:72:dd:81: 8d:fb:2a:4b:62:7d:52:60:ce:57:a6:81:6a:70:e5: dd:d2:ae:82:9b:36:14:8f:88:d8:d7:2d:4b:ba:dc: 7d:06:b8:03:39:01:14:77:35:47:3c:76:41:26:79: 91:b0:08:4d:64:86:ba:68:81:a2:12:c3:c7:d4:c4: 9e:1d:cb:b8:e7:8d:70:76:66:31:85:2b:31:a7:2e: f8:65:91:a5:97:c7:af:94:7e:30:80:62:34:9c:4e: f4:b6:8d:69:eb:a0:c0:e5:fb:94:c6:33:75:62:da: 9c:1e:0f:8d:56:54:dd:b6:61:20:85:a5:80:a0:d8: 46:a2:de:b1:25:82:90:0e:7c:50:3c:6f:79:5f:46: 1b:85:3a:3e:9c:c2:e2:ae:55:39:81:c0:e3:77:ce: 6d:07:2d:87:46:07:90:3d:4c:f4:53:b6:df:b9:22: ad:d4:f8:68:43:fa:da:dd:c4:01:32:12:9a:75:b9: c0:e9:0b:fd:b7:6b:30:4b:c2:60:f2:04:58:54:8c: 0d:ea:57:6c:c7:ff:1c:c7:94:31:2e:1c:a9:ba:1d: d9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:87:48:16:D1:01:D7:EE:C3:8C:FC:EB:97:A0:3C:A1:BE:7D:BD:28 X509v3 Authority Key Identifier: keyid:2F:7A:1C:1D:D2:7E:A7:81:58:CE:21:A9:4D:BB:FB:90:72:FB:17:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183496/2341A5660F6C11EAA70F795AC4F9AE02/L3ocHdJ-p4FYziGpTbv7kHL7FzQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:ae:e0:c9:9b:7e:3c:53:e7:aa:7f:ff:d8:ef:95:3b:30:91: 5b:fe:0f:ea:4d:d7:06:3a:1b:21:8e:4a:71:8f:96:a4:e7:4a: f4:2a:99:5f:d2:82:46:54:56:18:ae:6c:ec:7d:ab:b7:27:a5: 8c:df:40:68:da:3d:38:69:0d:4c:00:2e:c0:df:cb:9a:a3:d8: 61:aa:4f:9f:f4:bf:1b:f9:16:37:7f:0a:37:09:e7:cd:ab:fe: 13:8f:5c:c1:a7:3d:e9:b0:2e:2c:74:4b:ce:3f:b8:cf:c1:29: 5b:10:6c:45:65:58:47:c3:e5:24:15:39:8e:fe:75:c9:26:8d: 6f:75:58:fc:b1:20:8c:41:ed:fe:7c:c9:62:9c:66:65:e1:0e: 98:bf:77:46:a1:06:0a:f2:72:37:aa:85:71:9e:97:60:1a:fc: f6:fe:ea:ea:77:01:e2:76:5a:d3:31:be:07:30:6b:11:a7:46: 0b:b3:ed:09:1c:e8:90:6b:78:c3:fa:ec:59:d3:d8:65:d9:e6: cb:41:62:f6:f0:f6:bc:e3:f7:22:e5:f4:29:e8:4f:44:68:d9: 6e:86:85:48:e6:da:a4:a7:86:50:ba:ff:38:91:be:dd:93:90: 0a:33:f2:ea:1c:d6:5c:6f:97:00:fc:6f:1a:48:34:ca:69:cb: 25:8f:6f:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM0OTYxMTAvBgNVBAUTKDJGN0ExQzFERDI3RUE3ODE1OENFMjFBOTREQkJGQjkw NzJGQjE3MzQwHhcNMjYwMzI2MTgyNDE5WhcNMjYwNDAyMTgyNDE5WjAYMRYwFAYD VQQDEw02OWM1NzlkNC0wMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVg50jbdwAL8WpWXAgNvJmb66ViytWGArI8i25YhYAZkzSzQLopx5NRy3YGN +ypLYn1SYM5XpoFqcOXd0q6CmzYUj4jY1y1Lutx9BrgDOQEUdzVHPHZBJnmRsAhN ZIa6aIGiEsPH1MSeHcu4541wdmYxhSsxpy74ZZGll8evlH4wgGI0nE70to1p66DA 5fuUxjN1YtqcHg+NVlTdtmEghaWAoNhGot6xJYKQDnxQPG95X0YbhTo+nMLirlU5 gcDjd85tBy2HRgeQPUz0U7bfuSKt1PhoQ/ra3cQBMhKadbnA6Qv9t2swS8Jg8gRY VIwN6ldsx/8cx5QxLhypuh3ZLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDGHSBbR Adfuw4z865egPKG+fb0oMB8GA1UdIwQYMBaAFC96HB3SfqeBWM4hqU27+5By+xc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzQ5Ni8yMzQxQTU2NjBG NkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0Rll6aUdwVGJ2N2tITDdG elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wzb2NIZEotcDRGWXppR3BUYnY3a0hMN0Z6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzQ5Ni8yMzQxQTU2NjBGNkMxMUVBQTcwRjc5NUFDNEY5QUUwMi9MM29jSGRKLXA0 Rll6aUdwVGJ2N2tITDdGelEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAY67gyZt+PFPnqn//2O+VOzCRW/4P6k3XBjobIY5KcY+WpOdK9CqZX9KCRlRW GK5s7H2rtyeljN9AaNo9OGkNTAAuwN/LmqPYYapPn/S/G/kWN38KNwnnzav+E49c wac96bAuLHRLzj+4z8EpWxBsRWVYR8PlJBU5jv51ySaNb3VY/LEgjEHt/nzJYpxm ZeEOmL93RqEGCvJyN6qFcZ6XYBr89v7q6ncB4nZa0zG+BzBrEadGC7PtCRzokGt4 w/rsWdPYZdnmy0Fi9vD2vOP3IuX0KehPRGjZboaFSObapKeGULr/OJG+3ZOQCjPy 6hzWXG+XAPxvGkg0ymnLJY9vqw== -----END CERTIFICATE-----Generated at Sat Mar 28 08:46:57 2026 by rpki-client