$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft File: CrbdJlFcU-zFsEYrTEddWn5aVTc.mft (raw, json) Hash identifier: 0AeC0+b2it4I4nZqP9LQjmXEi0FZezqTbYYrz+2JkwQ= Subject key identifier: 3E:54:A0:21:EE:6D:F4:E5:20:1B:F7:78:B5:19:DF:30:33:66:C6:E1 Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft Manifest number: 0597 Signing time: Tue 24 Mar 2026 22:59:57 +0000 Manifest this update: Tue 24 Mar 2026 22:59:57 +0000 Manifest next update: Tue 31 Mar 2026 22:59:57 +0000 Files and hashes: 1: CrbdJlFcU-zFsEYrTEddWn5aVTc.crl (hash: py7Fb5VtLIsFXBTm3gTf6waySdyX6O32wb+B+dYkWEQ=) 2: ED8B1602A0D711EFB982AD62C4F9AE02.roa (hash: 4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=) 3: 16D4DB82A40E11EEAAB83671C4F9AE02.roa (hash: TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=) 4: 17A651BCA40E11EEAAB83671C4F9AE02.roa (hash: bURAJ2nFs1Lh/czDcyYCaHuE8qREjWTSWX92LpP8+U0=) 5: A8EB70C0C52D11F09789F47BC4F9AE02.roa (hash: f4TwCofnjb314b2dfugH+uOL5IvInT5NZv6LramWXV8=) 6: 1ED4125C50C111EFA64C2437C4F9AE02.roa (hash: +IUDW8cw3RCxe8Sc2DGSXyBs2/FEVtOhLz/uMryDXvU=) 7: BAA1B454654411EFACBF7956C4F9AE02.roa (hash: AgfhIRT1yYkIco2yAsi5bYKv0pG9DAUzOwIf702NGHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537 Validity Not Before: Mar 24 22:59:57 2026 GMT Not After : Mar 31 22:59:57 2026 GMT Subject: CN=69c3176d-006f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:1c:33:d9:5e:ac:3d:f8:d3:0f:cb:08:00: c1:00:0f:fc:c3:8c:49:8b:56:04:ad:fa:0a:38:b0: df:a4:50:0e:0c:3d:14:3b:e1:28:3a:89:37:27:0b: d6:33:46:88:f1:aa:da:8b:5d:91:70:a6:d4:c2:25: ac:51:bd:b2:ad:3d:65:2d:f7:b9:99:44:38:5f:f4: 5c:25:4c:82:54:91:4c:66:d2:ab:b8:c5:95:a9:03: b1:c0:3e:04:b4:3d:a6:88:b6:46:a4:a9:27:58:31: 54:8f:56:f6:4f:c9:ea:ad:09:59:1f:05:a6:dd:60: 6f:f9:90:88:0b:83:6b:65:09:ba:de:a7:96:28:12: 08:d5:25:99:b3:d6:d2:74:c3:f5:7c:14:62:92:04: 48:94:f9:4e:d7:d2:53:ea:94:ea:3b:3e:9b:64:3d: f3:e8:cb:1d:14:a2:ed:ad:be:cf:88:b0:29:70:a5: 09:d6:18:d2:08:fd:b0:61:54:f1:f3:dc:94:34:ef: f0:b5:36:64:da:fd:b6:34:cd:23:d5:26:e7:6f:0e: 77:cd:59:dc:ee:6b:30:30:d7:6c:c7:27:87:a3:52: 34:3a:85:86:86:c8:04:3d:23:76:79:68:1b:b1:46: d8:26:96:42:56:d1:10:7e:a1:da:90:a5:05:79:ef: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:54:A0:21:EE:6D:F4:E5:20:1B:F7:78:B5:19:DF:30:33:66:C6:E1 X509v3 Authority Key Identifier: keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:77:95:25:6f:e2:27:7a:da:c5:cc:86:77:21:c0:14:d5:96: c6:c0:cf:55:b4:4a:73:62:f9:18:76:d7:16:a1:00:42:95:38: 1d:4f:c3:d5:3e:0c:a4:87:29:50:ac:39:0a:a9:1c:2c:e0:f9: 38:9f:16:46:37:3d:ce:f5:fa:a5:44:16:31:32:a6:a6:fa:ca: 63:8c:b6:13:6f:0d:5f:8d:a3:ec:72:a8:6e:a5:bc:48:10:3d: 79:41:4d:f5:4b:0f:c8:b7:d4:7d:8f:05:21:c3:c5:fa:3b:07: 49:8e:fc:d3:c9:83:72:df:5e:5c:a5:04:37:4f:be:63:98:25: 8d:9e:39:e4:ce:db:16:b2:de:45:22:9e:79:2a:62:1b:bb:4e: cb:fc:ab:f7:b2:eb:c9:ea:17:d9:93:c8:06:7f:80:53:a2:01: ee:db:2b:7b:69:d2:a0:03:98:c7:42:f8:3b:73:41:b3:75:f1: 5f:2f:aa:e8:d4:54:23:2e:0d:74:10:52:39:d0:c4:14:7a:9e: 61:9e:ff:c4:33:ad:69:ad:3b:a3:4e:8a:56:40:1f:fa:fd:44: 32:84:43:49:3a:d4:b0:aa:48:3f:f1:d0:bb:a3:cd:de:11:d9: 41:84:a1:73:18:76:39:53:d8:d8:1a:16:f2:a1:c8:c9:09:df: 5c:eb:62:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU0QjcxMTAvBgNVBAUTKDBBQjZERDI2NTE1QzUzRUNDNUIwNDYyQjRDNDc1RDVB N0U1QTU1MzcwHhcNMjYwMzI0MjI1OTU3WhcNMjYwMzMxMjI1OTU3WjAYMRYwFAYD VQQDEw02OWMzMTc2ZC0wMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmekcM9lerD340w/LCADBAA/8w4xJi1YErfoKOLDfpFAODD0UO+EoOok3JwvW M0aI8arai12RcKbUwiWsUb2yrT1lLfe5mUQ4X/RcJUyCVJFMZtKruMWVqQOxwD4E tD2miLZGpKknWDFUj1b2T8nqrQlZHwWm3WBv+ZCIC4NrZQm63qeWKBII1SWZs9bS dMP1fBRikgRIlPlO19JT6pTqOz6bZD3z6MsdFKLtrb7PiLApcKUJ1hjSCP2wYVTx 89yUNO/wtTZk2v22NM0j1Sbnbw53zVnc7mswMNdsxyeHo1I0OoWGhsgEPSN2eWgb sUbYJpZCVtEQfqHakKUFee+JIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5UoCHu bfTlIBv3eLUZ3zAzZsbhMB8GA1UdIwQYMBaAFAq23SZRXFPsxbBGK0xHXVp+WlU3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTRCNy9FQjMxMkYwMjFF QUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1UtekZzRVlyVEVkZFduNWFW VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyYmRKbEZjVS16RnNFWXJURWRkV241YVZUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTRCNy9FQjMxMkYwMjFFQUExMUVDQjc1NkJGMzBDNEY5QUUwMi9DcmJkSmxGY1Ut ekZzRVlyVEVkZFduNWFWVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlXeVJW/iJ3raxcyGdyHAFNWWxsDPVbRKc2L5GHbXFqEAQpU4HU/D1T4MpIcp UKw5CqkcLOD5OJ8WRjc9zvX6pUQWMTKmpvrKY4y2E28NX42j7HKobqW8SBA9eUFN 9UsPyLfUfY8FIcPF+jsHSY7808mDct9eXKUEN0++Y5gljZ455M7bFrLeRSKeeSpi G7tOy/yr97LryeoX2ZPIBn+AU6IB7tsre2nSoAOYx0L4O3NBs3XxXy+q6NRUIy4N dBBSOdDEFHqeYZ7/xDOtaa07o06KVkAf+v1EMoRDSTrUsKpIP/HQu6PN3hHZQYSh cxh2OVPY2BoW8qHIyQnfXOtihA== -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:07 2026 by rpki-client