$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft File: 45qx0HtQ27mr4stRzZseOlqFRSE.mft (raw, json) Hash identifier: CFxf5VvOmfzSdhbXrchRC1+C2KWCgqVNC/FcIn6URFE= Subject key identifier: C4:8D:C3:58:DE:4F:C4:D6:F8:34:06:92:41:DF:98:7F:37:42:E6:55 Authority key identifier: E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 Certificate issuer: /CN=A9194E03/serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Certificate serial: 3571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft Manifest number: 3539 Signing time: Tue 24 Mar 2026 15:08:37 +0000 Manifest this update: Tue 24 Mar 2026 15:08:36 +0000 Manifest next update: Tue 31 Mar 2026 15:08:36 +0000 Files and hashes: 1: 45qx0HtQ27mr4stRzZseOlqFRSE.crl (hash: Aocxz8T4KAN9BK2g8SHgzxiP2VEGNiKtqqYRqxqN84Q=) 2: 2A24EFB878D011F08CEB9275C4F9AE02.roa (hash: qZUPt2igy/OZCeagcwY7sBJ8TPbC9Y0onFfuw4bOoUY=) 3: E243CD9C227811F1B65A16B9A4833773.roa (hash: S/AzEaze3DTMcHGlipjXyDifcNRIK7tT17DD9pwo8PU=) 4: 92F53A0A4D8111EFAB3C1447C4F9AE02.roa (hash: XccP1/47583iPiSx+eEAvXi2g46yNyTAMgjTPnRV7Z4=) 5: 6A44AF9A1AC711F191E10968393D8C67.roa (hash: uPMubkV8FhRQlQGVWB1Ss5RVIBMdWnZesOclj5/0msM=) 6: 993B537CDD1911EA96723D11C4F9AE02.roa (hash: G25/DoIQB4l/NxwZR2ZZ4S0VBthWUlwHYrnZ9UpUQ54=) 7: 70B74E2A16D811F1AFC6DD17323D8C67.roa (hash: eQFsvDFHzFce0nm0Oa3r0SGBs4a/g5Gg8WsXKdPpffg=) 8: 6AE0DC4E1AC711F191E10968393D8C67.roa (hash: oVUVAUXYEufprI97zwh6hOZPrw2N6ea69NC1uaQQR+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:08:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13681 (0x3571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194E03, serialNumber=E39AB1D07B50DBB9ABE2CB51CD9B1E3A5A854521 Validity Not Before: Mar 24 15:08:36 2026 GMT Not After : Mar 31 15:08:36 2026 GMT Subject: CN=69c2a8f5-e0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:3a:a0:a6:93:7a:fd:21:85:ea:a8:c2:80: c6:20:31:84:50:16:84:b3:73:a8:50:ac:fc:8d:4f: 85:82:db:97:ee:4b:72:a3:66:33:6c:d4:4e:05:0f: 49:d9:46:1d:16:33:1a:ab:c4:fe:5e:1a:a9:b4:36: 30:45:e0:91:b7:c4:60:8b:0a:03:5d:e5:0b:70:6a: e0:0d:f9:dd:12:0b:a0:25:2f:45:58:80:2c:6a:37: 0a:a2:99:50:f4:ae:27:61:6e:8b:1d:fa:d9:09:11: 17:db:f0:d4:49:37:b8:e1:6a:63:a9:80:77:b4:cc: 38:4c:02:80:27:a3:e9:78:68:f0:dd:f3:bd:9c:09: cc:08:ea:07:25:2e:ad:04:38:99:c8:f9:83:51:21: 21:56:65:29:1d:f5:bc:9d:f6:e4:00:90:68:94:dd: c0:18:c8:ac:74:3c:43:9e:20:fa:31:eb:97:5a:d3: 4f:ab:1a:2b:66:b0:a8:ef:1a:75:a5:c1:ed:bf:47: 98:fa:59:e5:69:5b:4b:31:d5:5e:b2:35:cf:6a:0f: 6d:54:59:d2:f5:40:97:1c:b3:54:31:b0:30:ea:33: 7d:a3:64:54:7b:ef:15:4b:0b:85:a3:1b:c6:f0:60: 34:12:1e:ed:10:4a:a9:cd:0e:e1:73:bb:00:0e:b3: 30:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8D:C3:58:DE:4F:C4:D6:F8:34:06:92:41:DF:98:7F:37:42:E6:55 X509v3 Authority Key Identifier: keyid:E3:9A:B1:D0:7B:50:DB:B9:AB:E2:CB:51:CD:9B:1E:3A:5A:85:45:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45qx0HtQ27mr4stRzZseOlqFRSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E03/3F48F2241DA611E29A075D9D08B02CD2/45qx0HtQ27mr4stRzZseOlqFRSE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:1f:58:60:aa:73:eb:b2:4c:9c:e2:c2:e6:ed:de:3b:57:c5: fb:3e:d8:18:52:f1:5b:9e:0b:cb:3c:21:1a:40:95:18:f0:2d: be:95:b3:f4:34:71:ca:c4:76:86:27:ea:c0:b9:62:03:ea:22: 6f:ae:b6:e8:7d:e5:b5:01:6a:20:e8:b7:0f:18:51:a2:c2:a9: 27:6a:28:1b:33:12:f1:11:8e:03:88:29:43:f7:d7:f1:40:10: 3e:ad:e1:13:75:7f:05:81:fe:f8:cb:96:bf:a6:5d:ad:f0:8a: 4b:d8:25:e7:82:23:1d:c9:61:05:ef:9a:cf:fa:c1:46:27:6d: ab:a2:64:c4:53:75:a0:0a:0f:26:84:3f:56:1c:bc:c8:ce:12: ba:13:8a:fb:9a:0c:76:17:53:7e:66:7e:b4:e7:1c:e5:53:3d: 8d:6b:6f:b9:c8:d5:7f:73:9a:90:4c:5e:09:a0:53:8e:5d:77: 1d:c8:16:2a:4d:e3:58:e7:b9:e8:b9:67:a3:9f:59:4f:c1:49: f6:3a:33:68:38:66:c9:f5:f4:82:84:48:cb:c6:65:a8:1d:25: f2:1b:e8:a1:a3:f0:67:14:79:8f:0d:e2:c4:29:59:9d:f8:00: 08:07:22:1b:d6:7e:54:5e:96:bd:c8:de:ba:49:4e:26:5b:c6: 71:bd:bf:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRFMDMxMTAvBgNVBAUTKEUzOUFCMUQwN0I1MERCQjlBQkUyQ0I1MUNEOUIxRTNB NUE4NTQ1MjEwHhcNMjYwMzI0MTUwODM2WhcNMjYwMzMxMTUwODM2WjAYMRYwFAYD VQQDEw02OWMyYThmNS1lMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh2I6oKaTev0hheqowoDGIDGEUBaEs3OoUKz8jU+FgtuX7ktyo2YzbNROBQ9J 2UYdFjMaq8T+XhqptDYwReCRt8RgiwoDXeULcGrgDfndEgugJS9FWIAsajcKoplQ 9K4nYW6LHfrZCREX2/DUSTe44WpjqYB3tMw4TAKAJ6PpeGjw3fO9nAnMCOoHJS6t BDiZyPmDUSEhVmUpHfW8nfbkAJBolN3AGMisdDxDniD6MeuXWtNPqxorZrCo7xp1 pcHtv0eY+lnlaVtLMdVesjXPag9tVFnS9UCXHLNUMbAw6jN9o2RUe+8VSwuFoxvG 8GA0Eh7tEEqpzQ7hc7sADrMwYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMSNw1je T8TW+DQGkkHfmH83QuZVMB8GA1UdIwQYMBaAFOOasdB7UNu5q+LLUc2bHjpahUUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEUwMy8zRjQ4RjIyNDFE QTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3bXI0c3RSelpzZU9scUZS U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1cXgwSHRRMjdtcjRzdFJ6WnNlT2xxRlJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEUwMy8zRjQ4RjIyNDFEQTYxMUUyOUEwNzVEOUQwOEIwMkNEMi80NXF4MEh0UTI3 bXI0c3RSelpzZU9scUZSU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJx9YYKpz67JMnOLC5u3eO1fF+z7YGFLxW54LyzwhGkCVGPAtvpWz9DRxysR2 hifqwLliA+oib6626H3ltQFqIOi3DxhRosKpJ2ooGzMS8RGOA4gpQ/fX8UAQPq3h E3V/BYH++MuWv6ZdrfCKS9gl54IjHclhBe+az/rBRidtq6JkxFN1oAoPJoQ/Vhy8 yM4SuhOK+5oMdhdTfmZ+tOcc5VM9jWtvucjVf3OakExeCaBTjl13HcgWKk3jWOe5 6Llno59ZT8FJ9jozaDhmyfX0goRIy8ZlqB0l8hvooaPwZxR5jw3ixClZnfgACAci G9Z+VF6WvcjeuklOJlvGcb2/Wg== -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:47 2026 by rpki-client