$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft File: wDouaJYDIEoCs4vve5CDsQJ2JpE.mft (raw, json) Hash identifier: 3lXn1aRLxbbUYs+9HKxBvNHEz46IaQAcBMgR/Dq4GEc= Subject key identifier: 94:24:B3:15:F3:A6:A6:94:B9:56:5F:2F:CE:79:95:37:84:00:A6:EF Authority key identifier: C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 Certificate issuer: /CN=A919C7B8/serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Certificate serial: 067D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft Manifest number: 0676 Signing time: Thu 26 Mar 2026 22:22:09 +0000 Manifest this update: Thu 26 Mar 2026 22:22:09 +0000 Manifest next update: Thu 02 Apr 2026 22:22:09 +0000 Files and hashes: 1: wDouaJYDIEoCs4vve5CDsQJ2JpE.crl (hash: 8lo9yyTs+Faa7zaku7uuLQUMVHNg/vQuUBrcKv0kltA=) 2: F8A90D48B7EA11EB91C5D25EC4F9AE02.roa (hash: LXgbs7yf9MHcvHQmCBnHTchcuYtaIQ40NiICo6uoaZw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1661 (0x67d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7B8, serialNumber=C03A2E689603204A02B38BEF7B9083B102762691 Validity Not Before: Mar 26 22:22:09 2026 GMT Not After : Apr 2 22:22:09 2026 GMT Subject: CN=69c5b191-3d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:f7:59:fd:ee:f4:ab:95:70:68:96:1d:ce: 9b:8b:1f:e0:95:3b:77:99:6c:bf:f7:e6:4f:9e:54: 4c:7a:41:56:f4:fb:c5:ba:a3:1f:ed:4f:79:9b:cb: 46:fd:1e:08:95:77:2c:e0:4e:09:71:d4:b1:8b:23: 27:9e:c6:32:1a:bc:94:2b:d8:54:96:04:ce:f5:d0: 42:93:5e:1f:b0:ad:02:e5:80:b1:53:40:41:1b:0c: 72:f9:76:7c:81:78:e9:9e:02:b2:5d:47:f8:86:ab: 2d:84:cb:fe:1b:35:e0:65:35:3f:86:c4:e5:2a:d1: 36:d8:ac:27:43:c0:53:14:d5:b0:bf:43:b5:5e:72: 75:8c:8b:20:08:fb:4e:d2:42:b0:df:ca:04:25:88: a3:e4:57:7d:1a:96:9d:ff:f2:d7:a1:24:ba:5c:df: 95:d2:d7:6b:32:d0:8d:63:ba:20:cc:5c:aa:87:fb: 28:a9:d9:12:d2:b1:a2:5a:b7:50:c5:16:a2:d3:1a: 82:19:0a:f3:17:19:2a:a4:8e:50:ac:5a:45:b7:0c: f0:70:75:d4:4b:e7:ac:7b:85:5e:4b:fa:c2:d6:e0: 6e:18:86:ef:b0:d5:be:f7:90:5c:9c:ac:25:67:a7: 25:bc:a1:ef:d3:f2:f7:37:40:90:6d:5b:dc:26:21: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:24:B3:15:F3:A6:A6:94:B9:56:5F:2F:CE:79:95:37:84:00:A6:EF X509v3 Authority Key Identifier: keyid:C0:3A:2E:68:96:03:20:4A:02:B3:8B:EF:7B:90:83:B1:02:76:26:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDouaJYDIEoCs4vve5CDsQJ2JpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7B8/C87DA0A4B7E811EBA54DC15BC4F9AE02/wDouaJYDIEoCs4vve5CDsQJ2JpE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:a1:0e:6c:11:81:f4:c1:43:20:18:7e:4b:c3:8f:c0:c9: 2a:c2:45:12:44:72:a0:d3:7e:0f:52:ec:f2:bd:f7:83:17:41: a6:c9:1d:fb:c7:0d:ea:5c:3b:9d:e6:c2:6e:8b:96:d0:cf:0a: 56:80:2b:c1:ac:49:12:ae:fd:c8:08:d1:b2:1e:6a:f1:72:88: f8:54:30:07:53:7d:ea:ca:3d:78:14:c2:2d:74:be:67:c0:13: 89:9e:98:57:77:59:bf:f6:62:9f:83:71:30:85:0a:ac:30:38: e3:83:e0:71:c0:fe:73:56:8b:dc:d1:08:b2:85:42:e3:0e:9d: 12:b0:78:c4:36:5b:09:43:3f:de:46:48:ff:04:c6:40:7a:d9: 8e:07:b9:1b:82:31:fd:1f:5d:c4:34:bd:3c:40:6d:43:7e:65: 94:85:e7:f0:81:3e:96:31:5c:9c:0b:79:96:63:4a:91:e3:4a: 85:ee:0b:a7:26:be:18:7f:43:c5:1a:fd:fb:5b:d7:ad:4a:53: 4f:27:d3:f6:f5:a7:e5:eb:8e:74:cf:d7:0c:90:a9:c8:85:7f: 85:49:db:46:60:50:7b:f3:09:a0:eb:ae:05:21:0b:c2:00:74: 69:1a:ac:9a:32:03:2b:4b:dc:d5:87:c1:76:84:28:c2:a2:f7: 08:40:36:00 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QjgxMTAvBgNVBAUTKEMwM0EyRTY4OTYwMzIwNEEwMkIzOEJFRjdCOTA4M0Ix MDI3NjI2OTEwHhcNMjYwMzI2MjIyMjA5WhcNMjYwNDAyMjIyMjA5WjAYMRYwFAYD VQQDEw02OWM1YjE5MS0zZDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA08L3Wf3u9KuVcGiWHc6bix/glTt3mWy/9+ZPnlRMekFW9PvFuqMf7U95m8tG /R4IlXcs4E4JcdSxiyMnnsYyGryUK9hUlgTO9dBCk14fsK0C5YCxU0BBGwxy+XZ8 gXjpngKyXUf4hqsthMv+GzXgZTU/hsTlKtE22KwnQ8BTFNWwv0O1XnJ1jIsgCPtO 0kKw38oEJYij5Fd9Gpad//LXoSS6XN+V0tdrMtCNY7ogzFyqh/soqdkS0rGiWrdQ xRai0xqCGQrzFxkqpI5QrFpFtwzwcHXUS+ese4VeS/rC1uBuGIbvsNW+95BcnKwl Z6clvKHv0/L3N0CQbVvcJiHRMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJQksxXz pqaUuVZfL855lTeEAKbvMB8GA1UdIwQYMBaAFMA6LmiWAyBKArOL73uQg7ECdiaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdCOC9DODdEQTBBNEI3 RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElFb0NzNHZ2ZTVDRHNRSjJK cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEb3VhSllESUVvQ3M0dnZlNUNEc1FKMkpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdCOC9DODdEQTBBNEI3RTgxMUVCQTU0REMxNUJDNEY5QUUwMi93RG91YUpZRElF b0NzNHZ2ZTVDRHNRSjJKcEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiSShDmwRgfTBQyAYfkvDj8DJKsJFEkRyoNN+D1Ls8r33gxdBpskd+8cN6lw7 nebCbouW0M8KVoArwaxJEq79yAjRsh5q8XKI+FQwB1N96so9eBTCLXS+Z8ATiZ6Y V3dZv/Zin4NxMIUKrDA444PgccD+c1aL3NEIsoVC4w6dErB4xDZbCUM/3kZI/wTG QHrZjge5G4Ix/R9dxDS9PEBtQ35llIXn8IE+ljFcnAt5lmNKkeNKhe4Lpya+GH9D xRr9+1vXrUpTTyfT9vWn5euOdM/XDJCpyIV/hUnbRmBQe/MJoOuuBSELwgB0aRqs mjIDK0vc1YfBdoQowqL3CEA2AA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:33:14 2026 by rpki-client