$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: hbbH/r0FYeOXgzjRnalXaPKdJkmIUjO9rLEjHt6SQmk= Subject key identifier: 3E:69:E3:64:9C:C6:CE:40:BE:A6:B9:83:DF:2E:3B:50:5D:AC:AD:40 Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 05D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 05BC Signing time: Tue 24 Mar 2026 22:52:07 +0000 Manifest this update: Tue 24 Mar 2026 22:52:07 +0000 Manifest next update: Tue 31 Mar 2026 22:52:07 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: nAKmR420oyWfTyzwI2AvZrysVpNIXAiBFHH5avYs68w=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=) 3: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=) 4: 27023558912A11F09F7D4044C4F9AE02.roa (hash: OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1494 (0x5d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Mar 24 22:52:07 2026 GMT Not After : Mar 31 22:52:07 2026 GMT Subject: CN=69c31597-0d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:b7:c9:52:5b:90:8a:a3:f8:22:83:9a:c7: f6:0e:54:85:a8:2c:eb:19:1c:a6:88:87:25:8c:06: b8:eb:74:5c:9e:68:0d:4f:4c:9e:fb:60:be:7c:52: cd:8c:87:71:3b:10:8a:d4:c0:75:cb:c4:a1:dc:8e: 96:cd:1d:e8:66:e1:c5:10:08:25:19:ae:e4:b5:31: 40:dc:e3:52:c6:78:3d:63:a7:28:9f:e9:f5:87:01: f6:45:4f:9e:32:20:33:32:51:1a:f3:22:46:ac:a2: 2e:90:58:c0:fb:b6:26:31:1a:67:32:e3:26:bd:3c: 57:81:78:d8:ee:af:af:f1:5a:ea:b0:ec:67:1e:b5: db:a1:16:62:e5:3f:b1:71:fd:c9:49:ee:f6:0d:be: 3a:37:05:6f:72:85:3f:a2:5e:0f:06:d3:70:6f:52: 7d:78:2d:8f:f4:4b:2d:28:7d:3f:67:86:90:f7:0f: 17:83:89:68:d5:69:30:ef:6e:47:8a:b7:55:9a:72: c1:86:31:4a:a2:8d:88:31:98:d9:f8:6d:d7:c1:43: 1b:f2:6b:51:a5:76:1e:5f:8f:88:9a:b5:32:26:4f: a7:8f:9b:f1:77:01:ed:78:ec:78:0e:9b:ae:9f:b8: d2:48:ec:09:12:9a:6c:e6:e8:cc:28:8e:c4:8e:10: c9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:69:E3:64:9C:C6:CE:40:BE:A6:B9:83:DF:2E:3B:50:5D:AC:AD:40 X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:55:3c:b8:83:3c:b1:16:55:29:5b:45:3c:e2:e4:1f:24:0d: 38:ff:a5:56:07:4e:25:74:be:84:4f:89:83:87:c3:ec:b2:db: bb:08:b7:6e:f1:96:9f:7a:6e:48:65:e9:c4:ed:02:8c:bf:1c: ef:43:d3:3d:35:43:57:8c:1c:b2:9c:27:35:64:bd:a0:f6:48: e4:19:eb:ca:b0:c2:de:43:87:c5:3e:f4:56:d7:54:0b:2d:20: 6d:4e:73:e7:ee:30:e0:9b:b0:6e:d6:b3:24:08:70:81:89:ec: 4d:44:36:10:d6:47:96:cb:67:25:49:5b:1a:7b:fb:2f:d4:ee: bf:5b:76:1f:7a:da:41:1a:01:f1:43:be:09:6d:01:f5:11:bd: 2f:be:45:93:0b:88:cc:6b:8b:08:73:78:a3:01:88:a6:22:bb: 23:4b:14:ea:a6:df:a6:1f:51:ab:41:4b:89:3f:e3:fb:8d:27: 25:1e:51:65:0a:44:19:c2:74:f0:bd:53:64:18:fb:34:01:a1: 76:3e:01:6f:97:86:77:ec:76:d8:82:fb:71:58:a9:cb:06:1c: 25:c9:a2:fa:46:a4:89:80:0e:9d:d9:2e:a9:a6:83:da:6a:7c: 20:25:f4:fa:74:81:44:f2:b2:47:45:42:08:2b:ab:de:07:1e: fe:61:01:49 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwMzI0MjI1MjA3WhcNMjYwMzMxMjI1MjA3WjAYMRYwFAYD VQQDEw02OWMzMTU5Ny0wZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5K3yVJbkIqj+CKDmsf2DlSFqCzrGRymiIcljAa463RcnmgNT0ye+2C+fFLN jIdxOxCK1MB1y8Sh3I6WzR3oZuHFEAglGa7ktTFA3ONSxng9Y6con+n1hwH2RU+e MiAzMlEa8yJGrKIukFjA+7YmMRpnMuMmvTxXgXjY7q+v8VrqsOxnHrXboRZi5T+x cf3JSe72Db46NwVvcoU/ol4PBtNwb1J9eC2P9EstKH0/Z4aQ9w8Xg4lo1Wkw725H irdVmnLBhjFKoo2IMZjZ+G3XwUMb8mtRpXYeX4+ImrUyJk+nj5vxdwHteOx4Dpuu n7jSSOwJEpps5ujMKI7EjhDJiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD5p42Sc xs5Avqa5g98uO1BdrK1AMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVlU8uIM8sRZVKVtFPOLkHyQNOP+lVgdOJXS+hE+Jg4fD7LLbuwi3bvGWn3pu SGXpxO0CjL8c70PTPTVDV4wcspwnNWS9oPZI5BnryrDC3kOHxT70VtdUCy0gbU5z 5+4w4JuwbtazJAhwgYnsTUQ2ENZHlstnJUlbGnv7L9Tuv1t2H3raQRoB8UO+CW0B 9RG9L75FkwuIzGuLCHN4owGIpiK7I0sU6qbfph9Rq0FLiT/j+40nJR5RZQpEGcJ0 8L1TZBj7NAGhdj4Bb5eGd+x22IL7cVipywYcJcmi+kakiYAOndkuqaaD2mp8ICX0 +nSBRPKyR0VCCCur3gce/mEBSQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:07:47 2026 by rpki-client