$ rpki-client -vvf rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft File: MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft (raw, json) Hash identifier: FTzLvCNNsRt3rPe25PikXhO6QUCe+vLt0BTu4DtxqNc= Subject key identifier: 21:58:B9:24:92:22:37:0E:C6:3E:FD:F5:44:03:BE:CE:C2:C1:F6:B3 Authority key identifier: 32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 Certificate issuer: /CN=A919E2D2/serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft Manifest number: 0455 Signing time: Thu 26 Mar 2026 23:58:03 +0000 Manifest this update: Thu 26 Mar 2026 23:58:03 +0000 Manifest next update: Thu 02 Apr 2026 23:58:03 +0000 Files and hashes: 1: MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl (hash: WNY5hMbcTA5ig7V0XJvVHWm7J7qu8TOylcm5Q3fXOhM=) 2: 985276043B6D11F0AFFFDD4DC4F9AE02.roa (hash: zvmo/rI7OvzOr9dv2MHAmv5RaiCJuYG/rsH+0wQ/XT4=) 3: 52047C189EA111EC8EA0096AC4F9AE02.roa (hash: E0wVTMKhxGCvdTeVsZpKIkFdgdK3WN4FouRopg49IBY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919E2D2, serialNumber=32554EA293DB09D9600F938F05C0203FB9ABE993 Validity Not Before: Mar 26 23:58:03 2026 GMT Not After : Apr 2 23:58:03 2026 GMT Subject: CN=69c5c80b-9840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:db:11:d5:dc:b0:73:e9:0a:20:c4:2c:9c: 1e:cd:52:62:ad:a6:ff:26:aa:cf:7a:b5:5a:df:7c: 9b:cd:c1:4c:b4:b4:75:7c:8e:7e:b1:c8:5f:9c:f1: a5:5e:eb:fb:ab:03:57:c1:7e:e8:84:c9:74:2c:cb: 9b:4b:91:32:9b:0e:fe:3d:e6:7e:a4:f5:f3:b6:76: 30:e8:30:3f:b6:d7:eb:ff:76:f1:24:3d:de:20:c9: 62:47:90:ed:bf:b9:0c:da:16:2d:ad:86:42:a7:34: 13:0a:12:5c:55:c6:44:ca:08:25:b4:a5:ed:17:54: 0d:30:0a:86:f5:a2:99:6c:af:e4:94:49:4e:3c:55: 0c:5a:9e:06:3f:a2:e7:2e:13:cf:81:2e:d0:92:4a: a7:f8:72:e1:7e:e8:47:87:bc:83:3c:11:84:e6:55: 43:0a:66:30:f7:89:8e:26:7d:7c:fa:ef:fe:d6:1e: 07:10:e6:4c:e9:6b:7d:ae:f6:d5:b9:7d:11:48:42: 4b:d5:36:81:4a:17:70:fb:be:1e:ec:1c:6f:09:08: 5a:5f:ec:20:22:2f:a5:c9:d2:20:25:ad:40:23:a8: ea:c2:3c:41:19:b3:9b:fc:94:86:32:06:87:e3:98: f0:3a:2b:17:4f:e4:71:ce:39:a0:ab:46:6f:11:9d: 2c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:58:B9:24:92:22:37:0E:C6:3E:FD:F5:44:03:BE:CE:C2:C1:F6:B3 X509v3 Authority Key Identifier: keyid:32:55:4E:A2:93:DB:09:D9:60:0F:93:8F:05:C0:20:3F:B9:AB:E9:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MlVOopPbCdlgD5OPBcAgP7mr6ZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E2D2/BC03552C8F9B11EC82603D16C4F9AE02/MlVOopPbCdlgD5OPBcAgP7mr6ZM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:12:29:23:4b:7c:5b:61:22:86:d4:29:c3:e6:6b:ef:4f: 60:a1:34:92:38:eb:98:24:f0:e0:33:04:9a:85:72:3d:92:b5: fb:1f:2d:d7:74:7f:c4:8b:11:aa:c8:6a:bf:0c:40:81:d6:f8: be:24:d4:a0:f5:bd:1b:53:37:0f:37:5f:cc:7b:5e:f7:1b:3b: 23:e4:80:92:8b:8d:79:83:1a:df:3d:c4:6c:a0:64:6d:1b:63: 3a:f9:9e:4c:2d:d0:5a:19:40:b0:ea:b2:5e:bd:7e:71:85:c9: d8:7a:48:c2:19:30:b5:aa:a3:f3:31:ae:f7:37:73:1f:a3:64: 23:6d:02:10:38:40:60:ce:ab:1b:21:7b:b2:a2:de:86:05:61: a9:05:d6:9a:5a:0c:f5:7f:f7:50:9d:86:ed:d4:99:5c:98:cc: 18:97:94:ac:ba:5e:8c:47:07:50:5f:2f:7c:12:0d:08:18:4b: 71:7a:70:f5:47:d5:b3:8a:39:29:22:cb:b2:05:33:16:0c:8c: 1b:b9:ce:fa:39:49:70:fe:2b:4c:81:af:46:f5:b7:9f:d0:33: 84:68:c9:56:13:da:33:a3:09:16:a0:71:bf:f1:42:17:53:56: 26:23:d0:98:eb:d8:da:24:87:39:f1:76:c3:47:af:9c:b7:da: f7:72:31:ee -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUUyRDIxMTAvBgNVBAUTKDMyNTU0RUEyOTNEQjA5RDk2MDBGOTM4RjA1QzAyMDNG QjlBQkU5OTMwHhcNMjYwMzI2MjM1ODAzWhcNMjYwNDAyMjM1ODAzWjAYMRYwFAYD VQQDEw02OWM1YzgwYi05ODQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCXbEdXcsHPpCiDELJwezVJirab/JqrPerVa33ybzcFMtLR1fI5+schfnPGl Xuv7qwNXwX7ohMl0LMubS5Eymw7+PeZ+pPXztnYw6DA/ttfr/3bxJD3eIMliR5Dt v7kM2hYtrYZCpzQTChJcVcZEyggltKXtF1QNMAqG9aKZbK/klElOPFUMWp4GP6Ln LhPPgS7Qkkqn+HLhfuhHh7yDPBGE5lVDCmYw94mOJn18+u/+1h4HEOZM6Wt9rvbV uX0RSEJL1TaBShdw+74e7BxvCQhaX+wgIi+lydIgJa1AI6jqwjxBGbOb/JSGMgaH 45jwOisXT+Rxzjmgq0ZvEZ0siwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCFYuSSS IjcOxj799UQDvs7CwfazMB8GA1UdIwQYMBaAFDJVTqKT2wnZYA+TjwXAID+5q+mT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTJEMi9CQzAzNTUyQzhG OUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNkbGdENU9QQmNBZ1A3bXI2 Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sVk9vcFBiQ2RsZ0Q1T1BCY0FnUDdtcjZaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RTJEMi9CQzAzNTUyQzhGOUIxMUVDODI2MDNEMTZDNEY5QUUwMi9NbFZPb3BQYkNk bGdENU9QQmNBZ1A3bXI2Wk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcroSKSNLfFthIobUKcPma+9PYKE0kjjrmCTw4DMEmoVyPZK1+x8t13R/xIsR qshqvwxAgdb4viTUoPW9G1M3DzdfzHte9xs7I+SAkouNeYMa3z3EbKBkbRtjOvme TC3QWhlAsOqyXr1+cYXJ2HpIwhkwtaqj8zGu9zdzH6NkI20CEDhAYM6rGyF7sqLe hgVhqQXWmloM9X/3UJ2G7dSZXJjMGJeUrLpejEcHUF8vfBINCBhLcXpw9UfVs4o5 KSLLsgUzFgyMG7nO+jlJcP4rTIGvRvW3n9AzhGjJVhPaM6MJFqBxv/FCF1NWJiPQ mOvY2iSHOfF2w0evnLfa93Ix7g== -----END CERTIFICATE-----Generated at Sat Mar 28 10:35:25 2026 by rpki-client