$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft File: 5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json) Hash identifier: ocwf6iJTplmJjXD7qy8V7zrwovOJHkLZjxa6R8eDgy0= Subject key identifier: 10:C2:0D:F4:9A:F1:7A:20:7F:76:8C:47:F7:AA:A9:81:E7:4A:1D:13 Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 Certificate issuer: /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Certificate serial: 0B67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft Manifest number: 0B53 Signing time: Mon 02 Mar 2026 02:57:14 +0000 Manifest this update: Mon 02 Mar 2026 02:57:12 +0000 Manifest next update: Mon 09 Mar 2026 02:57:12 +0000 Files and hashes: 1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: ddpWNloGPpLvzrW8nMccLZ+f7C2hqlU9tYzYsjl3coA=) 2: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: qJFLmW+cXJRTYpRYhxmf/kfGb1OFH5gs6tcdRPh5wTs=) 3: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2919 (0xb67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055 Validity Not Before: Mar 2 02:57:12 2026 GMT Not After : Mar 9 02:57:12 2026 GMT Subject: CN=69a4fc8a-f74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:85:e6:f3:39:d8:e8:04:16:15:e0:b2:10:65: ff:3b:f6:07:39:6e:63:d7:65:28:b3:0a:d8:db:6d: bb:bf:11:a9:17:3f:18:2c:eb:02:3f:67:95:55:6d: 78:06:62:82:21:b1:c6:22:28:bf:a1:0b:52:1c:0e: c8:75:c0:1c:b3:c1:0f:ed:c5:84:89:7f:28:bb:29: 67:62:c2:fe:24:93:94:b7:d4:73:64:90:31:14:33: 4c:c8:ea:dd:7c:25:3e:f7:95:c4:c3:d0:e4:e2:c6: 54:33:20:3d:4c:97:57:02:04:73:4b:c3:09:1d:20: 0d:39:54:fb:9e:ac:2f:3f:cf:6e:fc:df:4f:82:25: 28:ca:b2:4c:0c:64:fd:14:e6:c2:f5:e2:8d:74:d3: ef:46:17:98:65:83:c6:3b:95:44:14:23:39:93:cc: 24:4d:c7:15:5f:f2:32:fd:b4:94:f6:83:95:35:11: 12:21:86:6d:0f:3f:45:84:91:49:af:f1:29:8d:c5: 1a:2a:e6:16:e1:02:c8:a9:f3:19:3f:72:d5:13:c3: 12:ea:13:e0:e9:8a:92:f0:33:93:a1:7f:ca:26:e4: d3:f2:93:a3:93:5e:43:2a:c2:55:c3:09:cc:c8:65: de:bc:fc:3d:9f:f7:33:0e:52:66:ec:b5:46:ef:00: 8b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C2:0D:F4:9A:F1:7A:20:7F:76:8C:47:F7:AA:A9:81:E7:4A:1D:13 X509v3 Authority Key Identifier: keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:ef:a4:cf:89:f2:f2:23:4f:da:bc:66:78:34:d9:62:9e:0c: 01:4e:bf:ce:ae:c6:fc:ca:9d:c0:44:92:c8:8b:60:95:6c:22: 71:61:60:dc:01:be:b4:48:16:44:95:b4:ba:47:c6:fe:5d:ae: d8:c2:75:4a:11:fa:fa:99:ec:bc:e5:3d:39:d0:e0:66:cb:49: 45:e1:b1:f4:89:78:fd:2a:15:cd:9d:3e:27:0d:ae:b3:1e:5d: 22:23:dc:92:a5:a2:ca:40:cf:d0:c2:88:cd:8d:11:17:e2:18: 00:a5:8c:c9:c7:70:ff:bd:13:01:24:10:7e:9d:7f:44:ac:c3: e2:b5:54:2f:a7:46:2e:fa:a4:16:87:55:e2:c0:ce:e5:eb:26: 4c:2a:6f:d6:df:a8:30:b1:8e:20:30:c9:ea:f4:a3:41:f1:63: 59:d2:ed:f3:21:00:92:6c:d8:38:fa:14:fb:d2:b1:5d:e5:98: c0:aa:85:4c:57:37:ee:5c:01:57:16:57:e8:a3:52:d5:d3:c6: e3:54:13:00:aa:d9:16:a7:83:78:03:0a:e7:5f:6c:7f:b0:55: 95:c5:ee:d3:1c:08:ff:f4:05:b7:34:5c:42:e7:ca:74:12:a4: 07:b3:07:88:8a:a2:f2:9b:a5:59:26:0a:93:f7:b3:6e:cd:77: 58:ed:7c:72 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMkUxMTAvBgNVBAUTKEU0M0M4MjFGQkI5Q0VFQTY3RUJBN0EyRTUwNUNDNURE N0Y3NjYwNTUwHhcNMjYwMzAyMDI1NzEyWhcNMjYwMzA5MDI1NzEyWjAYMRYwFAYD VQQDEw02OWE0ZmM4YS1mNzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oXm8znY6AQWFeCyEGX/O/YHOW5j12UoswrY2227vxGpFz8YLOsCP2eVVW14 BmKCIbHGIii/oQtSHA7IdcAcs8EP7cWEiX8ouylnYsL+JJOUt9RzZJAxFDNMyOrd fCU+95XEw9Dk4sZUMyA9TJdXAgRzS8MJHSANOVT7nqwvP89u/N9PgiUoyrJMDGT9 FObC9eKNdNPvRheYZYPGO5VEFCM5k8wkTccVX/Iy/bSU9oOVNRESIYZtDz9FhJFJ r/EpjcUaKuYW4QLIqfMZP3LVE8MS6hPg6YqS8DOToX/KJuTT8pOjk15DKsJVwwnM yGXevPw9n/czDlJm7LVG7wCLdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDCDfSa 8Xogf3aMR/eqqYHnSh0TMB8GA1UdIwQYMBaAFOQ8gh+7nO6mfrp6LlBcxd1/dmBV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyRS8wRkUxOUM2QzUx MUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1YzdxWi11bm91VUZ6RjNYOTJZ RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVEeUNIN3VjN3FaLXVub3VVRnpGM1g5MllGVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyRS8wRkUxOUM2QzUxMUUxMUVBQjgxODI1ODBDNEY5QUUwMi81RHlDSDd1Yzdx Wi11bm91VUZ6RjNYOTJZRlUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASO+kz4ny8iNP2rxmeDTZYp4MAU6/zq7G/MqdwESSyItglWwicWFg3AG+tEgW RJW0ukfG/l2u2MJ1ShH6+pnsvOU9OdDgZstJReGx9Il4/SoVzZ0+Jw2usx5dIiPc kqWiykDP0MKIzY0RF+IYAKWMycdw/70TASQQfp1/RKzD4rVUL6dGLvqkFodV4sDO 5esmTCpv1t+oMLGOIDDJ6vSjQfFjWdLt8yEAkmzYOPoU+9KxXeWYwKqFTFc37lwB VxZX6KNS1dPG41QTAKrZFqeDeAMK519sf7BVlcXu0xwI//QFtzRcQufKdBKkB7MH iIqi8pulWSYKk/ezbs13WO18cg== -----END CERTIFICATE-----Generated at Mon Mar 2 13:51:44 2026 by rpki-client