$ rpki-client -vvf rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft File: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft (raw, json) Hash identifier: 9pksdn52y2AZt+l3fYxiE4uv4aTm4tTvYOFTK75+RA0= Subject key identifier: 9C:78:B6:41:FD:27:F3:08:8A:35:EE:0C:69:CF:D8:ED:9A:1B:64:3D Authority key identifier: A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 Certificate issuer: /CN=A912CED3/serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft Manifest number: 0154 Signing time: Mon 02 Mar 2026 00:04:30 +0000 Manifest this update: Mon 02 Mar 2026 00:04:29 +0000 Manifest next update: Mon 09 Mar 2026 00:04:29 +0000 Files and hashes: 1: p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl (hash: /T7h/db5gkDtcKyhsm0NnULBK5ZtsyrvZVD+0W8PbWc=) 2: 28E64612990811F09EE9C754C4F9AE02.roa (hash: YPgFrE57pNLAxG0JAwJKYnPZLGng+z9AjMOtB9WZ6l4=) 3: E4EF69C0990711F082A24D54C4F9AE02.roa (hash: 9p6fZz22ou4Ch+G9L9rY2Ap3CyLw5xpldzM4mZVRcjY=) 4: 9D979510990811F08B636355C4F9AE02.roa (hash: DijkseQlfMStKCY+JQ1W8PRbD3vqodT1TNyg/aZ1kmo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CED3, serialNumber=A741EB410D4B8E46FF48AB70A1DA006A3DCF41A3 Validity Not Before: Mar 2 00:04:29 2026 GMT Not After : Mar 9 00:04:29 2026 GMT Subject: CN=69a4d40e-b6ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:69:31:a4:5f:a4:1f:dc:63:63:5d:2f:ee: c9:59:95:19:f8:ab:63:f5:96:1c:12:0e:bc:1c:7a: b6:32:05:ed:9d:c2:67:99:d5:8b:c1:b4:56:81:6e: 83:86:c9:47:2d:a2:8a:6c:0a:7a:2c:a6:ac:33:73: e2:4c:08:ed:94:9e:79:8d:05:b7:1d:a6:a6:87:cd: 33:8c:17:89:80:1f:62:91:ee:6f:88:aa:2d:a0:22: 70:06:2a:40:6f:19:3e:9b:ea:13:dd:82:2a:3d:d2: 94:4f:40:50:20:e3:44:8a:1e:6e:69:9b:1f:cc:ac: 7e:ee:10:b5:d7:7f:0e:02:1b:a0:26:5c:5b:a0:27: 31:87:17:22:2e:f2:58:ed:4d:08:f4:46:4d:52:b9: 41:f2:7e:2b:e4:29:87:f4:39:8a:d2:89:80:28:d6: ac:f7:11:f2:ee:bd:00:31:d2:d1:bb:a0:98:16:07: cb:4d:5c:fa:c6:53:76:c3:8d:11:85:2a:a5:fc:72: 5f:75:e2:b5:2c:cf:8d:01:33:68:e2:77:ca:36:5a: 44:cf:98:bf:99:4f:3b:5f:79:1b:ac:16:05:2d:f5: 7d:0c:29:be:b4:d1:e4:23:8f:58:69:05:3e:90:9b: 76:6c:62:28:70:91:55:b7:26:50:33:09:4d:e4:05: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:78:B6:41:FD:27:F3:08:8A:35:EE:0C:69:CF:D8:ED:9A:1B:64:3D X509v3 Authority Key Identifier: keyid:A7:41:EB:41:0D:4B:8E:46:FF:48:AB:70:A1:DA:00:6A:3D:CF:41:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CED3/3C161FA6216C11EF80B1532BC4F9AE02/p0HrQQ1Ljkb_SKtwodoAaj3PQaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:bc:7c:41:52:ed:2f:19:8b:0e:c6:0a:ba:24:5a:1e:8d:ed: 46:ff:f1:5c:be:53:af:9f:3d:b0:17:6c:98:36:27:3b:b0:2e: 74:c0:3a:4e:6a:a2:aa:1c:17:dd:57:82:17:c8:26:94:e2:59: bf:02:83:b9:2d:f7:89:0d:7f:0c:b8:5f:23:00:c4:25:91:05: db:b7:11:e7:17:df:bb:9b:9d:a6:a6:b4:e6:9a:6c:e8:d6:8e: 32:64:c3:46:3f:75:72:0c:f1:65:80:d4:1f:f4:ea:62:15:b3: 0a:79:6a:12:21:5b:aa:df:f2:5c:2b:6a:55:33:b5:df:08:83: e8:0c:2f:64:30:81:14:e3:b4:a0:10:2f:89:bf:ff:08:c4:2a: 76:24:d5:89:1b:45:fc:76:05:ab:16:e4:02:9b:af:77:f9:db: 6b:a0:83:87:64:ab:bd:34:18:48:a2:6a:2c:54:e4:c1:79:d4: f1:9f:df:89:cc:0f:62:01:51:aa:41:71:82:73:f1:74:fd:43: 6e:d0:64:95:b2:da:ad:96:4c:d8:60:a0:33:e6:90:8e:67:87: c0:9c:00:67:0d:fa:84:9a:04:94:15:3c:b9:c5:49:cd:47:c0: 8e:34:b4:d9:ae:3d:0c:32:ba:2f:74:bb:44:86:35:19:9f:c3: 35:d0:4e:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNFRDMxMTAvBgNVBAUTKEE3NDFFQjQxMEQ0QjhFNDZGRjQ4QUI3MEExREEwMDZB M0RDRjQxQTMwHhcNMjYwMzAyMDAwNDI5WhcNMjYwMzA5MDAwNDI5WjAYMRYwFAYD VQQDEw02OWE0ZDQwZS1iNmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsfBpMaRfpB/cY2NdL+7JWZUZ+Ktj9ZYcEg68HHq2MgXtncJnmdWLwbRWgW6D hslHLaKKbAp6LKasM3PiTAjtlJ55jQW3Haamh80zjBeJgB9ike5viKotoCJwBipA bxk+m+oT3YIqPdKUT0BQIONEih5uaZsfzKx+7hC1138OAhugJlxboCcxhxciLvJY 7U0I9EZNUrlB8n4r5CmH9DmK0omAKNas9xHy7r0AMdLRu6CYFgfLTVz6xlN2w40R hSql/HJfdeK1LM+NATNo4nfKNlpEz5i/mU87X3kbrBYFLfV9DCm+tNHkI49YaQU+ kJt2bGIocJFVtyZQMwlN5AVx9QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJx4tkH9 J/MIijXuDGnP2O2aG2Q9MB8GA1UdIwQYMBaAFKdB60ENS45G/0ircKHaAGo9z0Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0VEMy8zQzE2MUZBNjIx NkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGprYl9TS3R3b2RvQWFqM1BR YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AwSHJRUTFMamtiX1NLdHdvZG9BYWozUFFhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0VEMy8zQzE2MUZBNjIxNkMxMUVGODBCMTUzMkJDNEY5QUUwMi9wMEhyUVExTGpr Yl9TS3R3b2RvQWFqM1BRYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM7x8QVLtLxmLDsYKuiRaHo3tRv/xXL5Tr589sBdsmDYnO7AudMA6TmqiqhwX 3VeCF8gmlOJZvwKDuS33iQ1/DLhfIwDEJZEF27cR5xffu5udpqa05pps6NaOMmTD Rj91cgzxZYDUH/TqYhWzCnlqEiFbqt/yXCtqVTO13wiD6AwvZDCBFOO0oBAvib// CMQqdiTViRtF/HYFqxbkApuvd/nba6CDh2SrvTQYSKJqLFTkwXnU8Z/ficwPYgFR qkFxgnPxdP1DbtBklbLarZZM2GCgM+aQjmeHwJwAZw36hJoElBU8ucVJzUfAjjS0 2a49DDK6L3S7RIY1GZ/DNdBOnA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:56 2026 by rpki-client