$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: yhM21ajRWVR1x1tYLs2/i0zOQaOPNpCuvM8H8URNVdA= Subject key identifier: 7A:BC:6F:E9:06:27:A4:06:6A:4E:B7:76:1E:AF:7E:CB:86:40:CD:EC Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 0352 Signing time: Fri 17 Apr 2026 00:55:46 +0000 Manifest this update: Fri 17 Apr 2026 00:55:45 +0000 Manifest next update: Fri 24 Apr 2026 00:55:45 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: Kl1dNdZ5TtE4tRRXLtR4QLqCWw7Yvj+uIksmlPCWWtQ=) 2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: JED6L4ym3tnMx+jhhYAOkrMrkWY5nNzaoPdVYKGZkNo=) 3: 9770D05EBC4211F0B94CE580C4F9AE02.roa (hash: Vz5aus1qjTDwqSJynji6dWI+giY9yDOu6ky9YPIfXGE=) 4: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: ECSeiumhF5oPC8vKGrrFnvaLvLgLXMuCjAWZKE9LDkg=) 5: A38DD8D40E1111F1B60944950A3D8C67.roa (hash: GHZ3YRsElxVhV4TSVHAsZ841sjzEbyRfLhWH3IgdRUA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Apr 17 00:55:45 2026 GMT Not After : Apr 24 00:55:45 2026 GMT Subject: CN=69e18511-24cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:3f:cf:f2:55:23:ae:43:c8:be:45:57:b3: ad:fb:ce:27:13:22:f5:7f:c9:d6:75:32:28:82:d1: da:a1:32:32:23:02:3e:5a:97:7b:56:ba:2c:2a:de: 5d:a7:96:4c:0a:b2:5e:67:c4:35:9c:d7:3d:5d:16: 22:5a:f8:1d:33:f3:2f:a7:0d:89:d0:e5:48:28:79: ee:c6:38:a7:d1:ed:41:57:1a:d7:4d:06:5a:1f:89: 00:8c:70:f5:01:41:14:bf:8b:da:62:5b:e1:c2:63: 57:cb:f4:4f:78:4d:d7:c1:d4:52:3b:87:19:ae:c2: 66:a8:67:35:dc:a3:f3:4f:ce:c4:89:ab:40:cc:db: 36:ca:0b:32:5c:e7:41:fc:2c:15:58:ae:03:3f:cd: 6c:43:03:13:5f:c9:66:3c:af:0c:38:70:5f:d0:c6: 48:9b:34:e2:38:ef:3c:20:74:39:c5:de:9f:e1:39: e9:aa:ea:21:a7:03:0c:8e:37:27:0c:37:f9:b5:4f: 74:bc:c8:95:b3:7b:8d:ce:8a:17:24:c9:a2:dc:30: 4a:9a:19:a6:9f:29:ff:e1:20:65:30:0c:39:d8:b6: 4b:fd:e5:f1:b5:63:a7:4c:45:31:10:01:e5:6e:d2: 45:9d:c5:c4:80:fa:44:c1:20:52:e9:92:ea:ca:ac: dd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BC:6F:E9:06:27:A4:06:6A:4E:B7:76:1E:AF:7E:CB:86:40:CD:EC X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4b:50:54:e7:b7:fd:e3:fb:20:ef:13:4d:a5:bf:4a:77:8d: 70:40:54:da:bd:24:dc:c6:e6:8b:c1:d5:72:c4:6e:b6:86:45: 93:76:1b:28:e7:d4:f5:c3:70:1d:a8:f8:da:e6:51:b1:6b:f9: 15:0b:cc:fc:fe:99:6f:f2:fd:87:00:5f:c6:af:db:8c:fb:f3: 28:a6:ab:55:e2:58:85:b5:f4:5c:eb:9c:e5:e2:43:a6:83:cf: 4d:fb:d3:c6:43:00:d8:fa:b1:c0:65:38:20:a4:ce:2c:36:7f: 85:1c:71:39:47:d1:3c:6c:33:0d:a7:96:0d:34:3c:ea:b1:01: 8f:03:24:20:99:39:4b:a4:37:fd:3e:88:24:ca:c3:03:53:37: c5:b9:b5:80:04:2d:18:e2:23:f1:29:be:85:e3:1c:5f:d0:68: 19:b9:46:d8:76:6d:1e:18:97:fc:44:45:35:b2:1a:c2:dc:33: 5c:80:26:b9:51:d1:d6:21:4a:41:8b:c7:aa:32:41:f2:8b:4e: 95:d1:30:c8:b4:19:22:3c:1b:20:37:9b:88:56:88:f0:5c:69: 2a:67:5a:62:4b:24:bc:c8:8f:73:39:36:f3:96:25:04:d0:99: fd:2a:29:20:e9:09:18:e6:03:d7:3e:97:ea:69:0c:2d:c4:a6: 3c:48:b9:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjYwNDE3MDA1NTQ1WhcNMjYwNDI0MDA1NTQ1WjAYMRYwFAYD VQQDEw02OWUxODUxMS0yNGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzX4/z/JVI65DyL5FV7Ot+84nEyL1f8nWdTIogtHaoTIyIwI+Wpd7VrosKt5d p5ZMCrJeZ8Q1nNc9XRYiWvgdM/Mvpw2J0OVIKHnuxjin0e1BVxrXTQZaH4kAjHD1 AUEUv4vaYlvhwmNXy/RPeE3XwdRSO4cZrsJmqGc13KPzT87EiatAzNs2ygsyXOdB /CwVWK4DP81sQwMTX8lmPK8MOHBf0MZImzTiOO88IHQ5xd6f4TnpquohpwMMjjcn DDf5tU90vMiVs3uNzooXJMmi3DBKmhmmnyn/4SBlMAw52LZL/eXxtWOnTEUxEAHl btJFncXEgPpEwSBS6ZLqyqzdrQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHq8b+kG J6QGak63dh6vfsuGQM3sMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE0tQVOe3/eP7IO8TTaW/SneNcEBU2r0k3Mbmi8HVcsRutoZFk3YbKOfU9cNw Haj42uZRsWv5FQvM/P6Zb/L9hwBfxq/bjPvzKKarVeJYhbX0XOuc5eJDpoPPTfvT xkMA2PqxwGU4IKTOLDZ/hRxxOUfRPGwzDaeWDTQ86rEBjwMkIJk5S6Q3/T6IJMrD A1M3xbm1gAQtGOIj8Sm+heMcX9BoGblG2HZtHhiX/ERFNbIawtwzXIAmuVHR1iFK QYvHqjJB8otOldEwyLQZIjwbIDebiFaI8FxpKmdaYkskvMiPczk285YlBNCZ/Sop IOkJGOYD1z6X6mkMLcSmPEi53g== -----END CERTIFICATE-----Generated at Fri Apr 17 09:42:29 2026 by rpki-client