$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft File: vIYHvM59W9TtuRjN4bc0W4HmrR0.mft (raw, json) Hash identifier: otSYrUqjSn46OCdFY7xdVjT+mK54IDWOMWZzXHYh08E= Subject key identifier: 24:F4:E0:89:DD:EB:D0:B7:3E:5A:B1:B4:7E:95:4F:3F:D6:EB:E9:39 Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D Certificate issuer: /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft Manifest number: 0CF4 Signing time: Sun 01 Mar 2026 23:35:09 +0000 Manifest this update: Sun 01 Mar 2026 23:35:07 +0000 Manifest next update: Sun 08 Mar 2026 23:35:07 +0000 Files and hashes: 1: vIYHvM59W9TtuRjN4bc0W4HmrR0.crl (hash: 2sGtWSLtkT7STD7REAjxM20feiP8xhFp8gNIcM5RMp0=) 2: 8325B5147FE911F09A568E85C4F9AE02.roa (hash: SEF/lx3q5Pq/2u0T3UwtlNSUgGkL6u5d5TOpErwQ7Qs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D Validity Not Before: Mar 1 23:35:07 2026 GMT Not After : Mar 8 23:35:07 2026 GMT Subject: CN=69a4cd2c-a48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f7:cc:d3:b9:75:f1:25:1d:77:bf:ae:d5:76: 60:e2:95:6b:f4:76:90:9b:18:af:55:3f:5f:89:ca: e0:3a:41:23:37:a4:1a:6e:48:a8:a2:4e:24:b4:94: e4:0a:31:68:8b:18:ce:79:1c:67:cd:87:df:b4:44: b8:39:02:87:24:8e:77:86:50:f9:48:2b:e5:d9:47: cb:c7:5a:5b:db:ff:f8:b6:2e:5b:8a:7d:c2:87:06: 26:ab:59:bb:69:a9:c6:f0:f6:c1:9c:ea:ff:d8:af: 10:11:e0:2e:8a:8b:d6:58:01:5f:08:37:e8:f1:fd: 4c:1c:00:b4:d5:9c:fd:79:25:ad:7b:1a:6a:71:ee: 08:e4:f0:c9:ba:d6:f1:62:bc:b7:e2:fb:3c:ff:ee: 7a:4b:0c:c4:73:9e:07:4b:ac:73:bc:24:b0:b4:4e: 41:87:ee:f0:0a:35:2b:11:f2:68:55:c6:41:68:e9: a7:f9:52:a6:90:fe:49:4a:3b:b2:08:c6:01:89:27: 1b:bb:ec:cd:99:9f:d7:2a:c8:f7:d5:6a:54:fc:18: b2:a3:57:28:7c:0f:b6:9e:6c:83:d6:5f:21:b9:0b: d5:d7:19:7f:ee:ce:84:ae:b8:ea:f5:f9:6c:48:32: 4e:35:d2:52:69:75:2a:bb:10:37:d7:f0:d5:15:13: c7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F4:E0:89:DD:EB:D0:B7:3E:5A:B1:B4:7E:95:4F:3F:D6:EB:E9:39 X509v3 Authority Key Identifier: keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:5b:b0:15:e3:19:33:ca:de:e9:77:8d:a4:ad:8b:b2:7d:91: 80:4a:25:e2:0b:75:2f:24:b8:ad:db:bc:ff:51:88:e4:8e:ac: cd:07:84:ef:4b:94:33:7b:91:eb:35:91:06:73:68:bb:3b:14: 09:fd:2c:7c:d6:b3:f0:9f:bf:3f:02:26:9a:4b:4b:2c:1f:30: b9:53:0c:84:02:cd:96:64:e1:0d:76:a7:d9:8a:87:22:69:9f: 7d:54:78:9d:56:b9:06:81:14:71:e1:89:1b:0c:af:f6:d0:2b: 67:e9:8f:b0:79:f0:ab:d8:c0:e6:ad:32:22:6e:37:19:30:d9: db:35:8f:7f:6b:97:78:95:fa:e4:62:fa:f2:8e:7b:01:d6:7d: 2e:8f:a7:6b:03:ee:49:5b:b2:05:a7:6c:76:a2:7d:2b:6f:36: be:99:26:14:76:cf:3a:54:65:a4:63:9b:60:ad:84:39:2c:92: 09:ad:b5:54:03:b2:00:90:f2:5a:b3:12:e0:7a:36:c3:31:8d: 90:02:61:3a:7e:40:29:84:53:5d:bd:e4:8a:6f:9a:43:ae:df: ae:10:3a:df:29:d0:05:0a:ae:8e:a7:58:6d:2e:3b:c8:d2:32: 41:78:62:f6:33:cd:9b:6d:ba:99:0a:9f:50:83:b1:a2:3b:be: 5d:6c:15:cd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC ODFFNkFEMUQwHhcNMjYwMzAxMjMzNTA3WhcNMjYwMzA4MjMzNTA3WjAYMRYwFAYD VQQDEw02OWE0Y2QyYy1hNDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovfM07l18SUdd7+u1XZg4pVr9HaQmxivVT9ficrgOkEjN6Qabkiook4ktJTk CjFoixjOeRxnzYfftES4OQKHJI53hlD5SCvl2UfLx1pb2//4ti5bin3ChwYmq1m7 aanG8PbBnOr/2K8QEeAuiovWWAFfCDfo8f1MHAC01Zz9eSWtexpqce4I5PDJutbx Yry34vs8/+56SwzEc54HS6xzvCSwtE5Bh+7wCjUrEfJoVcZBaOmn+VKmkP5JSjuy CMYBiScbu+zNmZ/XKsj31WpU/Biyo1cofA+2nmyD1l8huQvV1xl/7s6Errjq9fls SDJONdJSaXUquxA31/DVFRPHBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCT04Ind 69C3PlqxtH6VTz/W6+k5MB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjQ4OS8wQjM4NzlDQUZGOUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5 VHR1UmpONGJjMFc0SG1yUjAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAm1uwFeMZM8re6XeNpK2Lsn2RgEol4gt1LyS4rdu8/1GI5I6szQeE70uUM3uR 6zWRBnNouzsUCf0sfNaz8J+/PwImmktLLB8wuVMMhALNlmThDXan2YqHImmffVR4 nVa5BoEUceGJGwyv9tArZ+mPsHnwq9jA5q0yIm43GTDZ2zWPf2uXeJX65GL68o57 AdZ9Lo+nawPuSVuyBadsdqJ9K282vpkmFHbPOlRlpGObYK2EOSySCa21VAOyAJDy WrMS4Ho2wzGNkAJhOn5AKYRTXb3kim+aQ67frhA63ynQBQqujqdYbS47yNIyQXhi 9jPNm226mQqfUIOxoju+XWwVzQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:21 2026 by rpki-client