$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft File: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft (raw, json) Hash identifier: A/Yov5y3TLGKHZ93mA/V2Do/1rfhJvNzDTzoDGeS4d4= Subject key identifier: 0D:D7:4D:A9:5A:84:0B:AC:CB:2B:24:75:AD:7B:2A:72:18:3F:43:C6 Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Certificate serial: 35B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft Manifest number: 356F Signing time: Sun 01 Mar 2026 23:43:11 +0000 Manifest this update: Sun 01 Mar 2026 23:43:08 +0000 Manifest next update: Sun 08 Mar 2026 23:43:08 +0000 Files and hashes: 1: vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl (hash: 61JG14O4idTshYFDeR3EJvJ4EjThTzhpsRirpta/mrE=) 2: 9E3540C2C41311F0ADD84872C4F9AE02.roa (hash: vQepzkk73AzAWKaVyYAoNTks+drGAlLOyvGfb2bqOfY=) 3: 583C86380BB211ED8F05E427C4F9AE02.roa (hash: cG1NSTCHLn5vicb1ufAMlhQdqrLCijyh6U7DgWV8zhY=) 4: 783697D2107A11F1854A0E192E3D8C67.roa (hash: u2qCKyigjPH4j5wmCAUM23ECz8eFGM2p/X5a8KmrEbA=) 5: 66EFC4305B7211EF8C1A8E4EC4F9AE02.roa (hash: QiW5WLzMPyrMhxHIDq8/IKEW48FLfKVmyD0cpARH3Ac=) 6: 666EE7025B7211EF8C1A8E4EC4F9AE02.roa (hash: n+nnGda2pfs3ZhBFnhSRNHg0Wnh4vJZWvSvb4sr/Vl8=) 7: 6D188172BF5C11F098B79354C4F9AE02.roa (hash: ylTDDWhoDCYbcojJAKclLssIhT1ZiJ6CbE3tkJEsYzs=) 8: AC0031765B6E11EF997EC429C4F9AE02.roa (hash: qOOSzovo+PYCi2hcGVMepWRZjfhHlcX70ZUUrgBUwaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13750 (0x35b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F Validity Not Before: Mar 1 23:43:08 2026 GMT Not After : Mar 8 23:43:08 2026 GMT Subject: CN=69a4cf0d-7666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:53:79:f6:8e:80:a1:bc:43:8d:de:75:77:13: 95:71:95:66:28:f3:3b:a8:c0:78:a9:89:78:cc:07: d5:6c:d6:c9:1a:c6:db:c8:c3:73:98:94:2b:88:f6: 0e:0e:10:47:85:73:cc:f7:bd:98:e4:35:5e:9f:24: eb:c2:c1:58:d4:ac:82:e5:f6:a7:b5:2a:2a:cd:ad: 09:8d:3d:8f:40:9b:87:df:8b:12:50:32:a7:d2:62: d7:b2:6c:f3:06:8c:ba:00:b8:e9:5b:09:cf:15:b5: 53:b0:e2:ba:7e:5a:86:ee:7f:fd:dd:a3:f2:53:01: 91:2e:bf:e5:fe:21:eb:3e:6e:4f:78:fd:c1:0d:8a: c2:0d:e9:e1:a7:ca:31:29:3f:d0:da:da:9b:ba:a7: 23:d3:cf:11:f2:f1:b8:e6:4c:2e:af:95:9c:cd:a1: ee:ce:d3:1e:76:e9:0f:4e:8b:09:98:38:5c:64:da: 9b:93:2e:b7:dc:07:25:8d:1c:ab:fb:52:95:76:5d: f3:76:2e:6c:12:78:14:7d:7a:ef:a3:d1:aa:98:c1: c7:61:8e:80:f4:61:55:09:84:b5:fb:06:7e:b2:99: ba:c5:85:9e:bf:74:eb:9c:5f:64:eb:29:90:31:ad: ef:a8:b3:56:83:b4:6a:9b:24:e3:0f:1c:bc:76:89: bc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D7:4D:A9:5A:84:0B:AC:CB:2B:24:75:AD:7B:2A:72:18:3F:43:C6 X509v3 Authority Key Identifier: keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:ed:4a:8b:e5:2e:97:8f:01:46:2a:c1:76:20:13:70:b2:b0: bd:02:d8:f0:fa:1a:a6:e9:50:d8:c3:ba:24:a1:78:0d:a0:69: 36:ec:5d:01:66:8f:2d:e4:dd:32:fc:80:a0:e4:01:06:8c:fb: ca:13:31:2a:82:3c:8a:9a:ab:ef:7f:b3:76:ea:2a:4c:b2:15: ed:02:cb:0d:f6:14:a0:7f:f8:63:e1:77:35:40:14:d8:33:b9: 94:1d:5c:c0:40:e7:73:53:b4:8b:df:65:ae:dd:03:a6:31:c9: 2d:09:7c:04:80:9d:de:0d:41:02:6c:4b:a8:7f:d8:70:3c:c0: 63:3b:c4:94:29:5c:1f:11:a7:18:61:e2:85:ed:44:c9:b4:ec: ae:5b:07:44:07:eb:e9:12:64:1c:f9:c0:eb:95:ff:96:25:c0: be:df:63:dc:d9:f3:65:86:17:e7:4d:cd:66:f4:50:e4:37:d6: 21:25:81:3c:d5:d2:18:7e:eb:d1:69:8b:01:c3:ed:19:15:8a: 45:48:3d:e3:64:16:98:95:8f:d5:9a:72:50:34:05:89:96:10: c2:c2:88:55:50:4e:9a:1f:c1:8d:eb:51:2e:1f:f9:c9:9f:e1: 92:0a:85:18:f3:39:ef:1d:9a:38:fc:f7:0a:5b:b1:fc:ed:17: 97:93:df:e8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlGM0UxMTAvBgNVBAUTKEJGMEU2RjRFRTBFMTdEREU4QzRBMjRCRjg5N0QxOUI4 N0FBNTc1OUYwHhcNMjYwMzAxMjM0MzA4WhcNMjYwMzA4MjM0MzA4WjAYMRYwFAYD VQQDEw02OWE0Y2YwZC03NjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9FN59o6AobxDjd51dxOVcZVmKPM7qMB4qYl4zAfVbNbJGsbbyMNzmJQriPYO DhBHhXPM972Y5DVenyTrwsFY1KyC5fantSoqza0JjT2PQJuH34sSUDKn0mLXsmzz Boy6ALjpWwnPFbVTsOK6flqG7n/93aPyUwGRLr/l/iHrPm5PeP3BDYrCDenhp8ox KT/Q2tqbuqcj088R8vG45kwur5WczaHuztMedukPTosJmDhcZNqbky633AcljRyr +1KVdl3zdi5sEngUfXrvo9GqmMHHYY6A9GFVCYS1+wZ+spm6xYWev3TrnF9k6ymQ Ma3vqLNWg7RqmyTjDxy8dom84QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA3XTala hAusyyskda17KnIYP0PGMB8GA1UdIwQYMBaAFL8Ob07g4X3ejEokv4l9Gbh6pXWf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS85QTg1QkI1MDFE ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZkNk1TaVNfaVgwWnVIcWxk WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3Z3NXZUdURoZmQ2TVNpU19pWDBadUhxbGRaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUYzRS85QTg1QkI1MDFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi92dzV2VHVEaGZk Nk1TaVNfaVgwWnVIcWxkWjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2u1Ki+Uul48BRirBdiATcLKwvQLY8PoapulQ2MO6JKF4DaBpNuxdAWaPLeTd MvyAoOQBBoz7yhMxKoI8ipqr73+zduoqTLIV7QLLDfYUoH/4Y+F3NUAU2DO5lB1c wEDnc1O0i99lrt0DpjHJLQl8BICd3g1BAmxLqH/YcDzAYzvElClcHxGnGGHihe1E ybTsrlsHRAfr6RJkHPnA65X/liXAvt9j3NnzZYYX503NZvRQ5DfWISWBPNXSGH7r 0WmLAcPtGRWKRUg942QWmJWP1ZpyUDQFiZYQwsKIVVBOmh/BjetRLh/5yZ/hkgqF GPM57x2aOPz3Clux/O0Xl5Pf6A== -----END CERTIFICATE-----Generated at Mon Mar 2 03:57:35 2026 by rpki-client