$ rpki-client -vvf rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft File: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft (raw, json) Hash identifier: imZX7g2G9xJ73RPfxOEN2DITzhhkeaiRmyAJ9u76o0s= Subject key identifier: 82:E5:04:88:65:45:57:D9:55:60:11:9A:46:F7:B1:FA:BA:8F:43:C3 Authority key identifier: 0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 Certificate issuer: /CN=A914E9C1/serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft Manifest number: 0482 Signing time: Sun 01 Mar 2026 00:47:22 +0000 Manifest this update: Sun 01 Mar 2026 00:47:21 +0000 Manifest next update: Sun 08 Mar 2026 00:47:21 +0000 Files and hashes: 1: Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl (hash: Wj9EX1IL3cHOy8Gpa9dmk4Ds1BS89VKOnbhPh+76zS4=) 2: 8AEE4940EAB511ECBBDE3C50C4F9AE02.roa (hash: 0U8T0RS4mF6dClIl1xSb8fK6zofTOSe8/dMSQaDIi34=) 3: 4B167396E74111EC80E35542C4F9AE02.roa (hash: m7bVPzA+H6T0BPfqPAwWK53E3FJsQccTswfglW7TmvM=) 4: EFAA6C1CD16911F08A99D95BC4F9AE02.roa (hash: cgcaSIqIOhLCa5iTVKO9pJcq6xRCHOFoE69sC8NIq7c=) 5: EF33F6CCD16911F08AEFD95BC4F9AE02.roa (hash: AgsRF6p4UteSopIb7cnx5B7Juyq+ola/RIaCBtlF3KQ=) 6: 91A286509F0811ECAE659F82C4F9AE02.roa (hash: qmwN8rcAR3vpucG22PWqt5m5wyg2eb8IRpdszpsFVNQ=) 7: 8A4C662AEAB511ECBBDE3C50C4F9AE02.roa (hash: SaWX6hkIcJ4pgsrGygV8fgQyGHt1YhbbUvZTPYJ4JwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 00:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E9C1, serialNumber=0A1DE18DFC98E4ACB3FA233368105A73D1D419F3 Validity Not Before: Mar 1 00:47:21 2026 GMT Not After : Mar 8 00:47:21 2026 GMT Subject: CN=69a38c9a-5bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:eb:0e:60:09:93:45:c4:fd:6f:3e:65:cd: 5e:2c:2e:c2:74:8e:ab:26:f6:86:9f:13:af:4d:c4: 8f:f3:46:22:57:1d:1c:55:23:04:a5:bf:70:28:92: 33:45:45:9e:99:26:e8:78:ea:56:3a:72:6c:8e:9e: 95:42:a2:38:52:ee:e1:73:bc:36:29:2e:9e:a4:99: 7c:3b:9d:9a:89:a4:07:1c:e1:05:cb:37:5b:5e:94: dd:2c:a0:b2:7b:ff:09:64:37:e2:38:6c:97:7d:57: 92:3b:f9:44:9c:65:b9:af:58:ab:9e:c0:c6:46:fe: 28:ce:2b:36:5c:b5:de:35:51:05:6f:5a:25:a8:9f: 2d:e1:9f:2f:44:b4:21:74:b0:6e:af:43:00:53:0d: 00:1f:68:ac:be:b2:76:4f:92:7b:d8:16:2a:6b:b7: 1e:77:16:69:cd:7d:a8:22:c3:cb:44:9f:57:22:b9: d2:d7:b6:f1:32:4e:1c:03:2f:b2:ca:79:2f:cb:17: 45:4c:99:07:6c:3c:0e:60:4d:dd:4f:27:0d:2f:5a: e6:e2:84:cd:57:dc:b9:2f:6e:a4:cb:54:16:d5:3b: d0:5c:d6:65:a1:58:c6:75:f1:c0:a5:8f:bd:b1:7e: 84:ef:ef:e3:71:9a:57:fc:f5:57:0a:d9:cc:16:b5: f3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E5:04:88:65:45:57:D9:55:60:11:9A:46:F7:B1:FA:BA:8F:43:C3 X509v3 Authority Key Identifier: keyid:0A:1D:E1:8D:FC:98:E4:AC:B3:FA:23:33:68:10:5A:73:D1:D4:19:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E9C1/EE702F447AC911EC9DA55B46C4F9AE02/Ch3hjfyY5Kyz-iMzaBBac9HUGfM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:b0:68:ba:5f:06:ce:23:72:d2:c1:9a:97:45:d3:c3:ad: a7:54:e1:a5:a0:a6:0e:45:fc:70:45:87:47:c9:08:fe:3e:df: b1:1f:aa:4a:a1:e9:c1:7c:d2:18:7b:17:3b:6f:c9:df:e6:1d: 3d:46:ac:06:da:c7:bc:e3:5d:75:e8:b7:ad:89:7f:c9:50:63: 73:a6:a3:bb:d3:bb:5d:8e:c3:29:1c:bb:38:8b:b2:37:5a:a3: 44:e2:94:91:97:b3:a9:16:b2:bf:a4:7e:1a:ed:13:a4:1f:6b: c7:8e:b9:9c:c3:99:5f:1c:6b:f9:b4:ff:c1:ef:0b:90:8a:b6: 1a:23:f8:4e:22:5e:6a:ea:6e:85:30:f5:fd:10:bf:bf:52:c7: de:01:c5:82:27:37:3f:28:e7:c2:5b:c9:69:1f:3f:69:65:52: dc:38:e7:d4:b3:d5:ff:1d:5d:fd:aa:30:9c:48:bc:4a:52:5c: 62:94:ba:0f:a1:b6:1a:98:3e:ac:f9:50:32:4c:f9:c4:8c:cc: 5f:36:61:1e:7f:bd:0b:cd:b0:19:06:9d:b5:e6:4b:27:0a:0e: 7c:4f:3e:6c:e3:5a:cb:fb:3a:25:c5:3a:28:66:25:d9:ac:07: 31:41:a1:77:e4:6c:33:c6:50:78:c5:29:5b:fa:88:2e:9e:6a: 8e:5a:78:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU5QzExMTAvBgNVBAUTKDBBMURFMThERkM5OEU0QUNCM0ZBMjMzMzY4MTA1QTcz RDFENDE5RjMwHhcNMjYwMzAxMDA0NzIxWhcNMjYwMzA4MDA0NzIxWjAYMRYwFAYD VQQDDA02OWEzOGM5YS01YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tzrDmAJk0XE/W8+Zc1eLC7CdI6rJvaGnxOvTcSP80YiVx0cVSMEpb9wKJIz RUWemSboeOpWOnJsjp6VQqI4Uu7hc7w2KS6epJl8O52aiaQHHOEFyzdbXpTdLKCy e/8JZDfiOGyXfVeSO/lEnGW5r1irnsDGRv4ozis2XLXeNVEFb1olqJ8t4Z8vRLQh dLBur0MAUw0AH2isvrJ2T5J72BYqa7cedxZpzX2oIsPLRJ9XIrnS17bxMk4cAy+y ynkvyxdFTJkHbDwOYE3dTycNL1rm4oTNV9y5L26ky1QW1TvQXNZloVjGdfHApY+9 sX6E7+/jcZpX/PVXCtnMFrXzTwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFILlBIhl RVfZVWARmkb3sfq6j0PDMB8GA1UdIwQYMBaAFAod4Y38mOSss/ojM2gQWnPR1Bnz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTlDMS9FRTcwMkY0NDdB QzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVLeXotaU16YUJCYWM5SFVH Zk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NoM2hqZnlZNUt5ei1pTXphQkJhYzlIVUdmTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTlDMS9FRTcwMkY0NDdBQzkxMUVDOURBNTVCNDZDNEY5QUUwMi9DaDNoamZ5WTVL eXotaU16YUJCYWM5SFVHZk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqY6waLpfBs4jctLBmpdF08Otp1ThpaCmDkX8cEWHR8kI/j7fsR+qSqHpwXzS GHsXO2/J3+YdPUasBtrHvONddei3rYl/yVBjc6aju9O7XY7DKRy7OIuyN1qjROKU kZezqRayv6R+Gu0TpB9rx465nMOZXxxr+bT/we8LkIq2GiP4TiJeaupuhTD1/RC/ v1LH3gHFgic3PyjnwlvJaR8/aWVS3Djn1LPV/x1d/aownEi8SlJcYpS6D6G2Gpg+ rPlQMkz5xIzMXzZhHn+9C82wGQadteZLJwoOfE8+bONay/s6JcU6KGYl2awHMUGh d+RsM8ZQeMUpW/qILp5qjlp4Ng== -----END CERTIFICATE-----Generated at Sun Mar 1 22:41:56 2026 by rpki-client