$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft File: M3je4rOhqNPtGvTkXiJdAJnPcBE.mft (raw, json) Hash identifier: kMdqAk81rqH1v6EmjKZg4Xh6iX9A1lHKUAIV30nZQj8= Subject key identifier: D6:EE:8B:B3:95:87:1B:AD:98:5A:AC:92:4E:88:34:A0:24:64:AD:41 Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 Certificate issuer: /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Certificate serial: 04A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft Manifest number: 048A Signing time: Mon 02 Mar 2026 02:09:00 +0000 Manifest this update: Mon 02 Mar 2026 02:08:59 +0000 Manifest next update: Mon 09 Mar 2026 02:08:59 +0000 Files and hashes: 1: M3je4rOhqNPtGvTkXiJdAJnPcBE.crl (hash: LkbgHZmcJcbRM7252N62shNx0ntVQirbS3xcuOhRyIg=) 2: BBA03BF86DD311F09E550D38C4F9AE02.roa (hash: uGMtz7kDpUuRbzovpxCLs8RVYzGjNu1zfhCp2A/w0I0=) 3: BC58A5C66DD311F09E550D38C4F9AE02.roa (hash: ZErqDqEjrdMQscIaQSODVIbbT3cVAftr7V5jxpSa9sE=) 4: 2A3B0AAED84211EDBD609A4DC4F9AE02.roa (hash: ltLR9lU5PATLmFGYMYnn82t7vMf4+sNFASN2RqOvtTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:08:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1189 (0x4a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011 Validity Not Before: Mar 2 02:08:59 2026 GMT Not After : Mar 9 02:08:59 2026 GMT Subject: CN=69a4f13c-243f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a8:4b:38:63:00:b3:40:01:bf:9d:a6:fe:cf: 87:e1:70:a5:3d:e0:2f:aa:e4:66:26:d6:f8:4b:3a: 7f:3e:11:05:86:50:19:36:9d:26:5b:99:e2:78:b4: 40:78:a0:f3:67:7b:4f:9f:ee:e3:af:37:9e:86:d0: c9:d6:53:8b:8e:38:1b:cc:3e:25:8a:9d:f0:62:a2: 53:bb:d4:b3:f3:d2:4b:90:73:04:99:3c:72:54:bd: 93:b3:c5:31:ac:08:1b:35:cc:11:48:3b:5f:ec:23: b3:eb:ec:46:ee:4a:1f:c2:12:9e:d1:ae:01:58:9e: 93:90:41:8e:0c:44:7a:df:c4:1e:d3:55:04:f5:eb: 5f:0f:7c:52:b7:92:de:7d:8e:af:0b:6a:cb:64:cb: 6d:53:9a:0f:8f:32:92:d4:00:82:bd:95:2c:34:56: e2:ef:08:9d:eb:a9:00:bc:fa:d4:92:38:c1:ed:c3: e1:6e:c4:4b:03:20:4c:c9:93:86:aa:82:8d:d6:8c: cc:a9:e9:aa:16:ee:23:a8:50:f9:c6:8a:10:4b:82: b6:1e:82:c5:a0:a5:4d:65:4f:c5:4b:6c:93:97:d9: 3d:02:c8:07:15:42:f0:c5:ed:42:cb:95:ad:bf:19: 71:c7:1d:dd:68:b5:93:c0:b1:a2:8b:42:96:e6:dc: fc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EE:8B:B3:95:87:1B:AD:98:5A:AC:92:4E:88:34:A0:24:64:AD:41 X509v3 Authority Key Identifier: keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:8c:dd:a4:1f:26:d3:4c:7c:6f:9a:c9:18:4e:1d:65:15:b0: 7d:69:a0:fd:98:ae:e4:e6:0b:e5:a0:05:91:35:ce:62:8d:d9: 1d:26:0d:01:d8:a5:ba:73:58:ad:ae:2a:08:49:29:24:39:9a: dd:e9:b2:39:de:1d:1a:e1:ff:5e:f5:ad:90:08:21:0a:1c:61: ec:7b:00:75:e4:99:0f:d1:fe:61:12:78:9d:54:4d:23:c9:d2: bc:7f:2e:bc:78:4c:04:41:53:18:5e:ea:b0:d1:49:58:c2:01: 5a:f4:9e:be:06:47:7b:bf:c5:ff:a4:fc:59:b0:3f:69:13:2a: 98:45:5f:f6:40:78:29:ad:48:58:36:63:08:9d:22:1f:83:2b: b0:2f:fa:eb:c2:43:84:ef:74:a9:d4:a8:a7:8a:1b:ea:0b:29: 3b:ba:d9:bf:ce:46:2b:71:be:cf:9b:51:2e:53:89:e3:3c:08: 42:10:0c:88:5b:44:d2:66:9e:b1:98:bd:cd:42:4c:d9:7f:71: 97:d9:d9:23:32:9c:bf:9c:ae:aa:8b:4d:ad:8c:cb:84:93:bc: 39:32:d1:ba:21:d9:65:6b:72:92:9b:31:dc:3b:1f:5e:33:02: c1:c7:81:ff:49:cd:ec:e0:eb:65:6a:78:22:b0:27:b8:8d:fa: 4a:95:45:ff -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUI1NTYxMTAvBgNVBAUTKDMzNzhERUUyQjNBMUE4RDNFRDFBRjRFNDVFMjI1RDAw OTlDRjcwMTEwHhcNMjYwMzAyMDIwODU5WhcNMjYwMzA5MDIwODU5WjAYMRYwFAYD VQQDEw02OWE0ZjEzYy0yNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6hLOGMAs0ABv52m/s+H4XClPeAvquRmJtb4Szp/PhEFhlAZNp0mW5nieLRA eKDzZ3tPn+7jrzeehtDJ1lOLjjgbzD4lip3wYqJTu9Sz89JLkHMEmTxyVL2Ts8Ux rAgbNcwRSDtf7COz6+xG7kofwhKe0a4BWJ6TkEGODER638Qe01UE9etfD3xSt5Le fY6vC2rLZMttU5oPjzKS1ACCvZUsNFbi7wid66kAvPrUkjjB7cPhbsRLAyBMyZOG qoKN1ozMqemqFu4jqFD5xooQS4K2HoLFoKVNZU/FS2yTl9k9AsgHFULwxe1Cy5Wt vxlxxx3daLWTwLGii0KW5tz8xwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNbui7OV hxutmFqskk6INKAkZK1BMB8GA1UdIwQYMBaAFDN43uKzoajT7Rr05F4iXQCZz3AR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1Ni8xMDQ1MkFGQTdE QzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFOUHRHdlRrWGlKZEFKblBj QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00zamU0ck9ocU5QdEd2VGtYaUpkQUpuUGNCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjU1Ni8xMDQ1MkFGQTdEQzkxMUVDOEU5RjZCMjNDNEY5QUUwMi9NM2plNHJPaHFO UHRHdlRrWGlKZEFKblBjQkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADozdpB8m00x8b5rJGE4dZRWwfWmg/Ziu5OYL5aAFkTXOYo3ZHSYNAdilunNY ra4qCEkpJDma3emyOd4dGuH/XvWtkAghChxh7HsAdeSZD9H+YRJ4nVRNI8nSvH8u vHhMBEFTGF7qsNFJWMIBWvSevgZHe7/F/6T8WbA/aRMqmEVf9kB4Ka1IWDZjCJ0i H4MrsC/668JDhO90qdSop4ob6gspO7rZv85GK3G+z5tRLlOJ4zwIQhAMiFtE0mae sZi9zUJM2X9xl9nZIzKcv5yuqotNrYzLhJO8OTLRuiHZZWtykpsx3DsfXjMCwceB /0nN7ODrZWp4IrAnuI36SpVF/w== -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:32 2026 by rpki-client