$ rpki-client -vvf rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft File: -KpwkWtspYPANj63qaX38mJ9c2A.mft (raw, json) Hash identifier: xv5dHad8ZgHQ/GlNDB30rujv+VnQl9i9Yn6cq8MUxm4= Subject key identifier: 40:1A:68:AC:B6:4B:87:D7:B7:E7:F2:41:19:A7:58:FF:5D:A7:55:DF Authority key identifier: F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 Certificate issuer: /CN=A915EE53/serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Certificate serial: 26E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft Manifest number: 25CF Signing time: Sun 01 Mar 2026 23:38:40 +0000 Manifest this update: Sun 01 Mar 2026 23:38:38 +0000 Manifest next update: Sun 08 Mar 2026 23:38:38 +0000 Files and hashes: 1: -KpwkWtspYPANj63qaX38mJ9c2A.crl (hash: vf1u+YKpFD+53PN4rXFMHshaHgHOiRZvuI6o7r3qgI4=) 2: 9DBB8670790211EC9EE24885C4F9AE02.roa (hash: 3LYkvaPKRlpxKHagyZbb3mKN/sEvdLe8k4T/TE3lAUA=) 3: 15812F82C4A111EBAE6C7F49C4F9AE02.roa (hash: MBkHhBI2rL5wTLorBd1qSPQBbwMaRhrLdxT4vnO5UBk=) 4: 5CCAC7F8528C11ECB6101B10C4F9AE02.roa (hash: pXY678rgib9MDIpv4q9NRSvkOIHZhVLc8Ni424DybDE=) 5: 63C97CBAC49E11EBAC936D7AC4F9AE02.roa (hash: PgBqaJ0zZRDKpytRezPqCUhHVoxTURvIO4uean+t4G8=) 6: 86D13B7E571C11EC81276481C4F9AE02.roa (hash: 3xjL+tUkOblHVDXh9XARpZVjKUEJtNEBb2TcIDfAN5U=) 7: CFF5A20078E011EC8357FA15C4F9AE02.roa (hash: LL3NDZGV/2b4xoaWfCHphnYFTdDWOC8VviDINVOcIOg=) 8: 6E042EFCABF011EC92152E22C4F9AE02.roa (hash: C9jynfmfZgIdKM5NX2BP8YpqNKTL9jhc+R3sXGl533k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9961 (0x26e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EE53, serialNumber=F8AA70916B6CA583C0363EB7A9A5F7F2627D7360 Validity Not Before: Mar 1 23:38:38 2026 GMT Not After : Mar 8 23:38:38 2026 GMT Subject: CN=69a4cdff-4b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:b5:ff:66:c7:a0:fd:dd:22:4c:a9:0b:7b: d9:bf:51:f2:69:b7:f9:ec:48:79:b7:9e:55:86:50: 9a:bc:0d:cb:7b:8c:e7:13:55:84:2f:f4:5f:df:48: 93:42:f1:04:65:ba:a8:47:7a:c2:1b:79:e4:13:77: cb:41:70:68:b0:db:94:13:84:09:e5:e2:3a:f9:18: 15:97:60:5e:15:96:6b:ac:2e:ec:03:21:fc:3f:6a: d1:cb:2c:e6:2e:b3:d1:22:73:7e:37:8a:e0:07:ef: c5:de:bb:e2:f1:e1:7a:46:1e:1c:20:cf:72:3c:d5: 73:00:47:15:21:44:24:73:cc:31:11:63:87:23:8e: e8:ca:47:2c:2d:1a:38:d3:f6:e5:6d:bf:31:63:83: 08:b4:25:3e:a7:3b:4d:a5:37:ed:89:53:a2:b3:62: 46:a1:c8:eb:df:ba:29:8a:10:d3:bf:22:e6:38:76: 0c:2e:f4:0e:65:c7:63:87:23:f8:60:d1:dc:b8:7c: f2:80:4e:9b:3d:5d:0b:86:a8:b9:bc:76:31:95:52: 3e:26:d2:1e:6b:d7:81:55:49:ee:04:33:cb:29:73: 53:aa:17:69:08:f3:0a:81:e9:50:c6:92:71:5a:30: b5:cd:e0:03:59:97:51:c7:8b:c7:8c:eb:63:0a:9f: 40:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1A:68:AC:B6:4B:87:D7:B7:E7:F2:41:19:A7:58:FF:5D:A7:55:DF X509v3 Authority Key Identifier: keyid:F8:AA:70:91:6B:6C:A5:83:C0:36:3E:B7:A9:A5:F7:F2:62:7D:73:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-KpwkWtspYPANj63qaX38mJ9c2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EE53/38511840458811E59B2D8371C4F9AE02/-KpwkWtspYPANj63qaX38mJ9c2A.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e2:e3:f4:7d:31:6f:c3:44:70:ec:f2:ec:a0:73:7d:6f:e8: 7a:7b:83:59:17:db:d7:61:31:ae:dd:45:8a:26:14:63:d8:3a: 3c:c0:5c:a2:99:6c:dd:a7:dc:b8:25:e7:82:eb:c8:23:7e:77: e7:d2:66:5b:20:56:ee:f4:a0:f5:1e:03:5e:79:7f:e4:79:7f: 74:2e:45:31:96:aa:4d:5c:60:4c:d4:52:eb:75:2e:21:e8:2b: 10:f2:07:f7:e8:9a:53:1a:db:72:2d:7f:bd:e3:d4:5a:01:a5: af:f5:77:9d:1b:e5:66:87:ea:49:b6:1f:30:3a:e0:ad:63:36: 6a:0a:09:b5:ed:73:93:fa:6d:e2:95:49:68:08:ec:14:17:98: e8:e5:ca:2f:83:a9:de:ad:b9:90:dd:87:01:18:f8:49:2e:6a: d2:1c:cd:e4:d0:b4:a5:4d:c3:38:bc:27:ef:e1:0c:b7:5f:92: 32:47:fb:fc:38:a7:ba:ae:72:68:9c:a1:9d:cd:ff:2d:f3:a2: f8:7f:d5:0b:cb:42:a1:3b:70:71:18:20:57:da:ec:d3:f7:e6: 2d:5a:a5:1e:a8:81:0e:c4:2a:2e:e5:5e:09:91:1b:0c:62:0d: 20:af:7a:85:bd:55:91:8b:f8:fd:5e:50:97:b0:a1:f8:90:20: a3:30:57:0b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUVFNTMxMTAvBgNVBAUTKEY4QUE3MDkxNkI2Q0E1ODNDMDM2M0VCN0E5QTVGN0Yy NjI3RDczNjAwHhcNMjYwMzAxMjMzODM4WhcNMjYwMzA4MjMzODM4WjAYMRYwFAYD VQQDEw02OWE0Y2RmZi00Yjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAshK1/2bHoP3dIkypC3vZv1Hyabf57Eh5t55VhlCavA3Le4znE1WEL/Rf30iT QvEEZbqoR3rCG3nkE3fLQXBosNuUE4QJ5eI6+RgVl2BeFZZrrC7sAyH8P2rRyyzm LrPRInN+N4rgB+/F3rvi8eF6Rh4cIM9yPNVzAEcVIUQkc8wxEWOHI47oykcsLRo4 0/blbb8xY4MItCU+pztNpTftiVOis2JGocjr37opihDTvyLmOHYMLvQOZcdjhyP4 YNHcuHzygE6bPV0Lhqi5vHYxlVI+JtIea9eBVUnuBDPLKXNTqhdpCPMKgelQxpJx WjC1zeADWZdRx4vHjOtjCp9AewIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEAaaKy2 S4fXt+fyQRmnWP9dp1XfMB8GA1UdIwQYMBaAFPiqcJFrbKWDwDY+t6ml9/JifXNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUU1My8zODUxMTg0MDQ1 ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZUEFOajYzcWFYMzhtSjlj MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1LcHdrV3RzcFlQQU5qNjNxYVgzOG1KOWMyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RUU1My8zODUxMTg0MDQ1ODgxMUU1OUIyRDgzNzFDNEY5QUUwMi8tS3B3a1d0c3BZ UEFOajYzcWFYMzhtSjljMkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAFOLj9H0xb8NEcOzy7KBzfW/oenuDWRfb12Exrt1FiiYUY9g6PMBcopls3afc uCXnguvII35359JmWyBW7vSg9R4DXnl/5Hl/dC5FMZaqTVxgTNRS63UuIegrEPIH 9+iaUxrbci1/vePUWgGlr/V3nRvlZofqSbYfMDrgrWM2agoJte1zk/pt4pVJaAjs FBeY6OXKL4Op3q25kN2HARj4SS5q0hzN5NC0pU3DOLwn7+EMt1+SMkf7/Dinuq5y aJyhnc3/LfOi+H/VC8tCoTtwcRggV9rs0/fmLVqlHqiBDsQqLuVeCZEbDGINIK96 hb1VkYv4/V5Ql7Ch+JAgozBXCw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:04 2026 by rpki-client