$ rpki-client -vvf rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft File: if0nxQZ7TPQSKW_rps5tgxGFgAs.mft (raw, json) Hash identifier: V3WeKEonqihgCAApri6WO4ZjcLk6dTS0BCh8vPq/Gjs= Subject key identifier: CF:2B:C4:1C:77:44:E2:EF:22:AD:26:15:CA:44:47:23:CF:A0:83:2E Authority key identifier: 89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B Certificate issuer: /CN=A9185344/serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Certificate serial: 3562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft Manifest number: 353B Signing time: Thu 16 Apr 2026 15:03:28 +0000 Manifest this update: Thu 16 Apr 2026 15:03:28 +0000 Manifest next update: Thu 23 Apr 2026 15:03:28 +0000 Files and hashes: 1: if0nxQZ7TPQSKW_rps5tgxGFgAs.crl (hash: qPqzqOoFCDigHkolBi9OKK+EEDxa5krAJIQ8pfUhitk=) 2: 7D2A30D22CD111ECBE97C117C4F9AE02.roa (hash: 7OGe5FP4HdWym7t2hyScbAIwjXWKAD0qUD149+q/PGY=) 3: 438B5C5E2CD411EC8884B41FC4F9AE02.roa (hash: O1SYsuH+O9dWW6LgLbXKRQezQd0QTg2T+y3+yaSnx9w=) 4: 4453BC8A2CD411EC8884B41FC4F9AE02.roa (hash: z7Wg/yYEe/naNZajz7OC8CRPdjQ8pKf0KALnyOn87iA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 15:03:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13666 (0x3562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185344, serialNumber=89FD27C5067B4CF412296FEBA6CE6D831185800B Validity Not Before: Apr 16 15:03:28 2026 GMT Not After : Apr 23 15:03:28 2026 GMT Subject: CN=69e0fa40-8630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:9a:b4:f1:e5:91:4f:6e:2c:1e:46:7c:34:5c: 40:b0:87:a1:e5:b3:6b:d5:f9:de:ec:05:d0:ec:52: 13:c1:16:f0:71:14:36:cc:78:7c:cb:b6:af:83:59: 6e:d9:9d:52:e6:a7:5b:96:b0:3b:72:5a:14:42:15: 95:da:06:22:fd:96:ad:eb:f1:ab:5f:a9:38:3c:2f: 54:57:0c:c3:24:18:2b:21:01:50:86:cd:5f:da:34: 91:20:3e:19:12:ca:d1:4f:ec:f3:73:80:25:85:58: b1:e3:19:c2:5a:23:15:1b:5b:2b:75:08:92:f4:21: 5f:34:cb:a6:3d:d8:b8:32:17:14:82:07:d7:2b:db: ff:1a:2a:70:49:57:81:d5:e6:61:eb:47:40:f1:11: 0e:cf:a6:c8:9a:6f:22:b6:b5:33:e3:9a:be:15:e7: 16:3d:5e:a8:77:94:e7:e4:9f:b0:7d:49:61:19:ef: 59:09:a7:04:19:34:1f:36:79:f4:3a:de:bb:39:51: 61:a6:d0:5b:81:43:d2:82:fb:4b:73:9e:b3:5c:8f: b1:93:02:35:ff:98:b6:73:b3:50:6a:78:d2:0b:a2: 7e:e8:3a:02:4a:88:27:7e:44:c9:5d:19:76:73:cb: 0a:70:43:00:3a:8e:a2:57:fd:3d:dd:f3:cb:1b:c9: f3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:C4:1C:77:44:E2:EF:22:AD:26:15:CA:44:47:23:CF:A0:83:2E X509v3 Authority Key Identifier: keyid:89:FD:27:C5:06:7B:4C:F4:12:29:6F:EB:A6:CE:6D:83:11:85:80:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if0nxQZ7TPQSKW_rps5tgxGFgAs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185344/515CABE01DA111E2B2CD6D9308B02CD2/if0nxQZ7TPQSKW_rps5tgxGFgAs.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:16:e6:08:7e:e4:f6:3f:1e:82:a3:83:37:71:e7:63:e0:24: 16:ed:d2:cc:f8:73:8c:94:8f:82:f1:cc:ee:78:db:6d:e8:26: 68:b3:63:df:f1:e1:2b:c1:79:96:c1:3a:de:c3:27:2a:f8:30: 97:dc:53:15:2d:23:63:3d:36:17:8a:25:56:5c:ed:26:cc:0a: 5e:c4:e5:91:cf:5b:ba:88:1d:1a:8c:4a:0e:aa:0d:a6:04:db: f0:57:1f:19:d1:24:49:1e:2e:fd:5a:9a:47:97:15:2c:f0:70: 77:27:b1:5f:8a:b3:63:6a:4f:79:52:51:d6:b5:cc:3e:56:ec: db:d9:c6:9f:4d:e7:99:86:91:a7:88:2e:24:54:b3:20:89:06: 7c:09:bf:24:d6:c4:a6:aa:db:03:50:e2:71:97:6c:37:3d:77: f9:55:10:91:86:e3:7b:29:72:8b:c6:8a:0f:7b:e8:ba:5a:b8: 52:6c:ad:4e:09:a6:a4:17:7d:01:8e:15:70:11:0b:76:5f:77: 94:5c:f0:a7:6d:ba:f4:a6:61:f9:29:49:fe:79:72:ec:a5:ff: bb:c0:4e:49:a5:82:59:9e:f7:56:d5:c2:da:a7:98:97:a8:f1: 14:fd:3c:37:d4:3c:96:a0:09:d5:0c:23:48:6a:5a:fe:64:12: 94:0c:5e:78 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzNDQxMTAvBgNVBAUTKDg5RkQyN0M1MDY3QjRDRjQxMjI5NkZFQkE2Q0U2RDgz MTE4NTgwMEIwHhcNMjYwNDE2MTUwMzI4WhcNMjYwNDIzMTUwMzI4WjAYMRYwFAYD VQQDEw02OWUwZmE0MC04NjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA45q08eWRT24sHkZ8NFxAsIeh5bNr1fne7AXQ7FITwRbwcRQ2zHh8y7avg1lu 2Z1S5qdblrA7cloUQhWV2gYi/Zat6/GrX6k4PC9UVwzDJBgrIQFQhs1f2jSRID4Z EsrRT+zzc4AlhVix4xnCWiMVG1srdQiS9CFfNMumPdi4MhcUggfXK9v/GipwSVeB 1eZh60dA8REOz6bImm8itrUz45q+FecWPV6od5Tn5J+wfUlhGe9ZCacEGTQfNnn0 Ot67OVFhptBbgUPSgvtLc56zXI+xkwI1/5i2c7NQanjSC6J+6DoCSognfkTJXRl2 c8sKcEMAOo6iV/093fPLG8nzVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM8rxBx3 ROLvIq0mFcpERyPPoIMuMB8GA1UdIwQYMBaAFIn9J8UGe0z0Eilv66bObYMRhYAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTM0NC81MTVDQUJFMDFE QTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQUVNLV19ycHM1dGd4R0Zn QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmMG54UVo3VFBRU0tXX3JwczV0Z3hHRmdBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTM0NC81MTVDQUJFMDFEQTExMUUyQjJDRDZEOTMwOEIwMkNEMi9pZjBueFFaN1RQ UVNLV19ycHM1dGd4R0ZnQXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWBbmCH7k9j8egqODN3HnY+AkFu3SzPhzjJSPgvHM7njbbegmaLNj3/HhK8F5 lsE63sMnKvgwl9xTFS0jYz02F4olVlztJswKXsTlkc9buogdGoxKDqoNpgTb8Fcf GdEkSR4u/VqaR5cVLPBwdyexX4qzY2pPeVJR1rXMPlbs29nGn03nmYaRp4guJFSz IIkGfAm/JNbEpqrbA1DicZdsNz13+VUQkYbjeylyi8aKD3voulq4UmytTgmmpBd9 AY4VcBELdl93lFzwp2269KZh+SlJ/nly7KX/u8BOSaWCWZ73VtXC2qeYl6jxFP08 N9Q8lqAJ1QwjSGpa/mQSlAxeeA== -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:43 2026 by rpki-client