$ rpki-client -vvf rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft File: cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft (raw, json) Hash identifier: 8MWvGk+bD64AUnvAEEyZbHG+m+b3uaMe0k5MJg3B0ds= Subject key identifier: 01:49:4D:F8:7E:25:AE:F2:19:F2:53:BB:62:F5:E6:4F:7E:81:23:5B Authority key identifier: 70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 Certificate issuer: /CN=A919D49F/serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Certificate serial: 10FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft Manifest number: 10F0 Signing time: Sun 01 Mar 2026 22:33:05 +0000 Manifest this update: Sun 01 Mar 2026 22:33:04 +0000 Manifest next update: Sun 08 Mar 2026 22:33:04 +0000 Files and hashes: 1: cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl (hash: /4ZP/yekL7vbtIfWPeSNFrwkylklJlsHtYCYq7R8g2Q=) 2: 74087358355111E99EC82E0AC4F9AE02.roa (hash: 24e0wUeqirfw8YK8UbxY/Mf86F6th/m2omMNiomkb4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4346 (0x10fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D49F, serialNumber=707D48605A0D85772F90DC4B1172BEF30294A087 Validity Not Before: Mar 1 22:33:04 2026 GMT Not After : Mar 8 22:33:04 2026 GMT Subject: CN=69a4bea1-b62d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:12:ae:df:33:ba:48:37:ab:e3:ae:33:40:9f: 00:93:e5:14:32:4d:2c:2e:28:b0:dd:fc:ff:f8:d0: b4:e2:02:4a:f8:11:6c:42:5d:c2:3d:69:e2:f4:6e: 34:29:40:0e:89:72:83:34:c3:1b:c6:bc:25:87:ef: f6:35:1d:9c:fd:ea:fd:10:c5:d6:7d:49:85:55:35: 4a:a2:7c:e5:6c:2b:72:78:72:8a:4e:d7:01:bb:e7: b9:25:4a:36:0c:3a:d4:f4:e0:88:48:2f:b8:f3:78: 39:6a:c8:b2:5a:49:f8:1a:7c:1e:52:77:60:96:87: 49:d0:96:d8:68:4e:9d:3f:e7:f9:5c:76:e5:99:2a: 1e:9b:93:2b:60:df:2f:39:15:52:41:e4:54:f7:84: 21:54:e3:92:2f:dc:2c:54:cb:a2:3a:be:38:f5:c5: 0a:fe:7e:8d:7a:1e:44:03:18:ec:97:27:2c:e0:cf: e1:01:d8:00:fb:c9:a9:de:a7:97:c7:63:09:86:32: 0c:4f:3c:f5:eb:3d:30:eb:e1:09:f1:95:74:37:be: 60:9b:27:9f:00:0d:ba:ab:82:44:55:4f:2a:78:df: fd:23:d6:c2:f6:97:e3:dc:0d:79:50:9d:fb:8d:7b: 17:37:a2:ca:37:ab:aa:91:20:a6:74:5c:89:d7:81: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:49:4D:F8:7E:25:AE:F2:19:F2:53:BB:62:F5:E6:4F:7E:81:23:5B X509v3 Authority Key Identifier: keyid:70:7D:48:60:5A:0D:85:77:2F:90:DC:4B:11:72:BE:F3:02:94:A0:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cH1IYFoNhXcvkNxLEXK-8wKUoIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D49F/0BAC8556355111E998A50A0AC4F9AE02/cH1IYFoNhXcvkNxLEXK-8wKUoIc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:78:9c:cb:ff:f3:c9:0d:c3:ac:f9:d2:79:8c:cd:13:8a:09: ba:9b:26:7f:38:cc:ed:df:d3:68:a3:f8:f4:eb:5e:03:a3:81: 26:61:5d:d9:ab:8e:55:5a:fc:6e:f0:60:cf:62:10:c6:13:13: 01:f4:84:b3:2a:71:0e:e4:28:fc:51:3c:05:b2:15:ad:c8:23: ea:48:4e:a5:8e:26:26:c3:97:88:47:43:d4:b9:57:bb:b9:53: 17:47:a5:5a:43:63:6c:85:97:33:ce:68:b4:9f:7b:5a:d6:97: 51:f8:cc:d8:11:dc:52:cf:81:54:e9:9b:b4:31:e8:dc:93:fd: 83:1e:98:99:79:3a:e5:d0:2c:2d:08:8b:85:ae:76:31:36:77: ae:d8:62:e1:c3:16:73:d6:15:8c:c6:e6:6e:9a:f9:53:6f:15: 68:f9:88:41:3c:bb:8e:cc:2e:d4:3c:f1:a7:16:5e:ee:cc:f4: 02:61:a8:4c:f0:c7:22:79:f1:3e:e0:ac:ff:2c:f4:79:87:3b: 90:0a:26:c8:45:f1:7b:41:f3:26:33:8b:2e:28:10:3b:91:6f: d3:53:3a:d4:05:0e:b1:6c:24:c5:0d:6f:25:72:99:bc:41:fb: 9a:88:ee:da:2b:cc:a8:ec:e1:c2:ae:e3:6e:10:ec:68:b7:7f: 19:55:0c:b3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ0OUYxMTAvBgNVBAUTKDcwN0Q0ODYwNUEwRDg1NzcyRjkwREM0QjExNzJCRUYz MDI5NEEwODcwHhcNMjYwMzAxMjIzMzA0WhcNMjYwMzA4MjIzMzA0WjAYMRYwFAYD VQQDEw02OWE0YmVhMS1iNjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBKu3zO6SDer464zQJ8Ak+UUMk0sLiiw3fz/+NC04gJK+BFsQl3CPWni9G40 KUAOiXKDNMMbxrwlh+/2NR2c/er9EMXWfUmFVTVKonzlbCtyeHKKTtcBu+e5JUo2 DDrU9OCISC+483g5asiyWkn4GnweUndglodJ0JbYaE6dP+f5XHblmSoem5MrYN8v ORVSQeRU94QhVOOSL9wsVMuiOr449cUK/n6Neh5EAxjslycs4M/hAdgA+8mp3qeX x2MJhjIMTzz16z0w6+EJ8ZV0N75gmyefAA26q4JEVU8qeN/9I9bC9pfj3A15UJ37 jXsXN6LKN6uqkSCmdFyJ14GBdQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAFJTfh+ Ja7yGfJTu2L15k9+gSNbMB8GA1UdIwQYMBaAFHB9SGBaDYV3L5DcSxFyvvMClKCH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDQ5Ri8wQkFDODU1NjM1 NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhYY3ZrTnhMRVhLLTh3S1Vv SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NIMUlZRm9OaFhjdmtOeExFWEstOHdLVW9JYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDQ5Ri8wQkFDODU1NjM1NTExMUU5OThBNTBBMEFDNEY5QUUwMi9jSDFJWUZvTmhY Y3ZrTnhMRVhLLTh3S1VvSWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzHicy//zyQ3DrPnSeYzNE4oJupsmfzjM7d/TaKP49OteA6OBJmFd2auOVVr8 bvBgz2IQxhMTAfSEsypxDuQo/FE8BbIVrcgj6khOpY4mJsOXiEdD1LlXu7lTF0el WkNjbIWXM85otJ97WtaXUfjM2BHcUs+BVOmbtDHo3JP9gx6YmXk65dAsLQiLha52 MTZ3rthi4cMWc9YVjMbmbpr5U28VaPmIQTy7jswu1DzxpxZe7sz0AmGoTPDHInnx PuCs/yz0eYc7kAomyEXxe0HzJjOLLigQO5Fv01M61AUOsWwkxQ1vJXKZvEH7moju 2ivMqOzhwq7jbhDsaLd/GVUMsw== -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:04 2026 by rpki-client