$ rpki-client -vvf rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft File: -wGX2AKmYYboQL1i6I7kDtlelSk.mft (raw, json) Hash identifier: IQfUC+t4qXiu3pX1ffCXF4jZ8wZM5KWuYcuD48NEcuo= Subject key identifier: FF:20:CF:6A:7C:EC:F6:8F:1D:6A:6F:85:AA:80:12:48:04:1E:3D:1F Authority key identifier: FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 Certificate issuer: /CN=A911CC1D/serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft Manifest number: 0230 Signing time: Fri 13 Mar 2026 01:54:13 +0000 Manifest this update: Fri 13 Mar 2026 01:54:13 +0000 Manifest next update: Fri 20 Mar 2026 01:54:13 +0000 Files and hashes: 1: -wGX2AKmYYboQL1i6I7kDtlelSk.crl (hash: ZrlA2n2EB29FZva2RUgfGYRln+rWr/QG1X4owYCGPQs=) 2: 60377A8C695311EEB599BD23C4F9AE02.roa (hash: 6+mSiCWxaNbfZ0/GasxMsSn1EmvZTNxPDtyY0zKhs0o=) 3: 8FF4E2E2EFAE11EDBD96F26BC4F9AE02.roa (hash: zawi/wlEpNQoVrlgeNzoGXkUSXbiRvgZkdxKTLUCpcw=) 4: 359322B2D1E711EDB90DBF27C4F9AE02.roa (hash: kxn0Dg877a3vfvZmxRWSok8mv3qj9xPRSNnHx7tUEbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 01:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CC1D, serialNumber=FB0197D802A66186E840BD62E88EE40ED95E9529 Validity Not Before: Mar 13 01:54:13 2026 GMT Not After : Mar 20 01:54:13 2026 GMT Subject: CN=69b36e45-ea5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:63:4e:02:3a:55:c5:fe:b7:69:20:2b:fd: f1:ef:43:9a:f1:83:70:c3:34:37:db:b3:79:c9:1c: ef:91:87:b8:9a:42:05:10:8a:43:50:55:f1:29:78: ea:5a:12:76:30:77:b2:0a:4d:3b:18:8a:e8:b3:11: 2e:26:17:7c:6e:6a:60:e4:f2:fb:a2:93:c4:43:44: 24:ec:e3:e2:1f:f2:7a:4b:b3:e3:9f:39:37:d2:bf: d4:3e:b9:cd:fd:be:32:ec:bd:fc:86:94:23:8a:41: 7a:83:6c:71:3f:fc:7d:d6:94:3c:ce:71:1f:04:da: 66:0a:d6:06:13:02:23:58:60:b9:5c:ff:46:38:08: 27:04:3b:ad:93:00:27:82:97:d4:06:2c:93:8b:33: 76:ee:19:a0:7f:04:88:6e:6b:1f:99:42:1f:9a:3e: 34:bb:9d:da:36:54:20:d6:25:fa:73:f0:82:7d:51: 0a:26:79:45:f9:13:ed:23:22:18:b8:a2:1a:e1:16: 46:fe:5f:cb:03:5d:85:ee:5f:68:b4:30:20:ec:e0: 7e:23:e3:7a:b3:93:7a:86:a8:01:1f:4a:46:22:ee: be:51:b6:81:ce:d6:33:81:41:bd:bf:b0:e5:13:8f: 9d:dc:1b:89:29:fb:d6:e8:72:66:a2:79:66:50:c5: 3d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:20:CF:6A:7C:EC:F6:8F:1D:6A:6F:85:AA:80:12:48:04:1E:3D:1F X509v3 Authority Key Identifier: keyid:FB:01:97:D8:02:A6:61:86:E8:40:BD:62:E8:8E:E4:0E:D9:5E:95:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-wGX2AKmYYboQL1i6I7kDtlelSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CC1D/8CFE1D9AD1E211ED923C611FC4F9AE02/-wGX2AKmYYboQL1i6I7kDtlelSk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:6d:72:75:6a:a1:4b:30:b0:a6:09:74:a9:6d:52:6a:c6:d3: 3b:3d:eb:5d:aa:06:20:fc:fb:bd:08:e4:b4:40:f7:7b:bd:ea: d6:96:20:19:73:45:9a:c0:8a:0d:74:ec:64:ee:e0:a2:fa:ea: 8d:2f:a1:4b:0d:f8:0a:18:77:2d:e0:e3:e7:48:12:6c:86:87: ef:04:46:7f:95:0f:2d:77:2a:e5:e4:eb:57:2f:70:73:78:0d: 05:8b:35:04:d9:b2:f7:00:88:63:48:ee:0f:99:5e:f8:63:ff: 40:74:2e:e1:4e:de:7d:3f:cc:51:fc:99:79:60:ff:c2:7d:c7: 27:3d:52:16:d5:58:51:62:f8:66:52:e9:b3:9d:03:ed:fe:dc: 7a:49:37:a1:31:e7:60:5d:c6:e0:76:20:85:66:27:b1:83:60: 58:1a:5f:ea:3b:0d:fc:c3:64:9b:c6:fe:0c:c4:9d:95:ba:cc: 9f:15:18:a7:94:e5:94:c3:3a:f7:f9:83:84:a9:d8:76:68:74: 05:3b:72:28:e0:b8:0f:ba:b5:c8:f9:c6:0c:fa:73:39:77:df: 6c:50:3a:f7:89:c5:e7:97:7d:35:5f:bd:cd:67:c1:a4:55:93: 97:a3:6a:ac:bf:d1:eb:29:de:9f:f8:c4:8d:c5:66:09:7d:d3: b3:36:ac:24 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNDMUQxMTAvBgNVBAUTKEZCMDE5N0Q4MDJBNjYxODZFODQwQkQ2MkU4OEVFNDBF RDk1RTk1MjkwHhcNMjYwMzEzMDE1NDEzWhcNMjYwMzIwMDE1NDEzWjAYMRYwFAYD VQQDEw02OWIzNmU0NS1lYTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NZjTgI6VcX+t2kgK/3x70Oa8YNwwzQ327N5yRzvkYe4mkIFEIpDUFXxKXjq WhJ2MHeyCk07GIrosxEuJhd8bmpg5PL7opPEQ0Qk7OPiH/J6S7Pjnzk30r/UPrnN /b4y7L38hpQjikF6g2xxP/x91pQ8znEfBNpmCtYGEwIjWGC5XP9GOAgnBDutkwAn gpfUBiyTizN27hmgfwSIbmsfmUIfmj40u53aNlQg1iX6c/CCfVEKJnlF+RPtIyIY uKIa4RZG/l/LA12F7l9otDAg7OB+I+N6s5N6hqgBH0pGIu6+UbaBztYzgUG9v7Dl E4+d3BuJKfvW6HJmonlmUMU9FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP8gz2p8 7PaPHWpvhaqAEkgEHj0fMB8GA1UdIwQYMBaAFPsBl9gCpmGG6EC9YuiO5A7ZXpUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0MxRC84Q0ZFMUQ5QUQx RTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZYm9RTDFpNkk3a0R0bGVs U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy13R1gyQUttWVlib1FMMWk2STdrRHRsZWxTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0MxRC84Q0ZFMUQ5QUQxRTIxMUVEOTIzQzYxMUZDNEY5QUUwMi8td0dYMkFLbVlZ Ym9RTDFpNkk3a0R0bGVsU2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhm1ydWqhSzCwpgl0qW1SasbTOz3rXaoGIPz7vQjktED3e73q1pYgGXNFmsCK DXTsZO7govrqjS+hSw34Chh3LeDj50gSbIaH7wRGf5UPLXcq5eTrVy9wc3gNBYs1 BNmy9wCIY0juD5le+GP/QHQu4U7efT/MUfyZeWD/wn3HJz1SFtVYUWL4ZlLps50D 7f7cekk3oTHnYF3G4HYghWYnsYNgWBpf6jsN/MNkm8b+DMSdlbrMnxUYp5TllMM6 9/mDhKnYdmh0BTtyKOC4D7q1yPnGDPpzOXffbFA694nF55d9NV+9zWfBpFWTl6Nq rL/R6ynen/jEjcVmCX3TszasJA== -----END CERTIFICATE-----Generated at Fri Mar 13 12:11:26 2026 by rpki-client