$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft File: R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json) Hash identifier: cMElKZbfw5ZHNdGh92f4TmYCj8Q7/Ro4xc91BF52oQc= Subject key identifier: 4C:F6:DF:E6:EB:3E:34:90:45:20:B7:9A:F8:A9:D6:48:92:7F:56:A3 Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 Certificate issuer: /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Certificate serial: 087D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft Manifest number: 0852 Signing time: Sun 22 Mar 2026 20:26:27 +0000 Manifest this update: Sun 22 Mar 2026 20:26:26 +0000 Manifest next update: Sun 29 Mar 2026 20:26:26 +0000 Files and hashes: 1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: vWqXDAbxXv3o+4zyRYuNQH+HBjhxNH1ejInt8Rx+/IQ=) 2: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=) 3: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=) 4: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=) 5: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=) 6: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2173 (0x87d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8 Validity Not Before: Mar 22 20:26:26 2026 GMT Not After : Mar 29 20:26:26 2026 GMT Subject: CN=69c05072-6383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:6e:44:c7:d6:3d:59:32:28:91:de:33:15: a7:8a:af:48:bb:a1:cb:63:b2:5c:32:b2:4e:5a:dc: 98:4d:4e:ff:7d:e9:62:bd:37:f0:30:b1:5e:f5:dd: 89:da:fe:62:35:11:ef:b2:b8:08:0b:74:80:65:05: 47:57:2c:cc:2f:02:15:ea:61:3b:83:fb:3b:4c:fd: 06:7b:a8:36:79:96:ec:b0:ea:5e:d0:96:fc:a3:44: 71:6c:17:f8:e4:b3:46:47:e2:1f:db:21:08:98:15: 0f:5c:7a:ed:14:e6:c0:90:cb:18:1a:04:2a:51:51: 10:1f:3f:7c:c9:a9:6d:93:35:7a:e4:4e:fc:70:3e: 65:f5:28:ea:6b:8b:34:6c:ae:66:0f:12:53:1e:1b: 38:b5:aa:93:09:e9:6d:ff:59:55:41:6b:02:3b:f1: f3:80:8f:c7:e7:4d:f9:7f:ab:1f:b2:50:16:32:24: bf:16:e6:5f:6e:6d:d7:c6:25:13:be:14:ce:b4:38: 0d:b8:b6:3f:93:77:d2:c5:64:7a:be:ef:ca:7f:05: b3:bf:36:0c:18:25:8b:b6:a4:9e:da:e4:dc:06:43: 65:b1:14:ef:0f:20:92:0d:2e:ff:25:a8:d9:3b:1e: c0:c8:9b:57:64:d5:7e:c1:d6:ed:3e:41:8c:0c:a3: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F6:DF:E6:EB:3E:34:90:45:20:B7:9A:F8:A9:D6:48:92:7F:56:A3 X509v3 Authority Key Identifier: keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e3:82:5d:cb:73:17:cc:60:d5:11:6a:05:5e:6d:b3:5f:fd: 67:93:6b:40:73:03:bb:16:44:f8:c9:d2:e6:08:fc:9c:9e:c2: 0e:4e:d6:af:96:e0:b8:0f:cb:e3:70:42:b6:94:ca:a4:ab:13: bf:71:08:f0:29:8a:bc:9d:bc:21:62:ba:fe:3f:34:41:80:5d: 62:19:c4:42:5c:49:49:16:65:00:4d:41:cd:03:08:e9:1e:2e: a7:99:6d:cd:dc:c6:3c:67:60:84:94:5a:c7:5e:10:f4:1c:f7: 4c:7d:cc:21:5f:d2:9b:5d:d2:4f:af:0e:46:8c:f8:91:7c:77: ce:6b:23:17:80:60:5a:f9:4c:57:b1:15:22:a8:6b:54:7d:09: db:49:a9:a5:8f:2f:48:b3:f8:b7:1e:36:77:19:89:ec:1a:5e: 21:17:39:23:cd:ec:03:89:87:83:40:57:f5:e2:1f:de:39:db: 2f:1b:50:a6:7a:12:24:b2:88:51:4b:3d:39:11:31:3c:74:c9: 21:56:b1:af:71:7d:81:65:c5:1e:5a:c0:78:84:4f:47:45:73: fd:ca:19:b6:04:95:55:4d:07:67:52:1d:30:35:08:12:88:35: 0f:c2:77:01:87:74:d7:84:db:c1:14:fc:b3:f2:65:6a:0e:37: 87:80:be:50 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCH0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQwNzIxMTAvBgNVBAUTKDQ3NTc1Mjg0NEJFQTdBNDk3MDVCQzI1QUE4RjBDOUVG MTAwQzk4RjgwHhcNMjYwMzIyMjAyNjI2WhcNMjYwMzI5MjAyNjI2WjAYMRYwFAYD VQQDEw02OWMwNTA3Mi02MzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoctuRMfWPVkyKJHeMxWniq9Iu6HLY7JcMrJOWtyYTU7/felivTfwMLFe9d2J 2v5iNRHvsrgIC3SAZQVHVyzMLwIV6mE7g/s7TP0Ge6g2eZbssOpe0Jb8o0RxbBf4 5LNGR+If2yEImBUPXHrtFObAkMsYGgQqUVEQHz98yaltkzV65E78cD5l9Sjqa4s0 bK5mDxJTHhs4taqTCelt/1lVQWsCO/HzgI/H5035f6sfslAWMiS/FuZfbm3XxiUT vhTOtDgNuLY/k3fSxWR6vu/KfwWzvzYMGCWLtqSe2uTcBkNlsRTvDyCSDS7/JajZ Ox7AyJtXZNV+wdbtPkGMDKMwIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEz23+br PjSQRSC3mvip1kiSf1ajMB8GA1UdIwQYMBaAFEdXUoRL6npJcFvCWqjwye8QDJj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDA3Mi8zQTQxODkzNkZC RTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVrbHdXOEphcVBESjd4QU1t UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxZFNoRXZxZWtsd1c4SmFxUERKN3hBTW1QZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDA3Mi8zQTQxODkzNkZCRTYxMUVBQjM1MzY2MENDNEY5QUUwMi9SMWRTaEV2cWVr bHdXOEphcVBESjd4QU1tUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASuOCXctzF8xg1RFqBV5ts1/9Z5NrQHMDuxZE+MnS5gj8nJ7CDk7Wr5bguA/L 43BCtpTKpKsTv3EI8CmKvJ28IWK6/j80QYBdYhnEQlxJSRZlAE1BzQMI6R4up5lt zdzGPGdghJRax14Q9Bz3TH3MIV/Sm13ST68ORoz4kXx3zmsjF4BgWvlMV7EVIqhr VH0J20mppY8vSLP4tx42dxmJ7BpeIRc5I83sA4mHg0BX9eIf3jnbLxtQpnoSJLKI UUs9ORExPHTJIVaxr3F9gWXFHlrAeIRPR0Vz/coZtgSVVU0HZ1IdMDUIEog1D8J3 AYd014TbwRT8s/Jlag43h4C+UA== -----END CERTIFICATE-----Generated at Mon Mar 23 13:55:28 2026 by rpki-client