$ rpki-client -vvf rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft File: -o32EYRRvVM4cqyjdiK_c77RlEE.mft (raw, json) Hash identifier: 0nOg0nmJS3Lskwes8/Z8PQAGkqmVPWv+jVRvPAxSDFo= Subject key identifier: 40:95:43:21:18:29:EF:8A:DA:8D:63:CA:B9:49:42:A4:FF:EC:1D:BE Authority key identifier: FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 Certificate issuer: /CN=A9135450/serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Certificate serial: 0302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft Manifest number: 02FC Signing time: Sun 05 Apr 2026 01:01:35 +0000 Manifest this update: Sun 05 Apr 2026 01:01:34 +0000 Manifest next update: Sun 12 Apr 2026 01:01:34 +0000 Files and hashes: 1: -o32EYRRvVM4cqyjdiK_c77RlEE.crl (hash: J0gay1Km4Lr1k6b+6x7nAxSJw/kUJLYXTr7yTqeAYxY=) 2: CA57150418B311EDB72D3165C4F9AE02.roa (hash: EI6GzHfnkWqNaMVXOSJiD8mcwGEHnHoi3RAZSaS8pSA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 770 (0x302) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135450, serialNumber=FA8DF6118451BD533872ACA37622BF73BED19441 Validity Not Before: Apr 5 01:01:34 2026 GMT Not After : Apr 12 01:01:34 2026 GMT Subject: CN=69d1b46f-d23c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:d6:d0:40:8d:d6:7f:a2:a5:0a:71:df:58: b5:db:fa:69:c9:fb:91:9a:d3:15:c4:e8:d4:36:1e: d1:5f:bb:35:02:13:02:e3:b8:8b:1c:6f:ca:05:b4: ee:31:aa:bf:f1:1b:92:52:41:f4:ad:5a:f2:53:fc: 4e:c7:d8:6e:16:e1:6a:ed:63:e5:4f:ad:a4:56:f3: 71:d8:04:d5:a9:38:79:f6:0d:01:9b:ab:f2:2e:13: 50:e2:75:fd:12:92:70:94:73:6b:88:f6:0a:2e:3c: ac:90:4a:ed:ca:13:d4:31:83:bb:42:89:cb:a4:bf: 2b:b4:74:cd:f7:5a:f2:0e:51:49:a4:82:bf:a6:f4: c1:1a:1f:e8:bb:c4:cd:cf:e8:28:95:7e:38:6e:2f: 89:f6:9f:12:eb:66:34:34:26:41:40:85:49:fa:ef: 2f:8b:2c:35:31:33:b0:5d:ac:86:e7:79:eb:50:40: 53:6e:9f:8c:47:e6:94:0f:7f:62:00:37:65:2b:49: cd:80:35:c9:67:0a:45:ab:1c:95:4a:8e:31:2d:7d: 86:66:dd:90:49:a3:c5:e8:77:36:5d:4e:66:bc:59: 57:e5:63:76:e9:03:7f:6b:16:0e:03:4a:98:f1:88: 8c:ff:3a:05:94:83:41:aa:e2:0e:35:0c:92:28:6f: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:95:43:21:18:29:EF:8A:DA:8D:63:CA:B9:49:42:A4:FF:EC:1D:BE X509v3 Authority Key Identifier: keyid:FA:8D:F6:11:84:51:BD:53:38:72:AC:A3:76:22:BF:73:BE:D1:94:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-o32EYRRvVM4cqyjdiK_c77RlEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135450/843DC69618B111EDBEC5FE63C4F9AE02/-o32EYRRvVM4cqyjdiK_c77RlEE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:b7:9f:b1:e3:20:7d:34:11:87:d6:19:11:1d:90:28:0f:09: 22:17:13:dd:dd:da:97:7a:c4:cb:12:5f:d2:6c:4e:27:09:49: 62:be:fe:bc:e8:9c:6b:3a:84:7a:8d:af:aa:fd:cd:5c:4d:9c: 56:df:d6:2d:06:8f:62:d1:f9:35:3f:b7:15:1b:40:07:b3:7a: a7:5b:2f:92:bc:78:0c:7c:d8:2f:d0:f0:e9:9d:47:1a:f7:d9: 54:fb:19:d8:a1:1c:c8:cf:c1:99:84:9b:7f:65:d0:38:ea:80: cd:b9:64:16:e0:96:1b:12:41:0b:dc:5e:c0:f0:d3:76:db:a0: 69:89:51:d5:f7:63:95:b9:47:89:c6:18:06:a2:2c:a7:ca:c5: e4:f8:ed:60:73:d6:de:33:bf:3c:4c:69:38:42:cd:03:c5:5d: c3:b5:c2:55:1a:90:f9:31:21:f3:cf:4c:a1:15:04:e9:25:64: 02:d1:c2:8b:0a:c8:a6:89:d8:8b:7c:12:2e:5b:23:16:82:7c: b6:a6:84:b0:c1:dd:62:20:8d:cf:88:88:c0:fd:56:ad:c1:97: 89:34:16:0b:47:ca:87:2f:b8:55:52:b2:1d:6c:4c:95:c7:6c: d6:e1:72:6c:00:a5:d4:e8:5f:ce:e0:b9:4c:dd:b8:15:1b:a4: 04:2a:52:a5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAwIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0NTAxMTAvBgNVBAUTKEZBOERGNjExODQ1MUJENTMzODcyQUNBMzc2MjJCRjcz QkVEMTk0NDEwHhcNMjYwNDA1MDEwMTM0WhcNMjYwNDEyMDEwMTM0WjAYMRYwFAYD VQQDEw02OWQxYjQ2Zi1kMjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArbbW0ECN1n+ipQpx31i12/ppyfuRmtMVxOjUNh7RX7s1AhMC47iLHG/KBbTu Maq/8RuSUkH0rVryU/xOx9huFuFq7WPlT62kVvNx2ATVqTh59g0Bm6vyLhNQ4nX9 EpJwlHNriPYKLjyskErtyhPUMYO7QonLpL8rtHTN91ryDlFJpIK/pvTBGh/ou8TN z+golX44bi+J9p8S62Y0NCZBQIVJ+u8viyw1MTOwXayG53nrUEBTbp+MR+aUD39i ADdlK0nNgDXJZwpFqxyVSo4xLX2GZt2QSaPF6Hc2XU5mvFlX5WN26QN/axYOA0qY 8YiM/zoFlINBquIONQySKG9naQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECVQyEY Ke+K2o1jyrlJQqT/7B2+MB8GA1UdIwQYMBaAFPqN9hGEUb1TOHKso3Yiv3O+0ZRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTQ1MC84NDNEQzY5NjE4 QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZWTTRjcXlqZGlLX2M3N1Js RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1vMzJFWVJSdlZNNGNxeWpkaUtfYzc3UmxFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTQ1MC84NDNEQzY5NjE4QjExMUVEQkVDNUZFNjNDNEY5QUUwMi8tbzMyRVlSUnZW TTRjcXlqZGlLX2M3N1JsRUUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA4LefseMgfTQRh9YZER2QKA8JIhcT3d3al3rEyxJf0mxOJwlJYr7+vOicazqE eo2vqv3NXE2cVt/WLQaPYtH5NT+3FRtAB7N6p1svkrx4DHzYL9Dw6Z1HGvfZVPsZ 2KEcyM/BmYSbf2XQOOqAzblkFuCWGxJBC9xewPDTdtugaYlR1fdjlblHicYYBqIs p8rF5PjtYHPW3jO/PExpOELNA8Vdw7XCVRqQ+TEh889MoRUE6SVkAtHCiwrIponY i3wSLlsjFoJ8tqaEsMHdYiCNz4iIwP1WrcGXiTQWC0fKhy+4VVKyHWxMlcds1uFy bACl1OhfzuC5TN24FRukBCpSpQ== -----END CERTIFICATE-----Generated at Mon Apr 6 08:30:50 2026 by rpki-client