$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json) Hash identifier: Uotjy5bNrELyMHCoQaTXFBpFFp7kl6nqtahPkdiB3ag= Subject key identifier: 08:8F:79:8F:33:4B:9B:1E:62:29:E6:A4:FB:9F:D6:45:3A:BA:EC:8A Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft Manifest number: CA Signing time: Thu 19 Mar 2026 05:54:31 +0000 Manifest this update: Thu 19 Mar 2026 05:54:31 +0000 Manifest next update: Thu 26 Mar 2026 05:54:31 +0000 Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: vFk0P5vPKxOIFltSIWAweO2tfMJO9k4wSGkZIiPLT+U=) 2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: pelY/uHx6kDkE6LCBISkdm7PFKfU0bUQR1oP68K+NMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 05:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: Mar 19 05:54:31 2026 GMT Not After : Mar 26 05:54:31 2026 GMT Subject: CN=69bb8f97-68d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1f:4a:f4:b3:7a:0c:7a:d6:e5:d8:cf:23:f3: 07:29:62:b5:a3:f4:1d:a6:1f:30:83:8c:4a:ce:6e: 9b:a8:f9:fd:c9:e2:ac:e2:43:f4:17:13:8f:09:c9: ce:da:e1:a2:65:39:11:b6:b2:7c:30:6a:49:e7:59: 73:90:63:53:99:0e:24:26:f3:8e:b2:58:97:47:65: 06:05:13:8f:e8:7f:09:a6:54:94:52:25:74:ad:1d: 10:cb:67:11:c8:60:7b:59:8f:a8:1f:81:4e:47:1c: 7c:a5:2c:99:31:9a:ab:d8:87:59:74:0a:82:a4:31: 69:2b:7a:cd:f0:8a:c8:62:59:33:02:53:ff:91:76: 32:67:dd:c4:71:48:45:ff:97:f1:e4:bc:61:c2:ea: 11:2f:bb:f1:c8:03:02:12:be:9a:7f:65:e2:e9:15: dc:cb:d2:b1:e1:bc:ee:69:d5:7b:cf:f1:91:f2:f5: d8:8f:cc:55:5c:e0:8e:28:bf:2c:83:25:8d:9d:67: db:86:da:8b:55:00:91:d4:d2:07:64:86:d2:c0:ef: 2b:aa:af:4b:27:98:5a:5b:e0:72:87:48:85:8e:5f: 11:5f:51:e3:5e:a9:17:0e:0f:16:f6:99:dd:79:92: 69:ba:fe:84:e3:13:6c:fb:10:15:7c:84:85:89:e1: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8F:79:8F:33:4B:9B:1E:62:29:E6:A4:FB:9F:D6:45:3A:BA:EC:8A X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7d:e9:64:3d:c0:11:c1:99:bd:9f:51:6c:4a:b7:fa:c2:54: 67:64:10:0b:9e:8c:6a:8a:f6:0b:bd:a1:89:a5:63:9d:83:ae: f3:af:5c:3b:f2:97:50:b7:39:f5:42:c3:9b:cd:e3:5b:27:e1: 9e:84:9c:b0:7f:ff:a3:e9:6b:29:91:2e:f4:8b:3f:53:cb:4a: f4:b0:e6:9c:3c:5a:15:e8:66:87:73:84:48:cd:9b:98:70:9a: ee:f2:ef:0f:f4:35:c3:95:25:29:36:4f:02:6d:7f:aa:29:43: cb:39:d7:87:d3:13:f6:33:e9:fa:2d:2c:06:88:3f:69:16:97: ed:00:24:da:21:83:7f:71:bc:51:a2:ea:3c:5e:ed:80:27:99: 14:2b:2e:7b:ba:62:42:52:14:48:07:fa:bc:5e:f0:ec:70:20: bd:c9:93:4f:f9:c8:13:3a:7c:e4:ec:ca:51:58:f9:1e:b3:61: 1f:e7:98:e1:d7:96:a5:eb:24:35:b4:fc:ca:c7:68:c6:12:e4: 60:37:b1:69:af:8a:9e:dd:a0:61:8a:3a:64:5f:be:27:fb:40: c9:ed:4e:75:73:dd:3e:2f:33:c9:22:f1:01:c9:30:c3:84:c0: 4b:37:0f:a1:33:1b:16:3b:bc:35:e2:6c:ee:e5:22:48:4e:9c: 74:21:6e:bf -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4QzcxMTAvBgNVBAUTKEUzNjkyOTBGRDcxOUUzRTQ5ODdENzE5QTczQjFFQzc3 QUFBRjQ5QjYwHhcNMjYwMzE5MDU1NDMxWhcNMjYwMzI2MDU1NDMxWjAYMRYwFAYD VQQDEw02OWJiOGY5Ny02OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoh9K9LN6DHrW5djPI/MHKWK1o/Qdph8wg4xKzm6bqPn9yeKs4kP0FxOPCcnO 2uGiZTkRtrJ8MGpJ51lzkGNTmQ4kJvOOsliXR2UGBROP6H8JplSUUiV0rR0Qy2cR yGB7WY+oH4FORxx8pSyZMZqr2IdZdAqCpDFpK3rN8IrIYlkzAlP/kXYyZ93EcUhF /5fx5LxhwuoRL7vxyAMCEr6af2Xi6RXcy9Kx4bzuadV7z/GR8vXYj8xVXOCOKL8s gyWNnWfbhtqLVQCR1NIHZIbSwO8rqq9LJ5haW+Byh0iFjl8RX1HjXqkXDg8W9pnd eZJpuv6E4xNs+xAVfISFieEtLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiPeY8z S5seYinmpPuf1kU6uuyKMB8GA1UdIwQYMBaAFONpKQ/XGePkmH1xmnOx7Heqr0m2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MThDNy9GOTMwMDFCNkY4 Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQtU1lmWEdhYzdIc2Q2cXZT YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MThDNy9GOTMwMDFCNkY4Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQt U1lmWEdhYzdIc2Q2cXZTYlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO33pZD3AEcGZvZ9RbEq3+sJUZ2QQC56Maor2C72hiaVjnYOu869cO/KXULc5 9ULDm83jWyfhnoScsH//o+lrKZEu9Is/U8tK9LDmnDxaFehmh3OESM2bmHCa7vLv D/Q1w5UlKTZPAm1/qilDyznXh9MT9jPp+i0sBog/aRaX7QAk2iGDf3G8UaLqPF7t gCeZFCsue7piQlIUSAf6vF7w7HAgvcmTT/nIEzp85OzKUVj5HrNhH+eY4deWpesk NbT8ysdoxhLkYDexaa+Knt2gYYo6ZF++J/tAye1OdXPdPi8zySLxAckww4TASzcP oTMbFju8NeJs7uUiSE6cdCFuvw== -----END CERTIFICATE-----Generated at Fri Mar 20 17:25:44 2026 by rpki-client