$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft File: xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft (raw, json) Hash identifier: qXWtSA7WCBvdZQJqa9iV8Mi5CdDU4fNd0ewyZ9cvTQY= Subject key identifier: C8:72:5C:1D:E6:7E:7F:8D:E6:F1:9D:93:4E:AB:C9:9C:21:19:F3:77 Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D Certificate issuer: /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Certificate serial: 0435 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft Manifest number: 0424 Signing time: Fri 20 Mar 2026 23:53:59 +0000 Manifest this update: Fri 20 Mar 2026 23:53:59 +0000 Manifest next update: Fri 27 Mar 2026 23:53:59 +0000 Files and hashes: 1: xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl (hash: E58xBugJQ5Xdj8hxlY8FydLCATtwZnGaJ6MyxZzpg0M=) 2: 0663DADAEEF511F0AEB0B1D83B6F56BC.roa (hash: q5IvURlRSZM1tbSnIUK7mrAYKjf2ufDxWX6LFHw5WEY=) 3: 892F26B4EEF411F0A51D99D83B6F56BC.roa (hash: j2S/9hhdR71OoPWxIwP3TFKjgMgXC3Tmdl7QnGCMX8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1077 (0x435) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CA5C, serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D Validity Not Before: Mar 20 23:53:59 2026 GMT Not After : Mar 27 23:53:59 2026 GMT Subject: CN=69bdde17-d109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a1:d0:28:ed:fd:5d:96:d9:99:f8:8c:ec:ad: d7:5a:3b:0c:7f:8e:f9:d3:db:e5:ce:ca:67:40:66: 58:b0:d8:77:48:d2:c2:60:b2:af:f7:b0:46:3b:b2: 28:10:2e:8c:9e:d5:cb:d7:d6:92:82:20:7c:d2:ff: 0b:93:b2:c4:85:b5:79:45:da:76:d6:38:00:95:ef: d3:df:90:f6:29:f7:dd:1d:a3:e4:54:c9:dd:d1:47: 58:36:bd:79:82:39:8d:5c:13:e6:91:03:d9:e4:a4: 52:ed:e1:39:0f:dc:06:b5:3c:37:c0:9d:51:05:6e: 78:ef:43:3b:d0:22:c2:db:f0:c3:24:c7:99:cd:cd: 86:c7:e0:64:9d:b4:48:28:fb:3c:72:46:9c:40:d1: fe:04:fc:84:f6:7e:2c:4c:e4:90:61:2c:63:ec:41: 40:d1:74:1c:60:ac:74:ee:df:2c:a3:8c:78:4f:a9: e0:db:5a:89:58:7c:6d:d6:8b:61:18:aa:d5:01:a5: 9d:26:9c:b7:74:b6:13:30:93:ff:0b:df:72:22:a9: 5f:08:74:cf:b1:ea:fa:6a:ac:e8:e1:f0:f3:87:ca: 36:a9:d2:f9:12:d3:f5:93:77:8d:fe:ae:b0:6e:43: 33:a0:3d:66:1f:c9:b3:70:d3:e7:6a:54:a9:29:7a: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:5C:1D:E6:7E:7F:8D:E6:F1:9D:93:4E:AB:C9:9C:21:19:F3:77 X509v3 Authority Key Identifier: keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:1c:57:e5:05:e8:5c:05:a9:bc:52:8d:56:14:fc:07:63:a4: e0:e3:43:a0:5b:16:ea:8d:9c:41:22:e1:1a:cf:4a:be:95:8c: 8b:0a:22:5b:3b:6b:d0:e4:84:67:49:10:8a:3b:6b:10:8a:b9: 52:90:5f:70:82:f1:0e:5a:64:db:c8:c0:67:69:7e:87:eb:28: 1e:b1:aa:bf:9c:e2:84:39:b5:47:38:1d:09:2c:2d:cc:70:4d: 66:5f:30:00:d9:33:6e:b0:ca:4d:ea:92:1c:1b:c3:11:37:33: cd:4a:62:77:4b:3c:07:df:5e:22:d4:0a:52:1a:e0:61:41:86: a6:0d:a9:97:64:59:2e:e2:68:21:f9:3d:83:15:68:cb:c2:93: ed:9d:c8:38:14:6f:9f:48:47:b2:d6:15:67:7c:b8:c7:b1:5e: 1c:3c:70:92:ee:5f:10:50:02:9e:73:af:e7:b9:f6:38:ae:33: 3f:fa:8c:06:48:64:e6:33:58:1d:15:13:e6:d0:c1:7e:61:d8: 41:32:c5:bb:7f:e9:3a:3a:ed:87:99:8f:92:50:15:60:c8:1b: a1:11:79:eb:39:e5:c5:ee:41:3b:5f:93:fc:46:64:ca:6c:75: 6a:a9:e9:de:16:25:0b:ff:81:55:12:98:e9:f9:0f:6d:5f:b0: 6f:13:16:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENBNUMxMTAvBgNVBAUTKEM0M0QxOUM2RDM5NzExMkEyQUZFRDQ2NjYxMjJGQzU3 NkI0Nzg4NkQwHhcNMjYwMzIwMjM1MzU5WhcNMjYwMzI3MjM1MzU5WjAYMRYwFAYD VQQDEw02OWJkZGUxNy1kMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6HQKO39XZbZmfiM7K3XWjsMf47509vlzspnQGZYsNh3SNLCYLKv97BGO7Io EC6MntXL19aSgiB80v8Lk7LEhbV5Rdp21jgAle/T35D2KffdHaPkVMnd0UdYNr15 gjmNXBPmkQPZ5KRS7eE5D9wGtTw3wJ1RBW5470M70CLC2/DDJMeZzc2Gx+BknbRI KPs8ckacQNH+BPyE9n4sTOSQYSxj7EFA0XQcYKx07t8so4x4T6ng21qJWHxt1oth GKrVAaWdJpy3dLYTMJP/C99yIqlfCHTPser6aqzo4fDzh8o2qdL5EtP1k3eN/q6w bkMzoD1mH8mzcNPnalSpKXrNHwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhyXB3m fn+N5vGdk06ryZwhGfN3MB8GA1UdIwQYMBaAFMQ9GcbTlxEqKv7UZmEi/FdrR4ht MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0E1Qy82NTEwRTMxMEE0 NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVTb3FfdFJtWVNMOFYydEhp RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hEMFp4dE9YRVNvcV90Um1ZU0w4VjJ0SGlHMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0E1Qy82NTEwRTMxMEE0NTkxMUVDQTg3RkQ4MERDNEY5QUUwMi94RDBaeHRPWEVT b3FfdFJtWVNMOFYydEhpRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALxxX5QXoXAWpvFKNVhT8B2Ok4ONDoFsW6o2cQSLhGs9KvpWMiwoiWztr0OSE Z0kQijtrEIq5UpBfcILxDlpk28jAZ2l+h+soHrGqv5zihDm1RzgdCSwtzHBNZl8w ANkzbrDKTeqSHBvDETczzUpid0s8B99eItQKUhrgYUGGpg2pl2RZLuJoIfk9gxVo y8KT7Z3IOBRvn0hHstYVZ3y4x7FeHDxwku5fEFACnnOv57n2OK4zP/qMBkhk5jNY HRUT5tDBfmHYQTLFu3/pOjrth5mPklAVYMgboRF56znlxe5BO1+T/EZkymx1aqnp 3hYlC/+BVRKY6fkPbV+wbxMWJw== -----END CERTIFICATE-----Generated at Sun Mar 22 11:37:33 2026 by rpki-client