$ rpki-client -vvf rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft File: PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft (raw, json) Hash identifier: 6zEXGSESCXTxJYzqYNNEhaOwXms4vGIOxm77jjvjXLs= Subject key identifier: 8E:D0:5F:A2:D0:7C:53:96:C4:E3:97:A1:5F:EB:B2:F5:93:92:BC:6C Authority key identifier: 3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 Certificate issuer: /CN=A915A39E/serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Certificate serial: 0520 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft Manifest number: 0519 Signing time: Sun 22 Mar 2026 23:10:22 +0000 Manifest this update: Sun 22 Mar 2026 23:10:22 +0000 Manifest next update: Sun 29 Mar 2026 23:10:22 +0000 Files and hashes: 1: PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl (hash: Z/50coxRxXin4BrlGDWlyupyvUee6rX5OiRY4a9ehno=) 2: 47A72A7441ED11EC9B02377AC4F9AE02.roa (hash: T0ns+7x4iK0WmW0k/dhc+1Ohg2P5NWnpBDqsr9+P9R0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 23:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1312 (0x520) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A39E, serialNumber=3E42D3334A1CE1889DFC67E42DF6285821852519 Validity Not Before: Mar 22 23:10:22 2026 GMT Not After : Mar 29 23:10:22 2026 GMT Subject: CN=69c076de-473c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:49:7a:a4:33:06:bd:86:9e:e9:d7:52:63: f4:91:b5:73:a9:01:ed:09:a2:83:04:ae:fb:d4:94: 0b:35:6f:ff:6a:9b:50:56:8c:f6:ca:fa:d4:84:e2: 2d:65:4a:7d:21:00:46:ba:c8:c2:41:3c:c8:7b:31: 80:50:55:64:98:f9:70:df:67:2d:b0:9d:72:fc:bc: 07:86:5b:9f:5d:c1:05:23:d1:9c:af:0d:43:ff:d8: c8:4f:04:06:3f:9a:6f:3b:b1:60:81:fb:0c:d5:38: 37:1a:71:2d:16:7d:e5:6d:30:33:45:94:4b:f1:60: 27:06:3b:19:2f:48:a5:e2:8f:fb:46:92:e0:72:ff: fe:63:8b:c4:3c:01:52:35:58:c3:1d:00:c7:70:d4: 3d:d5:33:17:b4:82:bf:03:79:c8:f8:35:78:ba:c3: f0:62:c7:f1:83:bf:14:03:0d:8e:65:10:a0:37:ae: 51:4e:a6:ce:a6:23:6b:9e:b1:9a:ba:03:4a:00:ea: 8c:82:11:42:80:01:e1:fd:08:be:06:74:22:b8:6d: f5:e9:93:9f:03:e3:8a:18:b9:8d:d6:80:58:e4:71: 0c:04:de:a7:df:50:c7:17:68:2e:19:16:9a:b8:06: ad:32:a6:ca:5c:da:96:22:96:ae:d8:88:1b:11:fa: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D0:5F:A2:D0:7C:53:96:C4:E3:97:A1:5F:EB:B2:F5:93:92:BC:6C X509v3 Authority Key Identifier: keyid:3E:42:D3:33:4A:1C:E1:88:9D:FC:67:E4:2D:F6:28:58:21:85:25:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PkLTM0oc4Yid_GfkLfYoWCGFJRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A39E/CA31689641E911ECB2589673C4F9AE02/PkLTM0oc4Yid_GfkLfYoWCGFJRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d0:c5:7b:19:ff:c5:4e:b9:55:3b:b0:85:b4:5f:07:f4:67: 26:84:8e:eb:a9:00:fe:dd:55:28:d0:eb:aa:18:e6:68:e6:aa: 7f:6e:5a:c8:02:d5:42:4e:9f:6e:68:fe:bf:9e:de:92:09:a0: b7:2c:9f:10:ca:f3:c9:3c:07:9d:d5:ab:52:b2:20:c8:6b:92: 35:ef:a3:76:89:99:77:42:a6:d7:94:0e:4f:0e:1d:53:53:99: ab:2e:13:5b:6d:77:73:59:c8:b7:b9:ec:46:c5:0d:41:26:b9: 1c:65:76:fa:60:d7:4c:82:61:a1:bb:13:0a:72:fb:14:5a:f8: 48:c9:39:20:84:c2:66:cb:12:58:32:c4:25:65:e7:7c:fc:e3: da:3a:f7:de:7e:24:e2:77:43:38:be:f9:82:a5:2b:63:33:c7: 66:33:72:f9:93:ca:2a:6c:09:8a:37:1d:5d:6e:1b:e6:ab:4a: 80:9e:c9:dd:cc:3a:ff:a9:74:6e:82:c0:5a:cb:19:2b:99:98: a7:eb:93:ea:fe:2a:3b:c3:c6:c0:8e:f3:10:42:12:bc:a3:ae: fa:1d:a9:b2:8e:ab:51:72:a5:09:90:a3:ca:3a:f0:26:06:31: 78:06:aa:cf:ed:41:1a:3f:e3:f7:37:c6:67:cd:a7:c9:90:a9: 3f:c8:52:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEzOUUxMTAvBgNVBAUTKDNFNDJEMzMzNEExQ0UxODg5REZDNjdFNDJERjYyODU4 MjE4NTI1MTkwHhcNMjYwMzIyMjMxMDIyWhcNMjYwMzI5MjMxMDIyWjAYMRYwFAYD VQQDEw02OWMwNzZkZS00NzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1PtJeqQzBr2GnunXUmP0kbVzqQHtCaKDBK771JQLNW//aptQVoz2yvrUhOIt ZUp9IQBGusjCQTzIezGAUFVkmPlw32ctsJ1y/LwHhlufXcEFI9Gcrw1D/9jITwQG P5pvO7FggfsM1Tg3GnEtFn3lbTAzRZRL8WAnBjsZL0il4o/7RpLgcv/+Y4vEPAFS NVjDHQDHcNQ91TMXtIK/A3nI+DV4usPwYsfxg78UAw2OZRCgN65RTqbOpiNrnrGa ugNKAOqMghFCgAHh/Qi+BnQiuG316ZOfA+OKGLmN1oBY5HEMBN6n31DHF2guGRaa uAatMqbKXNqWIpau2IgbEfo3uQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI7QX6LQ fFOWxOOXoV/rsvWTkrxsMB8GA1UdIwQYMBaAFD5C0zNKHOGInfxn5C32KFghhSUZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTM5RS9DQTMxNjg5NjQx RTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZaWRfR2ZrTGZZb1dDR0ZK UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BrTFRNMG9jNFlpZF9HZmtMZllvV0NHRkpSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTM5RS9DQTMxNjg5NjQxRTkxMUVDQjI1ODk2NzNDNEY5QUUwMi9Qa0xUTTBvYzRZ aWRfR2ZrTGZZb1dDR0ZKUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApNDFexn/xU65VTuwhbRfB/RnJoSO66kA/t1VKNDrqhjmaOaqf25ayALVQk6f bmj+v57ekgmgtyyfEMrzyTwHndWrUrIgyGuSNe+jdomZd0Km15QOTw4dU1OZqy4T W213c1nIt7nsRsUNQSa5HGV2+mDXTIJhobsTCnL7FFr4SMk5IITCZssSWDLEJWXn fPzj2jr33n4k4ndDOL75gqUrYzPHZjNy+ZPKKmwJijcdXW4b5qtKgJ7J3cw6/6l0 boLAWssZK5mYp+uT6v4qO8PGwI7zEEISvKOu+h2pso6rUXKlCZCjyjrwJgYxeAaq z+1BGj/j9zfGZ82nyZCpP8hSEw== -----END CERTIFICATE-----Generated at Tue Mar 24 20:18:37 2026 by rpki-client