$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft File: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json) Hash identifier: Gx8wj3pJEkGJGieVnYxEC6ebBNPvYNiPtT3yeYH8yEg= Subject key identifier: 33:9C:E6:01:E0:71:F3:A8:15:E9:4F:34:10:B2:40:AF:9D:7A:87:F2 Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 Certificate issuer: /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft Manifest number: 020D Signing time: Fri 03 Apr 2026 02:43:07 +0000 Manifest this update: Fri 03 Apr 2026 02:43:07 +0000 Manifest next update: Fri 10 Apr 2026 02:43:07 +0000 Files and hashes: 1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: l6tLdDtOONH/jFrhvhsyDIUs/Olhia8bXgkU7rbUFGM=) 2: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: iaWvvLO9RtIU/5hc6ooIendXVuz1sJiFT2wgQFUmPyg=) 3: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Gf9FvRP87k5tJxq7afHhKtaiWDluE6doG6ZwlKn8lJM=) 4: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: KmkycUxGBGDhfp+ky4OMh6F/NxfCyL4MQRwNwWZI4Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 Apr 2026 02:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865 Validity Not Before: Apr 3 02:43:07 2026 GMT Not After : Apr 10 02:43:07 2026 GMT Subject: CN=69cf293b-a5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:ce:a7:18:5c:79:f4:43:01:31:ee:41:28: 54:bd:d6:de:d4:b4:f3:3b:bb:6f:60:11:fe:a8:e5: 8a:5e:dc:db:44:5b:d7:b0:01:ed:e8:96:fe:66:6c: 6d:8a:43:cc:20:4b:0e:45:53:ab:d3:82:2b:47:be: 82:dd:0e:f9:36:40:af:43:a1:52:76:d2:f6:b0:ad: 67:40:70:4d:86:53:cf:21:c8:81:41:5c:47:2c:b8: c4:f7:e6:e3:9f:24:f1:aa:d7:52:b4:83:3a:a3:db: a1:0a:8e:15:87:07:5a:5e:8f:af:d0:18:de:38:f3: 61:20:f0:dc:84:b7:2c:24:f9:b5:66:d8:0e:38:ed: 83:d0:ad:d9:1c:ca:d6:28:39:14:7b:76:76:fe:45: b5:38:dc:e6:bd:6f:4b:87:1b:6f:e9:63:60:10:a5: 1a:4e:5b:bd:5b:ba:48:f1:6c:3e:c5:27:52:95:81: ac:e0:c1:b2:87:fd:92:77:4f:36:f7:2e:e0:63:02: 1d:26:72:a2:36:55:b0:96:21:b7:fd:5c:67:84:8d: 91:e3:27:87:6b:f0:f2:3e:c0:74:1d:87:f4:2d:35: 50:ad:20:ef:d8:17:1f:54:24:40:73:4d:a0:77:1b: 6d:8b:1a:2c:7f:50:01:a4:ee:1b:89:aa:28:fe:94: 77:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:9C:E6:01:E0:71:F3:A8:15:E9:4F:34:10:B2:40:AF:9D:7A:87:F2 X509v3 Authority Key Identifier: keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2f:08:46:11:e3:ea:2b:18:20:1d:b8:ad:bd:ad:4b:37:76: 26:59:f0:c2:f3:94:fc:4f:b4:83:f2:b6:23:b6:09:d6:b0:60: 64:8c:67:21:4d:71:d1:1f:41:29:05:ad:81:e5:e9:ae:05:a7: 01:3f:ba:6f:b7:d3:c1:c7:7e:ca:db:f1:ce:11:23:25:34:f0: a0:81:07:be:2a:6c:b0:46:b6:c8:3e:a4:74:d5:b0:5a:87:2e: ff:4e:99:b6:de:1f:e5:81:4b:a2:a6:a6:fa:12:b0:22:ed:81: 76:c9:58:56:68:f7:c8:1e:b3:40:eb:0e:b4:df:87:db:70:c6: 4a:69:07:96:47:18:11:10:f8:16:da:fb:12:bb:30:df:9d:72: 0c:1a:dd:10:2a:93:6b:bb:82:7a:73:31:09:36:da:33:e2:d7: e7:a9:8f:bc:ba:fb:6a:ea:5f:24:6a:67:15:fa:9a:8e:e5:d3: ac:5b:70:e3:41:23:66:02:97:cc:42:96:be:74:2d:59:d9:48: 49:0f:3f:03:63:54:79:98:9f:5f:14:db:e4:c7:ba:ab:8d:38: 58:35:71:2f:0c:84:35:90:b8:66:fe:31:38:48:75:4f:81:df: 86:37:d2:3e:23:58:4d:9d:55:39:9e:5d:74:32:38:0a:67:83: 1a:4c:76:19 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC QUFGRkI4NjUwHhcNMjYwNDAzMDI0MzA3WhcNMjYwNDEwMDI0MzA3WjAYMRYwFAYD VQQDEw02OWNmMjkzYi1hNWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0r/OpxhcefRDATHuQShUvdbe1LTzO7tvYBH+qOWKXtzbRFvXsAHt6Jb+Zmxt ikPMIEsORVOr04IrR76C3Q75NkCvQ6FSdtL2sK1nQHBNhlPPIciBQVxHLLjE9+bj nyTxqtdStIM6o9uhCo4VhwdaXo+v0BjeOPNhIPDchLcsJPm1ZtgOOO2D0K3ZHMrW KDkUe3Z2/kW1ONzmvW9Lhxtv6WNgEKUaTlu9W7pI8Ww+xSdSlYGs4MGyh/2Sd082 9y7gYwIdJnKiNlWwliG3/VxnhI2R4yeHa/DyPsB0HYf0LTVQrSDv2BcfVCRAc02g dxttixosf1ABpO4biaoo/pR3fQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDOc5gHg cfOoFelPNBCyQK+deofyMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1 MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91 R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ c2dqbkdDUjdIa202cl91R1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXi8IRhHj6isYIB24rb2tSzd2JlnwwvOU/E+0g/K2I7YJ1rBgZIxnIU1x0R9B KQWtgeXprgWnAT+6b7fTwcd+ytvxzhEjJTTwoIEHvipssEa2yD6kdNWwWocu/06Z tt4f5YFLoqam+hKwIu2BdslYVmj3yB6zQOsOtN+H23DGSmkHlkcYERD4Ftr7Ersw 351yDBrdECqTa7uCenMxCTbaM+LX56mPvLr7aupfJGpnFfqajuXTrFtw40EjZgKX zEKWvnQtWdlISQ8/A2NUeZifXxTb5Me6q404WDVxLwyENZC4Zv4xOEh1T4HfhjfS PiNYTZ1VOZ5ddDI4CmeDGkx2GQ== -----END CERTIFICATE-----Generated at Fri Apr 3 18:18:47 2026 by rpki-client