$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft File: dF_08GOrXRceBSUbMeKUpLx5c7E.mft (raw, json) Hash identifier: R+pmvFwN6FgOR0A5a/tk3pOeruitKVgJpqGo4nbXHIk= Subject key identifier: 1D:A8:D2:19:28:86:E4:CE:0D:06:A7:A0:64:5E:86:71:E4:4A:52:8C Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Certificate serial: 0B10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft Manifest number: 0A01 Signing time: Thu 26 Mar 2026 20:13:30 +0000 Manifest this update: Thu 26 Mar 2026 20:13:29 +0000 Manifest next update: Thu 02 Apr 2026 20:13:29 +0000 Files and hashes: 1: dF_08GOrXRceBSUbMeKUpLx5c7E.crl (hash: gwWTtt7oRLtz1Lh6NMhgr0lD9rDymk4SWimhDuz+Qlk=) 2: B80A9FF60B4111EF919B0B7DC4F9AE02.roa (hash: gsB9c0U2DntNM1+v6I/9WXimUYgEdXTJXViqGyC2AQ0=) 3: E0039822DDDD11EF84C13A22C4F9AE02.roa (hash: lWUMp9J9+EEIyFVfamv9b+gDZejel22GgkvYFOZ8pJs=) 4: 61C70D36088411F1B1AFA7640E3D8C67.roa (hash: k6n/b8uPYd+AiCnOzUingvkJYhO7VLfxKO8V9R5dnkQ=) 5: E94D73BE291D11EF86792873C4F9AE02.roa (hash: 9cwwImpG0kuALXJSvuXgLEJYlcBpiuJBifGtYofo6Aw=) 6: 315D1630DDD911EFBAA4D977C4F9AE02.roa (hash: IDTH0cAlA2j29Quymic14S26EVLhL7W0jgxsTtfpz7w=) 7: 4020FFBCF80111ECAC7ADB0CC4F9AE02.roa (hash: OrZ9Ea1QZaI1VDtqb0gOsdHCM2dKMi5dNl6ij8Rdp0E=) 8: 4E6E940C612211EB8166284BC4F9AE02.roa (hash: QW6uZWXeGB+Eizq4SwIGwFff/Y27AeGTfhmNqMCDG9M=) 9: 7C9D0D66546811EBBF7C8469C4F9AE02.roa (hash: WmHfkDZFO7wJF5fVRRjhSZ2MtLW2NAgEZ/oXceI0GSk=) 10: 20AF7940433811EFA525DA49C4F9AE02.roa (hash: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2832 (0xb10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1 Validity Not Before: Mar 26 20:13:29 2026 GMT Not After : Apr 2 20:13:29 2026 GMT Subject: CN=69c5936a-d269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:ca:7f:90:f7:f7:0f:1f:e2:6f:f3:3a:a2: 05:84:c1:51:35:d0:7c:44:21:d8:00:4b:a3:6f:04: 3f:dd:40:a2:47:6a:95:a3:50:bc:12:88:2f:6f:96: bf:75:f8:fa:09:45:ad:d4:24:90:27:8d:b5:a3:33: a5:8f:db:81:10:59:76:be:8a:3b:7b:34:57:6a:31: 3b:21:de:3d:f1:69:f0:46:c0:fd:40:85:92:86:f7: ae:f9:fa:98:38:e3:99:9b:ec:74:1e:4d:a6:a2:46: 9e:ba:b6:04:73:1e:09:c1:10:e5:86:12:90:9b:c7: 7d:65:86:25:a6:e5:1e:ae:3e:27:76:45:84:87:f2: 7b:fa:6e:b2:03:51:9b:af:c2:f1:eb:27:07:6f:96: 59:39:f3:be:26:f5:73:a5:76:dc:be:a3:cd:18:f7: a2:b3:c7:12:9f:1a:a3:1e:2a:e6:00:4a:3e:d3:55: 77:05:5c:60:6a:0d:4a:7d:c0:32:0b:0a:7e:38:ef: 75:ce:9c:e2:4a:c3:08:08:76:fc:26:6c:c9:5b:35: 4a:6d:1f:ab:2a:74:f4:c9:c4:74:80:cd:e7:71:51: 61:f5:68:7b:31:ef:7b:c8:bd:2f:95:c6:da:d3:73: a9:7c:b5:66:bb:ea:82:e3:ff:76:c2:8b:21:d2:0b: cd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A8:D2:19:28:86:E4:CE:0D:06:A7:A0:64:5E:86:71:E4:4A:52:8C X509v3 Authority Key Identifier: keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:5f:6b:b5:a4:64:a4:c6:87:0f:83:01:8e:ac:ea:af:eb:33: c3:fa:42:f4:99:f9:f4:28:9b:2d:c3:95:80:bd:33:da:02:e5: db:d7:36:29:d4:d6:8d:36:b9:8c:54:4c:91:ae:c7:27:79:65: ea:09:49:a2:6e:c0:28:16:cc:0e:b6:a9:42:4c:e4:3f:96:13: fa:f1:fe:b0:b1:0c:5e:0d:d5:5b:48:f9:2d:c0:b6:37:ad:ad: 96:c2:f7:2f:28:35:3d:a9:65:fe:7c:ed:91:6b:a0:9a:bc:d7: 3b:03:6d:cb:5a:cb:dc:45:0e:43:2b:e5:94:e4:72:97:19:15: 30:43:dd:68:ce:f7:8f:44:95:b2:63:c3:1c:19:44:33:06:6a: e3:9a:33:44:e7:7c:46:75:04:74:ef:4e:18:1a:e7:06:24:94: 88:95:6d:f2:b1:a9:05:42:c7:0d:28:22:b7:50:06:d4:28:00: 25:41:13:7c:aa:93:eb:6e:a5:db:dc:42:a8:18:2c:7c:6f:0e: a0:70:5c:90:eb:fb:7d:2c:27:83:0b:84:ce:a3:a4:90:44:ac: b2:83:a1:2a:40:dc:5a:62:1f:a3:42:b6:50:1b:12:54:49:e6: 98:43:77:9e:12:ee:27:67:b6:b3:48:e1:6a:8c:83:f5:e7:35: 98:08:36:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0 QkM3OTczQjEwHhcNMjYwMzI2MjAxMzI5WhcNMjYwNDAyMjAxMzI5WjAYMRYwFAYD VQQDEw02OWM1OTM2YS1kMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDnKf5D39w8f4m/zOqIFhMFRNdB8RCHYAEujbwQ/3UCiR2qVo1C8Eogvb5a/ dfj6CUWt1CSQJ421ozOlj9uBEFl2voo7ezRXajE7Id498WnwRsD9QIWShveu+fqY OOOZm+x0Hk2mokaeurYEcx4JwRDlhhKQm8d9ZYYlpuUerj4ndkWEh/J7+m6yA1Gb r8Lx6ycHb5ZZOfO+JvVzpXbcvqPNGPeis8cSnxqjHirmAEo+01V3BVxgag1KfcAy Cwp+OO91zpziSsMICHb8JmzJWzVKbR+rKnT0ycR0gM3ncVFh9Wh7Me97yL0vlcba 03OpfLVmu+qC4/92wosh0gvNsQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB2o0hko huTODQanoGRehnHkSlKMMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTQ3NS9EQTgzQUE3QUNBMTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhS Y2VCU1ViTWVLVXBMeDVjN0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEl9rtaRkpMaHD4MBjqzqr+szw/pC9Jn59CibLcOVgL0z2gLl29c2KdTWjTa5 jFRMka7HJ3ll6glJom7AKBbMDrapQkzkP5YT+vH+sLEMXg3VW0j5LcC2N62tlsL3 Lyg1Pall/nztkWugmrzXOwNty1rL3EUOQyvllORylxkVMEPdaM73j0SVsmPDHBlE MwZq45ozROd8RnUEdO9OGBrnBiSUiJVt8rGpBULHDSgit1AG1CgAJUETfKqT626l 29xCqBgsfG8OoHBckOv7fSwngwuEzqOkkESssoOhKkDcWmIfo0K2UBsSVEnmmEN3 nhLuJ2e2s0jhaoyD9ec1mAg2mA== -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:02 2026 by rpki-client