$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft File: 43GjtsORJitruFtuaKzB_MB6ThQ.mft (raw, json) Hash identifier: H7oSOJOtMqbnoRiqkNY316wqzkC9AoUfwFnyFzqK8eo= Subject key identifier: 4B:EC:EF:CF:CA:D8:C4:90:9B:01:7C:CD:15:9F:38:13:BC:40:49:6B Authority key identifier: E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14 Certificate issuer: /CN=A915EA14/serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft Manifest number: 2B Signing time: Tue 21 Apr 2026 08:32:57 +0000 Manifest this update: Tue 21 Apr 2026 08:32:57 +0000 Manifest next update: Tue 28 Apr 2026 08:32:57 +0000 Files and hashes: 1: 43GjtsORJitruFtuaKzB_MB6ThQ.crl (hash: 3ABXIZbL4MGDFus05C4tvLJxf4Y8ZXn1hCipeY2davY=) 2: 82F60B4A021E11F1B34B19A3496F56BC.roa (hash: URRSPnX/peAH6Ix9KuluixjV3nyUCO36mStsdPckdGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 08:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA14, serialNumber=E371A3B6C391262B6BB85B6E68ACC1FCC07A4E14 Validity Not Before: Apr 21 08:32:57 2026 GMT Not After : Apr 28 08:32:57 2026 GMT Subject: CN=69e73639-0c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:01:f5:de:93:3a:09:0b:49:fd:23:ab:36: c5:ff:77:3c:45:ec:38:de:81:11:37:3f:5c:b3:37: d7:a1:66:40:0a:c8:4a:57:12:8a:cf:81:75:1f:ca: 22:5f:f9:60:cf:de:73:fb:1a:03:63:d4:2a:97:58: 0a:e4:e6:3f:4e:1e:b7:f4:92:48:4e:a6:17:c0:72: b2:79:22:60:3c:a5:69:bc:0f:c1:f1:58:5f:7a:60: 95:b4:89:c2:e0:b1:29:fa:05:b1:75:35:fb:5f:dd: a4:e0:5d:9d:9f:51:a1:25:00:10:3b:02:20:3d:27: 1c:db:e9:c9:0e:67:b3:2e:73:a4:d8:b4:d0:99:c7: 9a:18:9b:f9:20:97:a3:ee:03:e9:3b:ef:2d:d1:42: 10:38:5d:8c:57:c7:1f:1c:a4:5c:6f:ce:26:85:bb: 45:87:0e:bf:74:d1:0a:84:a5:01:08:9b:4e:2d:f0: 32:6a:1c:c2:93:97:ef:ce:c2:5e:5c:89:b1:d9:d7: 61:1b:ea:60:c6:0e:d4:61:7f:bc:20:0f:7c:85:2b: 4c:bf:3f:1b:ff:a9:c6:61:72:ed:ca:9d:1f:e3:e0: 68:95:79:57:22:c9:c0:27:87:2c:51:a9:27:15:d6: 5b:d6:32:12:5b:fe:a6:29:e0:d6:7b:df:f8:a5:38: 33:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EC:EF:CF:CA:D8:C4:90:9B:01:7C:CD:15:9F:38:13:BC:40:49:6B X509v3 Authority Key Identifier: keyid:E3:71:A3:B6:C3:91:26:2B:6B:B8:5B:6E:68:AC:C1:FC:C0:7A:4E:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/43GjtsORJitruFtuaKzB_MB6ThQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/D7284EA4021D11F1AB56282F496F56BC/43GjtsORJitruFtuaKzB_MB6ThQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:e8:74:b7:69:76:32:6b:a9:bc:0a:83:3a:cc:ed:be:5b:80: 43:19:8f:f4:f9:87:58:85:69:44:c5:33:0f:c5:eb:f5:95:f5: f5:4c:a0:d2:41:0d:53:a2:7b:e0:3a:e1:a5:f6:c8:c3:fe:d5: 66:7d:ea:0f:10:11:62:4b:64:ef:50:ab:27:03:4e:f5:ca:46: b0:7b:25:7a:c3:8c:47:29:af:a2:d2:fa:df:6f:62:69:d5:e7: de:d0:8f:6c:04:b3:24:97:3c:ab:23:60:e4:7d:d7:4c:b3:7a: e6:93:22:84:bb:d9:e3:d2:29:ba:02:25:ac:4c:56:cb:9c:d9: 14:12:ad:df:ce:47:48:18:04:41:7d:88:77:8e:2d:01:a4:75: 32:3a:30:6e:8b:67:79:15:3d:ed:95:22:98:f4:2d:b2:a0:65: 67:c4:c2:3d:c0:46:69:4f:07:99:ec:c8:c3:3d:27:47:1e:97: 4b:77:11:ca:6b:01:9c:5c:b9:b0:b8:14:26:f2:d4:cc:d6:3c: f1:a6:0b:05:69:2d:67:ff:e9:f6:81:2d:cf:88:b3:4a:a7:77: cc:6b:14:14:3f:91:3e:d1:ca:8f:b9:d2:65:d0:8f:94:e6:93: a9:26:2e:89:84:10:e6:cc:39:1f:23:ee:10:d7:21:c0:90:04: f4:ac:8c:91 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUExNDExMC8GA1UEBRMoRTM3MUEzQjZDMzkxMjYyQjZCQjg1QjZFNjhBQ0MxRkND MDdBNEUxNDAeFw0yNjA0MjEwODMyNTdaFw0yNjA0MjgwODMyNTdaMBgxFjAUBgNV BAMTDTY5ZTczNjM5LTBjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+tAH13pM6CQtJ/SOrNsX/dzxF7DjegRE3P1yzN9ehZkAKyEpXEorPgXUfyiJf +WDP3nP7GgNj1CqXWArk5j9OHrf0kkhOphfAcrJ5ImA8pWm8D8HxWF96YJW0icLg sSn6BbF1Nftf3aTgXZ2fUaElABA7AiA9Jxzb6ckOZ7Muc6TYtNCZx5oYm/kgl6Pu A+k77y3RQhA4XYxXxx8cpFxvziaFu0WHDr900QqEpQEIm04t8DJqHMKTl+/Owl5c ibHZ12Eb6mDGDtRhf7wgD3yFK0y/Pxv/qcZhcu3KnR/j4GiVeVciycAnhyxRqScV 1lvWMhJb/qYp4NZ73/ilODMXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS+zvz8rY xJCbAXzNFZ84E7xASWswHwYDVR0jBBgwFoAU43GjtsORJitruFtuaKzB/MB6ThQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTE0L0Q3Mjg0RUE0MDIx RDExRjFBQjU2MjgyRjQ5NkY1NkJDLzQzR2p0c09SSml0cnVGdHVhS3pCX01CNlRo US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvNDNHanRzT1JKaXRydUZ0dWFLekJfTUI2VGhRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTE0L0Q3Mjg0RUE0MDIxRDExRjFBQjU2MjgyRjQ5NkY1NkJDLzQzR2p0c09SSml0 cnVGdHVhS3pCX01CNlRoUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBS6HS3aXYya6m8CoM6zO2+W4BDGY/0+YdYhWlExTMPxev1lfX1TKDSQQ1Tonvg OuGl9sjD/tVmfeoPEBFiS2TvUKsnA071ykaweyV6w4xHKa+i0vrfb2Jp1efe0I9s BLMklzyrI2DkfddMs3rmkyKEu9nj0im6AiWsTFbLnNkUEq3fzkdIGARBfYh3ji0B pHUyOjBui2d5FT3tlSKY9C2yoGVnxMI9wEZpTweZ7MjDPSdHHpdLdxHKawGcXLmw uBQm8tTM1jzxpgsFaS1n/+n2gS3PiLNKp3fMaxQUP5E+0cqPudJl0I+U5pOpJi6J hBDmzDkfI+4Q1yHAkAT0rIyR -----END CERTIFICATE-----Generated at Tue Apr 21 21:40:41 2026 by rpki-client