$ rpki-client -vvf rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft File: rkcY5fMvAEoDEv64aa3LvMTu5RY.mft (raw, json) Hash identifier: d1nTgFvP39OFkreGWPhrS9GitBwM+YyCYnt6nnd0t48= Subject key identifier: 58:AC:D6:48:06:75:CC:B7:E6:6E:18:B3:EC:A7:67:1B:DA:9E:24:27 Authority key identifier: AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 Certificate issuer: /CN=A917C185/serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Certificate serial: 09EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft Manifest number: 09DD Signing time: Sat 28 Mar 2026 19:47:02 +0000 Manifest this update: Sat 28 Mar 2026 19:47:01 +0000 Manifest next update: Sat 04 Apr 2026 19:47:01 +0000 Files and hashes: 1: rkcY5fMvAEoDEv64aa3LvMTu5RY.crl (hash: TOStxwd38HeDxF5cCj9eqG4PAVyEivMz5YBTMjnPaus=) 2: CB91083CA63511EA900DB923C4F9AE02.roa (hash: kprOxi7yOOu/qaqTDcj+Kv/ZVavP691sQgk1g/w7hYw=) 3: DF27F546D12D11EE9F451355C4F9AE02.roa (hash: 6QMDVSthddfqb1QrZW5I4wtYqanc1b5umweIX9kimlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2540 (0x9ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C185, serialNumber=AE4718E5F32F004A0312FEB869ADCBBCC4EEE516 Validity Not Before: Mar 28 19:47:01 2026 GMT Not After : Apr 4 19:47:01 2026 GMT Subject: CN=69c83036-10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:eb:1f:87:f4:51:de:86:7f:ce:a2:26:f1: 00:ef:23:0d:34:e7:67:23:6d:d9:8c:17:41:14:2a: 82:95:74:b7:13:1a:e4:06:9e:45:0b:8e:f8:9c:06: 7d:22:b1:aa:5d:bb:13:75:e6:39:c6:31:1d:dc:f2: c6:66:92:30:f1:78:61:03:bf:1b:52:3a:d0:d6:37: 09:54:61:bb:fd:1e:80:54:a6:e5:27:f4:a7:42:64: ba:6a:68:8c:7e:b1:ea:6f:e9:be:c9:c1:4f:7d:7f: 7f:08:70:f0:40:b7:51:b1:10:12:7d:f4:fe:b2:2d: 02:75:db:cb:bf:69:45:d3:a2:8a:60:89:ef:b4:aa: 54:bf:99:de:46:24:54:63:5e:57:30:3d:ac:52:6b: 78:be:d8:fb:7d:0a:51:82:f9:ea:d9:2e:d1:2a:ae: dc:3f:fb:76:97:68:cb:2d:1f:a9:7a:99:1c:a9:f1: 6e:18:15:76:66:e3:a1:ae:36:9d:bb:d7:87:88:f9: 3c:c4:a7:4f:4a:c6:ee:d3:a4:18:7b:d0:65:fe:3e: 2d:6e:e5:c8:2b:67:ad:6e:a1:f0:79:ae:8d:08:97: dd:03:69:a2:a3:41:5d:87:f9:3a:32:f0:4d:1a:84: 0e:e9:4d:1c:28:5b:d0:40:86:b8:7f:0d:8a:a3:79: ec:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:AC:D6:48:06:75:CC:B7:E6:6E:18:B3:EC:A7:67:1B:DA:9E:24:27 X509v3 Authority Key Identifier: keyid:AE:47:18:E5:F3:2F:00:4A:03:12:FE:B8:69:AD:CB:BC:C4:EE:E5:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rkcY5fMvAEoDEv64aa3LvMTu5RY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C185/202276BA9BFF11EA8436FC45C4F9AE02/rkcY5fMvAEoDEv64aa3LvMTu5RY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:08:fe:33:b6:6c:6e:79:53:39:04:2a:a0:b2:4b:fc:0a:11: fa:01:d5:c8:eb:00:3f:17:1e:42:ce:4c:52:be:46:ee:43:56: 95:e4:fc:78:44:08:c8:7d:b9:ff:22:f4:61:d7:12:f4:09:ef: 5e:da:db:89:35:80:26:22:52:ed:37:5d:8e:01:25:c4:e2:79: 2a:56:59:0d:6c:5b:8b:40:88:94:12:e1:ec:eb:0a:2c:95:3e: 63:6c:4a:67:32:68:71:f7:5d:74:9c:6e:37:31:08:a4:ee:b4: fd:1b:d8:1b:cb:51:54:ea:39:0d:ed:e8:8b:40:86:58:45:92: 5e:3e:32:71:f6:15:2b:1b:49:f7:ee:ca:81:b9:27:85:44:0e: 9f:35:f0:7c:22:ff:93:d3:f9:61:16:dd:ae:53:da:6a:64:f5: a5:e9:c7:88:d3:93:a8:ac:6e:f3:f6:66:9f:d7:c4:24:18:32: eb:64:2c:51:6b:66:42:b0:e4:49:1e:c9:c2:c6:59:96:e1:5c: 6d:a8:fb:a3:26:47:2a:2b:f6:ac:d7:6a:7f:50:ab:c7:22:7d: f2:22:3c:e3:46:35:7d:c8:50:5b:cf:4b:32:39:5e:3a:d5:81: ca:e8:80:82:15:88:e3:86:9a:8b:1c:6d:06:3a:0e:4c:c4:2d: 11:c2:b9:25 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MxODUxMTAvBgNVBAUTKEFFNDcxOEU1RjMyRjAwNEEwMzEyRkVCODY5QURDQkJD QzRFRUU1MTYwHhcNMjYwMzI4MTk0NzAxWhcNMjYwNDA0MTk0NzAxWjAYMRYwFAYD VQQDEw02OWM4MzAzNi0xMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse/rH4f0Ud6Gf86iJvEA7yMNNOdnI23ZjBdBFCqClXS3ExrkBp5FC474nAZ9 IrGqXbsTdeY5xjEd3PLGZpIw8XhhA78bUjrQ1jcJVGG7/R6AVKblJ/SnQmS6amiM frHqb+m+ycFPfX9/CHDwQLdRsRASffT+si0CddvLv2lF06KKYInvtKpUv5neRiRU Y15XMD2sUmt4vtj7fQpRgvnq2S7RKq7cP/t2l2jLLR+pepkcqfFuGBV2ZuOhrjad u9eHiPk8xKdPSsbu06QYe9Bl/j4tbuXIK2etbqHwea6NCJfdA2mio0Fdh/k6MvBN GoQO6U0cKFvQQIa4fw2Ko3nsmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFis1kgG dcy35m4Ys+ynZxvaniQnMB8GA1UdIwQYMBaAFK5HGOXzLwBKAxL+uGmty7zE7uUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzE4NS8yMDIyNzZCQTlC RkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFFb0RFdjY0YWEzTHZNVHU1 UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JrY1k1Zk12QUVvREV2NjRhYTNMdk1UdTVSWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzE4NS8yMDIyNzZCQTlCRkYxMUVBODQzNkZDNDVDNEY5QUUwMi9ya2NZNWZNdkFF b0RFdjY0YWEzTHZNVHU1UlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWQj+M7ZsbnlTOQQqoLJL/AoR+gHVyOsAPxceQs5MUr5G7kNWleT8eEQIyH25 /yL0YdcS9AnvXtrbiTWAJiJS7TddjgElxOJ5KlZZDWxbi0CIlBLh7OsKLJU+Y2xK ZzJocfdddJxuNzEIpO60/RvYG8tRVOo5De3oi0CGWEWSXj4ycfYVKxtJ9+7Kgbkn hUQOnzXwfCL/k9P5YRbdrlPaamT1penHiNOTqKxu8/Zmn9fEJBgy62QsUWtmQrDk SR7JwsZZluFcbaj7oyZHKiv2rNdqf1CrxyJ98iI840Y1fchQW89LMjleOtWByuiA ghWI44aaixxtBjoOTMQtEcK5JQ== -----END CERTIFICATE-----Generated at Mon Mar 30 01:30:52 2026 by rpki-client