$ rpki-client -vvf rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft File: Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft (raw, json) Hash identifier: 6XUuetxzajFr6T2WJqjN/9MIoPG3UvmMMudHCEEWTFA= Subject key identifier: 9A:82:8E:A7:77:8A:21:1A:3A:1F:91:96:91:7A:6E:AC:F2:C4:E2:80 Authority key identifier: 32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D Certificate issuer: /CN=A917FA93/serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Certificate serial: 2429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft Manifest number: 23E2 Signing time: Sun 22 Mar 2026 15:42:56 +0000 Manifest this update: Sun 22 Mar 2026 15:42:56 +0000 Manifest next update: Sun 29 Mar 2026 15:42:56 +0000 Files and hashes: 1: Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl (hash: Hq8D/SKw/92nNF55lzWCTupZOYVttcELicRH2Y/LxrI=) 2: 44059B50B10F11E5A010921EC4F9AE02.roa (hash: Vbmmu23AlBObytRTwt9j6G8iDN7Sx1IFw16gH03FE0E=) 3: 58A35B90EA5611EEA9708773C4F9AE02.roa (hash: E8onjnN6iimBzZDHgmtWpBoYlonlzj7tjyMVxIXY934=) 4: 4707F6CCB10F11E5A010921EC4F9AE02.roa (hash: JCPrD1uQLa6mO5UGYsREbdubhZ0qd7uDKpV9IJX0e5I=) 5: 459A5D3EB10F11E5A010921EC4F9AE02.roa (hash: /9d5ufwGgNQ7zM38tyk/+4Sfdq1zdYvG1O4jWxq8U+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9257 (0x2429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FA93, serialNumber=325B2A6FD4B7BD40895562719FFD8D9AA1A8766D Validity Not Before: Mar 22 15:42:56 2026 GMT Not After : Mar 29 15:42:56 2026 GMT Subject: CN=69c00e00-a006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:8e:26:3d:08:1d:90:fa:66:04:81:71:5f: 51:58:e5:fc:74:d5:90:e1:97:e4:b3:65:ee:6d:4d: 68:41:2f:e8:98:e3:68:62:c1:1c:d0:96:d9:41:9c: 19:d7:32:e6:5c:37:dc:c8:72:d7:6a:40:5f:c9:ff: e3:19:2b:99:6f:cf:e0:be:a8:60:3f:6d:37:b6:17: 80:b1:ed:06:28:f0:fb:d5:fa:46:41:79:b9:9a:f1: 4a:5f:86:d8:a0:8a:bb:78:c1:f1:26:b2:58:1b:bb: 24:12:ee:c1:75:e4:57:c2:9d:b4:63:87:2a:0a:16: a7:a0:76:42:98:5e:55:7f:38:87:97:bc:f4:90:f5: 70:16:08:ca:2a:4c:43:b3:3f:60:cd:f3:ea:3b:f1: ee:a3:5a:e4:a0:54:83:06:75:1c:6d:b5:ae:73:5e: 7e:81:41:77:fa:2f:dd:9e:c1:ee:6a:5b:a2:8e:d2: 7d:5c:41:92:5a:8f:1e:06:96:cd:b7:fe:ed:d4:8e: e8:c9:3e:ea:58:49:7a:7b:85:a4:37:af:8e:79:be: ee:37:3b:5c:a6:46:75:84:ac:7d:39:a3:3d:f5:66: 16:4f:85:22:3d:87:b5:6f:59:38:ca:31:40:42:51: 69:6f:d2:1a:65:6d:2c:5f:cb:2c:e3:ae:f3:bb:e7: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:82:8E:A7:77:8A:21:1A:3A:1F:91:96:91:7A:6E:AC:F2:C4:E2:80 X509v3 Authority Key Identifier: keyid:32:5B:2A:6F:D4:B7:BD:40:89:55:62:71:9F:FD:8D:9A:A1:A8:76:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mlsqb9S3vUCJVWJxn_2NmqGodm0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FA93/E9013B76840711E592E9472DC4F9AE02/Mlsqb9S3vUCJVWJxn_2NmqGodm0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:27:0b:b4:58:0d:4a:dc:84:f0:e2:51:a2:49:02:d1:11:ea: 95:2d:03:ec:3a:45:eb:78:75:9b:79:8b:92:a4:d3:03:71:4a: 9f:22:ca:40:56:3f:14:30:43:b9:d5:5f:df:ab:4c:9b:45:ff: 92:a2:2c:de:96:df:04:66:8d:0c:8b:51:ee:88:2b:d9:2e:62: dd:27:23:99:11:d9:de:b1:c2:32:95:d8:fe:e5:0d:c6:3f:18: 95:c5:cb:46:1a:f6:86:52:bb:6f:ec:07:a1:d4:db:89:38:54: 19:1b:c0:5c:14:45:14:9b:4a:ab:8b:37:d8:ac:28:a5:c7:4d: 66:f8:8f:ac:6a:aa:aa:56:d3:37:3f:29:7c:39:9b:2e:7b:5d: 0c:6a:18:fb:b4:02:df:e3:5f:de:15:64:b9:fa:5d:16:3b:e4: de:4c:f3:88:b9:82:94:5f:c7:f1:1a:b2:e8:9f:31:3a:be:7e: 98:48:2a:f8:0f:93:f5:b5:55:1a:32:7f:87:c2:80:65:aa:9a: 08:dc:67:32:6b:c9:5a:ff:04:a5:f6:1d:92:09:f6:f7:6a:4b: d5:24:2a:40:f7:58:9e:bd:ef:be:41:96:d6:11:63:d6:f5:56: 88:e4:4f:6d:4a:81:26:b3:00:78:90:ca:c5:e7:80:75:84:08: ca:42:5c:3e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0ZBOTMxMTAvBgNVBAUTKDMyNUIyQTZGRDRCN0JENDA4OTU1NjI3MTlGRkQ4RDlB QTFBODc2NkQwHhcNMjYwMzIyMTU0MjU2WhcNMjYwMzI5MTU0MjU2WjAYMRYwFAYD VQQDEw02OWMwMGUwMC1hMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuWOJj0IHZD6ZgSBcV9RWOX8dNWQ4Zfks2XubU1oQS/omONoYsEc0JbZQZwZ 1zLmXDfcyHLXakBfyf/jGSuZb8/gvqhgP203theAse0GKPD71fpGQXm5mvFKX4bY oIq7eMHxJrJYG7skEu7BdeRXwp20Y4cqChanoHZCmF5VfziHl7z0kPVwFgjKKkxD sz9gzfPqO/Huo1rkoFSDBnUcbbWuc15+gUF3+i/dnsHualuijtJ9XEGSWo8eBpbN t/7t1I7oyT7qWEl6e4WkN6+Oeb7uNztcpkZ1hKx9OaM99WYWT4UiPYe1b1k4yjFA QlFpb9IaZW0sX8ss467zu+ct8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJqCjqd3 iiEaOh+RlpF6bqzyxOKAMB8GA1UdIwQYMBaAFDJbKm/Ut71AiVVicZ/9jZqhqHZt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RkE5My9FOTAxM0I3Njg0 MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZVQ0pWV0p4bl8yTm1xR29k bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01sc3FiOVMzdlVDSlZXSnhuXzJObXFHb2RtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkE5My9FOTAxM0I3Njg0MDcxMUU1OTJFOTQ3MkRDNEY5QUUwMi9NbHNxYjlTM3ZV Q0pWV0p4bl8yTm1xR29kbTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsScLtFgNStyE8OJRokkC0RHqlS0D7DpF63h1m3mLkqTTA3FKnyLKQFY/FDBD udVf36tMm0X/kqIs3pbfBGaNDItR7ogr2S5i3ScjmRHZ3rHCMpXY/uUNxj8YlcXL Rhr2hlK7b+wHodTbiThUGRvAXBRFFJtKq4s32KwopcdNZviPrGqqqlbTNz8pfDmb LntdDGoY+7QC3+Nf3hVkufpdFjvk3kzziLmClF/H8Rqy6J8xOr5+mEgq+A+T9bVV GjJ/h8KAZaqaCNxnMmvJWv8EpfYdkgn292pL1SQqQPdYnr3vvkGW1hFj1vVWiORP bUqBJrMAeJDKxeeAdYQIykJcPg== -----END CERTIFICATE-----Generated at Mon Mar 23 15:51:37 2026 by rpki-client