$ rpki-client -vvf rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft File: BmIVgepjVqm4tbC9s26io0KBciU.mft (raw, json) Hash identifier: W7qBCbtK4kzHj9KsxsD4l7imSVNlZFDWlifkZ0YhzBI= Subject key identifier: D5:F2:20:79:AC:C6:C0:C4:DF:13:B5:15:44:15:19:85:97:1E:52:20 Authority key identifier: 06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 Certificate issuer: /CN=A918D9E8/serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft Manifest number: 05 Signing time: Sat 07 Mar 2026 08:25:49 +0000 Manifest this update: Sat 07 Mar 2026 08:25:49 +0000 Manifest next update: Sat 14 Mar 2026 08:25:49 +0000 Files and hashes: 1: BmIVgepjVqm4tbC9s26io0KBciU.crl (hash: FRBXDE1RlG6fd/y/xhCHJ5QlZoR0z5L8nCpYRDp9+Os=) 2: 3829F376174D11F19A004491173D8C67.roa (hash: 0k0rXsYRdBQmrsruCwfnV2JmIIADeibhHxkfkqZPiGk=) 3: 0EEDB772174D11F193D7AA7E173D8C67.roa (hash: y6pgs+n3x+EaANPspWEoZC1ehkpn8O/za+IreRLvylU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 08:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D9E8, serialNumber=06621581EA6356A9B8B5B0BDB36EA2A342817225 Validity Not Before: Mar 7 08:25:49 2026 GMT Not After : Mar 14 08:25:49 2026 GMT Subject: CN=69abe10d-fcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:70:f2:61:30:00:b2:0c:b4:2e:c7:ac:67:ed: 19:63:dc:4b:c9:f1:e8:ef:cc:28:37:0b:2a:e3:a2: 4f:70:40:53:04:25:a3:e2:1e:01:0b:d2:c0:6f:70: 86:ce:26:25:3a:2d:61:58:d1:e1:72:3f:f4:04:2b: 0d:22:9b:ac:93:c8:bb:e1:7b:8a:98:cb:03:d5:26: 57:e2:de:53:fd:0e:b8:bc:9c:00:f2:21:92:ba:34: 69:bd:5f:11:0b:04:ab:b6:18:71:8a:17:62:ca:60: c0:60:14:08:ee:48:50:3b:0a:7b:ce:bf:c9:d9:05: 5d:cd:26:a4:fa:b8:25:54:3e:5e:c3:ff:96:6b:7f: 85:f4:44:95:f2:01:ff:01:f9:2c:27:55:dc:c0:6f: a2:9e:ef:9c:df:85:5d:bb:75:bc:72:28:37:f4:c4: 4e:07:62:ff:e3:da:67:40:c3:ac:db:b6:cc:38:fd: 1b:ec:86:90:38:65:92:52:f8:75:d4:aa:53:ce:58: f0:f3:e0:fc:12:94:c4:7f:ed:08:5d:e7:cc:e1:28: 40:ed:86:ca:6f:24:e1:ad:83:8e:ab:e2:88:47:9d: 42:37:b9:83:e7:6f:17:da:52:2e:61:3b:c7:d1:1f: 82:a6:d5:98:e7:be:89:1d:0a:cf:fe:70:33:de:e5: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:20:79:AC:C6:C0:C4:DF:13:B5:15:44:15:19:85:97:1E:52:20 X509v3 Authority Key Identifier: keyid:06:62:15:81:EA:63:56:A9:B8:B5:B0:BD:B3:6E:A2:A3:42:81:72:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BmIVgepjVqm4tbC9s26io0KBciU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D9E8/DAA477E4174C11F1A119F4D8163D8C67/BmIVgepjVqm4tbC9s26io0KBciU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:db:52:08:b8:30:80:44:53:e2:54:6c:ce:eb:7c:3e:56:6c: e2:be:14:21:0c:ab:8c:71:6f:6b:ef:32:22:bb:36:d3:01:8d: ba:5d:d0:07:5a:78:82:35:04:72:c3:d9:dd:af:03:2c:a7:99: 75:99:ec:5f:1c:e0:91:87:be:8c:36:3d:46:79:28:8b:62:ca: df:e1:32:09:14:27:5e:6f:96:b3:a3:49:2e:bc:5c:65:25:97: b4:c9:76:7a:65:ff:fe:9b:3b:fc:46:d6:62:52:1e:36:d7:1f: 0f:22:8d:6b:9d:be:aa:0f:6a:dc:db:6a:81:86:16:91:d2:e4: 55:ec:4a:0e:95:34:04:f0:71:70:16:1b:50:a0:0f:07:42:9f: ec:f6:28:c9:7d:41:f5:51:01:f2:63:92:70:8f:ba:7e:bc:a8: c5:36:0e:18:34:95:da:13:0a:4c:8c:d3:7e:1f:03:9f:74:88: 9a:61:db:04:a3:84:e9:e4:46:ef:df:83:ad:63:4e:29:eb:b8: 00:c0:b5:6d:fa:bd:1e:79:26:e1:52:e7:57:7e:be:7a:58:e6: c3:9a:3b:65:7f:1e:5e:d7:a2:3c:61:0b:4e:33:b3:f9:05:e1: eb:ae:9f:a1:28:14:66:11:f6:b6:b9:f5:83:83:e0:d6:ae:39: 1f:33:e6:75 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDlFODExMC8GA1UEBRMoMDY2MjE1ODFFQTYzNTZBOUI4QjVCMEJEQjM2RUEyQTM0 MjgxNzIyNTAeFw0yNjAzMDcwODI1NDlaFw0yNjAzMTQwODI1NDlaMBgxFjAUBgNV BAMTDTY5YWJlMTBkLWZjZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvcPJhMACyDLQux6xn7Rlj3EvJ8ejvzCg3Cyrjok9wQFMEJaPiHgEL0sBvcIbO JiU6LWFY0eFyP/QEKw0im6yTyLvhe4qYywPVJlfi3lP9Dri8nADyIZK6NGm9XxEL BKu2GHGKF2LKYMBgFAjuSFA7CnvOv8nZBV3NJqT6uCVUPl7D/5Zrf4X0RJXyAf8B +SwnVdzAb6Ke75zfhV27dbxyKDf0xE4HYv/j2mdAw6zbtsw4/RvshpA4ZZJS+HXU qlPOWPDz4PwSlMR/7Qhd58zhKEDthspvJOGtg46r4ohHnUI3uYPnbxfaUi5hO8fR H4Km1ZjnvokdCs/+cDPe5c/pAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1fIgeazG wMTfE7UVRBUZhZceUiAwHwYDVR0jBBgwFoAUBmIVgepjVqm4tbC9s26io0KBciUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEOUU4L0RBQTQ3N0U0MTc0 QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFtNHRiQzlzMjZpbzBLQmNp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm1JVmdlcGpWcW00dGJDOXMyNmlvMEtCY2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE OUU4L0RBQTQ3N0U0MTc0QzExRjFBMTE5RjREODE2M0Q4QzY3L0JtSVZnZXBqVnFt NHRiQzlzMjZpbzBLQmNpVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAs21IIuDCARFPiVGzO63w+VmzivhQhDKuMcW9r7zIiuzbTAY26XdAHWniCNQRy w9ndrwMsp5l1mexfHOCRh76MNj1GeSiLYsrf4TIJFCdeb5azo0kuvFxlJZe0yXZ6 Zf/+mzv8RtZiUh421x8PIo1rnb6qD2rc22qBhhaR0uRV7EoOlTQE8HFwFhtQoA8H Qp/s9ijJfUH1UQHyY5Jwj7p+vKjFNg4YNJXaEwpMjNN+HwOfdIiaYdsEo4Tp5Ebv 34OtY04p67gAwLVt+r0eeSbhUudXfr56WObDmjtlfx5e16I8YQtOM7P5BeHrrp+h KBRmEfa2ufWDg+DWrjkfM+Z1 -----END CERTIFICATE-----Generated at Sun Mar 8 01:26:07 2026 by rpki-client