$ rpki-client -vvf rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft File: dwOm1WxxgCG9nInrPEvtgX7VauU.mft (raw, json) Hash identifier: B+/aWc3SQY9XAytkx6F1tSMCXMWcFeLbrqKck90S/bA= Subject key identifier: A2:3A:80:FA:D1:6B:EC:36:0E:DC:78:93:0E:73:DE:69:4D:22:00:B9 Authority key identifier: 77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 Certificate issuer: /CN=A918F20B/serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Certificate serial: 045D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft Manifest number: 0447 Signing time: Sun 22 Mar 2026 23:47:56 +0000 Manifest this update: Sun 22 Mar 2026 23:47:56 +0000 Manifest next update: Sun 29 Mar 2026 23:47:56 +0000 Files and hashes: 1: dwOm1WxxgCG9nInrPEvtgX7VauU.crl (hash: VY7O42JEd6zKCZe9p/GMqkZ0WM9NlS1MT7KpmXzB+aY=) 2: FC5AFF000BE011ED9E3AA135C4F9AE02.roa (hash: DYt1uh7mPGDQjto9yPvu3WUF/A198ZNwxi2I+7nO8Bw=) 3: B56F2E9697B811ECA8AA4230C4F9AE02.roa (hash: 6ti6FbVvSqGTcr5Mk4sW/mWtZDVZBoCM8zsoDPjRWXs=) 4: D9AD698C961211ECB515C474C4F9AE02.roa (hash: HY8jx42KdkySd2cMF5R0KcyeEkXfACP7f6ppIrDm7WM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 23:47:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1117 (0x45d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F20B, serialNumber=7703A6D56C718021BD9C89EB3C4BED817ED56AE5 Validity Not Before: Mar 22 23:47:56 2026 GMT Not After : Mar 29 23:47:56 2026 GMT Subject: CN=69c07fac-f541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:53:4e:a2:a8:26:ca:06:a7:65:f9:15:8f:94: 03:00:31:30:a2:5e:30:1f:ab:2a:64:fe:89:57:37: 30:9d:df:74:53:9c:8f:f1:ce:62:2d:48:84:fb:f6: 9f:e8:fe:0f:31:59:63:d5:96:cc:2f:a1:71:4e:f9: de:65:72:4e:aa:ee:98:ec:5f:10:48:2b:a9:62:7a: b1:52:6b:bf:02:c6:43:b0:b5:42:e9:4e:14:a6:94: aa:41:aa:53:c9:57:eb:2d:c9:bc:b6:60:ab:f7:98: c1:5b:4f:e0:fd:85:d7:4e:f1:bd:5f:c8:6a:56:b9: 83:46:d8:00:09:94:a6:3f:a1:6d:ed:bb:0e:1a:dc: dd:b5:05:4e:07:33:1c:ff:f1:7d:c2:12:e4:9e:32: 45:69:f0:2f:a2:f8:2e:23:61:16:43:1e:62:ae:94: c5:0c:c1:db:71:32:a1:f3:82:38:18:17:c3:4e:ba: 1f:30:af:7b:ec:62:60:28:01:de:a6:a6:d6:25:ac: 97:9b:51:88:c1:d8:9a:f4:e9:7e:86:f9:21:c6:b7: 1f:77:5e:16:9a:11:da:8a:e8:73:da:63:c6:05:7b: 42:9b:ee:56:d9:ff:ce:df:0e:8c:51:ee:16:81:1c: 3f:00:9f:d5:d4:65:6f:66:e0:ee:1e:bb:d5:5a:a0: ad:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3A:80:FA:D1:6B:EC:36:0E:DC:78:93:0E:73:DE:69:4D:22:00:B9 X509v3 Authority Key Identifier: keyid:77:03:A6:D5:6C:71:80:21:BD:9C:89:EB:3C:4B:ED:81:7E:D5:6A:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dwOm1WxxgCG9nInrPEvtgX7VauU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F20B/19E4DBF6960F11EC890A446DC4F9AE02/dwOm1WxxgCG9nInrPEvtgX7VauU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:32:a7:5b:bd:55:0c:74:b4:2a:91:8a:b0:c6:5c:cb:1a:00: 61:5b:3b:01:97:4e:ed:5a:1b:ff:68:85:1d:ac:6a:1d:05:cd: de:9a:df:72:9b:8c:5c:c4:73:1d:a1:f6:51:62:11:b6:6e:f2: 12:53:36:89:38:88:eb:02:e4:76:9c:c4:6c:df:bf:90:99:ba: 62:eb:bd:97:c7:e1:f2:dc:7e:33:d9:7d:c6:7e:cb:fd:a6:24: 13:40:59:9c:da:87:18:64:62:88:63:5b:53:a8:e9:0d:9e:66: 92:77:2b:c1:5f:08:88:b8:14:22:a9:4b:01:d6:04:0a:e3:d7: 9b:b1:d4:c1:17:b6:47:86:c2:18:ac:71:bb:cb:dd:02:9d:36: 26:b3:3d:2a:a4:5e:b9:6f:1f:4a:1b:6e:b9:30:f6:5d:74:ef: b8:c2:b5:83:48:79:58:ce:bc:97:7e:a8:47:3d:b7:80:34:41: 1c:f8:61:8a:72:92:b4:c1:ff:46:1a:35:61:30:f9:f9:12:3d: 3c:cd:5e:16:62:57:94:7d:8b:ad:21:c3:f9:0f:de:d2:0e:a6: 3b:28:51:ab:fb:d4:7c:fa:71:55:3e:fa:a5:9d:48:b2:bf:99: e5:e7:f9:c1:a9:22:29:87:24:9a:4f:17:92:94:a3:a9:f0:7f: e8:c4:57:8a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEYyMEIxMTAvBgNVBAUTKDc3MDNBNkQ1NkM3MTgwMjFCRDlDODlFQjNDNEJFRDgx N0VENTZBRTUwHhcNMjYwMzIyMjM0NzU2WhcNMjYwMzI5MjM0NzU2WjAYMRYwFAYD VQQDEw02OWMwN2ZhYy1mNTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FNOoqgmyganZfkVj5QDADEwol4wH6sqZP6JVzcwnd90U5yP8c5iLUiE+/af 6P4PMVlj1ZbML6FxTvneZXJOqu6Y7F8QSCupYnqxUmu/AsZDsLVC6U4UppSqQapT yVfrLcm8tmCr95jBW0/g/YXXTvG9X8hqVrmDRtgACZSmP6Ft7bsOGtzdtQVOBzMc //F9whLknjJFafAvovguI2EWQx5irpTFDMHbcTKh84I4GBfDTrofMK977GJgKAHe pqbWJayXm1GIwdia9Ol+hvkhxrcfd14WmhHaiuhz2mPGBXtCm+5W2f/O3w6MUe4W gRw/AJ/V1GVvZuDuHrvVWqCt/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKI6gPrR a+w2Dtx4kw5z3mlNIgC5MB8GA1UdIwQYMBaAFHcDptVscYAhvZyJ6zxL7YF+1Wrl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RjIwQi8xOUU0REJGNjk2 MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdDRzluSW5yUEV2dGdYN1Zh dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R3T20xV3h4Z0NHOW5JbnJQRXZ0Z1g3VmF1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RjIwQi8xOUU0REJGNjk2MEYxMUVDODkwQTQ0NkRDNEY5QUUwMi9kd09tMVd4eGdD RzluSW5yUEV2dGdYN1ZhdVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHjKnW71VDHS0KpGKsMZcyxoAYVs7AZdO7Vob/2iFHaxqHQXN3prfcpuMXMRz HaH2UWIRtm7yElM2iTiI6wLkdpzEbN+/kJm6Yuu9l8fh8tx+M9l9xn7L/aYkE0BZ nNqHGGRiiGNbU6jpDZ5mkncrwV8IiLgUIqlLAdYECuPXm7HUwRe2R4bCGKxxu8vd Ap02JrM9KqReuW8fShtuuTD2XXTvuMK1g0h5WM68l36oRz23gDRBHPhhinKStMH/ Rho1YTD5+RI9PM1eFmJXlH2LrSHD+Q/e0g6mOyhRq/vUfPpxVT76pZ1Isr+Z5ef5 wakiKYckmk8XkpSjqfB/6MRXig== -----END CERTIFICATE-----Generated at Tue Mar 24 09:21:12 2026 by rpki-client