$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft File: p5uCiHAxRBmQsY0aBfnicefnuOY.mft (raw, json) Hash identifier: 2QU56XmzXiGvHymY8iweOVsT/fCMAk/I+L9CFSdvRWA= Subject key identifier: 90:20:DD:7B:A9:9D:DA:80:B1:00:41:F9:D2:99:82:02:A6:6F:DD:F0 Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 Certificate issuer: /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Certificate serial: 0280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft Manifest number: 0252 Signing time: Wed 11 Mar 2026 01:39:36 +0000 Manifest this update: Wed 11 Mar 2026 01:39:35 +0000 Manifest next update: Wed 18 Mar 2026 01:39:35 +0000 Files and hashes: 1: p5uCiHAxRBmQsY0aBfnicefnuOY.crl (hash: N4KE8YijcC/61DXP2m2wq9zJCLJ7bpoaWC05CfGv1Ys=) 2: 34D5ED1210F511EEBCE2A81EC4F9AE02.roa (hash: tPvJ6ibshTdXuKO8A/hjIL4g3XF4DuP5+2X5k3/lunM=) 3: 0900F7CA7AE611EF8CE1F784C4F9AE02.roa (hash: FKRHRaDjtVgPms1401rj5mnS1bHVV0dLO0nqPD9MRKU=) 4: 4DD66E3C347F11EFB73F4074C4F9AE02.roa (hash: YHRMdtfB5PjXVdNYiPSJgNY2PlEXGzim4j/DO8EEY1c=) 5: 9CA607DA3C8411F0BDA85229C4F9AE02.roa (hash: JGgROCd0rurPRIraTkAMkDhgeLifHRo8Ck7DouTUfEU=) 6: E98F15362B3811EF926F1555C4F9AE02.roa (hash: 6QSIJmWvvqqKmVUGIf2JJLiSEAGvWSmGSyg7Gl9k5fE=) 7: 610B51267AE711EFACC0CA34C4F9AE02.roa (hash: zU4zzGCVl4bElUORl3NySVv02p4BnUlOIqIlBWtOii0=) 8: 9F4683A0B86211EDB9EDAD2CC4F9AE02.roa (hash: sFWh2u5jm+/XaSzPGlRz/2oVoDDT1FqpoZGU2nsK8eE=) 9: 5D463936C87611EDAC86AA74C4F9AE02.roa (hash: /ZJTbg872JeMBAOXZfelLan18q5X6y2rWqiJ7MriT7U=) 10: C8E6CF687AE811EFA0337A38C4F9AE02.roa (hash: m1+nCWPGVi+91aYdcnQe4+DRs/DiE2UcuXHShPkXJec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Mar 2026 01:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 640 (0x280) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6 Validity Not Before: Mar 11 01:39:35 2026 GMT Not After : Mar 18 01:39:35 2026 GMT Subject: CN=69b0c7d8-0a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2a:9b:9b:3a:9a:74:57:61:12:a2:c6:ca:50: 40:58:47:f3:9f:b2:f0:af:d9:f8:ab:3f:b7:31:29: b7:b6:af:76:38:5f:19:29:98:ba:7c:b4:57:d9:5b: 93:f0:a4:21:9c:be:df:bb:f5:e5:a8:d0:83:61:88: ed:4f:0c:46:85:3a:48:3a:73:f7:14:4b:a1:d4:b0: f1:1f:44:b4:b4:f6:72:db:77:42:60:c0:8e:f9:76: ca:86:60:89:d0:03:d3:ab:41:df:0f:40:8a:ab:0e: 7a:37:98:92:5e:1d:09:58:b3:a8:e6:d6:17:58:7f: c0:36:58:c1:3b:31:b6:d1:84:63:44:51:69:9c:15: dc:96:81:50:c8:e9:79:7d:8a:5a:e2:35:00:9c:96: 80:03:91:3a:81:7f:92:92:f2:7e:14:3d:38:b7:92: d1:91:82:8d:7b:48:2f:f5:18:d9:2e:e0:a7:85:97: be:1e:76:42:23:31:b8:d9:e6:c2:dd:ae:8a:7f:41: 31:33:6d:f3:07:f9:83:9f:d3:4c:7b:72:b3:e2:80: 5c:c9:15:18:e8:d7:a6:c8:62:a1:53:b4:5b:7e:ec: 0d:52:07:45:d3:f3:cb:da:d8:3d:4a:b4:10:61:89: 40:38:34:e5:e0:a4:d6:81:a6:a4:54:79:f8:5b:9f: c0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:DD:7B:A9:9D:DA:80:B1:00:41:F9:D2:99:82:02:A6:6F:DD:F0 X509v3 Authority Key Identifier: keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e6:cd:89:27:7a:42:2d:06:70:a6:52:65:9a:1e:56:e6:31: cb:d2:67:4a:8a:40:7d:e8:fe:b4:cf:c6:ec:4c:44:4d:88:71: 97:ab:07:b5:8d:40:b6:9c:a5:6e:b7:2f:c8:71:07:72:2b:b5: c0:82:69:01:81:2e:aa:7a:20:bc:95:bc:6d:39:92:fd:50:b4: 38:b3:1a:a2:4d:cf:41:d4:d6:10:b7:a0:9a:bb:3b:a6:d1:f3: 69:eb:ab:d7:23:c7:00:dd:e3:a5:b8:20:7e:b4:52:95:37:4f: 27:23:78:fd:12:a7:83:12:7b:5a:a3:ba:b1:eb:7e:fe:b5:21: 57:6c:ee:d9:8c:fb:8e:2b:66:2f:96:77:0e:0d:e5:6d:58:3e: a2:8e:46:9b:bd:7f:d4:09:ae:a1:fa:d2:6d:27:96:16:fb:d3: 29:cc:6e:41:f1:97:6e:ec:3c:5f:e0:ec:db:3c:bf:54:bb:a6: 5c:dd:0e:0b:80:20:d6:fb:ba:11:e4:3a:60:09:94:06:d0:b7: d4:bd:ba:ca:a5:73:35:3f:60:be:04:da:42:22:de:9e:6f:41: 09:22:db:32:02:fc:06:58:4e:ae:d4:eb:01:25:cb:d7:3f:ca: d7:32:62:3f:db:b7:6d:a2:ee:6a:35:a3:95:15:0d:ff:c6:1e: 90:0a:73:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFOUExMTAvBgNVBAUTKEE3OUI4Mjg4NzAzMTQ0MTk5MEIxOEQxQTA1RjlFMjcx RTdFN0I4RTYwHhcNMjYwMzExMDEzOTM1WhcNMjYwMzE4MDEzOTM1WjAYMRYwFAYD VQQDEw02OWIwYzdkOC0wYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCqbmzqadFdhEqLGylBAWEfzn7Lwr9n4qz+3MSm3tq92OF8ZKZi6fLRX2VuT 8KQhnL7fu/XlqNCDYYjtTwxGhTpIOnP3FEuh1LDxH0S0tPZy23dCYMCO+XbKhmCJ 0APTq0HfD0CKqw56N5iSXh0JWLOo5tYXWH/ANljBOzG20YRjRFFpnBXcloFQyOl5 fYpa4jUAnJaAA5E6gX+SkvJ+FD04t5LRkYKNe0gv9RjZLuCnhZe+HnZCIzG42ebC 3a6Kf0ExM23zB/mDn9NMe3Kz4oBcyRUY6NemyGKhU7RbfuwNUgdF0/PL2tg9SrQQ YYlAODTl4KTWgaakVHn4W5/AQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJAg3Xup ndqAsQBB+dKZggKmb93wMB8GA1UdIwQYMBaAFKebgohwMUQZkLGNGgX54nHn57jm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkU5QS84RkExRjU2RUI4 NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJCbVFzWTBhQmZuaWNlZm51 T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A1dUNpSEF4UkJtUXNZMGFCZm5pY2VmbnVPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkU5QS84RkExRjU2RUI4NUUxMUVEOEU2RjQyMTNDNEY5QUUwMi9wNXVDaUhBeFJC bVFzWTBhQmZuaWNlZm51T1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEArubNiSd6Qi0GcKZSZZoeVuYxy9JnSopAfej+tM/G7ExETYhxl6sHtY1Atpyl brcvyHEHciu1wIJpAYEuqnogvJW8bTmS/VC0OLMaok3PQdTWELegmrs7ptHzaeur 1yPHAN3jpbggfrRSlTdPJyN4/RKngxJ7WqO6set+/rUhV2zu2Yz7jitmL5Z3Dg3l bVg+oo5Gm71/1AmuofrSbSeWFvvTKcxuQfGXbuw8X+Ds2zy/VLumXN0OC4Ag1vu6 EeQ6YAmUBtC31L26yqVzNT9gvgTaQiLenm9BCSLbMgL8BlhOrtTrASXL1z/K1zJi P9u3baLuajWjlRUN/8YekApzoA== -----END CERTIFICATE-----Generated at Wed Mar 11 11:21:34 2026 by rpki-client