$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft File: iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json) Hash identifier: KZ2g3HJ11KtdGI2w1fyg/VqJrh0GuRPV6U3rHdhAwvQ= Subject key identifier: F3:80:A2:20:5F:1F:00:7E:69:14:16:56:23:65:4B:51:9C:1B:53:EE Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 Certificate issuer: /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Certificate serial: 1414 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft Manifest number: 13D8 Signing time: Thu 12 Mar 2026 16:50:02 +0000 Manifest this update: Thu 12 Mar 2026 16:50:02 +0000 Manifest next update: Thu 19 Mar 2026 16:50:02 +0000 Files and hashes: 1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: Iz8Sexa0P+D+r9EG7+Lz0hv9qMMXB4JNKPdItdzxUCE=) 2: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=) 3: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=) 4: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=) 5: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 16:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5140 (0x1414) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934 Validity Not Before: Mar 12 16:50:02 2026 GMT Not After : Mar 19 16:50:02 2026 GMT Subject: CN=69b2eeba-8265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:fd:b8:16:c5:b4:fd:a4:84:0a:c4:63:7d: 93:92:df:a5:6c:cf:df:db:57:1a:79:63:4c:bd:d5: 7a:22:2a:38:7d:a4:ae:2d:85:c8:11:26:f4:5f:74: 77:78:24:d8:9d:92:5a:25:83:55:3d:92:dd:2b:67: f8:ca:9f:d8:50:4e:26:29:6b:11:46:ad:98:aa:0e: 81:78:d2:73:ec:dc:58:93:d4:b8:45:7b:eb:b6:10: 3a:31:86:f9:ab:31:2d:a7:e3:50:cc:89:a6:6a:48: 39:f5:1d:dc:4d:00:13:06:a6:83:87:a5:87:ba:0c: c0:e8:b6:66:52:c7:71:b6:0a:0c:4e:eb:78:ed:9d: bc:c1:af:4a:16:8e:dd:bd:83:7a:e4:b2:17:aa:e5: 89:eb:32:ef:cc:00:15:ec:94:31:86:75:b2:a7:4f: 56:8c:1f:e7:6e:cd:d9:79:c9:17:04:cf:83:a2:cb: b9:eb:17:95:a3:da:e0:bc:67:f8:5b:66:35:6d:37: c3:43:e4:58:8b:ff:47:95:bf:dd:d9:66:1c:86:0a: 1c:ed:04:45:54:6e:c7:fa:4c:82:8a:19:41:47:09: 7f:d2:fa:4b:f0:35:a7:cc:e8:10:fa:ce:70:13:2b: e3:04:8c:64:c2:fc:35:f4:f2:2c:4f:a2:5b:15:98: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:80:A2:20:5F:1F:00:7E:69:14:16:56:23:65:4B:51:9C:1B:53:EE X509v3 Authority Key Identifier: keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:36:e6:dd:3d:c7:2e:e2:51:1c:af:d4:2f:8d:63:69:9e:54: 96:2a:c7:4d:36:57:61:11:3d:a0:40:9b:1a:54:8f:f5:c1:ba: c2:03:fb:2b:20:f2:89:18:4d:c7:d0:96:df:44:3b:6f:2c:fb: c1:5d:e3:8d:ac:6e:20:a4:32:48:a9:8f:0a:5a:6c:e7:4f:b5: 41:8c:54:05:f3:80:df:34:8a:49:2e:3b:20:fa:74:ef:c5:e8: 36:99:ed:b3:41:c1:f1:8f:be:ea:45:a6:1f:79:e4:7e:9f:85: dd:16:f3:7d:61:52:14:91:35:fc:41:34:11:13:d0:88:3d:6e: a4:0c:e0:01:5b:58:72:1f:b9:32:ea:3b:97:0e:ee:ff:a5:26: d2:34:c5:c6:e7:00:f3:c1:16:39:27:b2:5b:57:f4:ed:c9:ce: 9c:18:ca:e9:e6:0c:f5:b1:05:b4:f7:7a:f1:e4:1e:56:0d:a7: 76:fd:1b:64:1f:06:72:d6:87:46:85:38:4c:40:7b:38:ee:f7: 36:84:28:aa:c7:18:bd:a8:e2:4b:90:f7:b2:3d:5b:f9:c8:37: 34:61:12:22:9f:b2:28:35:c2:85:63:1a:2f:5f:d9:a3:1b:fc: a1:f6:2e:25:a8:7b:f3:c4:88:33:c3:5e:f7:db:9d:72:f1:d8: cb:b0:93:73 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux OENGNkU5MzQwHhcNMjYwMzEyMTY1MDAyWhcNMjYwMzE5MTY1MDAyWjAYMRYwFAYD VQQDEw02OWIyZWViYS04MjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fb9uBbFtP2khArEY32Tkt+lbM/f21caeWNMvdV6Iio4faSuLYXIESb0X3R3 eCTYnZJaJYNVPZLdK2f4yp/YUE4mKWsRRq2Yqg6BeNJz7NxYk9S4RXvrthA6MYb5 qzEtp+NQzImmakg59R3cTQATBqaDh6WHugzA6LZmUsdxtgoMTut47Z28wa9KFo7d vYN65LIXquWJ6zLvzAAV7JQxhnWyp09WjB/nbs3ZeckXBM+Dosu56xeVo9rgvGf4 W2Y1bTfDQ+RYi/9Hlb/d2WYchgoc7QRFVG7H+kyCihlBRwl/0vpL8DWnzOgQ+s5w EyvjBIxkwvw19PIsT6JbFZiAcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPOAoiBf HwB+aRQWViNlS1GcG1PuMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2 VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh NnhzUml4dmVaejRZejI2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAUTbm3T3HLuJRHK/UL41jaZ5UlirHTTZXYRE9oECbGlSP9cG6wgP7KyDyiRhN x9CW30Q7byz7wV3jjaxuIKQySKmPClps50+1QYxUBfOA3zSKSS47IPp078XoNpnt s0HB8Y++6kWmH3nkfp+F3RbzfWFSFJE1/EE0ERPQiD1upAzgAVtYch+5Muo7lw7u /6Um0jTFxucA88EWOSeyW1f07cnOnBjK6eYM9bEFtPd68eQeVg2ndv0bZB8GctaH RoU4TEB7OO73NoQoqscYvajiS5D3sj1b+cg3NGESIp+yKDXChWMaL1/Zoxv8ofYu Jah788SIM8Ne99udcvHYy7CTcw== -----END CERTIFICATE-----Generated at Fri Mar 13 12:14:14 2026 by rpki-client