$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft File: -cNjgFn4ZOhK479Q2qwHnGhGPqc.mft (raw, json) Hash identifier: 3MNUprvRhjLaYc708iopd/5WIw+mFaHAYpg5URunaF4= Subject key identifier: 7E:F7:6E:D1:00:FF:2B:FA:67:85:1A:A7:BE:5C:69:4A:26:59:39:CF Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 Certificate issuer: /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft Manifest number: 05BA Signing time: Fri 20 Mar 2026 22:44:41 +0000 Manifest this update: Fri 20 Mar 2026 22:44:41 +0000 Manifest next update: Fri 27 Mar 2026 22:44:41 +0000 Files and hashes: 1: -cNjgFn4ZOhK479Q2qwHnGhGPqc.crl (hash: w9Ial12RPaEsp3yCp9I6d3kdtjG2NaO/46Qqr19czes=) 2: E0A5F584DFAC11EE8C281B42C4F9AE02.roa (hash: ACH95SwjT1YpCDpkqchyYu/Flaw3KUpz5N98U+Lw/tY=) 3: 27023558912A11F09F7D4044C4F9AE02.roa (hash: OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=) 4: F307B7F4912A11F0B418B448C4F9AE02.roa (hash: Sn67Wsq1d2oCfy6pDGrSn0YDKV0xfK/wnuR+TWYyUN0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7 Validity Not Before: Mar 20 22:44:41 2026 GMT Not After : Mar 27 22:44:41 2026 GMT Subject: CN=69bdcdd9-db5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:b3:aa:11:7b:85:34:e6:e0:5f:d5:3c:86: 82:72:20:14:d3:4f:6f:d3:a8:af:91:3a:9a:3e:ff: 26:40:ed:19:92:17:74:0a:b7:09:aa:92:a2:b1:c4: ba:ea:72:45:d6:2d:95:6a:1c:76:42:eb:ff:67:35: f1:6c:c6:b5:bb:59:3d:31:67:ed:57:77:df:60:a3: 1c:f5:f3:0a:c5:f6:07:3e:94:dc:87:2e:39:9e:bf: bd:be:28:ae:d6:8f:0f:5f:fa:95:99:e4:33:9e:94: f4:f9:95:50:30:eb:b7:b1:0e:2b:6d:01:90:ad:75: 17:3d:94:e9:ac:9a:af:af:3f:f6:d6:db:c1:6f:4a: a2:be:1e:63:8a:9c:05:b1:50:34:34:a7:4b:7b:0b: 58:9e:b1:e9:0a:0b:6a:04:5b:4d:30:04:09:5c:14: 30:40:52:49:e5:90:c8:1b:73:89:d5:8a:6f:43:b6: 44:cc:f6:74:0f:69:8b:20:24:f5:4f:05:5d:95:95: ef:66:40:cc:13:5e:6a:6c:dc:9b:9f:d1:94:d1:2a: 25:ac:8e:5c:7b:42:3d:36:d2:65:c7:b7:ab:24:da: 8b:48:47:10:e1:40:cf:b0:d6:ee:a4:58:54:c0:c0: ce:1e:a7:04:d3:52:ff:31:92:99:fb:c5:de:30:32: 74:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F7:6E:D1:00:FF:2B:FA:67:85:1A:A7:BE:5C:69:4A:26:59:39:CF X509v3 Authority Key Identifier: keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:c3:33:4f:e1:a7:d5:a4:30:28:32:2a:3a:4e:f8:05:e2:37: 99:8a:b9:79:b4:40:74:b0:d9:b2:e3:27:3c:1b:6b:a6:43:6f: 2a:8f:b0:9c:4e:c1:0c:a5:59:b1:cc:cd:e1:f1:1e:34:89:44: f2:05:f9:0d:ce:db:9e:1e:40:24:a9:53:9c:67:8f:6f:d9:ea: eb:aa:3f:96:cb:3b:40:7d:cc:11:e3:69:40:4b:6f:f5:24:7f: 0f:0b:0e:68:c8:2f:60:68:95:fc:67:97:c2:84:5c:87:f5:25: 0a:18:d7:84:94:57:6d:bc:75:a2:5c:a7:95:c6:e6:f5:39:bc: 0f:eb:b1:28:84:f3:6b:03:c4:02:09:18:b2:ba:cf:6a:e9:e4: a2:47:05:39:80:89:4a:d6:d5:54:aa:c8:01:cc:c1:3c:bf:f1: 0c:f4:32:a7:f7:62:9c:81:f0:7d:7a:a8:c7:f8:a4:af:2c:7a: c1:82:01:b5:e5:a8:96:01:a0:e3:45:b9:14:2d:c3:d3:e7:2f: 05:ad:bb:5e:2c:dd:a7:7b:d8:cc:16:54:4c:c3:fb:c0:da:a3: 43:44:24:98:f0:bc:79:2a:d3:47:75:ef:3a:a2:20:1e:ec:aa: e1:8d:86:b7:3c:fc:0c:84:48:f9:d7:b5:7a:b1:32:d7:df:28: ff:3b:48:57 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD Njg0NjNFQTcwHhcNMjYwMzIwMjI0NDQxWhcNMjYwMzI3MjI0NDQxWjAYMRYwFAYD VQQDEw02OWJkY2RkOS1kYjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAloqzqhF7hTTm4F/VPIaCciAU009v06ivkTqaPv8mQO0Zkhd0CrcJqpKiscS6 6nJF1i2Vahx2Quv/ZzXxbMa1u1k9MWftV3ffYKMc9fMKxfYHPpTchy45nr+9viiu 1o8PX/qVmeQznpT0+ZVQMOu3sQ4rbQGQrXUXPZTprJqvrz/21tvBb0qivh5jipwF sVA0NKdLewtYnrHpCgtqBFtNMAQJXBQwQFJJ5ZDIG3OJ1YpvQ7ZEzPZ0D2mLICT1 TwVdlZXvZkDME15qbNybn9GU0SolrI5ce0I9NtJlx7erJNqLSEcQ4UDPsNbupFhU wMDOHqcE01L/MZKZ+8XeMDJ0vwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH73btEA /yv6Z4Uap75caUomWTnPMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIyRi9FRjU5Q0VDNDBBREExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpP aEs0NzlRMnF3SG5HaEdQcWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAxMMzT+Gn1aQwKDIqOk74BeI3mYq5ebRAdLDZsuMnPBtrpkNvKo+wnE7BDKVZ sczN4fEeNIlE8gX5Dc7bnh5AJKlTnGePb9nq66o/lss7QH3MEeNpQEtv9SR/DwsO aMgvYGiV/GeXwoRch/UlChjXhJRXbbx1olynlcbm9Tm8D+uxKITzawPEAgkYsrrP aunkokcFOYCJStbVVKrIAczBPL/xDPQyp/dinIHwfXqox/ikryx6wYIBteWolgGg 40W5FC3D0+cvBa27Xizdp3vYzBZUTMP7wNqjQ0QkmPC8eSrTR3XvOqIgHuyq4Y2G tzz8DIRI+de1erEy198o/ztIVw== -----END CERTIFICATE-----Generated at Sun Mar 22 00:25:39 2026 by rpki-client