$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft File: d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft (raw, json) Hash identifier: ynULgvcuVw2eV+qIxm/QlhoqKRd/r67quSF896CRgvk= Subject key identifier: CE:FA:01:C0:9D:F4:A1:03:E3:A9:34:B4:6D:39:08:42:93:B1:71:C1 Authority key identifier: 77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 Certificate issuer: /CN=A9112320/serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft Manifest number: 01A8 Signing time: Tue 24 Mar 2026 22:46:13 +0000 Manifest this update: Tue 24 Mar 2026 22:46:13 +0000 Manifest next update: Tue 31 Mar 2026 22:46:13 +0000 Files and hashes: 1: d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl (hash: 5+J3Dc/VKGuaYD8kBFMbdF4iRxHJNzgjxzV5Ulq9Bl0=) 2: 7EE26732EB2411EEBDA7715FC4F9AE02.roa (hash: Yv6bUlsD/jxVLpyWhyU1eut2obLAQwxoOOHmIUOMRcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112320, serialNumber=77EC48692D042702978DCD0B68E940B8D7723E52 Validity Not Before: Mar 24 22:46:13 2026 GMT Not After : Mar 31 22:46:13 2026 GMT Subject: CN=69c31435-be70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:25:fd:ac:cb:e4:82:d8:eb:41:9d:3a:43: 7a:aa:7f:27:e5:59:fa:4a:2c:85:52:ac:2e:d5:cb: 69:bb:02:c8:33:03:d9:ab:85:df:ad:9b:36:39:8d: 4e:8b:14:51:ea:e0:6d:77:9f:8e:c3:c4:db:94:01: fd:f6:d4:59:90:00:74:b5:d5:1b:d5:96:02:37:71: 88:c1:55:2c:9e:4b:09:73:05:36:7e:97:ed:65:67: 84:a0:4b:0d:a5:bc:b5:39:4d:af:5c:f1:d9:ae:c0: 05:42:8b:3b:08:20:68:9a:94:64:91:0f:18:0f:c2: 8a:a5:e0:7e:fd:b2:54:65:ce:58:68:3c:de:17:4e: c8:7b:e2:2c:3b:78:5c:34:fd:88:62:38:1e:be:f5: 98:c5:2d:82:54:1a:3e:e7:4d:0d:a4:9d:3e:05:5f: 1b:34:e5:d2:78:5b:81:0f:18:ef:04:44:de:c8:80: c0:a8:5a:0d:ba:2a:fa:0d:83:bd:f5:4f:47:de:50: af:9e:6e:3c:ee:91:72:3b:d8:01:d7:aa:c1:0b:ed: 7e:d2:e9:a4:60:28:d8:45:df:52:0b:37:75:a0:ab: e3:ba:fa:c5:3a:1e:b9:39:a2:cc:08:77:21:46:da: fd:7a:8f:3c:24:15:0e:31:46:d7:d6:86:05:59:0d: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FA:01:C0:9D:F4:A1:03:E3:A9:34:B4:6D:39:08:42:93:B1:71:C1 X509v3 Authority Key Identifier: keyid:77:EC:48:69:2D:04:27:02:97:8D:CD:0B:68:E9:40:B8:D7:72:3E:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/d-xIaS0EJwKXjc0LaOlAuNdyPlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/28C6CCE6A9F011EE9315ED6CC4F9AE02/d-xIaS0EJwKXjc0LaOlAuNdyPlI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:95:2a:bf:8e:93:3a:14:a4:19:db:ef:2d:a2:21:de:5c:0f: 2c:15:f0:16:16:83:b8:a8:4b:73:34:66:74:09:0e:ef:bd:e0: 31:01:2c:4b:07:79:0f:97:eb:fc:10:a6:f5:c2:08:16:32:94: 01:e0:c9:6e:51:7a:8d:bc:ac:f4:62:82:4c:97:f9:d5:86:db: ec:e4:db:87:db:38:63:d1:ef:73:83:6f:dc:3b:ca:2f:40:c5: ab:63:24:e2:0b:d1:0c:ce:57:01:55:1d:3f:17:bc:be:f8:ac: 76:53:f2:31:32:47:e0:d5:64:7b:9a:d8:7d:ba:61:a1:ab:be: 8f:34:30:8b:cb:e8:86:e8:b0:85:9a:6b:bf:9d:1f:df:31:4f: 90:47:21:6d:e9:5d:fb:20:f3:75:12:08:af:ea:2c:a1:a9:4b: c2:8a:d3:b9:4e:71:5b:f8:43:3e:49:a4:71:85:eb:9e:81:1a: 67:bd:6f:06:f5:b8:03:dd:3d:92:6f:26:d4:57:4d:e0:85:a3: c3:d6:9c:78:0e:e8:db:3d:4b:2b:cb:29:98:f3:0b:ec:9d:10: 82:d9:e3:29:74:18:0a:b1:ca:ec:35:04:67:cc:3f:7e:09:94: 7b:b8:49:cd:4c:a8:19:00:8c:db:4e:1c:02:3a:ac:b3:41:41: 99:8c:c2:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjAxMTAvBgNVBAUTKDc3RUM0ODY5MkQwNDI3MDI5NzhEQ0QwQjY4RTk0MEI4 RDc3MjNFNTIwHhcNMjYwMzI0MjI0NjEzWhcNMjYwMzMxMjI0NjEzWjAYMRYwFAYD VQQDEw02OWMzMTQzNS1iZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtv0l/azL5ILY60GdOkN6qn8n5Vn6SiyFUqwu1ctpuwLIMwPZq4XfrZs2OY1O ixRR6uBtd5+Ow8TblAH99tRZkAB0tdUb1ZYCN3GIwVUsnksJcwU2fpftZWeEoEsN pby1OU2vXPHZrsAFQos7CCBompRkkQ8YD8KKpeB+/bJUZc5YaDzeF07Ie+IsO3hc NP2IYjgevvWYxS2CVBo+500NpJ0+BV8bNOXSeFuBDxjvBETeyIDAqFoNuir6DYO9 9U9H3lCvnm487pFyO9gB16rBC+1+0umkYCjYRd9SCzd1oKvjuvrFOh65OaLMCHch Rtr9eo88JBUOMUbX1oYFWQ2iWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM76AcCd 9KED46k0tG05CEKTsXHBMB8GA1UdIwQYMBaAFHfsSGktBCcCl43NC2jpQLjXcj5S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyMC8yOEM2Q0NFNkE5 RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3S1hqYzBMYU9sQXVOZHlQ bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2QteElhUzBFSndLWGpjMExhT2xBdU5keVBsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyMC8yOEM2Q0NFNkE5RjAxMUVFOTMxNUVENkNDNEY5QUUwMi9kLXhJYVMwRUp3 S1hqYzBMYU9sQXVOZHlQbEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAXJUqv46TOhSkGdvvLaIh3lwPLBXwFhaDuKhLczRmdAkO773gMQEsSwd5D5fr /BCm9cIIFjKUAeDJblF6jbys9GKCTJf51Ybb7OTbh9s4Y9Hvc4Nv3DvKL0DFq2Mk 4gvRDM5XAVUdPxe8vvisdlPyMTJH4NVke5rYfbphoau+jzQwi8vohuiwhZprv50f 3zFPkEchbeld+yDzdRIIr+osoalLworTuU5xW/hDPkmkcYXrnoEaZ71vBvW4A909 km8m1FdN4IWjw9aceA7o2z1LK8spmPML7J0QgtnjKXQYCrHK7DUEZ8w/fgmUe7hJ zUyoGQCM204cAjqss0FBmYzCtg== -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:43 2026 by rpki-client