$ rpki-client -vvf rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft File: fSf9xw_NGLbdWwQmla_djBc1wTA.mft (raw, json) Hash identifier: Z7TmmD57PcpQL5sQS1ofI5GdBkM6K8JTaU4XElHlKv0= Subject key identifier: C8:9C:BE:BC:EE:BA:A9:E4:2E:BE:41:3F:1E:4C:B6:A4:D7:47:72:F7 Authority key identifier: 7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 Certificate issuer: /CN=A9122041/serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft Manifest number: 017E Signing time: Wed 25 Mar 2026 03:49:50 +0000 Manifest this update: Wed 25 Mar 2026 03:49:49 +0000 Manifest next update: Wed 01 Apr 2026 03:49:49 +0000 Files and hashes: 1: fSf9xw_NGLbdWwQmla_djBc1wTA.crl (hash: DeBNuU+TfQZQRzL3Sm2FkrR2OATjf5ImOmeHD3nMXJw=) 2: E46B7DACDC3611EEBE5CDD37C4F9AE02.roa (hash: jCjUHPVQsJaqVu7vufX+mmPVYe7rI/psWHiQFh1SNOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122041, serialNumber=7D27FDC70FCD18B6DD5B042695AFDD8C1735C130 Validity Not Before: Mar 25 03:49:49 2026 GMT Not After : Apr 1 03:49:49 2026 GMT Subject: CN=69c35b5d-3385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:e6:66:77:4f:c2:e3:61:03:82:77:e9:2a: df:c7:f3:25:0f:d4:d6:57:96:65:70:a6:a1:ce:5b: f1:2a:61:8a:f1:17:72:3d:86:d9:ba:6e:fd:dc:87: 3d:b3:c5:89:98:5d:14:59:75:55:38:b7:54:89:e5: 68:bb:b9:67:ac:32:22:b3:3a:42:a0:64:3b:67:d4: 0a:e8:7c:e3:d2:a0:9a:55:9f:bf:34:5f:5a:97:3c: bc:80:81:93:69:27:0e:39:1d:44:e6:fb:bf:e2:6d: 93:e1:86:8a:95:2e:c4:33:e2:30:d6:de:58:b6:8f: 38:62:22:1e:1f:fb:43:6b:c4:15:d4:be:2f:20:41: 5a:4d:9f:b6:0b:73:ec:1d:78:ae:ef:62:2c:60:fa: eb:38:8c:e5:d3:b5:1b:5a:79:95:17:2e:83:9a:3d: 1a:96:3c:33:9a:6b:88:97:4b:0b:10:77:11:35:6b: c9:55:09:62:05:04:ef:ea:a2:8e:63:ca:c0:16:b3: f0:a9:b5:6a:c1:ee:5d:ce:43:ea:6c:e9:96:f1:ff: e5:3c:23:ff:8c:15:e9:92:63:51:e4:9a:3e:6d:3b: 19:87:4e:f5:5b:54:46:66:d7:ed:df:42:c7:07:b2: 17:fc:61:4d:b9:ef:df:93:48:df:3d:17:46:0b:25: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9C:BE:BC:EE:BA:A9:E4:2E:BE:41:3F:1E:4C:B6:A4:D7:47:72:F7 X509v3 Authority Key Identifier: keyid:7D:27:FD:C7:0F:CD:18:B6:DD:5B:04:26:95:AF:DD:8C:17:35:C1:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSf9xw_NGLbdWwQmla_djBc1wTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122041/2E72E0AEDC3511EE8FF1A433C4F9AE02/fSf9xw_NGLbdWwQmla_djBc1wTA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:69:fd:bc:45:40:21:88:cf:39:32:3c:36:72:bd:30:d4:31: af:14:a0:1f:f4:aa:20:ae:f7:94:35:d3:81:26:70:23:76:f8: e4:6b:2f:99:5b:a3:6e:8b:c7:17:35:96:b1:9c:83:7c:5b:7a: a0:b0:05:59:a0:ae:7a:51:a2:eb:d8:41:c4:cb:76:1c:7c:b9: 40:fd:fe:82:d8:ba:76:98:6e:eb:29:db:4d:f3:f5:fa:b8:13: 7c:d8:80:f0:71:96:e1:fc:46:5d:c5:ad:4a:a2:72:75:5c:16: d2:6f:65:d9:5c:9c:32:71:54:e0:05:04:0a:5a:af:9f:c6:ed: 2b:3a:ed:22:83:3c:26:f7:77:87:28:9c:d9:66:1c:51:e3:a7: 7f:c8:7e:46:dd:8c:f0:e1:c1:46:e7:e9:5f:15:46:58:4d:62: 20:d4:97:d4:66:ec:c9:16:e1:da:d8:d6:44:5e:d5:19:68:90: 77:d5:51:d4:49:1a:28:8d:58:22:bb:7b:07:11:c4:2f:6a:e2: ce:56:ea:d6:76:e3:96:13:81:dc:97:fd:39:f0:cd:25:4e:30: 41:c4:c4:f2:0c:f7:36:6b:eb:79:2e:2a:0e:f6:30:06:79:3b: d5:0b:6f:d4:f3:f2:6b:83:f3:b4:19:22:70:78:55:59:4e:13: 7e:34:a8:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjIwNDExMTAvBgNVBAUTKDdEMjdGREM3MEZDRDE4QjZERDVCMDQyNjk1QUZERDhD MTczNUMxMzAwHhcNMjYwMzI1MDM0OTQ5WhcNMjYwNDAxMDM0OTQ5WjAYMRYwFAYD VQQDEw02OWMzNWI1ZC0zMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDrmZndPwuNhA4J36Srfx/MlD9TWV5ZlcKahzlvxKmGK8RdyPYbZum793Ic9 s8WJmF0UWXVVOLdUieVou7lnrDIiszpCoGQ7Z9QK6Hzj0qCaVZ+/NF9alzy8gIGT aScOOR1E5vu/4m2T4YaKlS7EM+Iw1t5Yto84YiIeH/tDa8QV1L4vIEFaTZ+2C3Ps HXiu72IsYPrrOIzl07UbWnmVFy6Dmj0aljwzmmuIl0sLEHcRNWvJVQliBQTv6qKO Y8rAFrPwqbVqwe5dzkPqbOmW8f/lPCP/jBXpkmNR5Jo+bTsZh071W1RGZtft30LH B7IX/GFNue/fk0jfPRdGCyXGLwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMicvrzu uqnkLr5BPx5MtqTXR3L3MB8GA1UdIwQYMBaAFH0n/ccPzRi23VsEJpWv3YwXNcEw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjA0MS8yRTcyRTBBRURD MzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdMYmRXd1FtbGFfZGpCYzF3 VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTZjl4d19OR0xiZFd3UW1sYV9kakJjMXdUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjA0MS8yRTcyRTBBRURDMzUxMUVFOEZGMUE0MzNDNEY5QUUwMi9mU2Y5eHdfTkdM YmRXd1FtbGFfZGpCYzF3VEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAhmn9vEVAIYjPOTI8NnK9MNQxrxSgH/SqIK73lDXTgSZwI3b45GsvmVujbovH FzWWsZyDfFt6oLAFWaCuelGi69hBxMt2HHy5QP3+gti6dphu6ynbTfP1+rgTfNiA 8HGW4fxGXcWtSqJydVwW0m9l2VycMnFU4AUEClqvn8btKzrtIoM8Jvd3hyic2WYc UeOnf8h+Rt2M8OHBRufpXxVGWE1iINSX1GbsyRbh2tjWRF7VGWiQd9VR1EkaKI1Y Irt7BxHEL2rizlbq1nbjlhOB3Jf9OfDNJU4wQcTE8gz3NmvreS4qDvYwBnk71Qtv 1PPya4PztBkicHhVWU4TfjSoww== -----END CERTIFICATE-----Generated at Thu Mar 26 11:25:42 2026 by rpki-client