$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: Vr60lr2mI6CmJz5kJxsEGPWsrv8gPAF/l7+xoJ/aDn0= Subject key identifier: 86:47:2F:F1:12:AE:2C:F3:6F:06:75:DB:00:FD:34:BE:74:EF:1F:8B Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0AFD Signing time: Tue 24 Mar 2026 19:11:04 +0000 Manifest this update: Tue 24 Mar 2026 19:11:03 +0000 Manifest next update: Tue 31 Mar 2026 19:11:03 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: 4zT/K2DBThY7+fepSZfxLZsoohMCYZzh/hNuuxeDQsI=) 2: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: eo+fVmREjn0E/C8IX23s1pespE6vPSqglnEAEQntZB8=) 3: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: 7AD0EtO6OgTcq7iPrxEzW9VN1IAYjbMxwXVENNdHRmk=) 4: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: XwrzlM0letqZh+/RvWS8GdyBop29NFs5TR8e33g5dvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Mar 24 19:11:03 2026 GMT Not After : Mar 31 19:11:03 2026 GMT Subject: CN=69c2e1c8-2d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e5:f5:18:be:fb:36:47:f5:1f:1a:df:28:87: db:61:fe:52:60:c7:d2:f3:f4:b1:be:04:a9:bd:f0: bc:f5:7f:1a:19:fe:af:f8:a4:29:af:68:27:66:bb: b2:80:a4:fe:b4:ed:3f:0f:d3:48:6c:40:b5:79:db: 50:a0:22:86:86:66:e1:ef:c6:3a:01:50:46:b5:30: 8d:99:34:c9:a5:b8:51:89:b5:bf:8c:20:4c:74:c9: 56:6f:51:8d:ca:05:ae:21:05:c5:1b:6c:c2:a9:a8: b5:e4:f4:56:de:09:b2:73:5c:8e:d4:5a:a7:e8:3d: b4:85:9b:6e:4c:f5:1e:f2:9b:1e:9e:40:b5:99:f7: 6c:0e:f5:08:68:c2:1b:46:b2:30:08:4a:38:b1:c8: d4:df:70:11:07:b5:2e:04:b5:df:f7:36:98:2b:bb: 96:67:3b:03:f4:c8:23:df:32:30:e6:75:c1:c6:df: 9d:b2:32:e7:0a:5a:13:a4:39:3f:e8:72:fb:f0:58: 41:5b:bf:8a:32:36:5e:e2:9f:f4:e3:ed:21:77:8d: 0b:07:7d:0d:05:7d:7b:41:7a:29:b6:a0:08:c8:5c: c2:f0:fe:8e:09:e9:fa:0e:6f:25:3d:f1:70:61:2d: 42:2a:3f:d9:9e:b5:40:d2:d5:d1:16:46:b9:f8:bc: 42:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:47:2F:F1:12:AE:2C:F3:6F:06:75:DB:00:FD:34:BE:74:EF:1F:8B X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:67:b8:d1:24:79:fb:4b:71:0f:94:46:2d:67:6e:53:6f:fa: c3:ec:0f:92:21:27:27:9a:05:25:b1:2e:fb:68:fc:30:25:97: 34:4d:20:08:59:23:c0:b9:bd:74:8e:f1:6f:47:94:f8:e8:53: 4a:b3:52:e2:d6:99:5f:39:9f:9f:3e:47:e9:ae:8b:1b:5a:60: a1:5c:69:0f:61:15:80:60:ef:e9:8f:92:6f:49:da:26:3d:a9: 76:ed:30:cd:73:d9:10:0c:63:be:9c:39:2b:50:77:4d:00:59: b8:2e:53:4a:ab:2e:a7:8d:d6:b4:1e:0f:36:b1:79:d7:30:aa: 8c:4e:6a:c7:ec:a0:d4:8e:0d:87:1a:41:56:08:5e:e1:6b:a5: 03:99:45:2a:fe:6c:38:d8:50:c9:14:42:f3:e6:e0:9b:a8:e8: cd:7c:52:5a:0e:7c:fb:96:68:88:2f:23:5c:21:c8:bd:95:40: f4:22:ce:77:b0:48:51:c4:ad:6b:4b:35:f3:d4:97:ed:b7:46: 5e:b4:e4:62:22:b7:4a:e9:7c:75:56:a6:9f:23:e1:46:e3:9d: 48:66:c8:36:c1:7a:67:01:64:43:d0:ac:b3:65:e8:da:5f:ac: 57:0c:2b:7a:c3:9a:46:c5:a4:ee:ab:91:be:30:63:88:88:c1: 07:96:59:af -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjYwMzI0MTkxMTAzWhcNMjYwMzMxMTkxMTAzWjAYMRYwFAYD VQQDEw02OWMyZTFjOC0yZDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eX1GL77Nkf1HxrfKIfbYf5SYMfS8/SxvgSpvfC89X8aGf6v+KQpr2gnZruy gKT+tO0/D9NIbEC1edtQoCKGhmbh78Y6AVBGtTCNmTTJpbhRibW/jCBMdMlWb1GN ygWuIQXFG2zCqai15PRW3gmyc1yO1Fqn6D20hZtuTPUe8psenkC1mfdsDvUIaMIb RrIwCEo4scjU33ARB7UuBLXf9zaYK7uWZzsD9Mgj3zIw5nXBxt+dsjLnCloTpDk/ 6HL78FhBW7+KMjZe4p/04+0hd40LB30NBX17QXoptqAIyFzC8P6OCen6Dm8lPfFw YS1CKj/ZnrVA0tXRFka5+LxCZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIZHL/ES rizzbwZ12wD9NL507x+LMB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVGe40SR5+0txD5RGLWduU2/6w+wPkiEnJ5oFJbEu+2j8MCWXNE0gCFkjwLm9 dI7xb0eU+OhTSrNS4taZXzmfnz5H6a6LG1pgoVxpD2EVgGDv6Y+Sb0naJj2pdu0w zXPZEAxjvpw5K1B3TQBZuC5TSqsup43WtB4PNrF51zCqjE5qx+yg1I4NhxpBVghe 4WulA5lFKv5sONhQyRRC8+bgm6jozXxSWg58+5ZoiC8jXCHIvZVA9CLOd7BIUcSt a0s189SX7bdGXrTkYiK3Sul8dVamnyPhRuOdSGbINsF6ZwFkQ9Css2Xo2l+sVwwr esOaRsWk7quRvjBjiIjBB5ZZrw== -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:03 2026 by rpki-client