$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: jkGmYiMCgygQrnMW0Mz2EIKyp0X0fvNvMU07MjOpk/M= Subject key identifier: 51:E5:20:76:AA:D7:C8:59:AE:71:8A:11:A3:3B:64:63:89:CD:29:85 Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0E44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0E29 Signing time: Tue 24 Mar 2026 17:41:03 +0000 Manifest this update: Tue 24 Mar 2026 17:41:03 +0000 Manifest next update: Tue 31 Mar 2026 17:41:03 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: AFkM5ZXbElsLc7qh/B3ViYCCpUOuHDudQ80/hXq/agI=) 2: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: e3eqPkZT3N1g8SYL2dcMdW0/3dinWAZj2vLbHoPa0eo=) 3: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: O9SFY6mcwxzxPd5Lw8GpZMWUtvVj4velHO/wpusDdSM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:41:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3652 (0xe44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Mar 24 17:41:03 2026 GMT Not After : Mar 31 17:41:03 2026 GMT Subject: CN=69c2ccaf-3ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:e8:5d:3a:98:d6:f2:09:58:85:56:0c:35: 80:dc:7f:0f:35:f6:ee:d3:65:25:be:5c:65:79:aa: 8e:92:7e:1b:9f:fb:d8:8f:3b:d3:84:42:fa:44:d9: 8c:4b:62:40:fb:be:4f:8b:6e:67:92:68:d0:0e:62: d7:bd:19:15:a2:ae:b2:6a:bd:6d:80:ae:a3:2c:1c: 33:2e:d6:b1:6a:09:46:33:27:af:e0:41:d8:f5:7b: 38:eb:a7:73:de:91:b5:20:58:44:f8:8d:af:72:3b: 19:05:0a:5f:0f:f8:4a:9e:3f:f2:41:73:92:58:d4: ba:6e:84:2c:f3:f6:7c:e1:cc:70:1d:27:50:b8:2a: cd:a4:c6:b2:43:55:37:fe:a6:ae:28:9e:0e:f6:45: f4:d5:0e:fa:69:f7:ad:55:78:c5:bb:59:bf:31:71: 46:d9:4b:10:49:7a:88:1d:5d:06:8e:97:f2:2d:ba: 39:2c:f3:67:30:eb:58:64:9c:90:63:5f:29:63:64: d7:73:0c:32:0c:77:53:3d:25:58:4b:c3:8c:a0:34: bf:d8:c7:3a:61:1d:c7:3e:3b:51:ac:fa:f1:ef:9c: c9:dc:e6:f7:c9:d5:00:ae:e0:2c:fc:9f:76:b6:cd: 75:55:ac:7e:73:d8:09:42:82:90:50:40:17:8c:6c: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E5:20:76:AA:D7:C8:59:AE:71:8A:11:A3:3B:64:63:89:CD:29:85 X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:3a:e2:a0:b9:d5:63:89:0a:b7:4f:f8:e7:a2:29:c2:b5:e5: 82:bc:b8:5e:2f:cf:09:73:5b:89:c9:2d:d7:9b:c4:9c:9f:c9: 1f:a6:8b:80:0e:23:b8:da:b7:22:c2:4f:2e:ae:95:8a:48:20: 48:ed:39:43:c6:29:0c:4b:32:8c:22:46:70:e6:c3:d8:94:2e: 6f:c4:44:90:eb:7d:14:dd:a3:05:48:aa:ce:8f:cb:6c:48:da: 24:82:eb:cc:e4:0b:a6:c6:c2:a3:6d:90:f7:28:42:13:b0:60: 13:1e:64:b6:5a:b9:2a:73:4b:c2:56:d0:7f:61:fb:cc:7f:b5: 46:49:d9:bd:c3:59:96:24:3a:eb:7e:be:ec:c2:a6:08:77:a2: 4d:07:12:c8:73:50:37:9f:88:44:6d:53:61:77:26:ba:0c:c2: d8:ce:ab:57:b2:74:91:b5:1d:0e:aa:65:e0:a6:54:5d:e8:4f: 9c:28:ed:b5:0c:d2:0c:b3:9b:30:c5:c8:14:f6:4f:66:d1:f0: 10:ac:be:58:f3:e7:08:f9:d4:e2:a7:39:0c:09:50:70:8d:44: 1a:fb:9f:84:3e:17:b1:7c:93:64:ae:7a:76:0c:ef:93:cf:f0: 29:17:b6:b1:c5:c6:13:7d:96:d9:7f:2a:c3:48:ae:a6:40:b4: e2:92:ec:f0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjYwMzI0MTc0MTAzWhcNMjYwMzMxMTc0MTAzWjAYMRYwFAYD VQQDEw02OWMyY2NhZi0zYWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjXvoXTqY1vIJWIVWDDWA3H8PNfbu02UlvlxleaqOkn4bn/vYjzvThEL6RNmM S2JA+75Pi25nkmjQDmLXvRkVoq6yar1tgK6jLBwzLtaxaglGMyev4EHY9Xs466dz 3pG1IFhE+I2vcjsZBQpfD/hKnj/yQXOSWNS6boQs8/Z84cxwHSdQuCrNpMayQ1U3 /qauKJ4O9kX01Q76afetVXjFu1m/MXFG2UsQSXqIHV0GjpfyLbo5LPNnMOtYZJyQ Y18pY2TXcwwyDHdTPSVYS8OMoDS/2Mc6YR3HPjtRrPrx75zJ3Ob3ydUAruAs/J92 ts11Vax+c9gJQoKQUEAXjGyX5QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFHlIHaq 18hZrnGKEaM7ZGOJzSmFMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAeTrioLnVY4kKt0/456IpwrXlgry4Xi/PCXNbickt15vEnJ/JH6aLgA4juNq3 IsJPLq6VikggSO05Q8YpDEsyjCJGcObD2JQub8REkOt9FN2jBUiqzo/LbEjaJILr zOQLpsbCo22Q9yhCE7BgEx5ktlq5KnNLwlbQf2H7zH+1RknZvcNZliQ6636+7MKm CHeiTQcSyHNQN5+IRG1TYXcmugzC2M6rV7J0kbUdDqpl4KZUXehPnCjttQzSDLOb MMXIFPZPZtHwEKy+WPPnCPnU4qc5DAlQcI1EGvufhD4XsXyTZK56dgzvk8/wKRe2 scXGE32W2X8qw0iupkC04pLs8A== -----END CERTIFICATE-----Generated at Thu Mar 26 06:26:37 2026 by rpki-client