$ rpki-client -vvf rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft File: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft (raw, json) Hash identifier: saqj+VTRYjjP5iwmjcmHksdFKQzWM3S6IKx0jLGFmQo= Subject key identifier: D5:1E:CB:41:17:5F:4B:05:D4:98:71:94:55:17:F9:1A:46:B9:C9:BA Authority key identifier: E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 Certificate issuer: /CN=A9125DDA/serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft Manifest number: 74 Signing time: Wed 25 Mar 2026 07:01:41 +0000 Manifest this update: Wed 25 Mar 2026 07:01:41 +0000 Manifest next update: Wed 01 Apr 2026 07:01:41 +0000 Files and hashes: 1: 5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl (hash: rlrDZw3RW+AoJ1wgxckH7aJCTvUIENlbEQsgRlIxe5g=) 2: F91331C4796E11F095D14275C4F9AE02.roa (hash: 5kreoxgcCJUQZsNMEHK/Y4fOtdmTmyIsApDfpOqWQVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125DDA, serialNumber=E510208FD39042E33662130A42A8F83FEECFBE74 Validity Not Before: Mar 25 07:01:41 2026 GMT Not After : Apr 1 07:01:41 2026 GMT Subject: CN=69c38855-fef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:09:f5:07:db:08:82:9a:9c:32:c1:dd:85: 83:5b:51:35:1d:9f:ed:c4:52:5e:fa:93:3a:3c:30: 63:a2:5d:db:e9:73:ef:76:47:99:dd:5e:71:11:78: 79:a0:82:75:b9:8d:19:a6:b3:51:cf:5f:c0:46:cd: da:68:c3:62:75:d3:44:b0:16:cc:b0:50:7c:fc:25: bc:ae:86:9a:15:58:c7:e3:c3:1c:b7:7d:80:99:67: d4:8b:0e:29:a5:3a:80:54:7d:17:28:11:d6:a3:68: bc:80:2e:67:6a:39:52:09:ad:01:e2:6e:77:9e:88: 19:6a:bc:52:a8:c4:dd:b9:9a:ce:9c:1e:f9:80:e6: 73:58:2d:dc:1a:db:0e:67:bf:71:95:4d:73:b1:28: 62:15:50:da:c2:c3:14:97:b0:2a:20:67:d3:42:94: f7:7d:b0:18:16:3b:b9:4f:87:d3:1f:69:ab:3e:c5: d8:ec:39:27:11:14:74:53:da:98:54:73:8f:9b:68: 0a:8f:03:8d:f4:7a:6b:b4:99:ae:1b:a0:51:c4:99: b5:05:43:ce:90:6a:18:8a:ef:0c:0d:f0:d7:a8:e9: 44:7a:38:59:73:89:d8:bf:02:53:d4:02:b5:9e:ef: 8e:90:c3:f4:89:5e:d3:c0:97:3f:ed:77:67:73:37: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1E:CB:41:17:5F:4B:05:D4:98:71:94:55:17:F9:1A:46:B9:C9:BA X509v3 Authority Key Identifier: keyid:E5:10:20:8F:D3:90:42:E3:36:62:13:0A:42:A8:F8:3F:EE:CF:BE:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125DDA/80AC0986796E11F08FC51774C4F9AE02/5RAgj9OQQuM2YhMKQqj4P-7PvnQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:82:d6:29:ad:c3:41:06:37:6d:73:48:d6:f1:bd:6d:8f:ca: 72:73:dd:d1:19:fd:fc:84:e8:16:f3:7a:cc:c9:4f:72:a5:09: 70:ac:d7:a0:69:cc:59:dd:2c:a8:fc:59:9e:d1:ca:b0:01:b4: bb:dc:a0:08:f8:11:a2:ba:6e:38:26:86:e4:61:a3:d4:b3:7b: 3b:46:28:b2:c8:6d:62:30:10:8d:ed:f8:71:2d:40:b0:b8:78: 41:90:2f:83:53:4e:2d:34:3b:09:f3:c9:4b:32:f1:ff:af:0c: 2a:be:93:f4:a2:91:f4:ff:f6:ce:cb:a4:60:0d:b4:b4:0d:6a: 41:a6:13:f2:f9:6b:68:a3:66:f8:4f:b0:4b:02:3f:b1:e8:bc: a5:35:4b:ce:58:9a:e1:55:5b:9c:b9:12:1e:b0:b7:a0:1b:59: 74:b4:e4:02:bc:45:d2:d2:25:fc:41:a8:ae:0b:44:4d:a1:0a: 7e:df:4c:af:8b:3e:0b:b6:21:f0:b7:90:2f:b0:6f:63:55:dd: b1:25:97:07:12:b0:53:56:8e:e1:e8:ab:89:af:63:43:2b:c7: 93:32:e6:2d:68:df:86:ca:d2:0f:39:5c:fa:fa:60:2a:e1:a2: 7c:0b:63:c0:eb:61:61:46:fa:c9:80:e4:77:13:e8:20:44:30: be:7b:1c:0c -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUREQTExMC8GA1UEBRMoRTUxMDIwOEZEMzkwNDJFMzM2NjIxMzBBNDJBOEY4M0ZF RUNGQkU3NDAeFw0yNjAzMjUwNzAxNDFaFw0yNjA0MDEwNzAxNDFaMBgxFjAUBgNV BAMTDTY5YzM4ODU1LWZlZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCOmwn1B9sIgpqcMsHdhYNbUTUdn+3EUl76kzo8MGOiXdvpc+92R5ndXnEReHmg gnW5jRmms1HPX8BGzdpow2J100SwFsywUHz8JbyuhpoVWMfjwxy3fYCZZ9SLDiml OoBUfRcoEdajaLyALmdqOVIJrQHibneeiBlqvFKoxN25ms6cHvmA5nNYLdwa2w5n v3GVTXOxKGIVUNrCwxSXsCogZ9NClPd9sBgWO7lPh9Mfaas+xdjsOScRFHRT2phU c4+baAqPA430emu0ma4boFHEmbUFQ86QahiK7wwN8Neo6UR6OFlzidi/AlPUArWe 746Qw/SJXtPAlz/td2dzNx0zAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU1R7LQRdf SwXUmHGUVRf5Gka5ybowHwYDVR0jBBgwFoAU5RAgj9OQQuM2YhMKQqj4P+7PvnQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RERBLzgwQUMwOTg2Nzk2 RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVNMlloTUtRcWo0UC03UHZu US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNVJBZ2o5T1FRdU0yWWhNS1FxajRQLTdQdm5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RERBLzgwQUMwOTg2Nzk2RTExRjA4RkM1MTc3NEM0RjlBRTAyLzVSQWdqOU9RUXVN MlloTUtRcWo0UC03UHZuUS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAsgtYprcNBBjdtc0jW8b1tj8pyc93RGf38hOgW83rMyU9ypQlwrNegacxZ3Syo /Fme0cqwAbS73KAI+BGium44JobkYaPUs3s7RiiyyG1iMBCN7fhxLUCwuHhBkC+D U04tNDsJ88lLMvH/rwwqvpP0opH0//bOy6RgDbS0DWpBphPy+Wtoo2b4T7BLAj+x 6LylNUvOWJrhVVucuRIesLegG1l0tOQCvEXS0iX8QaiuC0RNoQp+30yviz4LtiHw t5AvsG9jVd2xJZcHErBTVo7h6KuJr2NDK8eTMuYtaN+GytIPOVz6+mAq4aJ8C2PA 62FhRvrJgOR3E+ggRDC+exwM -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:36 2026 by rpki-client