$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json) Hash identifier: ZsF3RtrdyoE19WQjQxw8NX/lz80jblv9gWPc9Nj7Xiw= Subject key identifier: 55:CC:6D:9E:A6:0F:C8:AF:A6:F9:29:C9:36:B4:52:A3:6C:9E:A9:CD Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Certificate serial: 023A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft Manifest number: 0219 Signing time: Wed 25 Mar 2026 02:28:15 +0000 Manifest this update: Wed 25 Mar 2026 02:28:14 +0000 Manifest next update: Wed 01 Apr 2026 02:28:14 +0000 Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: a1vPrfIo2NvfZc2uVw37tcSS5DACDQ5l+V9cvvkVe1M=) 2: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: ir+ohPjIccF3vHpqVtefjBEm+cD7sV1/e2b1iEqR4BI=) 3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: CJlRP/VDSjivJDg1KUXNqi92MzCGV7Ydo4BmSJUkkAY=) 4: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: akuOHZWMxhdBgYqE6Ifrb7JtsIz0NQwxFPmVS9VWAZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 570 (0x23a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827 Validity Not Before: Mar 25 02:28:14 2026 GMT Not After : Apr 1 02:28:14 2026 GMT Subject: CN=69c3483f-e9a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d7:1d:c2:1e:71:e9:12:ab:3e:9e:ff:1e:a6: c3:d7:9a:0c:13:35:fe:3d:84:6c:10:7e:1a:09:18: d9:1d:c9:a7:8e:99:51:17:04:c4:98:fa:79:40:3a: 03:c0:37:f5:77:51:a7:85:89:02:10:45:9b:b1:fc: 5a:ca:d3:f6:57:55:a7:a5:ed:d8:9e:37:ae:94:30: 4c:48:ce:ac:3e:95:d9:2d:21:9e:66:2e:2a:48:ec: 39:66:8f:a1:8c:2d:e8:3b:ff:f1:b4:6f:c7:39:1a: 42:c0:55:d8:2a:0b:1d:6c:5f:17:b7:0f:94:c2:14: af:13:f7:a1:2d:74:46:f2:de:4e:38:8c:e2:97:c7: b2:54:8b:a2:ad:ed:8e:15:56:75:78:5b:d2:a2:8c: 85:ad:94:cc:5a:d9:42:5c:96:5f:02:60:05:31:cb: 1a:f1:14:2b:e0:44:92:54:06:f4:16:3f:de:a5:59: 9d:da:45:de:0b:1a:1c:28:5c:a2:15:03:90:1a:91: 8b:e8:5b:40:78:33:83:07:b4:b3:fc:aa:63:4a:53: 4e:89:93:4a:69:ea:6e:58:b1:f5:64:a1:55:13:c5: 4a:1b:57:fd:c1:a8:9f:45:07:8d:0e:90:54:c6:1f: 98:8f:97:2b:66:1a:0e:38:49:30:1a:09:50:3a:28: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:CC:6D:9E:A6:0F:C8:AF:A6:F9:29:C9:36:B4:52:A3:6C:9E:A9:CD X509v3 Authority Key Identifier: keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:58:24:80:6b:d3:a2:3a:6c:fb:d4:dd:33:f7:88:b7:2e:24: 8d:16:05:bb:66:d0:bb:7a:28:8c:ed:ac:bb:a7:20:8f:f8:d2: ec:92:3d:f0:54:19:91:ea:f8:c4:cc:4b:7f:3d:c2:b1:d3:92: 5d:45:a9:f0:09:f3:76:5d:02:0d:b7:29:15:5a:2d:d0:bd:74: e5:fd:6d:5e:a3:66:c3:b1:54:60:a3:49:3a:f3:f5:64:63:61: 23:21:d1:1b:21:6b:4e:6a:d2:9d:b1:1d:f4:c5:f0:0c:35:e9: 75:72:02:5b:b7:20:38:76:1e:57:ef:7b:ea:47:c0:53:56:81: fc:65:c7:d0:14:25:5b:73:6f:59:36:c4:fc:13:ff:57:54:a8: 1d:d6:a5:3c:2d:0f:a8:5b:aa:62:c4:ff:3b:d4:7d:3d:a8:8d: 55:1f:4c:43:0d:ff:55:ee:fc:6a:18:af:14:e1:3e:c9:0c:9d: ca:5b:c9:b7:62:75:ee:80:60:5b:4e:7a:99:f2:74:6f:22:94: 44:ad:71:6d:3c:69:5d:d9:68:af:9c:55:5f:30:cb:c8:a7:24: 20:52:fb:89:47:45:2b:de:c5:14:c0:ac:5c:dd:79:f3:78:78: 73:e8:12:34:21:4b:90:41:1e:c4:59:c1:57:65:f6:03:37:44: a4:a0:0d:9b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk5NjkxMTAvBgNVBAUTKDAxNjY2RkM3REQ4NzVERkZBMEUxOUJDNzNDQkFEQThF Q0Y5QTU4MjcwHhcNMjYwMzI1MDIyODE0WhcNMjYwNDAxMDIyODE0WjAYMRYwFAYD VQQDEw02OWMzNDgzZi1lOWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdcdwh5x6RKrPp7/HqbD15oMEzX+PYRsEH4aCRjZHcmnjplRFwTEmPp5QDoD wDf1d1GnhYkCEEWbsfxaytP2V1Wnpe3YnjeulDBMSM6sPpXZLSGeZi4qSOw5Zo+h jC3oO//xtG/HORpCwFXYKgsdbF8Xtw+UwhSvE/ehLXRG8t5OOIzil8eyVIuire2O FVZ1eFvSooyFrZTMWtlCXJZfAmAFMcsa8RQr4ESSVAb0Fj/epVmd2kXeCxocKFyi FQOQGpGL6FtAeDODB7Sz/KpjSlNOiZNKaepuWLH1ZKFVE8VKG1f9waifRQeNDpBU xh+Yj5crZhoOOEkwGglQOihlZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFXMbZ6m D8ivpvkpyTa0UqNsnqnNMB8GA1UdIwQYMBaAFAFmb8fdh13/oOGbxzy62o7Pmlgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTk2OS9DRjM5NUMzODFD NkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhmLWc0WnZIUExyYWpzLWFX Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FXWnZ4OTJIWGYtZzRadkhQTHJhanMtYVdDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTk2OS9DRjM5NUMzODFDNkExMUVFQkY2MkFDMERDNEY5QUUwMi9BV1p2eDkySFhm LWc0WnZIUExyYWpzLWFXQ2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP1gkgGvTojps+9TdM/eIty4kjRYFu2bQu3oojO2su6cgj/jS7JI98FQZker4 xMxLfz3CsdOSXUWp8Anzdl0CDbcpFVot0L105f1tXqNmw7FUYKNJOvP1ZGNhIyHR GyFrTmrSnbEd9MXwDDXpdXICW7cgOHYeV+976kfAU1aB/GXH0BQlW3NvWTbE/BP/ V1SoHdalPC0PqFuqYsT/O9R9PaiNVR9MQw3/Ve78ahivFOE+yQydylvJt2J17oBg W056mfJ0byKURK1xbTxpXdlor5xVXzDLyKckIFL7iUdFK97FFMCsXN1583h4c+gS NCFLkEEexFnBV2X2AzdEpKANmw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:26:03 2026 by rpki-client