$ rpki-client -vvf rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft File: 8a29DnE5HfIQ3jRh52V4tHoBYko.mft (raw, json) Hash identifier: 8znzJ1SudKqO3A/1OBuD9tE7I3Ya1yo4x20ucXfjBNM= Subject key identifier: 08:98:BF:C2:42:EF:51:CA:2D:AA:E4:C5:31:55:CC:09:8F:02:1F:8D Authority key identifier: F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A Certificate issuer: /CN=A9131711/serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft Manifest number: 018E Signing time: Wed 25 Mar 2026 03:42:05 +0000 Manifest this update: Wed 25 Mar 2026 03:42:04 +0000 Manifest next update: Wed 01 Apr 2026 03:42:04 +0000 Files and hashes: 1: 8a29DnE5HfIQ3jRh52V4tHoBYko.crl (hash: 2vhP2+8AMTjCNuFN+mGvKpV+lG3Hu7+eC2Jx3NKntQc=) 2: 1D63B4248BB011F0A730E413C4F9AE02.roa (hash: Klyy/dVtwsbFsvWmxb8UIFOVeT5tKXYuBYTRi8r0Nuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:42:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131711, serialNumber=F1ADBD0E71391DF210DE3461E76578B47A01624A Validity Not Before: Mar 25 03:42:04 2026 GMT Not After : Apr 1 03:42:04 2026 GMT Subject: CN=69c3598d-cc8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:75:e9:da:d5:8d:bc:10:83:dd:5a:d6:9e: 01:01:38:bc:67:b1:90:c3:0c:f2:68:ef:73:af:cb: 4b:81:f8:d2:d9:8f:4f:3a:f4:49:6f:79:eb:d3:11: 02:ed:1b:0f:a8:b2:07:b1:10:d9:4e:b2:f1:f0:c5: 8d:5c:df:a6:ea:a7:59:85:4c:f6:90:5d:f5:6f:72: 0b:32:87:66:a2:96:d4:d7:ed:a2:43:f8:be:b2:39: d2:43:e1:e0:53:db:70:a5:c0:c4:aa:38:c9:ed:eb: c5:cd:21:02:73:77:c6:59:24:86:40:b5:48:49:c7: 14:05:4a:18:1a:6c:80:42:75:4a:76:2b:cb:80:48: cd:55:fd:31:20:8a:e7:e0:d2:a9:e9:fb:15:5e:d3: 66:c8:e2:bd:cb:be:ce:67:57:03:24:9e:ca:b0:3d: c3:25:88:2f:3a:fe:57:cd:ac:ea:e6:6a:8c:c2:ba: 91:3f:90:a8:48:aa:0c:d7:65:88:07:3c:26:37:f0: bf:fc:2d:22:56:b5:b1:7d:fb:28:9f:05:29:09:c7: be:d1:66:2d:89:a0:88:46:9a:ed:6e:9e:5e:8c:4a: 03:b7:5b:e2:2d:b4:00:f1:7e:4c:e6:5f:a5:f2:3e: c6:b0:14:e8:8a:16:69:b5:6f:2f:ca:93:e4:7f:5d: 53:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:98:BF:C2:42:EF:51:CA:2D:AA:E4:C5:31:55:CC:09:8F:02:1F:8D X509v3 Authority Key Identifier: keyid:F1:AD:BD:0E:71:39:1D:F2:10:DE:34:61:E7:65:78:B4:7A:01:62:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8a29DnE5HfIQ3jRh52V4tHoBYko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131711/A950DFDAC99111EE891BA419C4F9AE02/8a29DnE5HfIQ3jRh52V4tHoBYko.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ee:ef:be:21:47:f8:f4:d1:28:9b:a1:53:fb:64:0b:eb:53: 1b:bc:46:75:00:71:83:55:ca:6e:21:7e:32:eb:96:d9:d7:b2: cf:b1:f0:64:36:49:3c:26:b9:5d:a3:73:97:64:25:cc:60:2b: 58:89:c1:ad:5f:24:b8:6b:ea:c9:32:43:7a:21:7d:35:ea:e7: f1:2c:6a:a0:e2:f1:df:db:b2:03:b3:11:f2:af:5d:c0:ce:c8: 56:6c:15:cc:bd:69:ec:3c:ce:d1:b3:db:0d:4c:8c:ea:30:b5: 04:cb:f5:3e:49:34:75:45:9d:cf:08:64:ed:3e:b2:46:18:ee: 7c:82:2a:15:83:fb:6f:06:e1:8d:37:19:ff:ee:d2:d5:5d:4a: cb:49:3c:c8:ba:92:5b:ea:3d:0f:25:64:e0:fe:fc:d9:65:c0: 12:7f:96:10:04:df:61:52:5f:0d:7c:6d:a9:41:d8:03:1c:56: 27:f3:4b:cc:ff:7a:58:50:a5:1b:60:7d:86:04:dc:35:85:78: 85:52:41:0b:d8:be:15:95:ee:b5:74:68:06:c7:f6:1d:47:ce: 56:08:bd:58:d7:44:14:ac:fd:10:e1:9b:ad:9e:f9:bc:25:77: dc:7f:64:36:ae:f3:42:fd:a2:5d:3a:0f:a2:ec:59:cd:78:21: cf:5d:0a:12 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE3MTExMTAvBgNVBAUTKEYxQURCRDBFNzEzOTFERjIxMERFMzQ2MUU3NjU3OEI0 N0EwMTYyNEEwHhcNMjYwMzI1MDM0MjA0WhcNMjYwNDAxMDM0MjA0WjAYMRYwFAYD VQQDEw02OWMzNTk4ZC1jYzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Jp16drVjbwQg91a1p4BATi8Z7GQwwzyaO9zr8tLgfjS2Y9POvRJb3nr0xEC 7RsPqLIHsRDZTrLx8MWNXN+m6qdZhUz2kF31b3ILModmopbU1+2iQ/i+sjnSQ+Hg U9twpcDEqjjJ7evFzSECc3fGWSSGQLVISccUBUoYGmyAQnVKdivLgEjNVf0xIIrn 4NKp6fsVXtNmyOK9y77OZ1cDJJ7KsD3DJYgvOv5Xzazq5mqMwrqRP5CoSKoM12WI BzwmN/C//C0iVrWxffsonwUpCce+0WYtiaCIRprtbp5ejEoDt1viLbQA8X5M5l+l 8j7GsBToihZptW8vypPkf11T2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAiYv8JC 71HKLarkxTFVzAmPAh+NMB8GA1UdIwQYMBaAFPGtvQ5xOR3yEN40YedleLR6AWJK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTcxMS9BOTUwREZEQUM5 OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhmSVEzalJoNTJWNHRIb0JZ a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhhMjlEbkU1SGZJUTNqUmg1MlY0dEhvQllrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTcxMS9BOTUwREZEQUM5OTExMUVFODkxQkE0MTlDNEY5QUUwMi84YTI5RG5FNUhm SVEzalJoNTJWNHRIb0JZa28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAI+7vviFH+PTRKJuhU/tkC+tTG7xGdQBxg1XKbiF+MuuW2deyz7HwZDZJPCa5 XaNzl2QlzGArWInBrV8kuGvqyTJDeiF9Nern8SxqoOLx39uyA7MR8q9dwM7IVmwV zL1p7DzO0bPbDUyM6jC1BMv1Pkk0dUWdzwhk7T6yRhjufIIqFYP7bwbhjTcZ/+7S 1V1Ky0k8yLqSW+o9DyVk4P782WXAEn+WEATfYVJfDXxtqUHYAxxWJ/NLzP96WFCl G2B9hgTcNYV4hVJBC9i+FZXutXRoBsf2HUfOVgi9WNdEFKz9EOGbrZ75vCV33H9k Nq7zQv2iXToPouxZzXghz10KEg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:36:21 2026 by rpki-client