$ rpki-client -vvf rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft File: n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft (raw, json) Hash identifier: v1aQh2YiIvd09EewWTSYbufvYTUYdBQfS97YG/+93Us= Subject key identifier: 37:C4:07:10:FB:57:31:DF:74:36:BE:81:09:6A:C6:3D:2E:63:B5:70 Authority key identifier: 9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 Certificate issuer: /CN=A9136EC5/serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Certificate serial: 2BD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft Manifest number: 2B7E Signing time: Tue 24 Mar 2026 15:29:43 +0000 Manifest this update: Tue 24 Mar 2026 15:29:42 +0000 Manifest next update: Tue 31 Mar 2026 15:29:42 +0000 Files and hashes: 1: n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl (hash: +a/zLOgXQ8l/TAd6DtzRlSa3/uTnBLOBAcDqsgTK6Ik=) 2: F1BA2EAC353311EBB895B082C4F9AE02.roa (hash: XMn1rTIy3jaeKDZE05M5b8eeprfjm2rfHPZwQzTw2V8=) 3: BB799DA8844011F09054B049C4F9AE02.roa (hash: VrRFOlut3uTJjQcCOu3xElVoNRFtaOUQQFsO7k9dNnQ=) 4: 8B903A32353211EBB3D0487FC4F9AE02.roa (hash: 25oLu27CZ0gv2qJnkcUs4150C/CVxdIojsajwReLNXs=) 5: 08074A8A1EB711EF9C248E60C4F9AE02.roa (hash: RaV0EBH4fa+l9u1AYk3sjgFpJfu7SSd3dDIQo14KDEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11218 (0x2bd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136EC5, serialNumber=9FCE28914C50DC99755F108AB4334F772CBEA0E2 Validity Not Before: Mar 24 15:29:42 2026 GMT Not After : Mar 31 15:29:42 2026 GMT Subject: CN=69c2ade6-fe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:48:29:66:bf:9e:4a:2a:89:e3:05:89:1c:ba: 65:9e:32:32:06:02:d5:34:59:e5:4a:86:e2:7d:97: 1e:69:2f:e3:a7:c3:91:18:9b:01:12:82:d7:a9:34: 43:a7:3b:ba:86:33:e2:df:b9:33:62:69:2d:ff:2d: 62:00:f1:9e:dc:f6:14:66:37:5e:36:b7:58:ed:4c: 21:e2:03:3a:d4:66:9b:07:22:7c:78:3e:e2:1f:f5: 77:06:83:c0:fb:98:8f:e0:27:ce:52:3b:f1:9d:6c: 4e:c6:81:db:96:5b:4f:e4:b1:6c:73:94:03:c6:03: 95:31:f3:41:6f:ec:e0:b3:98:6e:ad:7e:86:30:08: a7:ca:0e:87:d7:14:ac:b1:77:91:0a:38:aa:6b:99: 81:84:69:c6:75:dc:a7:c9:35:c5:5e:15:f2:79:d7: ea:6a:f2:5d:29:8b:5d:a9:f6:ec:24:48:79:b4:8d: 12:ad:ec:9b:7b:3c:f3:16:a6:71:28:6c:32:c6:f1: b6:3c:01:03:0a:aa:d9:48:e6:02:16:11:9f:d6:40: 4f:ea:2e:cc:e3:d3:37:66:4c:8e:3c:78:6c:da:db: b4:e1:15:c4:35:ce:42:e4:85:ea:07:12:2d:ae:2f: 38:fc:d2:40:81:b9:6e:9e:36:60:1a:92:14:83:7a: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C4:07:10:FB:57:31:DF:74:36:BE:81:09:6A:C6:3D:2E:63:B5:70 X509v3 Authority Key Identifier: keyid:9F:CE:28:91:4C:50:DC:99:75:5F:10:8A:B4:33:4F:77:2C:BE:A0:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n84okUxQ3Jl1XxCKtDNPdyy-oOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136EC5/2DECAE560E5611E4B6F1953AC4F9AE02/n84okUxQ3Jl1XxCKtDNPdyy-oOI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:2e:55:c8:01:f8:37:67:36:78:a5:03:05:2b:e1:45:8a:24: b7:89:7b:a9:68:23:8f:17:99:62:eb:51:19:e2:fc:fb:ec:cd: 71:d8:d2:43:b4:d9:47:5b:3e:45:b8:a9:63:c8:05:92:34:d8: 60:74:12:d2:25:e7:a2:04:e2:0c:7c:5f:24:25:8a:a3:24:28: b8:bd:57:23:fc:87:e3:bc:68:51:6f:7d:6b:ae:8a:dd:b8:e1: e4:5e:b9:ce:6d:a8:d6:8e:4f:94:d5:54:06:95:a3:7e:6b:16: 7a:3b:58:4c:1f:be:d8:da:7c:0b:9e:d7:d9:d1:24:05:03:93: 4b:2c:56:c1:58:26:05:fb:e1:ac:f8:75:ca:04:f9:ec:13:a4: 74:a2:1e:8a:de:d5:22:7e:46:29:4a:7c:db:d5:43:db:6f:b0: 19:c3:1b:07:6e:3c:40:5a:be:17:04:39:19:1d:39:bd:fe:e5: 96:0c:95:27:eb:1e:5b:ab:4e:f0:f3:e2:93:87:96:9c:4e:d7: bd:51:f4:b4:14:03:59:cf:bb:6e:dc:60:de:c7:de:d0:4a:97: 34:94:b3:bc:ae:34:c0:5b:99:96:73:62:19:85:df:24:22:45: 14:68:16:4c:84:ce:7d:a6:de:59:9f:cf:22:dc:34:b9:d2:89: 75:6e:b4:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICK9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZFQzUxMTAvBgNVBAUTKDlGQ0UyODkxNEM1MERDOTk3NTVGMTA4QUI0MzM0Rjc3 MkNCRUEwRTIwHhcNMjYwMzI0MTUyOTQyWhcNMjYwMzMxMTUyOTQyWjAYMRYwFAYD VQQDEw02OWMyYWRlNi1mZTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8UgpZr+eSiqJ4wWJHLplnjIyBgLVNFnlSobifZceaS/jp8ORGJsBEoLXqTRD pzu6hjPi37kzYmkt/y1iAPGe3PYUZjdeNrdY7Uwh4gM61GabByJ8eD7iH/V3BoPA +5iP4CfOUjvxnWxOxoHblltP5LFsc5QDxgOVMfNBb+zgs5hurX6GMAinyg6H1xSs sXeRCjiqa5mBhGnGddynyTXFXhXyedfqavJdKYtdqfbsJEh5tI0SreybezzzFqZx KGwyxvG2PAEDCqrZSOYCFhGf1kBP6i7M49M3ZkyOPHhs2tu04RXENc5C5IXqBxIt ri84/NJAgblunjZgGpIUg3pQNwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDfEBxD7 VzHfdDa+gQlqxj0uY7VwMB8GA1UdIwQYMBaAFJ/OKJFMUNyZdV8QirQzT3csvqDi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkVDNS8yREVDQUU1NjBF NTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNKbDFYeENLdEROUGR5eS1v T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL244NG9rVXhRM0psMVh4Q0t0RE5QZHl5LW9PSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkVDNS8yREVDQUU1NjBFNTYxMUU0QjZGMTk1M0FDNEY5QUUwMi9uODRva1V4UTNK bDFYeENLdEROUGR5eS1vT0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiC5VyAH4N2c2eKUDBSvhRYokt4l7qWgjjxeZYutRGeL8++zNcdjSQ7TZR1s+ RbipY8gFkjTYYHQS0iXnogTiDHxfJCWKoyQouL1XI/yH47xoUW99a66K3bjh5F65 zm2o1o5PlNVUBpWjfmsWejtYTB++2Np8C57X2dEkBQOTSyxWwVgmBfvhrPh1ygT5 7BOkdKIeit7VIn5GKUp829VD22+wGcMbB248QFq+FwQ5GR05vf7llgyVJ+seW6tO 8PPik4eWnE7XvVH0tBQDWc+7btxg3sfe0EqXNJSzvK40wFuZlnNiGYXfJCJFFGgW TITOfabeWZ/PItw0udKJdW60Fw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:47 2026 by rpki-client