$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: qBCH6JmNxvNLYGUEMlWXa9Juy7Brq15YYkIr7QSG38U= Subject key identifier: 05:63:1A:C4:A3:8B:ED:97:EC:C1:46:7F:C8:3F:7F:08:93:CB:80:6E Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 05:52:16 +0000 Manifest this update: Wed 25 Mar 2026 05:52:15 +0000 Manifest next update: Wed 01 Apr 2026 05:52:15 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: dH0u5EWlWheMsySeRA6eeSs2+v5rGpd5a7S5fZgYJ+M=) 2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: UMPqKlbNgq/NCSI3t3UTm/r8MXA+qd0WY7ZlbRUGxiU=) 3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: 7q1pfdm13OOPKdMhFRZESc6pMqjQGZzOaS0jydIIjHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Mar 25 05:52:15 2026 GMT Not After : Apr 1 05:52:15 2026 GMT Subject: CN=69c3780f-5154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:af:02:74:fb:22:1f:da:6a:40:72:b4:cc:22: 92:c5:b5:54:fb:40:ab:ac:21:81:e5:3d:c5:43:d7: 68:cc:ae:5f:93:0a:c9:a0:51:88:0c:bf:76:e7:e5: 6c:72:b9:94:30:b7:50:bd:fd:61:cf:d1:2c:f8:af: 01:83:67:06:fd:8f:70:cd:26:c7:17:af:3e:9e:96: bc:91:9a:6c:d0:9e:83:b1:a9:11:fb:d8:b5:6a:49: e6:b2:f8:08:ec:b1:8c:41:31:0c:a7:07:94:19:41: 30:6f:5d:53:81:2b:fd:9f:c6:04:0f:41:59:ab:69: e1:98:0d:36:d8:7b:53:fa:34:a2:eb:56:5c:38:80: 44:cc:0b:67:90:2a:0b:c7:14:03:05:ef:0c:78:88: 51:a1:47:d2:b1:fa:c4:e8:61:bd:a3:94:17:09:05: 81:d1:32:a1:48:0c:45:55:57:b0:5b:18:c0:3c:e0: 39:44:25:65:e0:7c:37:15:a7:fe:2f:e8:98:bc:64: dc:65:9c:e1:7d:83:9d:b2:13:d5:d1:5d:3a:0d:f1: f5:0a:af:bf:85:46:8b:8b:46:ed:0a:db:c3:96:33: 5b:ad:3e:52:b6:1f:f6:1a:2b:c0:89:cd:5e:4c:82: 68:2d:26:13:30:dc:72:38:39:73:2d:b5:08:db:06: 91:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:1A:C4:A3:8B:ED:97:EC:C1:46:7F:C8:3F:7F:08:93:CB:80:6E X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c3:f7:a3:fa:dd:5f:4c:35:2b:ba:aa:c7:32:45:d4:6c:7d: 15:9b:8a:06:da:ff:00:a8:22:26:35:ce:d4:98:ab:28:9a:74: 2e:73:31:85:17:45:f9:20:1c:8a:44:86:d0:b3:9a:dd:97:ab: eb:85:48:8c:d8:c0:e2:73:23:d1:3d:53:74:5e:63:08:15:c6: e8:a5:5c:40:1c:e8:e1:8b:49:ec:e5:41:bf:63:7f:49:b9:de: 2b:4f:00:ef:31:c6:82:43:f9:95:47:17:34:d4:7d:0f:29:3b: 47:7c:b8:39:78:ae:1e:4c:30:71:6d:b5:2b:29:0b:13:12:07: 82:47:d8:fb:b5:f0:c7:97:08:7c:7a:8b:78:4c:f5:a6:b0:60: 74:e4:ba:62:c7:9c:df:b4:06:1a:a3:b0:6d:30:d6:ac:aa:07: 15:1a:bc:5d:02:17:83:64:1a:d8:23:ba:c3:6d:c2:98:f0:68: d4:95:06:9f:b1:58:93:cf:ed:7a:3c:b1:f4:3d:a5:8d:b6:48: 79:0f:cd:90:35:cb:a0:a2:e0:07:77:71:99:53:c6:9f:46:af: 4f:aa:53:ce:f7:fe:83:d9:0e:15:b8:c0:b8:3e:cd:01:90:da: 0a:be:bd:46:ea:ea:73:40:29:af:f4:39:85:a7:5f:5c:9d:1c: 30:17:4c:99 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIwMzcxMTAvBgNVBAUTKDM3NjEyMTJBMTY3MEE1NzE5QUI3MUZBMjAzQjkyRUM2 ODZGMjExNzcwHhcNMjYwMzI1MDU1MjE1WhcNMjYwNDAxMDU1MjE1WjAYMRYwFAYD VQQDEw02OWMzNzgwZi01MTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAla8CdPsiH9pqQHK0zCKSxbVU+0CrrCGB5T3FQ9dozK5fkwrJoFGIDL925+Vs crmUMLdQvf1hz9Es+K8Bg2cG/Y9wzSbHF68+npa8kZps0J6DsakR+9i1aknmsvgI 7LGMQTEMpweUGUEwb11TgSv9n8YED0FZq2nhmA022HtT+jSi61ZcOIBEzAtnkCoL xxQDBe8MeIhRoUfSsfrE6GG9o5QXCQWB0TKhSAxFVVewWxjAPOA5RCVl4Hw3Faf+ L+iYvGTcZZzhfYOdshPV0V06DfH1Cq+/hUaLi0btCtvDljNbrT5Sth/2GivAic1e TIJoLSYTMNxyODlzLbUI2waRBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAVjGsSj i+2X7MFGf8g/fwiTy4BuMB8GA1UdIwQYMBaAFDdhISoWcKVxmrcfogO5LsaG8hF3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjAzNy81QzA1QzBDOEU0 MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BYR2F0eC1pQTdrdXhvYnlF WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjAzNy81QzA1QzBDOEU0MTcxMUVGOTZFMkZGMzhDNEY5QUUwMi9OMkVoS2had3BY R2F0eC1pQTdrdXhvYnlFWGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV8P3o/rdX0w1K7qqxzJF1Gx9FZuKBtr/AKgiJjXO1JirKJp0LnMxhRdF+SAc ikSG0LOa3Zer64VIjNjA4nMj0T1TdF5jCBXG6KVcQBzo4YtJ7OVBv2N/SbneK08A 7zHGgkP5lUcXNNR9Dyk7R3y4OXiuHkwwcW21KykLExIHgkfY+7Xwx5cIfHqLeEz1 prBgdOS6Ysec37QGGqOwbTDWrKoHFRq8XQIXg2Qa2CO6w23CmPBo1JUGn7FYk8/t ejyx9D2ljbZIeQ/NkDXLoKLgB3dxmVPGn0avT6pTzvf+g9kOFbjAuD7NAZDaCr69 Rurqc0Apr/Q5hadfXJ0cMBdMmQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:32:22 2026 by rpki-client