$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft File: K1MJHcnLOER3WOYdne4VNUFBPtA.mft (raw, json) Hash identifier: EVE6lRH0impPO4UbikQ6ck+Me+zSP+EZp3QS/dhHG1k= Subject key identifier: 63:B8:ED:A1:8E:8F:14:5F:3B:A7:0B:F1:94:2A:13:7D:BC:2B:84:57 Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 Certificate issuer: /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Certificate serial: 094F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft Manifest number: 0914 Signing time: Tue 24 Mar 2026 20:05:27 +0000 Manifest this update: Tue 24 Mar 2026 20:05:26 +0000 Manifest next update: Tue 31 Mar 2026 20:05:26 +0000 Files and hashes: 1: K1MJHcnLOER3WOYdne4VNUFBPtA.crl (hash: /zMT6FcN51lmzjURfaXg/AOyP7SpDJAYYMRU3VlasAk=) 2: 0649562CC63A11EAB59CC262C4F9AE02.roa (hash: FXMw4gU7m6cMDVIFR2ioRmioqgFmxJcgor2Nog9jRxk=) 3: 5FE97B5A1DB911EF9C94EB7AC4F9AE02.roa (hash: pwTpLqoix1ml/iDyvZtQl2PM0Bjf1ih1Kt+rjQ1/6gY=) 4: C6E6A146171011F1BE8A5674053D8C67.roa (hash: giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=) 5: 0009F0B0EB4011F0804B8821426F56BC.roa (hash: pHl2UlpqvRYqNzqgzVyVtJS995yGr9GKW6dkHakGY/A=) 6: 057EA0EEC63A11EAB59CC262C4F9AE02.roa (hash: KT7zEvJNVvs97oYvIe5jqgLfgSdT+s+2AedPsqQHGgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0 Validity Not Before: Mar 24 20:05:26 2026 GMT Not After : Mar 31 20:05:26 2026 GMT Subject: CN=69c2ee87-9afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:73:fe:73:79:9f:70:2e:cc:ce:1e:fc:86:c5: 04:80:35:70:04:de:87:32:2d:21:5b:8e:f9:2e:42: f4:16:2b:5f:ec:88:fd:fc:f5:9f:a5:76:a6:25:7c: 32:b1:81:09:6f:7e:c4:b4:94:7f:84:d5:9a:05:12: 42:11:e5:97:6c:f6:2f:ff:ae:0e:1a:bf:dc:0c:ac: bc:9d:25:b2:50:d1:5a:04:1d:cb:42:23:11:a9:0d: fd:e2:d1:0a:a6:2a:9e:50:71:18:4d:88:f5:21:d9: e8:06:f5:a7:93:85:9e:e4:61:ad:ee:20:6f:9d:8a: 2c:79:25:3d:d9:0d:43:a1:54:20:d0:ca:23:cc:49: 5b:77:5e:4a:95:71:fb:eb:f3:8f:f3:84:c3:b2:78: 33:81:6b:18:5b:c6:4c:a9:d6:2e:dc:59:22:c5:3d: 22:1d:dd:e7:31:4e:1f:0a:6f:52:e1:28:e8:f1:a8: d3:41:12:18:2a:7f:3e:2f:dd:d6:ff:2a:19:45:38: 5f:30:2c:bc:2f:46:29:db:c5:87:89:6a:53:75:ed: ac:66:45:7f:44:79:32:4a:c4:0c:9c:f7:49:7e:36: 6d:90:18:19:1d:39:01:90:fc:d5:5d:e2:33:39:7f: 9d:ce:11:45:d7:fc:7d:9e:3b:81:fe:dc:1a:15:ad: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B8:ED:A1:8E:8F:14:5F:3B:A7:0B:F1:94:2A:13:7D:BC:2B:84:57 X509v3 Authority Key Identifier: keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:5e:19:2c:2d:56:41:45:0f:9b:c8:5d:3c:6c:6f:f5:16: 15:ba:f2:0b:ea:c1:1c:f1:e4:49:8d:d7:9f:e9:34:c7:93:c3: cb:36:9c:36:aa:3b:ec:ec:96:9d:7c:4b:28:c8:30:f4:70:74: 90:fa:f6:ef:d6:8f:9d:03:03:64:f2:a8:15:e6:13:22:c3:fe: 99:f7:23:46:8e:f1:6e:14:73:77:24:a3:45:2c:9b:49:65:0e: e3:f7:bf:f7:78:47:d0:0d:51:5a:6c:61:ef:9a:54:7f:5a:13: d3:39:2d:a7:dc:24:30:d7:74:fe:88:b2:c8:50:5c:e5:fe:9f: 18:cb:c5:3e:3e:1f:29:cc:e6:f3:2e:98:0f:c4:31:37:bf:eb: 69:60:c9:68:91:da:0f:64:b8:13:6a:22:43:47:84:52:86:ba: f3:04:bc:f2:87:7b:36:be:8a:25:0f:40:fd:ee:b6:c4:cd:e3: e8:70:2c:10:2e:8e:ff:7c:9a:23:14:76:1f:08:8d:4b:3a:c3: 86:bb:c5:9f:db:d7:2e:8b:bc:8e:77:da:99:0f:58:07:b9:84: 8f:32:54:b4:2e:4a:18:05:3b:90:14:a2:ec:ad:e0:d1:8f:5c: 61:63:82:89:5c:b5:a2:b6:8d:8d:5f:16:4a:b8:83:70:7b:c0: 56:43:65:47 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1 NDE0MTNFRDAwHhcNMjYwMzI0MjAwNTI2WhcNMjYwMzMxMjAwNTI2WjAYMRYwFAYD VQQDEw02OWMyZWU4Ny05YWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3P+c3mfcC7Mzh78hsUEgDVwBN6HMi0hW475LkL0Fitf7Ij9/PWfpXamJXwy sYEJb37EtJR/hNWaBRJCEeWXbPYv/64OGr/cDKy8nSWyUNFaBB3LQiMRqQ394tEK piqeUHEYTYj1IdnoBvWnk4We5GGt7iBvnYoseSU92Q1DoVQg0MojzElbd15KlXH7 6/OP84TDsngzgWsYW8ZMqdYu3FkixT0iHd3nMU4fCm9S4Sjo8ajTQRIYKn8+L93W /yoZRThfMCy8L0Yp28WHiWpTde2sZkV/RHkySsQMnPdJfjZtkBgZHTkBkPzVXeIz OX+dzhFF1/x9njuB/twaFa2W/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGO47aGO jxRfO6cL8ZQqE328K4RXMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1 RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjI0MS80RjdCOTg2NkM1RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9F UjNXT1lkbmU0Vk5VRkJQdEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABhpeGSwtVkFFD5vIXTxsb/UWFbryC+rBHPHkSY3Xn+k0x5PDyzacNqo77OyW nXxLKMgw9HB0kPr279aPnQMDZPKoFeYTIsP+mfcjRo7xbhRzdySjRSybSWUO4/e/ 93hH0A1RWmxh75pUf1oT0zktp9wkMNd0/oiyyFBc5f6fGMvFPj4fKczm8y6YD8Qx N7/raWDJaJHaD2S4E2oiQ0eEUoa68wS88od7Nr6KJQ9A/e62xM3j6HAsEC6O/3ya IxR2HwiNSzrDhrvFn9vXLou8jnfamQ9YB7mEjzJUtC5KGAU7kBSi7K3g0Y9cYWOC iVy1oraNjV8WSriDcHvAVkNlRw== -----END CERTIFICATE-----Generated at Thu Mar 26 20:59:31 2026 by rpki-client