$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft File: Aonh4IK22hq6VVKEDAyrAsKjt04.mft (raw, json) Hash identifier: XlzlazC+l0Q+u4TMzqqCtpI5XyMj0BVwzc3b15yT5No= Subject key identifier: C8:4F:A8:4D:39:FB:26:57:21:38:2D:C5:F1:8E:9D:9C:2D:6F:3F:5A Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft Manifest number: 0584 Signing time: Wed 25 Mar 2026 00:05:24 +0000 Manifest this update: Wed 25 Mar 2026 00:05:23 +0000 Manifest next update: Wed 01 Apr 2026 00:05:23 +0000 Files and hashes: 1: Aonh4IK22hq6VVKEDAyrAsKjt04.crl (hash: kbGQ2RYOoq/rWNOXU3MKH/e6YSuPzI1zVw1sGceu+GQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:05:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144C70, serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E Validity Not Before: Mar 25 00:05:23 2026 GMT Not After : Apr 1 00:05:23 2026 GMT Subject: CN=69c326c3-8d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:e3:69:16:3d:47:30:8b:07:5e:d9:ac:84: a0:83:5a:06:dc:87:0f:d1:64:c8:51:e6:c7:57:d2: f9:cb:70:db:1a:c7:c2:af:40:fe:c5:ca:9c:f1:f9: 99:c7:ec:bf:7c:84:2c:b3:f6:71:ce:a9:61:4f:b5: ed:37:7b:7f:38:17:7c:2a:44:98:89:97:d1:b3:38: 82:46:d6:e5:6c:8d:da:0f:77:1f:3f:9b:f7:3a:1b: e0:13:04:63:e5:ce:2f:0f:12:2f:c5:82:67:f6:b8: 5b:90:7c:29:e3:48:74:b1:4b:2c:ac:76:b6:5a:8b: c4:6b:cd:a6:aa:f0:e0:f4:d3:0c:fa:5b:7c:8c:b7: 0a:0a:e5:98:7c:2a:cb:75:28:c2:e1:74:03:64:a9: 6b:18:c5:f5:1e:fa:75:05:be:2e:c6:54:fe:26:9a: 60:8d:93:0e:a8:25:13:17:77:a7:7d:c8:ee:5c:87: b6:4b:8d:b7:94:38:e2:3f:f5:85:7b:3a:07:6a:55: e7:19:31:05:c5:34:3c:54:44:66:34:5f:ca:39:0c: 68:33:97:5c:8c:88:f3:d9:d7:f5:83:e3:3e:74:e0: 0e:75:9d:3b:0b:bd:c5:3b:7c:db:8d:a5:22:f9:c2: 3e:ed:01:10:4a:55:dc:f5:bd:44:fa:cd:02:0b:f3: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4F:A8:4D:39:FB:26:57:21:38:2D:C5:F1:8E:9D:9C:2D:6F:3F:5A X509v3 Authority Key Identifier: keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:fc:ca:e7:d4:97:eb:8b:24:eb:ab:bd:c6:37:87:7a:9b:8b: b9:ce:90:c8:bc:5a:90:f4:ac:87:13:db:4f:43:b4:79:31:16: e3:55:09:e8:8b:ac:4f:36:08:67:94:4d:6e:2f:3b:e6:b3:95: 93:be:d6:e4:6f:0a:19:b3:4f:fa:9e:1d:26:b0:f0:1b:81:48: 1e:75:4b:18:18:29:8c:5a:7d:a6:0f:e5:aa:84:32:05:79:6a: 47:55:13:d9:da:b3:fe:fc:c1:ea:f6:1c:d1:a2:83:8c:25:da: 49:8a:43:66:b4:25:8e:ab:9b:db:db:d6:54:ff:4d:7f:ac:ed: c7:01:19:b8:60:67:e3:c9:15:ef:b2:a1:b4:06:9d:c2:1d:af: 6f:dd:42:b2:42:b9:6c:c0:66:a1:aa:b0:47:40:a6:02:d9:ee: ef:07:29:c4:60:92:e5:0f:f4:81:df:e5:9b:05:42:b9:9e:e4: 87:1c:e0:51:e9:4a:c7:48:fb:6e:b8:0a:b5:33:f1:a6:ab:5f: 5d:e8:3b:2c:0a:51:23:d1:50:cc:c4:0e:cf:0a:8a:28:6f:00: 3d:49:8e:51:84:6a:27:a6:35:35:b9:84:fc:c2:a9:e6:51:71: 0a:aa:6a:17:f7:4d:28:00:e0:3c:ef:94:c9:15:e3:28:61:cb: 0f:4c:ff:b6 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRDNzAxMTAvBgNVBAUTKDAyODlFMUUwODJCNkRBMUFCQTU1NTI4NDBDMENBQjAy QzJBM0I3NEUwHhcNMjYwMzI1MDAwNTIzWhcNMjYwNDAxMDAwNTIzWjAYMRYwFAYD VQQDEw02OWMzMjZjMy04ZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ozjaRY9RzCLB17ZrISgg1oG3IcP0WTIUebHV9L5y3DbGsfCr0D+xcqc8fmZ x+y/fIQss/ZxzqlhT7XtN3t/OBd8KkSYiZfRsziCRtblbI3aD3cfP5v3OhvgEwRj 5c4vDxIvxYJn9rhbkHwp40h0sUssrHa2WovEa82mqvDg9NMM+lt8jLcKCuWYfCrL dSjC4XQDZKlrGMX1Hvp1Bb4uxlT+JppgjZMOqCUTF3enfcjuXIe2S423lDjiP/WF ezoHalXnGTEFxTQ8VERmNF/KOQxoM5dcjIjz2df1g+M+dOAOdZ07C73FO3zbjaUi +cI+7QEQSlXc9b1E+s0CC/Nn2QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMhPqE05 +yZXITgtxfGOnZwtbz9aMB8GA1UdIwQYMBaAFAKJ4eCCttoaulVShAwMqwLCo7dO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEM3MC84MkJDODRFRUFD NjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJocTZWVktFREF5ckFzS2p0 MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Fvbmg0SUsyMmhxNlZWS0VEQXlyQXNLanQwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEM3MC84MkJDODRFRUFDNjcxMUVDQjc1Q0RBMjRDNEY5QUUwMi9Bb25oNElLMjJo cTZWVktFREF5ckFzS2p0MDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnPzK59SX64sk66u9xjeHepuLuc6QyLxakPSshxPbT0O0eTEW41UJ6IusTzYI Z5RNbi875rOVk77W5G8KGbNP+p4dJrDwG4FIHnVLGBgpjFp9pg/lqoQyBXlqR1UT 2dqz/vzB6vYc0aKDjCXaSYpDZrQljqub29vWVP9Nf6ztxwEZuGBn48kV77KhtAad wh2vb91CskK5bMBmoaqwR0CmAtnu7wcpxGCS5Q/0gd/lmwVCuZ7khxzgUelKx0j7 brgKtTPxpqtfXeg7LApRI9FQzMQOzwqKKG8APUmOUYRqJ6Y1NbmE/MKp5lFxCqpq F/dNKADgPO+UyRXjKGHLD0z/tg== -----END CERTIFICATE-----Generated at Thu Mar 26 07:49:58 2026 by rpki-client