$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: PRu/UttjjpHMttUKD+ZuEeVcxIZ4WekzDwGwArD5Hnw= Subject key identifier: 95:BB:74:FD:5E:23:94:4E:7C:CC:FE:37:28:A5:79:AD:B3:AF:B5:CD Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 08B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 088A Signing time: Thu 26 Mar 2026 15:55:22 +0000 Manifest this update: Thu 26 Mar 2026 15:55:21 +0000 Manifest next update: Thu 02 Apr 2026 15:55:21 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: xG6x9vUjEiTGy83rCxoIlPvOxPRoZDcfzWPoZ3yS8E0=) 2: 6205FF52113D11F1BF40122E203D8C67.roa (hash: YZA4lVzt1mgdsEJ++kdTfFeCS9rYdciYFwgd714ipgA=) 3: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: gRWxoMUhWR3o1/E004zC+NaDH3WtqhH3fFB+vz1MWo8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2231 (0x8b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Mar 26 15:55:21 2026 GMT Not After : Apr 2 15:55:21 2026 GMT Subject: CN=69c556ea-7c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:56:76:9f:d0:20:54:1f:cc:33:b7:d3:49:3b: fe:c9:89:fa:f0:5a:2c:4b:3d:5a:d8:92:71:18:fa: 1d:42:58:d6:72:56:c5:87:03:91:5c:0a:95:76:7d: ba:a1:f6:6b:8a:4a:14:0c:9a:63:02:c3:5b:0c:34: 4d:2d:38:e3:be:4c:d9:93:28:3c:8e:f3:d2:39:09: 34:ea:21:82:ba:09:91:56:5c:a5:5e:8d:ea:b8:7e: 76:ae:40:c4:69:ac:fd:bc:ae:ad:71:fa:38:e1:5b: 72:13:ac:69:86:89:6d:72:b4:22:8b:dc:6b:a9:4e: 87:01:3c:c3:46:9a:aa:62:28:1d:7a:1c:b8:be:45: 68:79:e6:7a:a6:90:83:79:b2:b4:c5:32:a8:53:1a: ac:cb:ae:0a:1d:d3:ee:a1:95:f8:0b:76:4e:d9:94: dd:69:cb:51:fd:0f:8f:af:3b:02:a6:f6:a5:3f:00: 80:f2:15:c4:63:de:5a:e5:82:9e:92:e7:d4:c3:27: b6:dc:2d:f6:54:62:c8:f9:10:ec:b7:c6:83:07:7d: bd:bd:c8:78:87:74:9b:54:bf:9d:c2:5f:25:cb:e0: fe:2e:73:e8:fb:5b:2b:e1:0d:4a:4c:38:a7:77:05: 92:7f:99:32:0c:6d:ef:19:b6:38:9b:35:48:cc:4c: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BB:74:FD:5E:23:94:4E:7C:CC:FE:37:28:A5:79:AD:B3:AF:B5:CD X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a6:ca:0e:cd:ea:e9:3d:b0:75:7c:69:bd:e2:9f:3f:52:e8: 94:23:8e:59:76:13:69:8d:d0:20:7c:fb:39:1c:ed:71:d5:1f: 05:ec:bb:5b:f0:bd:da:65:d8:3f:e6:12:7e:c9:c6:4f:31:a9: 46:cd:5f:23:67:5c:9d:92:7a:7c:fb:82:e2:64:0d:a7:40:21: aa:02:07:be:4c:06:cf:57:4b:e6:3c:f4:04:85:6a:59:9b:b2: 45:15:38:ea:a4:21:fc:3a:7f:c0:4f:25:7d:19:d2:b0:25:d8: 88:d2:f5:23:72:63:52:12:bb:77:dc:28:bb:13:84:8e:19:32: b7:80:17:73:ef:cb:1a:45:75:85:5d:7e:3f:00:ff:fe:d9:b9: 8c:85:36:0b:6d:b4:dc:c5:6e:06:ce:58:26:62:cd:b1:83:bd: 5e:91:eb:fc:12:cb:ba:09:8d:8b:13:7b:98:87:68:38:9b:ef: 5b:83:77:a7:55:22:19:e0:7e:5d:81:27:bd:71:ff:52:1a:57: 0b:14:e5:b3:96:a4:9a:59:be:2d:70:8f:bd:95:ef:dd:79:1b: 9f:a3:ae:1d:ce:57:f7:55:29:93:35:03:87:b3:92:b7:cd:ed: 03:40:af:52:43:c5:2f:c3:b1:c7:27:96:cc:37:ec:d7:66:f9: fa:ce:b1:0f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjYwMzI2MTU1NTIxWhcNMjYwNDAyMTU1NTIxWjAYMRYwFAYD VQQDEw02OWM1NTZlYS03YzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFZ2n9AgVB/MM7fTSTv+yYn68FosSz1a2JJxGPodQljWclbFhwORXAqVdn26 ofZrikoUDJpjAsNbDDRNLTjjvkzZkyg8jvPSOQk06iGCugmRVlylXo3quH52rkDE aaz9vK6tcfo44VtyE6xpholtcrQii9xrqU6HATzDRpqqYigdehy4vkVoeeZ6ppCD ebK0xTKoUxqsy64KHdPuoZX4C3ZO2ZTdactR/Q+PrzsCpvalPwCA8hXEY95a5YKe kufUwye23C32VGLI+RDst8aDB329vch4h3SbVL+dwl8ly+D+LnPo+1sr4Q1KTDin dwWSf5kyDG3vGbY4mzVIzEwO7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJW7dP1e I5ROfMz+Nyilea2zr7XNMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ6bKDs3q6T2wdXxpveKfP1LolCOOWXYTaY3QIHz7ORztcdUfBey7W/C92mXY P+YSfsnGTzGpRs1fI2dcnZJ6fPuC4mQNp0AhqgIHvkwGz1dL5jz0BIVqWZuyRRU4 6qQh/Dp/wE8lfRnSsCXYiNL1I3JjUhK7d9wouxOEjhkyt4AXc+/LGkV1hV1+PwD/ /tm5jIU2C2203MVuBs5YJmLNsYO9XpHr/BLLugmNixN7mIdoOJvvW4N3p1UiGeB+ XYEnvXH/UhpXCxTls5akmlm+LXCPvZXv3Xkbn6OuHc5X91UpkzUDh7OSt83tA0Cv UkPFL8OxxyeWzDfs12b5+s6xDw== -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:59 2026 by rpki-client