$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft File: I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft (raw, json) Hash identifier: 8YrBi0gXTAw7R81V5v4StpMaYK5WMEK1zwDwCDp1vOo= Subject key identifier: B7:DD:80:35:3F:29:A0:4C:0B:6D:1D:C9:BC:74:DE:73:58:17:D5:89 Authority key identifier: 23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 Certificate issuer: /CN=A9146A72/serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Certificate serial: 2E33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft Manifest number: 2E0E Signing time: Tue 24 Mar 2026 15:26:58 +0000 Manifest this update: Tue 24 Mar 2026 15:26:58 +0000 Manifest next update: Tue 31 Mar 2026 15:26:58 +0000 Files and hashes: 1: I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl (hash: T2tkagGyPIl8o+9pEn4OLtVdmF00K7jdRY/CYYrrSCE=) 2: 0F6B8D969A6B11F08E49AE43C4F9AE02.roa (hash: VFEJ2pC2bmVwEIh9Ul33fbeRMTH5fCAYFl8iU/+lajY=) 3: F2AE85D6128E11F1BA652BAD3A3D8C67.roa (hash: N17i/Vo6qq4GynkhbHnkWbsIC9qgwD2VSBbjxJt5D3I=) 4: 3635C928CE3811EF878F6569C4F9AE02.roa (hash: /EIrPIM51/gSZuhZi7PXLaV6H0Mn6QzhbGDSyj34JEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:26:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11827 (0x2e33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A72, serialNumber=23704D592F57509EDCE5A4AD7BDEEDCF7BDBACE4 Validity Not Before: Mar 24 15:26:58 2026 GMT Not After : Mar 31 15:26:58 2026 GMT Subject: CN=69c2ad42-83be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:86:69:0f:9d:b3:5d:e7:d3:1f:59:60:0c: 46:de:42:d5:4d:a4:81:7c:60:db:75:ee:a0:57:b8: 62:de:aa:f3:fc:ff:4e:bd:64:15:2d:28:40:f0:42: 30:48:7a:b7:2d:c0:09:cb:5f:cf:69:30:3e:d7:a8: 05:e9:0a:6f:e7:b1:7b:42:31:5b:13:f1:b1:14:2b: 6e:8b:5c:68:d6:f9:ff:c7:11:fa:3a:77:7a:64:58: 0e:24:1d:d2:fe:bf:ed:a3:d5:48:de:69:8f:ad:7a: dd:90:4b:4c:a8:92:79:dd:93:e5:f0:69:c2:94:2f: d1:27:d4:d7:2d:4a:86:13:6f:42:2e:21:04:fa:0c: ee:49:1c:dc:f3:9b:72:be:89:c6:1d:d5:9d:9d:25: 73:be:09:61:d8:a1:77:8d:32:93:c3:56:f1:f2:ef: 67:8c:94:be:40:13:3c:ea:ff:c7:21:54:b6:e3:fb: e6:96:ea:dc:57:52:b7:41:34:12:3e:67:be:13:3c: 1c:db:f1:59:88:b5:88:bf:76:ca:d5:0f:8e:5a:b5: 87:76:81:89:c1:ae:cd:ef:95:3e:61:5f:8c:01:9b: 82:85:93:71:23:ce:ae:df:4a:22:e2:79:3e:bd:52: d0:f5:b8:56:6b:8f:43:4e:d4:29:6f:4d:02:3a:e7: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:80:35:3F:29:A0:4C:0B:6D:1D:C9:BC:74:DE:73:58:17:D5:89 X509v3 Authority Key Identifier: keyid:23:70:4D:59:2F:57:50:9E:DC:E5:A4:AD:7B:DE:ED:CF:7B:DB:AC:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I3BNWS9XUJ7c5aSte97tz3vbrOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A72/05C891DA89ED11E386916EA55911EA32/I3BNWS9XUJ7c5aSte97tz3vbrOQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:54:cf:fd:e3:6d:9a:7c:a6:33:5d:2f:46:08:04:ff:07:69: 46:40:f4:de:7d:96:9e:30:d8:c7:ea:71:bf:cc:8c:5f:5d:7b: e1:a7:5b:44:f3:3e:3c:24:bb:13:68:c7:c8:7a:4f:95:b5:10: b8:cb:fa:84:56:ea:04:ad:a2:7a:40:5c:6a:07:a3:44:25:6e: c4:cc:a0:eb:4c:21:9d:cb:14:62:50:b5:15:c6:56:4e:1a:fd: 30:58:6c:fe:42:e6:ad:ef:6c:fe:7d:55:f8:50:de:a4:50:f8: 68:f7:46:bd:a6:a0:ce:a6:16:2a:6d:39:70:ee:92:07:71:99: 32:ae:c4:c2:0b:9f:24:c9:e5:af:64:5c:32:60:12:9a:f9:a0: 28:ab:22:98:a5:ea:70:eb:b2:7b:5f:bd:5b:06:30:9b:d3:76: d8:45:6b:38:2a:3c:c2:45:54:06:46:41:e2:17:40:ca:fb:1a: 3f:16:cb:cf:68:49:d4:a4:6b:f2:ff:d8:93:e0:ca:7c:ac:c9: a2:44:05:cc:2b:90:ca:33:12:b2:b0:4e:aa:b0:7b:6b:97:b2: 59:c4:38:e8:43:17:43:19:5d:7d:ce:ae:59:c7:e4:b9:fc:2c: e5:57:d4:44:a1:5b:80:3a:5b:c2:c4:e7:84:f9:46:1a:24:a8: c1:90:49:aa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICLjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBNzIxMTAvBgNVBAUTKDIzNzA0RDU5MkY1NzUwOUVEQ0U1QTRBRDdCREVFRENG N0JEQkFDRTQwHhcNMjYwMzI0MTUyNjU4WhcNMjYwMzMxMTUyNjU4WjAYMRYwFAYD VQQDEw02OWMyYWQ0Mi04M2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfSGaQ+ds13n0x9ZYAxG3kLVTaSBfGDbde6gV7hi3qrz/P9OvWQVLShA8EIw SHq3LcAJy1/PaTA+16gF6Qpv57F7QjFbE/GxFCtui1xo1vn/xxH6Ond6ZFgOJB3S /r/to9VI3mmPrXrdkEtMqJJ53ZPl8GnClC/RJ9TXLUqGE29CLiEE+gzuSRzc85ty vonGHdWdnSVzvglh2KF3jTKTw1bx8u9njJS+QBM86v/HIVS24/vmlurcV1K3QTQS Pme+Ezwc2/FZiLWIv3bK1Q+OWrWHdoGJwa7N75U+YV+MAZuChZNxI86u30oi4nk+ vVLQ9bhWa49DTtQpb00COuc67QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLfdgDU/ KaBMC20dybx03nNYF9WJMB8GA1UdIwQYMBaAFCNwTVkvV1Ce3OWkrXve7c9726zk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkE3Mi8wNUM4OTFEQTg5 RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVKN2M1YVN0ZTk3dHozdmJy T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0kzQk5XUzlYVUo3YzVhU3RlOTd0ejN2YnJPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkE3Mi8wNUM4OTFEQTg5RUQxMUUzODY5MTZFQTU1OTExRUEzMi9JM0JOV1M5WFVK N2M1YVN0ZTk3dHozdmJyT1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAF1TP/eNtmnymM10vRggE/wdpRkD03n2WnjDYx+pxv8yMX1174adbRPM+PCS7 E2jHyHpPlbUQuMv6hFbqBK2iekBcagejRCVuxMyg60whncsUYlC1FcZWThr9MFhs /kLmre9s/n1V+FDepFD4aPdGvaagzqYWKm05cO6SB3GZMq7EwgufJMnlr2RcMmAS mvmgKKsimKXqcOuye1+9WwYwm9N22EVrOCo8wkVUBkZB4hdAyvsaPxbLz2hJ1KRr 8v/Yk+DKfKzJokQFzCuQyjMSsrBOqrB7a5eyWcQ46EMXQxldfc6uWcfkufws5VfU RKFbgDpbwsTnhPlGGiSowZBJqg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:33:28 2026 by rpki-client