$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: /NAR/u0CMfX9tjZiPCc3Abtil7RoWl6OCyl5zoBJHqI= Subject key identifier: 06:B8:98:51:C0:13:DA:CC:6F:96:F8:BE:BB:22:E7:F1:11:7D:D6:6C Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: A3 Signing time: Wed 25 Mar 2026 06:28:20 +0000 Manifest this update: Wed 25 Mar 2026 06:28:20 +0000 Manifest next update: Wed 01 Apr 2026 06:28:20 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: 9CGYLtEeAZD8QANbfv3MTRJS+aUGUYOwuri7JRjp8kE=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: t+j78JKyyGcK9bTbXkrgFsRqm83ni7JvJaxQ5E6oLdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Mar 25 06:28:20 2026 GMT Not After : Apr 1 06:28:20 2026 GMT Subject: CN=69c38084-fdfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4a:62:71:ee:c6:ad:74:00:5c:cb:59:ec:36: 1c:d9:c2:74:6a:e7:bd:f4:d0:53:90:06:5c:a4:cc: 65:6c:fd:01:ba:fd:63:7e:0e:83:34:00:0a:de:d5: a9:21:73:d5:46:97:74:1a:c4:29:5c:fa:16:c3:b9: 52:45:86:94:80:99:eb:05:f8:25:70:30:1f:ec:bb: f2:f3:1b:9a:c3:1f:6b:e9:39:16:2f:57:c7:dd:52: e9:62:b5:85:ee:34:62:4e:9f:8c:df:be:82:22:41: 7c:ef:54:c7:37:fa:78:dc:4b:a5:5e:f0:a3:ec:bb: af:aa:22:e9:0e:b1:68:8d:a5:90:01:b8:57:0c:f4: 85:cc:fb:07:74:10:02:14:6f:53:43:d4:28:e8:84: aa:75:12:4f:67:87:d5:cf:30:af:60:98:26:bd:f9: a4:3c:22:3e:d4:73:01:4d:9a:0f:9b:28:b4:39:ab: 07:44:03:7d:80:d4:45:2a:15:b5:f5:6e:2b:2d:92: 28:35:5d:72:3b:3f:1e:c1:cb:70:f3:88:cc:db:5a: aa:e2:d2:e8:dc:78:23:f9:d9:f4:02:0b:af:67:87: 9a:1a:fa:d8:89:e1:9d:d9:64:af:67:7f:be:b7:cd: ad:14:6d:de:85:84:6d:10:b2:68:dd:04:23:71:7b: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B8:98:51:C0:13:DA:CC:6F:96:F8:BE:BB:22:E7:F1:11:7D:D6:6C X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:25:17:52:3a:45:46:24:6e:35:2e:73:f8:c0:a3:11:c2:8e: b7:89:4a:ed:0e:8d:1d:a9:d9:46:ef:f6:e4:6f:fd:3e:d7:7e: 95:b2:f5:a6:3d:ec:c7:6a:ba:87:99:5d:03:bf:45:99:0c:04: 7a:d2:0f:f3:c1:b3:11:73:6b:7c:f9:cc:4d:56:99:4c:d0:27: 0b:84:de:59:d0:7b:51:fa:f7:bd:56:10:19:9b:15:3b:c5:49: 2e:99:d4:98:ab:f5:51:3e:6d:42:f7:67:dc:dc:fc:9d:5d:2c: 2e:4e:23:f6:c4:5f:2a:cc:07:ee:8c:b4:d6:d9:a6:11:2f:79: 6f:6c:a3:b8:98:a7:c6:33:1b:22:39:11:64:36:39:5f:a6:f4: c3:a3:01:4b:c0:c0:62:c8:6c:13:79:c4:86:9d:55:20:ce:88: 2b:b1:a6:04:eb:9c:e2:6e:61:fc:d1:1a:15:4d:84:00:de:10: e3:f1:f4:41:19:48:74:c7:85:68:1e:a3:66:5e:4d:5c:6b:b3: c2:29:a0:1c:d4:6d:90:18:2f:6e:da:3b:ef:ff:76:eb:27:36: fe:dc:fd:42:a7:0b:d3:e7:57:f7:2b:16:d0:a1:31:33:62:a5: 08:80:2a:61:c0:55:32:75:30:f1:3b:b6:7e:ad:ef:0e:85:92: c8:83:6c:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcwNDkxMTAvBgNVBAUTKEQ5RDFCMDU1RkVGQzg5RjU4MDNBN0ZBOEUyQjkwMjYx OUYzMzhEOEUwHhcNMjYwMzI1MDYyODIwWhcNMjYwNDAxMDYyODIwWjAYMRYwFAYD VQQDEw02OWMzODA4NC1mZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkpice7GrXQAXMtZ7DYc2cJ0aue99NBTkAZcpMxlbP0Buv1jfg6DNAAK3tWp IXPVRpd0GsQpXPoWw7lSRYaUgJnrBfglcDAf7Lvy8xuawx9r6TkWL1fH3VLpYrWF 7jRiTp+M376CIkF871THN/p43EulXvCj7LuvqiLpDrFojaWQAbhXDPSFzPsHdBAC FG9TQ9Qo6ISqdRJPZ4fVzzCvYJgmvfmkPCI+1HMBTZoPmyi0OasHRAN9gNRFKhW1 9W4rLZIoNV1yOz8ewctw84jM21qq4tLo3Hgj+dn0AguvZ4eaGvrYieGd2WSvZ3++ t82tFG3ehYRtELJo3QQjcXur6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAa4mFHA E9rMb5b4vrsi5/ERfdZsMB8GA1UdIwQYMBaAFNnRsFX+/In1gDp/qOK5AmGfM42O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzA0OS9CMDlDQkQ2NjJD NjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlmV0FPbi1vNHJrQ1laOHpq WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzA0OS9CMDlDQkQ2NjJDNjYxMUYwOURBNTZCMEJDNEY5QUUwMi8yZEd3VmY3OGlm V0FPbi1vNHJrQ1laOHpqWTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZSUXUjpFRiRuNS5z+MCjEcKOt4lK7Q6NHanZRu/25G/9Ptd+lbL1pj3sx2q6 h5ldA79FmQwEetIP88GzEXNrfPnMTVaZTNAnC4TeWdB7Ufr3vVYQGZsVO8VJLpnU mKv1UT5tQvdn3Nz8nV0sLk4j9sRfKswH7oy01tmmES95b2yjuJinxjMbIjkRZDY5 X6b0w6MBS8DAYshsE3nEhp1VIM6IK7GmBOuc4m5h/NEaFU2EAN4Q4/H0QRlIdMeF aB6jZl5NXGuzwimgHNRtkBgvbto77/926yc2/tz9QqcL0+dX9ysW0KExM2KlCIAq YcBVMnUw8Tu2fq3vDoWSyINsXQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:45:50 2026 by rpki-client