$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft File: AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json) Hash identifier: T7YnVCi3J0aR4M8PnXeaNZZ7itubDrdVpX2tm4tl5yY= Subject key identifier: CD:9F:66:66:00:3D:27:DE:E7:D1:3F:D5:F5:1A:17:8D:81:79:1F:67 Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 Certificate issuer: /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Certificate serial: 2489 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft Manifest number: 2475 Signing time: Tue 24 Mar 2026 15:43:51 +0000 Manifest this update: Tue 24 Mar 2026 15:43:51 +0000 Manifest next update: Tue 31 Mar 2026 15:43:51 +0000 Files and hashes: 1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: xxkYdnDT9rHqXZzafi03uEmTFJTvfIPOd5HMsE7DGOc=) 2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: a3sXsdVgG1aczhVzJi7/Rf+WzCpYYZ6XbQ0iWZCw3CA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9353 (0x2489) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4 Validity Not Before: Mar 24 15:43:51 2026 GMT Not After : Mar 31 15:43:51 2026 GMT Subject: CN=69c2b137-9ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:13:47:e4:c7:ae:c3:9d:85:7f:35:da:26:b8: 66:6f:b8:fd:9c:16:a5:bf:c8:10:f8:89:40:fb:61: 7f:4e:33:91:d9:cb:21:f7:ec:3f:68:dd:26:6f:72: 7b:1b:35:b7:c3:84:a3:c0:7a:82:cb:ae:bb:bd:ed: 4f:fa:41:a9:93:80:92:7c:61:19:47:20:a5:1d:e6: 57:13:4d:31:d4:c5:2f:b7:21:5e:7e:e5:de:8b:ce: 2e:f9:81:8e:a4:41:49:e2:dd:e4:1a:ad:8a:00:0f: 59:8f:24:39:92:39:b8:be:1c:66:7d:ec:fc:f9:54: 2a:aa:df:14:e5:9f:4f:64:d1:39:75:ce:3d:26:ee: 44:ef:10:fc:29:a2:c9:58:65:a6:44:8f:72:43:ec: a0:bc:dc:80:0f:7c:a4:19:d6:57:9c:b0:10:48:2b: 3b:dc:d9:2e:58:ce:c1:ba:fb:e7:a1:94:c1:e8:31: aa:1f:4f:17:e8:ba:33:a0:66:78:ec:99:4c:50:58: af:1b:64:01:1a:4d:48:4c:17:f3:a4:53:be:44:01: 7f:9b:e2:b6:21:4b:e9:72:7f:47:8f:d9:f2:19:6b: 8f:4c:fd:80:39:53:50:86:e3:22:c7:90:95:5c:0d: 21:c3:8e:6c:01:dc:fa:68:6e:5b:cb:85:96:7b:a1: ab:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9F:66:66:00:3D:27:DE:E7:D1:3F:D5:F5:1A:17:8D:81:79:1F:67 X509v3 Authority Key Identifier: keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:31:46:85:68:8f:da:ad:e7:f1:5b:55:a2:e0:1c:18:81:0d: da:45:ef:a0:c1:87:ea:99:6a:4e:c0:94:4a:83:c2:98:a1:5a: 28:3e:88:5a:41:89:ff:02:9c:b2:ed:82:66:a7:6f:b6:5e:a1: dc:10:05:00:ba:8b:94:29:8c:41:74:db:a2:1f:f8:09:74:4e: 2c:e6:c0:c4:32:43:eb:32:93:55:77:02:40:97:b4:7f:9e:24: 08:10:a2:5f:6a:c0:fe:cc:81:c0:6b:fe:fe:e6:72:d7:3f:de: bc:57:6d:a2:fa:6f:7e:e5:4e:90:e1:b7:5c:80:6d:b4:78:5a: 36:78:3f:41:21:aa:6a:2d:f4:1d:ef:84:54:94:d2:5b:70:42: 26:32:b0:f2:b3:eb:67:cb:6a:cb:d6:a5:d9:d6:75:44:74:c4: 92:16:36:14:99:55:73:38:70:2f:ea:5a:f6:dd:90:92:04:99: 07:f4:cf:1d:5e:16:62:98:de:ae:f8:38:a6:e3:3a:da:ea:4c: 53:e9:f4:40:a2:7b:f4:5d:30:73:37:05:78:39:b6:88:32:03: 23:24:f0:f3:b4:c8:4a:62:f6:94:98:fe:ad:aa:b7:eb:55:16: d7:10:5e:84:78:f5:93:e3:b8:62:80:d2:88:19:7f:df:15:03: 90:fa:8d:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0 NUNDNjdGQTQwHhcNMjYwMzI0MTU0MzUxWhcNMjYwMzMxMTU0MzUxWjAYMRYwFAYD VQQDEw02OWMyYjEzNy05ZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthNH5Meuw52FfzXaJrhmb7j9nBalv8gQ+IlA+2F/TjOR2csh9+w/aN0mb3J7 GzW3w4SjwHqCy667ve1P+kGpk4CSfGEZRyClHeZXE00x1MUvtyFefuXei84u+YGO pEFJ4t3kGq2KAA9ZjyQ5kjm4vhxmfez8+VQqqt8U5Z9PZNE5dc49Ju5E7xD8KaLJ WGWmRI9yQ+ygvNyAD3ykGdZXnLAQSCs73NkuWM7BuvvnoZTB6DGqH08X6LozoGZ4 7JlMUFivG2QBGk1ITBfzpFO+RAF/m+K2IUvpcn9Hj9nyGWuPTP2AOVNQhuMix5CV XA0hw45sAdz6aG5by4WWe6GrywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2fZmYA PSfe59E/1fUaF42BeR9nMB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3 NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs RV9kcGk4MmgyanhGekdmNlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaTFGhWiP2q3n8VtVouAcGIEN2kXvoMGH6plqTsCUSoPCmKFaKD6IWkGJ/wKc su2CZqdvtl6h3BAFALqLlCmMQXTboh/4CXROLObAxDJD6zKTVXcCQJe0f54kCBCi X2rA/syBwGv+/uZy1z/evFdtovpvfuVOkOG3XIBttHhaNng/QSGqai30He+EVJTS W3BCJjKw8rPrZ8tqy9al2dZ1RHTEkhY2FJlVczhwL+pa9t2QkgSZB/TPHV4WYpje rvg4puM62upMU+n0QKJ79F0wczcFeDm2iDIDIyTw87TISmL2lJj+raq361UW1xBe hHj1k+O4YoDSiBl/3xUDkPqNqw== -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:55 2026 by rpki-client