$ rpki-client -vvf rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft File: lI_4don6lJEW9ffIAOsdcB5l43s.mft (raw, json) Hash identifier: i5hs8LrMjcTbXvToATe9EmHajnBHUIQrCfkHT9fFBBM= Subject key identifier: D4:B4:0A:90:31:0C:B4:0B:CA:E1:D7:CF:11:D9:28:DA:30:2C:25:3E Authority key identifier: 94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B Certificate issuer: /CN=A9148EFA/serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Certificate serial: 0C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft Manifest number: 0C04 Signing time: Tue 24 Mar 2026 18:39:20 +0000 Manifest this update: Tue 24 Mar 2026 18:39:20 +0000 Manifest next update: Tue 31 Mar 2026 18:39:20 +0000 Files and hashes: 1: lI_4don6lJEW9ffIAOsdcB5l43s.crl (hash: VdNmCI3ezTo1gicMk6JMUa8Cusl3OGC4E+dQowKlwNs=) 2: 160F265C827311EDA56A8F30C4F9AE02.roa (hash: R/8NXAZr4r75djE8TFOk6LbaW8qbFanhxJorh/ZmyOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:39:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148EFA, serialNumber=948FF87689FA949116F5F7C800EB1D701E65E37B Validity Not Before: Mar 24 18:39:20 2026 GMT Not After : Mar 31 18:39:20 2026 GMT Subject: CN=69c2da58-0cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:cb:14:40:25:ab:dc:b9:5f:4b:0d:d8:40: 30:53:82:b0:83:9f:09:73:2f:ee:a7:21:b9:41:14: 9d:7d:08:f0:5b:0e:54:ef:fa:a4:86:b4:5d:41:35: b9:ad:c3:a8:1c:4e:10:c6:14:63:56:cc:c3:65:64: 37:0d:b9:a1:f6:26:b8:ad:8b:78:11:75:57:61:79: 03:24:bd:ae:77:72:4d:59:9d:c8:19:cb:c9:5a:f7: bb:c4:85:fb:95:28:f0:f6:59:37:97:33:30:72:d9: 7b:d0:9c:df:14:c6:86:3f:cd:61:31:67:72:bb:77: 58:38:33:e3:fd:2d:dd:38:37:ce:e7:f2:a9:63:9f: e6:84:c8:44:c8:92:96:34:6a:5d:a6:bb:fc:bb:ac: 44:1e:d6:7b:73:83:4a:b0:19:d3:a4:a6:e1:3f:e4: a5:48:91:6e:00:2c:9b:a8:eb:54:02:57:e3:08:fe: c9:2a:9f:61:d0:81:64:80:f6:41:3e:dc:06:ff:ea: 86:51:d3:b5:5a:f3:9e:6f:8a:17:26:12:ec:fb:98: 86:f0:87:95:cf:6b:b6:d5:8e:98:ee:9f:b9:be:7a: 9a:53:6b:dc:81:97:6b:37:3e:39:6c:30:46:81:ec: 40:b2:d7:04:20:7e:bb:37:0a:8a:af:e8:51:5c:be: c1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:0A:90:31:0C:B4:0B:CA:E1:D7:CF:11:D9:28:DA:30:2C:25:3E X509v3 Authority Key Identifier: keyid:94:8F:F8:76:89:FA:94:91:16:F5:F7:C8:00:EB:1D:70:1E:65:E3:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI_4don6lJEW9ffIAOsdcB5l43s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148EFA/E0C951CE306911EABF0D942EC4F9AE02/lI_4don6lJEW9ffIAOsdcB5l43s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:82:06:b0:bb:62:12:84:50:5a:3c:eb:bd:6b:1a:42:8b:4c: 0c:9c:fd:be:96:11:08:cf:00:bf:ae:1e:55:88:43:f3:54:03: f2:b3:ff:1a:47:d2:4e:c0:86:a9:f6:2d:eb:3e:ee:49:49:47: 4c:78:37:61:9c:90:a3:a8:de:47:12:e3:7b:d4:e2:2e:1e:de: ba:ed:db:07:e5:03:1d:63:6a:36:0c:64:eb:a5:3b:8a:ba:0c: ff:1d:34:d7:a3:27:5b:3a:9c:54:3c:28:1d:ca:a3:66:0e:59: ce:ef:64:9f:aa:31:26:a9:4b:85:58:a8:5b:dc:6b:05:bf:59: 4a:b7:ae:bb:59:81:df:24:a4:c7:36:7f:ee:32:5f:10:bf:19: a8:91:71:f8:f4:29:24:c9:86:c7:2c:a7:43:ce:33:92:10:93: 6d:59:be:9c:a6:1e:7f:18:cb:2c:de:c6:8c:30:76:4d:e3:dc: 3d:3d:24:96:0d:38:a1:6d:c0:b2:25:f9:10:42:72:71:58:2b: be:8e:c2:d5:a9:76:1d:a0:ba:c6:9a:13:96:40:1a:b8:63:cc: ea:8b:ef:85:c9:a9:a9:6c:e5:65:7d:ee:1a:c8:e9:1a:98:f5: 26:14:90:dd:42:8b:af:70:d9:28:17:ca:a2:8c:6a:3d:96:f2: cd:92:44:a9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhFRkExMTAvBgNVBAUTKDk0OEZGODc2ODlGQTk0OTExNkY1RjdDODAwRUIxRDcw MUU2NUUzN0IwHhcNMjYwMzI0MTgzOTIwWhcNMjYwMzMxMTgzOTIwWjAYMRYwFAYD VQQDEw02OWMyZGE1OC0wY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPrLFEAlq9y5X0sN2EAwU4Kwg58Jcy/upyG5QRSdfQjwWw5U7/qkhrRdQTW5 rcOoHE4QxhRjVszDZWQ3Dbmh9ia4rYt4EXVXYXkDJL2ud3JNWZ3IGcvJWve7xIX7 lSjw9lk3lzMwctl70JzfFMaGP81hMWdyu3dYODPj/S3dODfO5/KpY5/mhMhEyJKW NGpdprv8u6xEHtZ7c4NKsBnTpKbhP+SlSJFuACybqOtUAlfjCP7JKp9h0IFkgPZB PtwG/+qGUdO1WvOeb4oXJhLs+5iG8IeVz2u21Y6Y7p+5vnqaU2vcgZdrNz45bDBG gexAstcEIH67NwqKr+hRXL7BGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNS0CpAx DLQLyuHXzxHZKNowLCU+MB8GA1UdIwQYMBaAFJSP+HaJ+pSRFvX3yADrHXAeZeN7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEVGQS9FMEM5NTFDRTMw NjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxKRVc5ZmZJQU9zZGNCNWw0 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xJXzRkb242bEpFVzlmZklBT3NkY0I1bDQzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEVGQS9FMEM5NTFDRTMwNjkxMUVBQkYwRDk0MkVDNEY5QUUwMi9sSV80ZG9uNmxK RVc5ZmZJQU9zZGNCNWw0M3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEApIIGsLtiEoRQWjzrvWsaQotMDJz9vpYRCM8Av64eVYhD81QD8rP/GkfSTsCG qfYt6z7uSUlHTHg3YZyQo6jeRxLje9TiLh7euu3bB+UDHWNqNgxk66U7iroM/x00 16MnWzqcVDwoHcqjZg5Zzu9kn6oxJqlLhVioW9xrBb9ZSreuu1mB3ySkxzZ/7jJf EL8ZqJFx+PQpJMmGxyynQ84zkhCTbVm+nKYefxjLLN7GjDB2TePcPT0klg04oW3A siX5EEJycVgrvo7C1al2HaC6xpoTlkAauGPM6ovvhcmpqWzlZX3uGsjpGpj1JhSQ 3UKLr3DZKBfKooxqPZbyzZJEqQ== -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:53 2026 by rpki-client