$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft File: FrgD2zk43LFdxZooyXcZ2h_yClM.mft (raw, json) Hash identifier: Jn8k1FohQVlUW2PMrtt8yaOBfO+sAK6neEMbF83jSHs= Subject key identifier: BB:29:56:DD:C9:C3:A8:3C:A4:24:2B:04:49:3B:A2:32:42:54:E9:20 Authority key identifier: 16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 Certificate issuer: /CN=A9149E0D/serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Certificate serial: 0BE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft Manifest number: 0BDA Signing time: Tue 24 Mar 2026 18:44:08 +0000 Manifest this update: Tue 24 Mar 2026 18:44:07 +0000 Manifest next update: Tue 31 Mar 2026 18:44:07 +0000 Files and hashes: 1: FrgD2zk43LFdxZooyXcZ2h_yClM.crl (hash: bYgjt7vOPGJPxKm7277PHYlZVDpirPYL1vzuAVY1oyk=) 2: C8FB48F808AF11EBAB78DF6BC4F9AE02.roa (hash: mSjl0ibvEOuCK6DB5KHjDY/U2WKZFdSr/+i3luIa4aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3047 (0xbe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E0D, serialNumber=16B803DB3938DCB15DC59A28C97719DA1FF20A53 Validity Not Before: Mar 24 18:44:07 2026 GMT Not After : Mar 31 18:44:07 2026 GMT Subject: CN=69c2db78-e539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c8:f0:dc:a9:24:94:6c:5e:3a:46:0a:1e:f9: b5:7c:78:97:0e:b3:b8:78:b7:43:55:b6:d7:b4:56: 2f:fa:cf:35:59:ce:b6:d3:73:27:d7:c0:7b:a5:2c: b6:ed:fd:7f:7b:e7:f9:cf:30:63:86:b2:04:a3:65: 78:9b:9a:1e:ad:74:45:1d:c5:8b:37:ec:b4:ab:d5: 2c:62:d9:17:09:6f:50:b3:06:b9:3a:62:90:54:bf: 91:8a:18:75:f5:01:b7:84:21:25:be:62:d6:82:07: 91:6b:f3:cc:97:48:55:92:ff:a6:16:90:0a:83:a2: 82:a2:af:88:2d:8d:a5:6a:33:57:44:9d:61:64:3b: b8:3d:23:19:bc:cc:43:d6:97:b1:64:88:66:3a:60: 81:35:be:26:bf:c8:00:6a:3f:7e:de:55:32:35:3c: 69:ae:ad:7e:3c:58:8a:49:c9:21:dd:c7:07:12:be: ee:57:dd:ea:14:d3:11:e0:40:cb:1b:5e:48:73:ca: 06:dd:bf:ca:d6:87:f5:de:e6:c7:ef:3b:b5:22:1f: eb:b7:1e:c5:1d:14:46:1b:83:6d:8c:9d:a7:9c:f3: cc:c1:f5:fd:65:49:1c:84:49:04:8e:60:80:b4:17: c6:ea:11:da:85:c1:e8:a9:c2:ea:19:2e:67:c7:27: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:56:DD:C9:C3:A8:3C:A4:24:2B:04:49:3B:A2:32:42:54:E9:20 X509v3 Authority Key Identifier: keyid:16:B8:03:DB:39:38:DC:B1:5D:C5:9A:28:C9:77:19:DA:1F:F2:0A:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrgD2zk43LFdxZooyXcZ2h_yClM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E0D/904E747E390911EAB0DE3F49C4F9AE02/FrgD2zk43LFdxZooyXcZ2h_yClM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1d:75:c9:d2:50:61:1d:e8:3b:a9:a3:fa:26:7b:1e:79:85: 76:e9:e5:98:ff:be:d0:f2:79:ff:ae:df:03:d2:59:c0:7a:12: 7a:26:4c:68:57:f1:40:8a:9a:d6:bc:71:29:9d:f1:82:da:5c: d2:bf:1b:ac:10:30:9e:f1:10:f4:fb:c0:47:7d:52:87:25:0f: 5c:2c:07:82:97:8c:50:ad:ba:de:92:06:ce:dd:97:33:4f:7a: 1e:37:04:4a:f6:78:a3:f5:41:2f:e3:a5:8d:07:33:1c:df:e0: 8b:0e:cc:8e:0a:fc:4d:61:a4:c2:dd:fa:55:12:e9:1a:4c:08: 3d:45:82:f3:6a:77:9a:ed:ab:66:a3:63:cb:18:8f:18:8f:2e: b7:51:ed:b2:0b:a3:dc:9e:57:cf:34:5d:7c:8e:d8:95:9e:83: 14:80:04:d8:45:1a:b6:7d:16:cc:56:68:e9:b7:a4:4c:f3:cb: d0:85:4e:a3:97:ea:e8:20:d8:e9:55:7c:18:ea:eb:0c:c1:36: f7:74:84:1a:7a:0f:e2:fe:c8:11:fd:14:7d:ec:68:70:1f:7b: 04:6c:8b:ea:24:11:67:6a:88:70:7d:5f:c3:d4:25:51:d6:d6: 45:c0:46:c5:6e:e6:8b:f5:c6:21:29:2f:7f:27:63:4e:26:b9: 9b:be:71:0a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFMEQxMTAvBgNVBAUTKDE2QjgwM0RCMzkzOERDQjE1REM1OUEyOEM5NzcxOURB MUZGMjBBNTMwHhcNMjYwMzI0MTg0NDA3WhcNMjYwMzMxMTg0NDA3WjAYMRYwFAYD VQQDEw02OWMyZGI3OC1lNTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjcjw3KkklGxeOkYKHvm1fHiXDrO4eLdDVbbXtFYv+s81Wc6203Mn18B7pSy2 7f1/e+f5zzBjhrIEo2V4m5oerXRFHcWLN+y0q9UsYtkXCW9Qswa5OmKQVL+Rihh1 9QG3hCElvmLWggeRa/PMl0hVkv+mFpAKg6KCoq+ILY2lajNXRJ1hZDu4PSMZvMxD 1pexZIhmOmCBNb4mv8gAaj9+3lUyNTxprq1+PFiKSckh3ccHEr7uV93qFNMR4EDL G15Ic8oG3b/K1of13ubH7zu1Ih/rtx7FHRRGG4NtjJ2nnPPMwfX9ZUkchEkEjmCA tBfG6hHahcHoqcLqGS5nxyfnUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLspVt3J w6g8pCQrBEk7ojJCVOkgMB8GA1UdIwQYMBaAFBa4A9s5ONyxXcWaKMl3Gdof8gpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUUwRC85MDRFNzQ3RTM5 MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNMRmR4Wm9veVhjWjJoX3lD bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZyZ0Qyems0M0xGZHhab295WGNaMmhfeUNsTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUUwRC85MDRFNzQ3RTM5MDkxMUVBQjBERTNGNDlDNEY5QUUwMi9GcmdEMnprNDNM RmR4Wm9veVhjWjJoX3lDbE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABh11ydJQYR3oO6mj+iZ7HnmFdunlmP++0PJ5/67fA9JZwHoSeiZMaFfxQIqa 1rxxKZ3xgtpc0r8brBAwnvEQ9PvAR31ShyUPXCwHgpeMUK263pIGzt2XM096HjcE SvZ4o/VBL+OljQczHN/giw7Mjgr8TWGkwt36VRLpGkwIPUWC82p3mu2rZqNjyxiP GI8ut1Htsguj3J5XzzRdfI7YlZ6DFIAE2EUatn0WzFZo6bekTPPL0IVOo5fq6CDY 6VV8GOrrDME293SEGnoP4v7IEf0UfexocB97BGyL6iQRZ2qIcH1fw9QlUdbWRcBG xW7mi/XGISkvfydjTia5m75xCg== -----END CERTIFICATE-----Generated at Thu Mar 26 00:53:42 2026 by rpki-client