$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft File: FN2GhClPGzOjE6-48OuhyKADeAk.mft (raw, json) Hash identifier: GiQSrYioJiYoppyUNjyZrp9sd/oKF0CBVVs0MfXJ/FU= Subject key identifier: 8B:0D:C3:00:5D:38:1A:73:27:56:5C:01:44:CA:8A:0D:6B:80:65:58 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft Manifest number: 0120 Signing time: Wed 25 Mar 2026 05:02:01 +0000 Manifest this update: Wed 25 Mar 2026 05:02:00 +0000 Manifest next update: Wed 01 Apr 2026 05:02:00 +0000 Files and hashes: 1: FN2GhClPGzOjE6-48OuhyKADeAk.crl (hash: uauPONPhpOFf9XunGjRa/Sbj4Ang76Wls9uHu77mpQI=) 2: F7981812F38811EFAC05053AC4F9AE02.roa (hash: EK3pUqrH9H4fquoX1peOlD1L2xEfn/Ee2ouiE9JS3Uk=) 3: E9B0903AF38811EF81B8CE39C4F9AE02.roa (hash: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Mar 25 05:02:00 2026 GMT Not After : Apr 1 05:02:00 2026 GMT Subject: CN=69c36c48-2411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:af:dc:f6:38:7d:20:dd:96:c1:8a:ee:cf:c4: e1:d7:04:e8:b6:a8:7d:56:f4:7b:bf:63:05:0f:ef: 25:62:a0:9d:53:72:d9:62:c4:cc:c4:47:bb:41:78: c3:49:62:29:51:f8:a3:4c:f3:41:b0:35:d5:e4:c7: 28:f1:6f:89:d6:58:f3:cc:59:30:57:64:4e:61:67: 55:31:da:d9:d6:96:86:f6:08:90:de:63:a3:21:f9: 0b:7f:2b:7f:1d:15:b1:95:e2:94:ad:61:99:3a:ca: 26:a6:1c:ad:18:8e:f5:6c:64:44:1a:77:be:79:78: 9f:06:10:66:33:ed:d5:ed:4b:32:fc:00:75:9b:96: 42:2e:04:bb:d0:7f:cd:06:1f:83:72:64:d1:36:20: ea:36:6c:05:d1:9c:d2:e0:df:70:2f:bc:95:9c:11: 4f:1d:e8:a3:54:a0:5b:68:7a:2d:2c:89:3f:16:92: 28:f1:2d:45:e1:c3:df:00:f6:cc:11:f4:68:fe:5e: 39:70:b3:63:33:22:82:fd:e5:ad:fc:a5:1c:21:ee: 0f:56:1d:92:6e:3b:70:5a:7f:a0:b9:98:66:55:72: f1:b3:1b:56:a4:5b:6a:77:16:a2:a8:76:b5:e8:d1: 0c:4b:22:e9:2f:dd:9b:c4:55:33:00:51:b4:dc:47: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0D:C3:00:5D:38:1A:73:27:56:5C:01:44:CA:8A:0D:6B:80:65:58 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:02:ca:e2:76:19:06:27:6c:4e:43:2e:4f:a8:97:ee:93: f4:08:05:41:ad:84:e1:3f:52:5b:56:9f:5d:bd:28:f2:02:a1: f0:54:21:9c:ae:40:4e:d1:ca:7e:b9:eb:b9:8e:75:93:eb:8a: 80:de:a0:c7:26:9f:e2:d4:aa:b0:f9:08:e1:15:6d:6d:b4:5a: e6:8c:3b:df:c6:10:34:63:73:bc:77:dd:f3:08:a3:c8:42:37: 90:46:d8:ee:f7:d0:55:3e:7c:bb:ed:57:5c:b5:7c:93:a4:d5: a0:18:73:98:3c:05:2f:4e:70:d4:a9:f0:8e:96:00:90:02:93: 57:c3:6c:c4:20:0b:9b:c2:5a:ee:aa:7a:1e:17:63:a8:be:67: e4:f1:fb:05:ba:c3:b3:c9:79:16:27:c4:f7:1f:cf:79:23:d3: a2:c2:d1:cd:bf:6a:43:a3:0b:c5:08:4e:b8:6e:be:d7:02:65: 2b:93:c3:23:e7:6d:d2:04:83:6d:ab:c3:38:81:0c:3b:a7:a0: b1:35:cf:e8:ac:3c:f5:e1:e3:2e:2f:e1:8a:b8:9f:ca:26:51: 63:67:10:75:57:42:3d:97:70:70:f0:b2:fd:05:c7:b2:3b:09: 3d:67:32:09:95:25:cf:f7:7a:33:37:66:3f:17:25:07:83:6e: d8:dc:1d:36 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4 QTAwMzc4MDkwHhcNMjYwMzI1MDUwMjAwWhcNMjYwNDAxMDUwMjAwWjAYMRYwFAYD VQQDEw02OWMzNmM0OC0yNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7a/c9jh9IN2WwYruz8Th1wTotqh9VvR7v2MFD+8lYqCdU3LZYsTMxEe7QXjD SWIpUfijTPNBsDXV5Mco8W+J1ljzzFkwV2ROYWdVMdrZ1paG9giQ3mOjIfkLfyt/ HRWxleKUrWGZOsomphytGI71bGREGne+eXifBhBmM+3V7Usy/AB1m5ZCLgS70H/N Bh+DcmTRNiDqNmwF0ZzS4N9wL7yVnBFPHeijVKBbaHotLIk/FpIo8S1F4cPfAPbM EfRo/l45cLNjMyKC/eWt/KUcIe4PVh2SbjtwWn+guZhmVXLxsxtWpFtqdxaiqHa1 6NEMSyLpL92bxFUzAFG03EeEdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsNwwBd OBpzJ1ZcAUTKig1rgGVYMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEEwNS9EMTdDODg2ODdDOEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6 T2pFNi00OE91aHlLQURlQWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAoIACyuJ2GQYnbE5DLk+ol+6T9AgFQa2E4T9SW1afXb0o8gKh8FQhnK5ATtHK frnruY51k+uKgN6gxyaf4tSqsPkI4RVtbbRa5ow738YQNGNzvHfd8wijyEI3kEbY 7vfQVT58u+1XXLV8k6TVoBhzmDwFL05w1KnwjpYAkAKTV8NsxCALm8Ja7qp6Hhdj qL5n5PH7BbrDs8l5FifE9x/PeSPTosLRzb9qQ6MLxQhOuG6+1wJlK5PDI+dt0gSD bavDOIEMO6egsTXP6Kw89eHjLi/hirifyiZRY2cQdVdCPZdwcPCy/QXHsjsJPWcy CZUlz/d6MzdmPxclB4Nu2NwdNg== -----END CERTIFICATE-----Generated at Thu Mar 26 20:26:45 2026 by rpki-client