$ rpki-client -vvf rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft File: rwJRH3yA38Do7VBvZjD2e9ZADgk.mft (raw, json) Hash identifier: st0YZ154FUmZZW0rrnxeYdL6ay01Rp0EYn/f01wIoVU= Subject key identifier: 44:C9:66:AB:61:F3:B7:82:76:31:C4:7A:5D:A3:EE:BB:D2:B2:65:9C Authority key identifier: AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 Certificate issuer: /CN=A9168B4A/serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Certificate serial: 14DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft Manifest number: 14B0 Signing time: Tue 24 Mar 2026 16:46:15 +0000 Manifest this update: Tue 24 Mar 2026 16:46:15 +0000 Manifest next update: Tue 31 Mar 2026 16:46:15 +0000 Files and hashes: 1: rwJRH3yA38Do7VBvZjD2e9ZADgk.crl (hash: 2mfoXsZCG9jupq5Xi/LBZGDGXzm7IDj1d3N7lZcZPeg=) 2: 98A0F2BE450611F093EC3A65C4F9AE02.roa (hash: Wopqvhkb24wEJCTtlFgfkTquZwIEfGbCSBar+r2PsA0=) 3: 26F19BD2EFFE11EDA34BD84DC4F9AE02.roa (hash: /dfSFFokCqZHKPcfVIUa5saL4zfwsMCEJvMbseXpy4U=) 4: 97A9C872450611F093EC3A65C4F9AE02.roa (hash: MmIdcidip9wfZBZNyWLT9cL4eJ3yTZtCyba7+5jHe8E=) 5: 7EA2ADC0C3A411ED8EFA6F13C4F9AE02.roa (hash: Lqak49Os9Ya4UTOEGKBzKyCOhe/2umYec1RSzQZJSpk=) 6: 4C6227D2B69B11EFA181E00AC4F9AE02.roa (hash: gIriR3eH5k3pAT0NnJ+OPQQKfKfiZEc9fhp0R9U18R0=) 7: 7F444842C3A411ED8EFA6F13C4F9AE02.roa (hash: UX+Z+m5y60d6ZGNGCzFSXggUSxqmAM8xUHETNR0GgzI=) 8: 983A5536450611F093EC3A65C4F9AE02.roa (hash: ijwzgpsaKu/9677qc+bwpPEiLD74pnpjkFQugVrQBxM=) 9: A83ECFAE791B11F0B7D48969C4F9AE02.roa (hash: mUJCyq9Quz8XTmFeT3HrV8pJ/1hf+u+XYqhrbRQjU3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5341 (0x14dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168B4A, serialNumber=AF02511F7C80DFC0E8ED506F6630F67BD6400E09 Validity Not Before: Mar 24 16:46:15 2026 GMT Not After : Mar 31 16:46:15 2026 GMT Subject: CN=69c2bfd7-b282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:74:fc:3f:e7:11:b0:0d:e4:4e:51:3c:24: ee:2a:ea:57:6f:40:21:2a:69:c4:a3:67:a4:51:f0: 71:c1:c7:24:79:e5:7d:ba:06:b6:21:4a:67:17:06: 97:74:3d:5f:da:7e:4a:c6:dc:10:03:fe:71:0a:04: ec:56:68:11:f3:2f:c6:16:bc:cf:81:af:f9:23:59: 5a:cf:34:95:31:04:68:9e:46:f2:e3:b1:01:d9:30: ea:38:65:9f:a6:1d:8a:ff:75:f5:bb:9e:a3:ca:78: d4:2c:83:97:ea:a9:ca:d9:c3:0d:3b:48:68:5f:15: 60:fe:2b:38:d0:1f:9f:e7:0f:f3:d9:c4:c3:12:10: f0:95:ec:61:2c:30:04:16:71:bb:d7:e4:88:c5:cb: 1b:33:ac:36:21:42:d0:bd:89:db:8e:6f:b9:79:77: 9c:76:ab:3d:0f:b4:a0:bd:45:10:6c:3e:dc:73:e6: 48:78:36:84:12:72:a0:7b:c0:8c:fb:bd:2d:76:82: ec:11:5d:2a:d7:f6:fe:ea:1d:9e:38:ca:5f:67:f6: f2:96:97:05:01:35:5e:da:56:ad:34:88:c8:69:9c: 25:2e:8c:18:7a:37:d8:29:4d:8f:82:09:61:85:32: b1:f7:ce:04:82:8a:8a:94:7c:74:a9:1d:3f:d5:63: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C9:66:AB:61:F3:B7:82:76:31:C4:7A:5D:A3:EE:BB:D2:B2:65:9C X509v3 Authority Key Identifier: keyid:AF:02:51:1F:7C:80:DF:C0:E8:ED:50:6F:66:30:F6:7B:D6:40:0E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwJRH3yA38Do7VBvZjD2e9ZADgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168B4A/0ADB17C0800A11E89B483E7CC4F9AE02/rwJRH3yA38Do7VBvZjD2e9ZADgk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6d:46:3a:23:cf:21:35:f4:d6:b8:2f:05:47:64:05:bb:be: 1a:2a:74:d0:a6:82:1d:34:b5:20:69:67:bd:4f:e3:29:f2:41: 28:34:84:7e:ab:72:7b:e3:0d:25:f2:dd:65:22:93:8e:ce:67: a2:fc:61:fe:37:06:70:b6:63:4d:67:4f:2f:7a:04:43:56:e1: f4:db:34:f7:ca:78:42:79:ec:ee:37:78:d0:77:3b:04:a2:14: 68:9b:b6:22:f1:32:58:95:b9:ab:0d:6a:e4:20:c0:97:f9:76: c1:73:aa:87:cd:b5:43:8d:ad:ea:01:56:7d:ca:50:39:9b:af: aa:c9:66:11:9e:9d:35:b4:57:8f:ca:b9:06:18:92:38:71:b7: 55:32:69:76:a1:b4:f7:5f:a3:90:46:27:88:a6:86:41:22:f6: c1:79:d1:07:2d:02:bb:23:ab:5c:91:76:0b:9e:f2:cb:13:b4: a0:0f:45:45:bf:93:b1:92:74:c5:47:0c:b5:bf:29:d8:fe:eb: f2:18:08:38:02:ee:72:c1:a5:6b:b2:f0:34:6d:95:44:33:49: af:16:87:ab:c6:a1:35:2f:46:ef:89:ac:19:59:f4:4e:81:4d: cf:91:61:57:31:b9:a9:45:bd:fd:6c:d9:d5:12:d4:59:ab:2c: f4:da:41:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhCNEExMTAvBgNVBAUTKEFGMDI1MTFGN0M4MERGQzBFOEVENTA2RjY2MzBGNjdC RDY0MDBFMDkwHhcNMjYwMzI0MTY0NjE1WhcNMjYwMzMxMTY0NjE1WjAYMRYwFAYD VQQDEw02OWMyYmZkNy1iMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvld0/D/nEbAN5E5RPCTuKupXb0AhKmnEo2ekUfBxwcckeeV9uga2IUpnFwaX dD1f2n5KxtwQA/5xCgTsVmgR8y/GFrzPga/5I1lazzSVMQRonkby47EB2TDqOGWf ph2K/3X1u56jynjULIOX6qnK2cMNO0hoXxVg/is40B+f5w/z2cTDEhDwlexhLDAE FnG71+SIxcsbM6w2IULQvYnbjm+5eXecdqs9D7SgvUUQbD7cc+ZIeDaEEnKge8CM +70tdoLsEV0q1/b+6h2eOMpfZ/bylpcFATVe2latNIjIaZwlLowYejfYKU2Pgglh hTKx984EgoqKlHx0qR0/1WM96wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFETJZqth 87eCdjHEel2j7rvSsmWcMB8GA1UdIwQYMBaAFK8CUR98gN/A6O1Qb2Yw9nvWQA4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEI0QS8wQURCMTdDMDgw MEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4RG83VkJ2WmpEMmU5WkFE Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J3SlJIM3lBMzhEbzdWQnZaakQyZTlaQURnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEI0QS8wQURCMTdDMDgwMEExMUU4OUI0ODNFN0NDNEY5QUUwMi9yd0pSSDN5QTM4 RG83VkJ2WmpEMmU5WkFEZ2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGm1GOiPPITX01rgvBUdkBbu+Gip00KaCHTS1IGlnvU/jKfJBKDSEfqtye+MN JfLdZSKTjs5novxh/jcGcLZjTWdPL3oEQ1bh9Ns098p4Qnns7jd40Hc7BKIUaJu2 IvEyWJW5qw1q5CDAl/l2wXOqh821Q42t6gFWfcpQOZuvqslmEZ6dNbRXj8q5BhiS OHG3VTJpdqG091+jkEYniKaGQSL2wXnRBy0CuyOrXJF2C57yyxO0oA9FRb+TsZJ0 xUcMtb8p2P7r8hgIOALucsGla7LwNG2VRDNJrxaHq8ahNS9G74msGVn0ToFNz5Fh VzG5qUW9/WzZ1RLUWass9NpBZg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:56:31 2026 by rpki-client