$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: 11S4i9hxBQsnlaWK11B9aeP7ccd+4RJsy2E5J2xmrgw= Subject key identifier: F9:9C:FD:99:81:E1:E6:73:93:A4:54:8D:5D:EB:0E:9F:96:EC:A2:37 Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 88 Signing time: Tue 24 Mar 2026 22:09:25 +0000 Manifest this update: Tue 24 Mar 2026 22:09:25 +0000 Manifest next update: Tue 31 Mar 2026 22:09:25 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: q4O5Dhleq8nXwTeeRdZeCGSENNq3yLRxnCwEZkhrwpI=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: I1AL4lbWGPIfV3u+8QvI9wVl+esLP3oBbI38pSI4a6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Mar 24 22:09:25 2026 GMT Not After : Mar 31 22:09:25 2026 GMT Subject: CN=69c30b95-f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:4a:50:da:fb:b6:bb:89:9d:97:11:ad:fd: 2f:c4:bb:df:18:fa:d3:7d:1c:b1:c5:a3:22:53:d0: 94:99:a6:04:25:a8:50:f0:ab:ae:bc:08:f7:c6:2f: b5:06:fe:b7:60:ae:6c:4d:6d:59:b0:69:b6:ba:22: 15:b9:77:c2:c7:4e:fa:5e:8b:bf:d5:3f:fe:c4:83: be:0d:41:b9:1e:cc:60:9c:3f:79:b8:cb:cd:85:61: b0:d3:6b:28:87:47:63:21:8a:4e:39:85:9e:cd:7b: 10:93:33:a8:d5:cf:1d:f3:da:12:20:23:05:f3:98: 41:7d:52:a2:ba:c9:44:30:21:ab:ae:68:2f:de:ef: d9:b7:af:3c:c7:8b:7a:2e:31:ea:61:e3:5c:08:2d: 44:b8:97:fa:a6:bd:12:82:09:07:14:12:4d:39:c7: 0a:da:74:84:8a:7c:63:a5:24:83:f3:b2:c4:b5:09: 73:7c:d0:e9:c6:d2:59:7a:5a:74:6f:b4:f5:7e:be: 85:55:b3:b3:2f:b0:73:6a:80:de:85:da:a6:1e:e3: 48:7f:23:bd:49:2b:0b:4f:af:22:60:47:cc:e5:be: 1c:6a:9c:49:a6:f9:8a:eb:51:fa:8d:6b:b6:a0:68: a3:fb:a2:45:da:67:c5:77:2c:03:09:93:e8:61:d3: 1a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9C:FD:99:81:E1:E6:73:93:A4:54:8D:5D:EB:0E:9F:96:EC:A2:37 X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b4:1f:83:49:c5:a3:a7:a5:61:fc:a5:f8:94:a5:c5:a9:af: cb:dc:65:c9:63:38:62:52:7c:93:37:92:b0:03:85:b6:63:3f: 50:32:e5:e5:9c:51:69:94:29:d0:ef:62:8a:99:a9:99:62:d6: 3b:c4:d8:1e:47:47:81:16:97:44:e1:56:03:38:d7:8c:c7:19: 6d:27:1a:ff:2c:c3:da:82:00:7a:f7:a7:bc:aa:4a:76:43:f9: f9:6a:5e:b9:15:f1:d1:ce:99:df:ae:45:18:9a:35:07:2e:cc: f5:02:9d:08:fc:29:00:c3:15:9e:06:c0:bc:2b:a1:fd:fb:41: 9d:7c:54:6b:01:d9:f9:53:f8:a7:a9:85:91:df:ce:4f:db:87: 07:6d:b0:4a:f4:b1:f4:04:6a:e8:87:1a:d7:51:77:52:8b:e6: f8:69:3c:7d:89:34:c4:00:38:36:3a:a0:a2:f0:c8:33:77:16: f9:57:49:ae:d3:38:f7:56:63:b9:93:ef:a0:c1:25:e3:b8:be: b1:86:d8:2b:32:10:f0:fe:b3:a0:8a:fc:8e:46:6d:0f:60:8e: b8:23:dd:7b:68:1f:69:bf:67:94:ee:2c:2d:11:17:d7:a4:9a: 9f:55:51:2f:86:53:1d:c8:ad:57:82:63:78:e7:6b:13:97:c4: 3d:75:5f:74 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMDAxMTAvBgNVBAUTKDIxNDI5MzNGQkU2RTdDNUZCNzY3QTg2QTVFMjFERDYw MTc4RUEzOUQwHhcNMjYwMzI0MjIwOTI1WhcNMjYwMzMxMjIwOTI1WjAYMRYwFAYD VQQDEw02OWMzMGI5NS1mM2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJtKUNr7truJnZcRrf0vxLvfGPrTfRyxxaMiU9CUmaYEJahQ8KuuvAj3xi+1 Bv63YK5sTW1ZsGm2uiIVuXfCx076Xou/1T/+xIO+DUG5HsxgnD95uMvNhWGw02so h0djIYpOOYWezXsQkzOo1c8d89oSICMF85hBfVKiuslEMCGrrmgv3u/Zt688x4t6 LjHqYeNcCC1EuJf6pr0SggkHFBJNOccK2nSEinxjpSSD87LEtQlzfNDpxtJZelp0 b7T1fr6FVbOzL7BzaoDehdqmHuNIfyO9SSsLT68iYEfM5b4capxJpvmK61H6jWu2 oGij+6JF2mfFdywDCZPoYdMaGwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPmc/ZmB 4eZzk6RUjV3rDp+W7KI3MB8GA1UdIwQYMBaAFCFCkz++bnxft2eoal4h3WAXjqOd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQwMC9GMUFGMTA1MjYx REYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZGLTNaNmhxWGlIZFlCZU9v NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQwMC9GMUFGMTA1MjYxREYxMUYwQTZGNzREN0ZDNEY5QUUwMi9JVUtUUDc1dWZG LTNaNmhxWGlIZFlCZU9vNTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK7Qfg0nFo6elYfyl+JSlxamvy9xlyWM4YlJ8kzeSsAOFtmM/UDLl5ZxRaZQp 0O9iipmpmWLWO8TYHkdHgRaXROFWAzjXjMcZbSca/yzD2oIAevenvKpKdkP5+Wpe uRXx0c6Z365FGJo1By7M9QKdCPwpAMMVngbAvCuh/ftBnXxUawHZ+VP4p6mFkd/O T9uHB22wSvSx9ARq6Ica11F3Uovm+Gk8fYk0xAA4NjqgovDIM3cW+VdJrtM491Zj uZPvoMEl47i+sYbYKzIQ8P6zoIr8jkZtD2COuCPde2gfab9nlO4sLREX16San1VR L4ZTHcitV4JjeOdrE5fEPXVfdA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:58 2026 by rpki-client