$ rpki-client -vvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft File: 9TkpGRnN4USwNO8oiwpjR4PoLH8.mft (raw, json) Hash identifier: nOVopArGxVnD0KUyg6Qy1ukHuSEFKofnU8pBICmIWWw= Subject key identifier: 64:63:26:04:7C:77:91:FA:36:63:75:3D:0B:91:B7:AB:78:33:4A:9A Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft Manifest number: 04C8 Signing time: Tue 24 Mar 2026 23:45:00 +0000 Manifest this update: Tue 24 Mar 2026 23:44:59 +0000 Manifest next update: Tue 31 Mar 2026 23:44:59 +0000 Files and hashes: 1: 9TkpGRnN4USwNO8oiwpjR4PoLH8.crl (hash: D7AKcuEjEKIq3/RtR51u/T9FX0M9xdNsKoEr0FdwH0A=) 2: 06B47656E38A11EFA4DDBC1EC4F9AE02.roa (hash: u0c/ssX6kgjutUTfkpYiIa/njPV333A0PDmB5szLVqQ=) 3: 976C4E84F72711EFB800B84BC4F9AE02.roa (hash: 7qGngpeh4FzrsNhjJAMkGyl78e/KWAJeLEELyapc5Ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F Validity Not Before: Mar 24 23:44:59 2026 GMT Not After : Mar 31 23:44:59 2026 GMT Subject: CN=69c321fb-3bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:6c:67:be:1b:a8:a6:c0:cc:7e:b9:ff:7f: d1:e4:79:71:07:f2:37:dc:b0:e0:01:bf:0a:e4:82: 94:32:b9:22:63:fc:f0:d5:f6:72:9b:3a:b6:73:5c: af:1e:7f:4b:70:f4:7c:04:f7:80:75:d8:d9:4b:c5: 0d:37:1e:25:04:2a:4f:d6:8d:f0:05:74:e9:83:08: a2:0b:c1:51:26:9b:ed:0e:a0:f9:ac:4a:50:41:f1: a1:d4:17:0f:2f:a6:1a:9e:1b:be:4b:91:51:94:f9: ad:2b:73:0c:1a:f2:78:13:5d:60:de:e5:89:b1:fe: 6f:e4:28:07:d4:d8:6d:10:19:10:19:bb:2f:69:32: da:92:7a:ff:59:2c:07:2d:78:3f:04:21:56:97:18: a9:99:fe:25:cb:8a:69:18:90:85:ae:44:09:0c:03: c6:f7:68:b4:0e:eb:2d:1c:84:bc:e6:7d:bb:23:4e: 70:2a:6b:fe:ec:68:d7:d8:26:d8:c9:6a:28:1b:4c: 12:63:4d:be:a3:1a:a6:d1:13:df:47:9f:8d:51:7d: 4c:7b:36:a3:1b:a7:ee:7c:f9:3a:7c:70:f8:1f:2d: 14:00:a5:56:8f:d5:49:65:1d:6a:2d:5e:56:a7:43: 69:6a:04:78:4b:a4:96:a9:1a:4a:af:0a:a9:85:fe: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:63:26:04:7C:77:91:FA:36:63:75:3D:0B:91:B7:AB:78:33:4A:9A X509v3 Authority Key Identifier: keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:fc:7a:1a:5d:63:32:87:4b:89:07:39:6b:b9:33:4c:ce:5e: 15:ca:3a:b7:fd:b1:59:7e:3c:f3:94:c6:a4:f7:dc:3a:96:11: ed:e5:74:3f:c9:3e:7c:d7:c8:4c:6f:91:cc:28:ca:cc:d6:67: 85:6e:58:49:57:02:a9:3b:b8:ea:2c:60:57:5f:a4:e6:ab:f7: d7:cc:64:df:60:63:5b:59:ce:1d:0c:ba:d0:10:cf:64:ff:92: ec:af:90:7d:79:f1:80:4e:c2:3b:20:b6:db:e1:42:63:51:2c: 60:f3:75:fe:5f:3a:43:a1:87:a3:07:e3:a7:a0:12:fb:94:df: c6:44:5f:25:e3:af:64:e2:01:40:67:2c:8b:46:31:c8:ad:4c: 3e:9b:c1:bc:ad:9b:86:c3:4e:83:a8:87:39:9f:e2:33:7b:a6: bf:73:f8:a7:73:13:3e:d4:cf:f4:c8:6e:66:88:28:fe:a5:78: ff:bf:b7:0e:b5:67:d6:0c:12:a1:87:51:86:2e:45:e0:14:9a: 0c:da:15:14:94:77:3e:1c:f7:59:8c:80:1d:95:f2:8f:cb:19: c1:07:8a:2c:f7:78:cc:ff:35:cb:44:3d:dc:db:80:a6:e1:2c: eb:01:4d:5a:4d:fc:d5:30:df:4e:9d:d6:b2:a5:51:3b:b2:01: ed:56:68:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM2MUIxMTAvBgNVBAUTKEY1MzkyOTE5MTlDREUxNDRCMDM0RUYyODhCMEE2MzQ3 ODNFODJDN0YwHhcNMjYwMzI0MjM0NDU5WhcNMjYwMzMxMjM0NDU5WjAYMRYwFAYD VQQDEw02OWMzMjFmYi0zYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuX5sZ74bqKbAzH65/3/R5HlxB/I33LDgAb8K5IKUMrkiY/zw1fZymzq2c1yv Hn9LcPR8BPeAddjZS8UNNx4lBCpP1o3wBXTpgwiiC8FRJpvtDqD5rEpQQfGh1BcP L6Yanhu+S5FRlPmtK3MMGvJ4E11g3uWJsf5v5CgH1NhtEBkQGbsvaTLaknr/WSwH LXg/BCFWlxipmf4ly4ppGJCFrkQJDAPG92i0DustHIS85n27I05wKmv+7GjX2CbY yWooG0wSY02+oxqm0RPfR5+NUX1MezajG6fufPk6fHD4Hy0UAKVWj9VJZR1qLV5W p0NpagR4S6SWqRpKrwqphf6NLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGRjJgR8 d5H6NmN1PQuRt6t4M0qaMB8GA1UdIwQYMBaAFPU5KRkZzeFEsDTvKIsKY0eD6Cx/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzYxQi81MUVGRkEzMDgy NjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRVU3dOTzhvaXdwalI0UG9M SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlUa3BHUm5ONFVTd05POG9pd3BqUjRQb0xIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzYxQi81MUVGRkEzMDgyNjkxMUVDQUQyRTk1MjRDNEY5QUUwMi85VGtwR1JuTjRV U3dOTzhvaXdwalI0UG9MSDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOPx6Gl1jModLiQc5a7kzTM5eFco6t/2xWX4885TGpPfcOpYR7eV0P8k+fNfI TG+RzCjKzNZnhW5YSVcCqTu46ixgV1+k5qv318xk32BjW1nOHQy60BDPZP+S7K+Q fXnxgE7COyC22+FCY1EsYPN1/l86Q6GHowfjp6AS+5TfxkRfJeOvZOIBQGcsi0Yx yK1MPpvBvK2bhsNOg6iHOZ/iM3umv3P4p3MTPtTP9MhuZogo/qV4/7+3DrVn1gwS oYdRhi5F4BSaDNoVFJR3Phz3WYyAHZXyj8sZwQeKLPd4zP81y0Q93NuApuEs6wFN Wk381TDfTp3WsqVRO7IB7VZo1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 13:13:09 2026 by rpki-client