$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json) Hash identifier: s4IhEee6Oz+iWGBzP0CTzNGe7O35e63GZFe3M+o0C94= Subject key identifier: 28:EF:A1:D9:F9:86:E7:B2:51:C3:D5:3D:26:34:3D:03:82:D6:D4:3C Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft Manifest number: 0135 Signing time: Wed 25 Mar 2026 04:43:46 +0000 Manifest this update: Wed 25 Mar 2026 04:43:45 +0000 Manifest next update: Wed 01 Apr 2026 04:43:45 +0000 Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: PtC8addadx0zMdJ3fGWZrZW5NlrTFhqrfhZvfDPzv0c=) 2: 809F6BF2990511F090DACC2BC4F9AE02.roa (hash: ePh5F//jVgKgbKd9KhC0MLvbTZUoIXDojFlNTXr56Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Validity Not Before: Mar 25 04:43:45 2026 GMT Not After : Apr 1 04:43:45 2026 GMT Subject: CN=69c36801-d1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:58:4d:52:bf:6e:c1:32:20:a1:9b:e1:96: 23:5f:c8:27:ff:7b:15:d1:7a:1f:8d:5b:e5:be:8c: 8c:88:7d:95:9b:4b:ac:f5:49:c1:28:7e:d7:c7:a1: f0:c2:c9:52:c2:20:ce:a8:52:cd:06:99:ec:09:c6: 33:99:bb:34:43:f8:f6:bc:36:e7:88:44:6b:d7:2c: 00:41:55:9d:ca:e0:b1:0b:29:2f:2f:c2:2d:24:4e: 91:4c:93:64:9a:50:b1:14:50:74:c9:b4:e8:36:11: 0d:f9:ff:9f:65:ae:70:d1:b2:51:36:37:5d:6b:78: e3:10:fd:41:5e:59:f1:66:f0:3e:7b:6c:b1:fb:bf: 75:33:c9:d0:7e:f4:ad:a8:06:d0:ae:0c:2f:5c:f9: 2e:5e:3a:cb:c2:31:a4:10:de:64:da:ab:6b:8f:b7: 2b:d3:01:36:81:ac:3f:55:49:c3:c7:44:80:77:09: a8:3a:f3:20:7a:23:80:fb:1e:30:3d:31:99:c1:e1: 96:ee:d8:f3:b8:38:17:21:85:93:99:f0:90:68:8c: 89:7a:87:61:8c:c1:59:14:33:80:57:f8:9d:07:be: 0b:be:c4:06:4b:bb:e1:8b:1a:eb:d3:d7:4a:bc:db: a7:e1:17:d6:c4:e3:b1:a4:8f:aa:5f:39:97:5e:92: 59:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EF:A1:D9:F9:86:E7:B2:51:C3:D5:3D:26:34:3D:03:82:D6:D4:3C X509v3 Authority Key Identifier: keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:4a:1a:e6:31:ab:ec:cc:a5:37:f0:fa:b1:bc:f7:a9:af:69: 61:19:60:73:ef:59:f9:4a:70:0e:36:4e:38:a4:c7:77:bc:68: 7c:e1:4d:be:aa:6e:ca:1a:82:4b:61:e8:38:c3:7d:1a:6a:4b: 11:e7:1a:8f:2b:89:05:3d:d1:a7:dd:40:9a:71:ca:e5:4b:28: 15:ee:a5:fe:d6:2c:b4:5b:5d:ad:59:e2:c3:eb:97:53:bd:14: 80:1b:dd:a3:84:80:d2:42:a4:c0:34:ff:98:08:d5:8b:8c:a5: b3:14:81:fd:41:4c:0d:87:e9:b9:38:de:20:2c:fd:f6:29:61: 5b:73:7f:29:a5:9a:96:71:54:5c:46:e1:44:fc:93:d2:ab:21: 2c:25:70:db:4d:bc:5b:9d:96:e0:d6:ec:2b:82:bb:5b:61:dd: 80:59:6d:8b:a0:d2:63:9c:5c:5c:75:69:96:7b:2a:e3:6e:fa: d7:12:c4:6c:f1:a9:c3:0e:69:88:1f:7f:d2:6e:ce:32:ad:f5: dc:9c:c7:e6:c1:75:7d:98:14:da:12:ea:d5:a4:e1:24:af:b1: ee:af:b9:eb:9e:0e:ad:b3:36:b2:08:ba:cf:ed:18:01:27:46: 7d:88:3e:1a:bd:55:78:b1:4b:52:b7:2f:21:b4:79:96:1d:4a: 2d:c5:21:7b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5 NUNERUZFMjMwHhcNMjYwMzI1MDQ0MzQ1WhcNMjYwNDAxMDQ0MzQ1WjAYMRYwFAYD VQQDEw02OWMzNjgwMS1kMWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkVYTVK/bsEyIKGb4ZYjX8gn/3sV0XofjVvlvoyMiH2Vm0us9UnBKH7Xx6Hw wslSwiDOqFLNBpnsCcYzmbs0Q/j2vDbniERr1ywAQVWdyuCxCykvL8ItJE6RTJNk mlCxFFB0ybToNhEN+f+fZa5w0bJRNjdda3jjEP1BXlnxZvA+e2yx+791M8nQfvSt qAbQrgwvXPkuXjrLwjGkEN5k2qtrj7cr0wE2gaw/VUnDx0SAdwmoOvMgeiOA+x4w PTGZweGW7tjzuDgXIYWTmfCQaIyJeodhjMFZFDOAV/idB74LvsQGS7vhixrr09dK vNun4RfWxOOxpI+qXzmXXpJZ0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCjvodn5 hueyUcPVPSY0PQOC1tQ8MB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4 ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAIkoa5jGr7MylN/D6sbz3qa9pYRlgc+9Z+UpwDjZOOKTHd7xofOFNvqpuyhqC S2HoOMN9GmpLEecajyuJBT3Rp91AmnHK5UsoFe6l/tYstFtdrVniw+uXU70UgBvd o4SA0kKkwDT/mAjVi4ylsxSB/UFMDYfpuTjeICz99ilhW3N/KaWalnFUXEbhRPyT 0qshLCVw2028W52W4NbsK4K7W2HdgFlti6DSY5xcXHVplnsq42761xLEbPGpww5p iB9/0m7OMq313JzH5sF1fZgU2hLq1aThJK+x7q+5654OrbM2sgi6z+0YASdGfYg+ Gr1VeLFLUrcvIbR5lh1KLcUhew== -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:52 2026 by rpki-client