$ rpki-client -vvf rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft File: 0_p517hB6Lp5mOoihhupD7llH2Q.mft (raw, json) Hash identifier: PpWNF93E8tx+R0JWS5gfkJxRjGRdRlslKhiw1vYn7e8= Subject key identifier: 09:2F:E2:A8:A8:AA:D0:A0:FB:7F:61:EE:62:C9:DF:1C:8F:C8:2C:9A Authority key identifier: D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 Certificate issuer: /CN=A9189346/serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Certificate serial: 1C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft Manifest number: 1C72 Signing time: Tue 24 Mar 2026 16:06:18 +0000 Manifest this update: Tue 24 Mar 2026 16:06:17 +0000 Manifest next update: Tue 31 Mar 2026 16:06:17 +0000 Files and hashes: 1: 0_p517hB6Lp5mOoihhupD7llH2Q.crl (hash: wSdRzp9e5xsHu8Mlmmgwxfc5Mq7aOj+fl7gbLximCPs=) 2: 082ADE2CF72411E6BA654B38C4F9AE02.roa (hash: QCwKUkVOKXGLScCAxDR4Vgfe1Cz3Vfsmtw6cpnZ9ZlA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7301 (0x1c85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189346, serialNumber=D3FA79D7B841E8BA7998EA22861BA90FB9651F64 Validity Not Before: Mar 24 16:06:17 2026 GMT Not After : Mar 31 16:06:17 2026 GMT Subject: CN=69c2b67a-1f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:f5:f3:d9:6e:df:f2:83:86:1d:6e:51:7c: 0f:e3:a7:07:b6:06:b1:e2:be:a3:86:d0:06:e7:43: 9f:28:07:26:0d:b0:ed:1e:1b:ed:e8:a3:75:3e:23: fb:bd:8d:aa:c2:d6:2e:55:8e:23:8a:7e:5c:f8:f7: bb:7e:c7:8d:f4:38:64:c2:79:9a:60:95:ee:32:10: f2:0b:c0:10:b6:94:71:33:7d:84:34:f5:36:f7:9a: 3c:8d:b1:63:ea:82:ad:27:a7:92:07:cd:9d:a5:31: 6e:29:32:1e:e8:18:b1:eb:57:e1:ab:3c:33:09:b8: bd:62:d1:f9:56:e7:eb:4f:72:c8:73:93:1f:9d:47: 63:55:b2:56:c7:a9:a0:bb:e4:2a:cb:26:8f:23:77: 1a:59:1e:85:18:d9:b7:cc:8d:1c:f7:66:af:2f:4a: 5d:33:09:fd:71:01:fd:bc:09:40:06:4b:56:6b:90: 34:26:7c:00:be:87:e2:26:e4:11:0b:2d:6d:d9:9a: 3d:74:1c:19:21:57:06:25:ab:7f:06:bf:2a:b8:a6: f1:a0:9f:1a:b2:0c:f3:7c:99:2d:c1:8b:5a:e8:6a: 18:eb:29:15:b8:03:ba:34:5c:2b:f1:ec:b9:c8:a3: 66:0e:f9:24:9e:33:78:9a:84:23:57:a2:f2:bb:19: ba:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2F:E2:A8:A8:AA:D0:A0:FB:7F:61:EE:62:C9:DF:1C:8F:C8:2C:9A X509v3 Authority Key Identifier: keyid:D3:FA:79:D7:B8:41:E8:BA:79:98:EA:22:86:1B:A9:0F:B9:65:1F:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0_p517hB6Lp5mOoihhupD7llH2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189346/8C65B6E6F72211E686178835C4F9AE02/0_p517hB6Lp5mOoihhupD7llH2Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:af:8f:34:d0:10:f4:fa:5c:ae:d9:35:55:55:65:ea:f7:31: 4f:d7:61:30:50:d4:a9:a2:22:2a:c3:63:6a:41:ed:9e:c6:37: a0:77:0f:38:0d:ff:fa:8b:f5:49:78:75:56:67:5b:9f:99:e6: 47:40:53:22:40:3f:46:eb:47:f9:88:f1:e5:a9:8c:a5:cb:51: 0a:e7:47:70:84:5c:7e:dd:c9:03:96:b1:70:90:a2:f0:96:ff: 4c:30:64:18:70:c8:6f:63:7e:3e:f1:2b:62:06:d5:b2:16:7c: 10:95:a0:4e:02:a2:cb:dc:b7:ec:f7:20:93:32:cb:6b:c8:ee: 36:87:ef:15:16:36:24:35:cd:7a:2a:d7:94:74:34:ff:c6:79: fb:a8:d4:73:09:65:73:e8:92:c5:61:a4:eb:f2:df:2b:5f:50: 41:15:90:3d:64:52:8a:4b:ad:5d:89:d3:6c:42:0d:08:2a:f4: c0:58:0d:31:f4:42:23:cc:4c:59:19:40:47:71:33:74:fd:55: 82:1f:82:4c:40:f1:1f:0e:93:08:75:53:37:47:4d:a6:18:fe: 74:c5:dc:99:8d:8e:a2:b4:da:3c:fb:76:76:69:97:c5:19:d1: a5:7c:4f:52:5e:24:7f:0f:ed:35:e5:d8:07:65:28:e7:82:2a: e8:6f:e1:e0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkzNDYxMTAvBgNVBAUTKEQzRkE3OUQ3Qjg0MUU4QkE3OTk4RUEyMjg2MUJBOTBG Qjk2NTFGNjQwHhcNMjYwMzI0MTYwNjE3WhcNMjYwMzMxMTYwNjE3WjAYMRYwFAYD VQQDEw02OWMyYjY3YS0xZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfz189lu3/KDhh1uUXwP46cHtgax4r6jhtAG50OfKAcmDbDtHhvt6KN1PiP7 vY2qwtYuVY4jin5c+Pe7fseN9DhkwnmaYJXuMhDyC8AQtpRxM32ENPU295o8jbFj 6oKtJ6eSB82dpTFuKTIe6Bix61fhqzwzCbi9YtH5VufrT3LIc5MfnUdjVbJWx6mg u+QqyyaPI3caWR6FGNm3zI0c92avL0pdMwn9cQH9vAlABktWa5A0JnwAvofiJuQR Cy1t2Zo9dBwZIVcGJat/Br8quKbxoJ8asgzzfJktwYta6GoY6ykVuAO6NFwr8ey5 yKNmDvkknjN4moQjV6Lyuxm60QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAkv4qio qtCg+39h7mLJ3xyPyCyaMB8GA1UdIwQYMBaAFNP6ede4Qei6eZjqIoYbqQ+5ZR9k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTM0Ni84QzY1QjZFNkY3 MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZMcDVtT29paGh1cEQ3bGxI MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBfcDUxN2hCNkxwNW1Pb2loaHVwRDdsbEgyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTM0Ni84QzY1QjZFNkY3MjIxMUU2ODYxNzg4MzVDNEY5QUUwMi8wX3A1MTdoQjZM cDVtT29paGh1cEQ3bGxIMlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAka+PNNAQ9Ppcrtk1VVVl6vcxT9dhMFDUqaIiKsNjakHtnsY3oHcPOA3/+ov1 SXh1Vmdbn5nmR0BTIkA/RutH+Yjx5amMpctRCudHcIRcft3JA5axcJCi8Jb/TDBk GHDIb2N+PvErYgbVshZ8EJWgTgKiy9y37PcgkzLLa8juNofvFRY2JDXNeirXlHQ0 /8Z5+6jUcwllc+iSxWGk6/LfK19QQRWQPWRSikutXYnTbEINCCr0wFgNMfRCI8xM WRlAR3EzdP1Vgh+CTEDxHw6TCHVTN0dNphj+dMXcmY2OorTaPPt2dmmXxRnRpXxP Ul4kfw/tNeXYB2Uo54Iq6G/h4A== -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:35 2026 by rpki-client