$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft File: f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft (raw, json) Hash identifier: LFRQJLWN9x/n4u6CdLqFPIDU6Pn1COBAPGe34Xvk9H8= Subject key identifier: 7C:0D:DD:0D:05:10:05:A9:4B:89:B9:50:3D:C0:DA:37:B7:11:07:CE Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF Certificate issuer: /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Certificate serial: 04F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft Manifest number: 04E5 Signing time: Thu 26 Mar 2026 23:35:26 +0000 Manifest this update: Thu 26 Mar 2026 23:35:26 +0000 Manifest next update: Thu 02 Apr 2026 23:35:26 +0000 Files and hashes: 1: f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl (hash: tS3XqLBFUItwt3NHmaiOJtKU5R2rNpH7DYOyqwcsmMk=) 2: 5B24C51A60ED11EC874B903BC4F9AE02.roa (hash: 4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 23:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1268 (0x4f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF Validity Not Before: Mar 26 23:35:26 2026 GMT Not After : Apr 2 23:35:26 2026 GMT Subject: CN=69c5c2be-5359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:70:4a:cf:f1:87:69:da:13:9d:87:c8:50: 30:d8:8e:2f:79:65:ff:63:5d:88:8a:a7:a1:ae:1f: 99:c8:ca:13:21:ad:46:0b:5c:40:d5:76:0f:f1:32: c2:b2:92:5c:a7:19:36:e2:a1:79:81:08:1e:72:1b: 72:54:1b:6f:d2:63:33:15:e0:97:46:4a:64:ad:29: d3:9d:92:b9:48:e6:86:2e:54:a0:a0:68:69:c5:72: d9:a2:f1:cb:78:9d:67:7c:b9:7c:55:20:1a:95:60: 4d:42:14:fd:ef:72:a3:2c:1d:45:33:a2:97:47:61: 3f:6d:f1:20:5f:6e:e6:51:77:fc:62:25:c5:c2:b7: 91:61:94:3e:89:be:c3:60:e7:c6:fa:8d:a2:ff:18: 4d:b0:81:c1:79:53:da:c3:5a:a7:5f:23:50:65:ed: 85:b0:94:ea:61:65:6e:3d:e8:f1:0e:02:ee:e7:f4: d8:a5:6c:18:f3:ce:13:bf:ac:80:26:99:86:93:68: e1:76:60:00:26:35:84:67:88:a0:4c:2b:b0:d3:de: 97:f6:db:bb:86:cd:0a:e5:5c:f2:20:d3:c2:eb:d5: af:ea:36:2c:a5:aa:af:94:c7:a9:8c:ee:3b:3c:84: eb:cf:7b:b0:51:75:97:77:31:71:b3:6e:ad:9c:d9: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:0D:DD:0D:05:10:05:A9:4B:89:B9:50:3D:C0:DA:37:B7:11:07:CE X509v3 Authority Key Identifier: keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e9:3c:40:41:9c:2d:3f:cf:f7:1e:86:c3:fa:21:71:95:63: a3:6c:53:f9:aa:4d:c4:c9:35:7d:f9:17:04:9a:6a:3e:74:41: 3b:99:05:89:9e:41:11:a8:4c:41:9f:b9:21:50:4f:51:d9:02: 4a:51:df:f0:11:e3:c2:b6:2c:a5:fc:6c:c4:04:5b:29:db:31: b4:c2:68:2f:05:3c:51:5c:da:62:6b:25:f1:18:b1:5c:9f:39: 25:02:24:77:28:4d:50:88:9b:da:39:62:27:03:f1:97:7f:51: f4:b3:c5:cf:96:ec:b8:24:ac:0c:44:1e:9d:7c:22:a4:f3:d4: f0:b5:2b:09:51:cc:56:aa:81:8b:9f:36:ce:d2:9a:ee:2a:da: 66:34:e0:d5:4a:51:51:35:f3:32:0b:4b:dd:5b:95:19:44:fe: c1:2c:63:0d:b4:72:8e:2b:45:50:a2:d2:39:dc:e4:29:73:8d: 4d:dd:2f:a2:94:16:1a:39:40:19:dc:95:34:a6:c7:b8:e4:7d: d3:5f:d5:b9:f6:04:05:4e:43:d2:f9:84:40:b3:2b:e2:18:2c: 6c:0b:8f:9a:0b:8e:5d:86:5b:d9:ca:2b:27:6e:a0:9e:71:97: 37:be:22:b1:75:97:85:f3:79:0a:f7:e9:0e:b3:8a:f8:59:7e: 89:15:08:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2 QTMzRTVDQUYwHhcNMjYwMzI2MjMzNTI2WhcNMjYwNDAyMjMzNTI2WjAYMRYwFAYD VQQDEw02OWM1YzJiZS01MzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn/FwSs/xh2naE52HyFAw2I4veWX/Y12Iiqehrh+ZyMoTIa1GC1xA1XYP8TLC spJcpxk24qF5gQgechtyVBtv0mMzFeCXRkpkrSnTnZK5SOaGLlSgoGhpxXLZovHL eJ1nfLl8VSAalWBNQhT973KjLB1FM6KXR2E/bfEgX27mUXf8YiXFwreRYZQ+ib7D YOfG+o2i/xhNsIHBeVPaw1qnXyNQZe2FsJTqYWVuPejxDgLu5/TYpWwY884Tv6yA JpmGk2jhdmAAJjWEZ4igTCuw096X9tu7hs0K5VzyINPC69Wv6jYspaqvlMepjO47 PITrz3uwUXWXdzFxs26tnNkOCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHwN3Q0F EAWpS4m5UD3A2je3EQfOMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDk5Mi81QjNEMDgwMjVDMEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZr SFhjUHd0LWtBOUZxTS1YSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKOk8QEGcLT/P9x6Gw/ohcZVjo2xT+apNxMk1ffkXBJpqPnRBO5kFiZ5BEahM QZ+5IVBPUdkCSlHf8BHjwrYspfxsxARbKdsxtMJoLwU8UVzaYmsl8RixXJ85JQIk dyhNUIib2jliJwPxl39R9LPFz5bsuCSsDEQenXwipPPU8LUrCVHMVqqBi582ztKa 7iraZjTg1UpRUTXzMgtL3VuVGUT+wSxjDbRyjitFUKLSOdzkKXONTd0vopQWGjlA GdyVNKbHuOR901/VufYEBU5D0vmEQLMr4hgsbAuPmguOXYZb2corJ26gnnGXN74i sXWXhfN5CvfpDrOK+Fl+iRUIPA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:33 2026 by rpki-client