$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft File: ItAhSIrhMX_JXHSjiCUlSreSYTc.mft (raw, json) Hash identifier: vIiZZSDA+LqKcJ5GOSus8gcqDIYk7IP1J/sJ4IMVmJM= Subject key identifier: AA:B4:36:7D:B3:86:7E:BC:6B:76:F1:8E:F3:0C:B1:0C:E7:78:34:05 Authority key identifier: 22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 Certificate issuer: /CN=A9194C67/serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft Manifest number: 01CA Signing time: Wed 25 Mar 2026 03:14:58 +0000 Manifest this update: Wed 25 Mar 2026 03:14:58 +0000 Manifest next update: Wed 01 Apr 2026 03:14:58 +0000 Files and hashes: 1: ItAhSIrhMX_JXHSjiCUlSreSYTc.crl (hash: LC3jbY0VI7Ck0gEMLln/vpmBlxCTHxC8QWg/zh27cTo=) 2: 97C7ABEE8EAA11EEA8406C67C4F9AE02.roa (hash: gBKnDCCLWxnGlGgKbKhx7Kuw4fUvutFlS6nnCXgPjME=) 3: E830A74E71ED11EF9D592D1AC4F9AE02.roa (hash: Ex6856vtPlckr5FuK0PcSYmdaB3fVcZv426LeJ8/9Ks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194C67, serialNumber=22D021488AE1317FC95C74A38825254AB7926137 Validity Not Before: Mar 25 03:14:58 2026 GMT Not After : Apr 1 03:14:58 2026 GMT Subject: CN=69c35332-7433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:f4:22:53:e9:ad:bf:1d:d6:fe:ce:df:b8: 05:37:46:36:a0:46:3c:dd:b8:8a:08:ab:81:04:2a: f0:c0:4e:da:21:96:a6:ec:34:ab:14:09:00:68:db: 2b:1a:70:e2:8f:19:2b:7e:61:f3:7a:b6:c4:50:bd: cb:2a:3a:7a:dc:3a:24:ff:40:5b:80:18:90:a6:04: 33:b5:76:de:c0:9f:c7:91:81:59:6d:a7:98:d2:f8: 42:01:1e:04:89:6c:fb:57:94:3e:e9:b2:66:ca:dd: 48:dd:f5:ef:81:9d:85:97:c2:00:10:0f:72:57:2e: fd:3a:f5:dc:ee:5c:d2:6f:7c:bb:8f:f0:66:8f:e4: eb:65:3b:5a:c7:11:39:8e:13:13:74:8c:e0:92:10: f8:87:31:45:2c:b6:80:e6:89:4a:32:39:a6:91:1c: 4d:42:14:ee:e0:52:04:9d:85:c2:0a:e3:60:58:6c: aa:c7:05:02:fa:2d:e6:58:60:93:1a:f8:4e:83:b2: 3f:cc:f6:63:7b:f9:d4:59:68:d4:a5:a2:72:69:29: 06:c9:2d:24:f2:ab:70:2c:fc:92:6e:3b:e0:08:64: 73:d0:9a:e5:44:ec:d4:5f:3a:25:64:05:9f:32:b1: 9c:25:9d:38:83:4b:3a:9a:3e:19:a6:ad:8e:cf:c1: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B4:36:7D:B3:86:7E:BC:6B:76:F1:8E:F3:0C:B1:0C:E7:78:34:05 X509v3 Authority Key Identifier: keyid:22:D0:21:48:8A:E1:31:7F:C9:5C:74:A3:88:25:25:4A:B7:92:61:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ItAhSIrhMX_JXHSjiCUlSreSYTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C67/C2A761908E8911EEBC286358C4F9AE02/ItAhSIrhMX_JXHSjiCUlSreSYTc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:7a:9d:4c:d9:27:6a:ee:38:4d:76:de:f4:5c:43:ce:cd:f1: 18:b7:d9:e1:b0:6a:63:9d:04:1d:1d:16:4b:5f:d7:24:e3:cf: be:45:e6:b4:a5:bd:cd:7d:3a:3a:bc:52:72:cd:81:f4:22:33: 35:aa:61:1c:ee:2d:60:92:a6:97:a6:ae:58:ee:77:01:09:9f: a0:9e:89:53:d8:82:41:0c:6b:a9:72:e0:11:03:2d:47:79:88: 13:21:71:59:90:b7:22:ed:49:5d:a9:ef:26:ac:3b:dd:c5:9f: 71:d1:81:ca:23:5d:74:d7:c9:b9:11:cf:87:91:14:a1:0a:8f: 27:e3:4d:95:99:84:f7:47:f6:42:a0:b6:d2:d7:b9:00:07:cb: 51:38:de:74:85:7d:60:d1:06:da:14:ee:c0:ba:55:c9:5a:13: 20:ed:e8:f7:a3:a6:46:cd:ae:7b:a3:3a:c5:88:0c:f7:b4:98: 0d:b1:7d:49:19:2f:15:25:8d:57:aa:b0:9a:23:37:0e:5b:37: 21:04:ee:5d:00:41:51:56:ca:a4:ca:cd:ec:2f:da:04:6b:a2: f1:f5:4f:10:72:03:9a:20:10:6e:3c:30:25:b5:80:a7:64:42: 44:13:a1:2d:09:83:96:b3:50:a7:c2:10:21:53:ba:04:ac:7e: 9d:0e:bb:2e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRDNjcxMTAvBgNVBAUTKDIyRDAyMTQ4OEFFMTMxN0ZDOTVDNzRBMzg4MjUyNTRB Qjc5MjYxMzcwHhcNMjYwMzI1MDMxNDU4WhcNMjYwNDAxMDMxNDU4WjAYMRYwFAYD VQQDEw02OWMzNTMzMi03NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1f0IlPprb8d1v7O37gFN0Y2oEY83biKCKuBBCrwwE7aIZam7DSrFAkAaNsr GnDijxkrfmHzerbEUL3LKjp63Dok/0BbgBiQpgQztXbewJ/HkYFZbaeY0vhCAR4E iWz7V5Q+6bJmyt1I3fXvgZ2Fl8IAEA9yVy79OvXc7lzSb3y7j/Bmj+TrZTtaxxE5 jhMTdIzgkhD4hzFFLLaA5olKMjmmkRxNQhTu4FIEnYXCCuNgWGyqxwUC+i3mWGCT GvhOg7I/zPZje/nUWWjUpaJyaSkGyS0k8qtwLPySbjvgCGRz0JrlROzUXzolZAWf MrGcJZ04g0s6mj4Zpq2Oz8FzMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKq0Nn2z hn68a3bxjvMMsQzneDQFMB8GA1UdIwQYMBaAFCLQIUiK4TF/yVx0o4glJUq3kmE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEM2Ny9DMkE3NjE5MDhF ODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1YX0pYSFNqaUNVbFNyZVNZ VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0l0QWhTSXJoTVhfSlhIU2ppQ1VsU3JlU1lUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEM2Ny9DMkE3NjE5MDhFODkxMUVFQkMyODYzNThDNEY5QUUwMi9JdEFoU0lyaE1Y X0pYSFNqaUNVbFNyZVNZVGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAl3qdTNknau44TXbe9FxDzs3xGLfZ4bBqY50EHR0WS1/XJOPPvkXmtKW9zX06 OrxScs2B9CIzNaphHO4tYJKml6auWO53AQmfoJ6JU9iCQQxrqXLgEQMtR3mIEyFx WZC3Iu1JXanvJqw73cWfcdGByiNddNfJuRHPh5EUoQqPJ+NNlZmE90f2QqC20te5 AAfLUTjedIV9YNEG2hTuwLpVyVoTIO3o96OmRs2ue6M6xYgM97SYDbF9SRkvFSWN V6qwmiM3Dls3IQTuXQBBUVbKpMrN7C/aBGui8fVPEHIDmiAQbjwwJbWAp2RCRBOh LQmDlrNQp8IQIVO6BKx+nQ67Lg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:15 2026 by rpki-client