$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft File: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft (raw, json) Hash identifier: WdDC3Us7P6NZ4P83zVaMYKUfoUmufAQG1w/WKrQ5r4Q= Subject key identifier: 54:F5:78:0B:8C:93:60:D3:52:F8:78:78:AC:B0:EF:2E:45:38:EF:69 Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 Certificate issuer: /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Certificate serial: 1164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft Manifest number: 1146 Signing time: Tue 24 Mar 2026 17:07:17 +0000 Manifest this update: Tue 24 Mar 2026 17:07:17 +0000 Manifest next update: Tue 31 Mar 2026 17:07:17 +0000 Files and hashes: 1: 0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl (hash: ff6dmH1lh/hhSfhSJqnnkryzliy2culuA0kckkfTg3U=) 2: 0E17B1AE78F511EC83E56014C4F9AE02.roa (hash: thljpBcbTfFsywqUx5BbJ+XVWb8JNohUp1zcHq2Dk8Q=) 3: 1ED5B13E30C111ECBB5A4116C4F9AE02.roa (hash: gurfzZR1CXNhqkzRdnCry9CSRk7tzPLYC7aS4NwE5uc=) 4: 0D0B79E478F511EC83E56014C4F9AE02.roa (hash: uxURuSX1zlkNuHZUlcFiKuQiaf7w3F7liJA01RSJG00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4452 (0x1164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9 Validity Not Before: Mar 24 17:07:17 2026 GMT Not After : Mar 31 17:07:17 2026 GMT Subject: CN=69c2c4c5-7c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:9f:e1:78:d9:49:69:25:95:87:9e:4b:d8: aa:0c:ae:53:50:9e:49:b9:bc:30:6d:11:18:59:ce: 13:83:48:62:af:33:c2:a8:23:6f:18:23:64:66:cf: a6:e1:dd:b9:3d:83:62:58:f6:e1:b4:09:16:56:e0: 64:d3:e4:32:7d:e2:ea:46:67:5f:bb:ca:67:94:3b: e9:71:82:a3:a2:af:20:10:e9:da:1f:c2:77:20:37: b9:39:93:7b:87:18:97:34:f3:d5:f9:77:c9:49:86: a7:6e:ad:17:c9:5b:36:3f:a2:c5:b2:19:d3:75:c6: 13:27:9e:1e:a9:4d:8d:2c:38:90:52:01:4b:e4:77: 2c:bd:64:6b:31:bd:4d:a5:71:30:82:93:1e:07:e2: d1:05:b5:2d:e9:b8:20:01:79:47:8b:d3:96:ee:49: f5:a3:e9:18:e7:01:f7:b4:42:57:d4:e1:7a:9c:e9: b9:5a:9a:c9:47:74:4e:cc:05:81:3a:80:5e:03:25: 4d:e3:15:8d:66:ab:c2:35:64:2b:7c:c0:f8:de:a2: d8:6e:0d:5f:62:db:24:5e:d3:6d:a3:ac:89:06:2c: 4a:de:19:39:18:94:93:1f:08:dc:72:b1:e3:ca:b4: 26:60:87:36:d6:e8:24:0f:25:62:94:b8:e6:19:6a: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F5:78:0B:8C:93:60:D3:52:F8:78:78:AC:B0:EF:2E:45:38:EF:69 X509v3 Authority Key Identifier: keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:92:1c:69:5d:56:3a:c3:85:90:c6:28:7b:5c:2c:af:7f:c2: e4:74:00:4c:2f:5e:fb:05:ac:bf:f6:91:b4:c1:8b:b6:8e:a5: fa:80:39:dc:47:b9:a2:d4:76:a7:03:85:c7:32:25:c7:1f:ed: c2:0a:8e:e4:27:6c:8a:35:d4:f3:b1:fe:d2:f3:07:29:a3:f7: 6e:8c:55:5c:e2:78:eb:ac:f1:70:1f:9e:6a:a2:37:77:1b:57: 69:2e:3d:8a:aa:52:52:5b:fa:1c:fc:43:55:d8:22:63:4a:aa: 78:88:dd:f3:58:aa:99:94:4f:79:86:0e:11:9a:9d:55:62:fc: 03:3b:f9:aa:ca:3c:c0:b6:d0:2f:1e:1c:9b:7b:ce:e2:6b:bb: 49:9a:19:c6:3a:61:bd:67:c8:59:ae:c0:d6:a9:75:ea:e8:94: 7e:51:c0:86:67:c2:ae:84:30:b7:a4:ad:ea:6a:8d:3d:1d:fe: f5:e5:e0:1a:c0:9c:8e:27:46:26:93:da:78:69:37:ec:88:d4: 07:b6:dd:29:24:64:2d:f0:77:fb:68:b4:99:72:d8:f9:a6:3b: 45:d9:ff:a7:5a:7c:91:6c:2f:fb:ac:48:e3:e8:de:25:2f:95: ae:2c:82:0a:3b:2f:8c:ba:86:9c:55:28:5e:5e:46:ba:9a:1b: e2:ab:64:0d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTYwOEQxMTAvBgNVBAUTKEQyRDgwODA0OUE0NkVENzk3QzIxRjlGNjAyNTIzNDU2 NDYzMUIzRjkwHhcNMjYwMzI0MTcwNzE3WhcNMjYwMzMxMTcwNzE3WjAYMRYwFAYD VQQDEw02OWMyYzRjNS03YzU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0V+f4XjZSWkllYeeS9iqDK5TUJ5JubwwbREYWc4Tg0hirzPCqCNvGCNkZs+m 4d25PYNiWPbhtAkWVuBk0+QyfeLqRmdfu8pnlDvpcYKjoq8gEOnaH8J3IDe5OZN7 hxiXNPPV+XfJSYanbq0XyVs2P6LFshnTdcYTJ54eqU2NLDiQUgFL5HcsvWRrMb1N pXEwgpMeB+LRBbUt6bggAXlHi9OW7kn1o+kY5wH3tEJX1OF6nOm5WprJR3ROzAWB OoBeAyVN4xWNZqvCNWQrfMD43qLYbg1fYtskXtNto6yJBixK3hk5GJSTHwjccrHj yrQmYIc21ugkDyVilLjmGWpdOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFT1eAuM k2DTUvh4eKyw7y5FOO9pMB8GA1UdIwQYMBaAFNLYCASaRu15fCH59gJSNFZGMbP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjA4RC84MTA3M0EzMDI4 NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdYbDhJZm4yQWxJMFZrWXhz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB0Z0lCSnBHN1hsOElmbjJBbEkwVmtZeHNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjA4RC84MTA3M0EzMDI4NzcxMUU5OTQyMUM4NENDNEY5QUUwMi8wdGdJQkpwRzdY bDhJZm4yQWxJMFZrWXhzX2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuJIcaV1WOsOFkMYoe1wsr3/C5HQATC9e+wWsv/aRtMGLto6l+oA53Ee5otR2 pwOFxzIlxx/twgqO5CdsijXU87H+0vMHKaP3boxVXOJ466zxcB+eaqI3dxtXaS49 iqpSUlv6HPxDVdgiY0qqeIjd81iqmZRPeYYOEZqdVWL8Azv5qso8wLbQLx4cm3vO 4mu7SZoZxjphvWfIWa7A1ql16uiUflHAhmfCroQwt6St6mqNPR3+9eXgGsCcjidG JpPaeGk37IjUB7bdKSRkLfB3+2i0mXLY+aY7Rdn/p1p8kWwv+6xI4+jeJS+VriyC CjsvjLqGnFUoXl5Gupob4qtkDQ== -----END CERTIFICATE-----Generated at Thu Mar 26 02:44:42 2026 by rpki-client