$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: p3KKXkXkhe08SbjN58R3+rysva+X6am+nZ7yKzDjtSk= Subject key identifier: 01:E9:E1:AB:5F:3D:0B:26:D3:88:E3:02:42:48:8D:D6:2E:FA:E6:EA Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1C6E Signing time: Tue 24 Mar 2026 16:06:49 +0000 Manifest this update: Tue 24 Mar 2026 16:06:48 +0000 Manifest next update: Tue 31 Mar 2026 16:06:48 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: WD3x63tqPHGCXtF42o3ZkX6i9JCKyHJuwT4yfObM9Bw=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: 0F5lt1ApRi/TFopoz+DyhCLI2W343evB1IlTkl6oUlE=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: iKMKJHnuqjupL8g2VYNcA3PI8q16XSxujQICOYU+IGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:06:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7313 (0x1c91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Mar 24 16:06:48 2026 GMT Not After : Mar 31 16:06:48 2026 GMT Subject: CN=69c2b699-367d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:a1:e2:06:0a:5a:f8:9b:1a:9f:0f:ee:61: cf:dd:31:1d:72:54:d6:da:f0:be:2e:26:c7:6c:bc: 28:d2:38:17:32:25:f6:93:30:59:f7:2c:dd:5b:be: 51:3b:63:bc:6c:fd:a6:dd:74:ad:82:e8:92:39:a8: 95:21:3b:5b:44:cf:fc:28:df:2d:b9:13:32:34:72: 72:6f:1d:ce:ac:de:84:6f:41:12:b2:a1:f1:c2:d9: ae:bf:4d:72:05:b9:5b:d3:42:29:e2:bb:02:44:60: 59:07:47:cc:39:ae:8b:81:78:20:87:d4:d8:c0:3f: 71:d0:13:46:a4:1c:a0:1b:f2:6e:bd:42:68:87:28: b4:d3:91:bb:b5:33:d8:36:ee:24:2a:d7:9f:f7:c0: ad:f7:1c:83:09:5d:60:0e:f5:fc:21:e6:8b:38:fb: 59:50:b3:66:1e:ab:fe:07:14:fa:8f:00:bc:ed:39: 34:45:80:34:d8:d0:9c:c3:5e:5a:f7:97:8b:d8:80: 5f:e5:12:69:ec:b4:cc:99:15:29:ed:db:e5:8c:f8: 91:0c:20:4d:97:ba:75:88:00:d7:1c:b4:bf:ae:56: 1e:99:f7:08:2b:ee:b8:d0:b5:f3:69:45:17:35:c3: 07:16:94:15:64:58:d7:c1:45:54:55:09:34:a6:86: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E9:E1:AB:5F:3D:0B:26:D3:88:E3:02:42:48:8D:D6:2E:FA:E6:EA X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:65:3c:7f:1b:e7:be:a7:bf:ff:7e:f7:9a:42:d4:45:2c:42: 71:3c:bc:7e:ad:12:bf:cd:93:57:ef:f2:25:e9:91:e6:28:5f: 9f:5f:da:e6:79:2a:48:1e:3b:ec:ca:0e:c8:1c:4a:6c:e8:92: 76:19:df:bf:87:85:88:b5:d8:55:2c:df:e7:46:4f:2c:12:ad: 92:df:5c:fe:5c:55:63:f7:a4:66:c8:12:0f:19:41:cf:fa:b9: 8b:4c:58:cf:3b:e7:2e:d0:58:5b:e0:9d:3a:5a:63:c7:25:b6: a5:04:a1:01:79:72:b2:27:d1:6a:9c:a7:da:b3:d3:41:71:33: 5d:e5:ff:20:67:f4:52:23:da:5f:1d:08:73:1a:46:29:4e:b9: 9a:40:2e:b7:96:f8:a0:52:77:31:c8:a8:24:f0:9e:96:0d:4f: 7d:27:e1:60:e3:86:f7:bd:ae:74:1e:57:1f:2b:db:9a:c4:c3: 1e:55:70:36:f0:8f:83:71:0d:2e:7f:d5:28:57:09:ce:f3:9b: 44:8d:85:af:f4:be:a9:39:36:c7:b7:f1:42:f2:7b:7e:cb:1c: 73:ab:80:7a:0f:19:d4:dd:a0:40:3e:11:65:d0:db:4c:94:9a: 56:c3:a0:04:ac:1c:9f:47:ff:d2:15:08:55:86:4c:60:2e:01: bc:a1:90:f8 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjYwMzI0MTYwNjQ4WhcNMjYwMzMxMTYwNjQ4WjAYMRYwFAYD VQQDEw02OWMyYjY5OS0zNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGmh4gYKWvibGp8P7mHP3TEdclTW2vC+LibHbLwo0jgXMiX2kzBZ9yzdW75R O2O8bP2m3XStguiSOaiVITtbRM/8KN8tuRMyNHJybx3OrN6Eb0ESsqHxwtmuv01y Bblb00Ip4rsCRGBZB0fMOa6LgXggh9TYwD9x0BNGpBygG/JuvUJohyi005G7tTPY Nu4kKtef98Ct9xyDCV1gDvX8IeaLOPtZULNmHqv+BxT6jwC87Tk0RYA02NCcw15a 95eL2IBf5RJp7LTMmRUp7dvljPiRDCBNl7p1iADXHLS/rlYemfcIK+640LXzaUUX NcMHFpQVZFjXwUVUVQk0poasKwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAHp4atf PQsm04jjAkJIjdYu+ubqMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ2U8fxvnvqe//373mkLURSxCcTy8fq0Sv82TV+/yJemR5ihfn1/a5nkqSB47 7MoOyBxKbOiSdhnfv4eFiLXYVSzf50ZPLBKtkt9c/lxVY/ekZsgSDxlBz/q5i0xY zzvnLtBYW+CdOlpjxyW2pQShAXlysifRapyn2rPTQXEzXeX/IGf0UiPaXx0IcxpG KU65mkAut5b4oFJ3McioJPCelg1PfSfhYOOG972udB5XHyvbmsTDHlVwNvCPg3EN Ln/VKFcJzvObRI2Fr/S+qTk2x7fxQvJ7fsscc6uAeg8Z1N2gQD4RZdDbTJSaVsOg BKwcn0f/0hUIVYZMYC4BvKGQ+A== -----END CERTIFICATE-----Generated at Thu Mar 26 02:34:25 2026 by rpki-client