$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft File: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft (raw, json) Hash identifier: Pl2/Y+S6MGdioCtV9pVCmnGMMXvKIGyP/qXgd/akGYM= Subject key identifier: C2:0A:6A:15:E2:F0:EF:03:10:6F:F3:42:13:06:07:8C:6D:0A:9D:61 Authority key identifier: 08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 Certificate issuer: /CN=A91A2C5D/serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft Manifest number: 0249 Signing time: Wed 25 Mar 2026 03:17:48 +0000 Manifest this update: Wed 25 Mar 2026 03:17:47 +0000 Manifest next update: Wed 01 Apr 2026 03:17:47 +0000 Files and hashes: 1: CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl (hash: ExkPbQYtxnukjQbOSpbaiNqpo3eASzmjkJJmK+0XJH4=) 2: 218937DC5E5011F0B9404662C4F9AE02.roa (hash: TfhxYXEuzGwCmeMd3nNc0DOls3QWgWihrLMEBQlhbYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2C5D, serialNumber=08777FA381BF258E0CAC37D509EF0BAC70664844 Validity Not Before: Mar 25 03:17:47 2026 GMT Not After : Apr 1 03:17:47 2026 GMT Subject: CN=69c353dc-2fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:e5:73:e6:6b:9c:8d:fc:82:a6:a0:0e:cc: 82:f4:d6:33:3b:5d:08:81:37:f9:99:70:f3:13:41: 98:67:91:4c:f7:bf:90:a3:76:a8:83:17:85:32:49: f5:bf:9f:68:e5:e3:1c:f1:b9:68:3a:9a:3b:06:59: 9a:90:fe:73:e8:24:c4:71:cf:99:9f:bb:52:cc:03: 3e:c7:79:1d:8e:05:32:90:81:2d:f4:e3:ca:10:46: 8a:6a:7c:9f:67:fd:c2:88:6d:7e:d1:45:b8:bf:ca: 81:ba:69:eb:a6:41:d2:2d:f0:1b:00:1c:eb:29:27: 9c:61:67:6b:fd:12:df:d4:b8:3e:89:86:d0:69:a1: a6:cd:3a:ee:db:b0:ca:a8:78:ac:23:19:8b:40:e6: c0:cd:d5:02:60:3e:c4:9e:1e:5d:05:ba:a0:9f:de: 05:e6:0b:aa:57:15:5a:a3:62:32:51:2e:f0:17:76: 81:78:7c:32:d0:65:91:1c:95:20:8e:c6:68:22:0b: 00:2b:b1:60:ba:96:69:a3:43:8f:15:fc:3b:08:8a: a1:6f:38:96:5d:b5:e2:93:a5:34:05:e7:f0:a3:65: cb:fe:6b:bc:67:8c:65:82:10:36:06:21:19:a3:4b: 1d:b8:4b:de:82:4a:e7:c0:c0:dc:e8:15:bc:44:2a: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:0A:6A:15:E2:F0:EF:03:10:6F:F3:42:13:06:07:8C:6D:0A:9D:61 X509v3 Authority Key Identifier: keyid:08:77:7F:A3:81:BF:25:8E:0C:AC:37:D5:09:EF:0B:AC:70:66:48:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2C5D/3B9DD41092C411EEB521BB49C4F9AE02/CHd_o4G_JY4MrDfVCe8LrHBmSEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5d:3a:ce:43:c2:af:31:69:ec:b2:e2:40:09:5d:19:bb:a2: e7:e7:f1:a2:d8:91:53:52:ed:91:bc:f7:84:3b:84:09:f3:ed: dd:e1:be:2e:37:ee:62:f8:7a:18:6a:79:f2:cc:77:54:10:b0: a5:85:e8:0f:10:7e:02:29:62:5c:c3:c8:be:51:91:ec:df:04: 9a:b3:81:88:12:44:55:c8:d8:a9:5d:45:fb:55:95:52:e4:b0: 34:39:5a:0e:22:d2:be:4c:64:b2:d8:0c:df:04:8b:68:4f:5c: ae:a1:a8:e7:07:ae:ee:67:5c:31:51:a4:c1:dd:88:4c:8b:27: 00:f3:5d:68:25:3f:ed:21:7e:d9:44:18:ea:02:4b:dc:bf:1a: a1:d8:96:20:57:2f:3d:e1:b9:43:1f:c7:95:dd:6b:76:03:19: f3:75:97:8a:44:2c:e1:82:03:cb:94:4c:80:1e:44:fd:ea:50: ab:72:40:67:54:42:b3:ae:60:4a:76:39:17:f3:1c:ea:79:91: 3e:f6:26:29:7c:2a:f0:a3:09:c9:1b:91:7c:22:b5:54:f5:b5: 99:85:95:50:94:75:6c:a9:4e:1c:20:e7:a0:32:e6:21:99:bd: f2:6e:9d:54:4f:e1:f3:3f:0f:45:9f:b2:d7:89:3b:0f:60:01: 66:36:7c:15 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJDNUQxMTAvBgNVBAUTKDA4Nzc3RkEzODFCRjI1OEUwQ0FDMzdENTA5RUYwQkFD NzA2NjQ4NDQwHhcNMjYwMzI1MDMxNzQ3WhcNMjYwNDAxMDMxNzQ3WjAYMRYwFAYD VQQDEw02OWMzNTNkYy0yZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuUHlc+ZrnI38gqagDsyC9NYzO10IgTf5mXDzE0GYZ5FM97+Qo3aogxeFMkn1 v59o5eMc8bloOpo7BlmakP5z6CTEcc+Zn7tSzAM+x3kdjgUykIEt9OPKEEaKanyf Z/3CiG1+0UW4v8qBumnrpkHSLfAbABzrKSecYWdr/RLf1Lg+iYbQaaGmzTru27DK qHisIxmLQObAzdUCYD7Enh5dBbqgn94F5guqVxVao2IyUS7wF3aBeHwy0GWRHJUg jsZoIgsAK7FgupZpo0OPFfw7CIqhbziWXbXik6U0Befwo2XL/mu8Z4xlghA2BiEZ o0sduEvegkrnwMDc6BW8RCqnSQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMIKahXi 8O8DEG/zQhMGB4xtCp1hMB8GA1UdIwQYMBaAFAh3f6OBvyWODKw31QnvC6xwZkhE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkM1RC8zQjlERDQxMDky QzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZNE1yRGZWQ2U4THJIQm1T RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIZF9vNEdfSlk0TXJEZlZDZThMckhCbVNFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkM1RC8zQjlERDQxMDkyQzQxMUVFQjUyMUJCNDlDNEY5QUUwMi9DSGRfbzRHX0pZ NE1yRGZWQ2U4THJIQm1TRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlV06zkPCrzFp7LLiQAldGbui5+fxotiRU1Ltkbz3hDuECfPt3eG+LjfuYvh6 GGp58sx3VBCwpYXoDxB+AiliXMPIvlGR7N8EmrOBiBJEVcjYqV1F+1WVUuSwNDla DiLSvkxkstgM3wSLaE9crqGo5weu7mdcMVGkwd2ITIsnAPNdaCU/7SF+2UQY6gJL 3L8aodiWIFcvPeG5Qx/Hld1rdgMZ83WXikQs4YIDy5RMgB5E/epQq3JAZ1RCs65g SnY5F/Mc6nmRPvYmKXwq8KMJyRuRfCK1VPW1mYWVUJR1bKlOHCDnoDLmIZm98m6d VE/h8z8PRZ+y14k7D2ABZjZ8FQ== -----END CERTIFICATE-----Generated at Thu Mar 26 06:57:22 2026 by rpki-client