$ rpki-client -vvf rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft File: TI8rREM6tGSnFK2NOajxbkxQCnw.mft (raw, json) Hash identifier: wWf1UPD8ruNAqLSZmkTEEEoLow51aiFRBd4f6IsCQog= Subject key identifier: AD:35:48:C2:43:B1:AE:B8:B9:0F:13:77:F9:2E:E5:3D:0B:F9:D5:25 Authority key identifier: 4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C Certificate issuer: /CN=A9116297/serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Certificate serial: 40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft Manifest number: 3C Signing time: Tue 03 Mar 2026 08:11:52 +0000 Manifest this update: Tue 03 Mar 2026 08:11:51 +0000 Manifest next update: Tue 10 Mar 2026 08:11:51 +0000 Files and hashes: 1: TI8rREM6tGSnFK2NOajxbkxQCnw.crl (hash: fVLiuA6t2iapXrJnCgMcxQYWqWV0FPDJ1AkfCDsWs5U=) 2: FE68D63A156B11F1B9AA1492393D8C67.roa (hash: mtMWlsAIdr5mwCsmbmpFSLhMEDfGKHPUCmKxgSWYGI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:11:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64 (0x40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116297, serialNumber=4C8F2B44433AB464A714AD8D39A8F16E4C500A7C Validity Not Before: Mar 3 08:11:51 2026 GMT Not After : Mar 10 08:11:51 2026 GMT Subject: CN=69a697c8-c920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:85:bd:04:3f:bf:ad:cc:34:1d:a5:32:67: 1d:54:00:1e:c6:d8:96:40:b6:3c:90:b2:bb:2f:28: 40:e9:1c:4a:73:35:ad:66:fa:07:be:e2:46:01:a5: f9:49:62:53:b2:da:43:36:4e:71:3b:31:48:66:e3: bd:46:e7:91:8a:e5:db:cc:9a:0e:b8:33:2b:21:45: 54:5a:39:ea:c5:4a:c0:c8:3e:e9:12:26:a3:cf:00: 48:14:3d:a5:25:c5:69:30:27:74:61:61:f8:af:02: 7e:6d:ab:e1:1a:02:cc:30:a4:f5:b5:6e:71:06:e6: e6:d4:1b:0e:f7:97:8a:b5:13:37:a7:48:03:37:46: 66:39:cb:d8:e1:e0:f6:54:41:af:3b:e5:60:ff:d6: 4d:90:bb:17:93:34:7d:d2:21:ec:d2:96:68:fc:dc: 7b:c4:6f:aa:ab:31:0e:98:22:1d:6c:2a:e4:07:4e: 6f:20:47:44:ac:31:2c:2f:ac:e1:fa:aa:4f:35:0d: c0:5b:0e:15:91:f8:b1:09:d2:18:cd:f5:0d:50:c8: 78:20:05:37:b1:77:34:90:59:42:0a:39:7b:06:d3: 8e:fa:17:9e:84:f7:23:91:b1:5f:d5:e5:62:9a:08: 99:7a:82:c0:a0:37:fd:db:22:66:31:97:82:66:ac: 89:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:48:C2:43:B1:AE:B8:B9:0F:13:77:F9:2E:E5:3D:0B:F9:D5:25 X509v3 Authority Key Identifier: keyid:4C:8F:2B:44:43:3A:B4:64:A7:14:AD:8D:39:A8:F1:6E:4C:50:0A:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TI8rREM6tGSnFK2NOajxbkxQCnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116297/6A58AD8EC5CB11F085A9BC58C4F9AE02/TI8rREM6tGSnFK2NOajxbkxQCnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:76:e0:57:89:73:37:13:e3:ff:7c:ec:bd:1c:49:b8:71:86: 6d:72:76:92:1e:10:16:db:90:77:74:69:6a:76:c6:3d:16:9c: 8d:d7:99:c3:55:b8:d4:f8:58:f5:e8:f4:34:bd:76:a9:c7:80: 1f:da:80:6b:bc:ca:5b:80:78:a6:2a:67:3e:0e:9f:13:e4:46: 3c:67:a5:92:43:54:67:63:7f:8b:65:1b:b3:7b:0d:d1:13:54: a2:24:43:ab:33:62:d2:fb:26:e7:fc:d1:4d:3d:d1:1b:81:c2: 3d:63:53:41:0f:81:de:a2:4c:2d:e1:ab:7d:b0:80:24:92:4a: 02:13:be:02:2b:e7:98:19:e1:75:29:2d:f0:bf:97:00:7e:32: 39:b3:0b:0a:05:9d:00:e3:40:df:7e:00:d2:cc:ce:aa:8f:b8: 3b:b6:d7:78:d2:c3:2d:8d:dc:6c:18:26:5f:57:f8:bd:18:35: 50:3b:63:36:d6:5c:1f:c4:08:9a:96:01:a5:7a:47:52:01:e6: f6:46:20:2a:8c:e6:a3:3c:a0:cd:e0:bc:38:36:27:8d:59:40: 39:b4:b2:0d:3c:15:eb:e1:b9:3c:db:b7:0b:1e:f9:92:76:ee: 5e:19:8b:a5:a2:f6:77:05:ca:7d:88:e5:df:a4:12:e2:b4:c6: 33:24:6c:2d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBQDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NjI5NzExMC8GA1UEBRMoNEM4RjJCNDQ0MzNBQjQ2NEE3MTRBRDhEMzlBOEYxNkU0 QzUwMEE3QzAeFw0yNjAzMDMwODExNTFaFw0yNjAzMTAwODExNTFaMBgxFjAUBgNV BAMTDTY5YTY5N2M4LWM5MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa2YW9BD+/rcw0HaUyZx1UAB7G2JZAtjyQsrsvKEDpHEpzNa1m+ge+4kYBpflJ YlOy2kM2TnE7MUhm471G55GK5dvMmg64MyshRVRaOerFSsDIPukSJqPPAEgUPaUl xWkwJ3RhYfivAn5tq+EaAswwpPW1bnEG5ubUGw73l4q1EzenSAM3RmY5y9jh4PZU Qa875WD/1k2QuxeTNH3SIezSlmj83HvEb6qrMQ6YIh1sKuQHTm8gR0SsMSwvrOH6 qk81DcBbDhWR+LEJ0hjN9Q1QyHggBTexdzSQWUIKOXsG0476F56E9yORsV/V5WKa CJl6gsCgN/3bImYxl4JmrInBAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUrTVIwkOx rri5DxN3+S7lPQv51SUwHwYDVR0jBBgwFoAUTI8rREM6tGSnFK2NOajxbkxQCnww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2Mjk3LzZBNThBRDhFQzVD QjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdTbkZLMk5PYWp4Ymt4UUNu dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVEk4clJFTTZ0R1NuRksyTk9hanhia3hRQ253LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 Mjk3LzZBNThBRDhFQzVDQjExRjA4NUE5QkM1OEM0RjlBRTAyL1RJOHJSRU02dEdT bkZLMk5PYWp4Ymt4UUNudy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCpduBXiXM3E+P/fOy9HEm4cYZtcnaSHhAW25B3dGlqdsY9FpyN15nDVbjU+Fj1 6PQ0vXapx4Af2oBrvMpbgHimKmc+Dp8T5EY8Z6WSQ1RnY3+LZRuzew3RE1SiJEOr M2LS+ybn/NFNPdEbgcI9Y1NBD4Heokwt4at9sIAkkkoCE74CK+eYGeF1KS3wv5cA fjI5swsKBZ0A40DffgDSzM6qj7g7ttd40sMtjdxsGCZfV/i9GDVQO2M21lwfxAia lgGlekdSAeb2RiAqjOajPKDN4Lw4NieNWUA5tLINPBXr4bk827cLHvmSdu5eGYul ovZ3Bcp9iOXfpBLitMYzJGwt -----END CERTIFICATE-----Generated at Wed Mar 4 09:11:01 2026 by rpki-client