$ rpki-client -vvf rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft File: chMb8CkEqEkfuTxB1F376UKq1nE.mft (raw, json) Hash identifier: sop3kIUK2yTyVIZmS/boT+BIvLBoRu1pi9A/KFn5Jfk= Subject key identifier: 1E:3A:D0:66:9F:6C:73:42:86:C5:D4:74:73:65:AC:DB:19:01:27:38 Authority key identifier: 72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 Certificate issuer: /CN=A9128EED/serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft Manifest number: 0133 Signing time: Sat 21 Mar 2026 04:28:59 +0000 Manifest this update: Sat 21 Mar 2026 04:28:59 +0000 Manifest next update: Sat 28 Mar 2026 04:28:59 +0000 Files and hashes: 1: chMb8CkEqEkfuTxB1F376UKq1nE.crl (hash: GDSVXQuXStaX4Pgq+NaM3Dy4c8o1buzlCKbcvzfziS8=) 2: E62E8D50553A11EFB6BCFB83C4F9AE02.roa (hash: kiewIghlA3eSE6JqoPitcKxULZmtrJbpqxq8AfoM0zA=) 3: E5B66960553A11EFB6BCFB83C4F9AE02.roa (hash: IiOfuavzgr4udhdI2026QD5t6vsu21nW0i15GhoklvI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128EED, serialNumber=72131BF02904A8491FB93C41D45DFBE942AAD671 Validity Not Before: Mar 21 04:28:59 2026 GMT Not After : Mar 28 04:28:59 2026 GMT Subject: CN=69be1e8b-62b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:39:21:65:49:bb:3f:2a:71:a8:97:9c:8e: 9d:54:f7:f3:0e:6d:b0:96:06:7e:ca:1a:b5:97:7a: 57:7d:b1:ea:25:5d:bb:a4:5e:e9:18:05:74:a4:aa: 9c:50:cf:a8:a2:73:4d:81:62:48:1d:9a:79:a3:bc: 21:78:f5:75:5c:34:af:4b:9f:d6:20:d9:8b:91:58: 6f:e3:fa:67:ff:3e:c8:60:94:2e:c7:56:ee:f0:1c: cc:9a:54:c4:db:ec:b0:2c:b6:0f:a6:08:fd:06:fd: 12:c7:d8:00:cc:f9:79:5a:b9:bc:0d:93:a3:e2:20: bb:d8:32:04:9a:3c:70:ce:a2:4c:8e:4e:db:35:d9: 7a:73:df:9e:3c:aa:82:6b:5e:39:c6:b7:04:6c:55: 19:55:71:8e:8a:04:18:a5:cb:b7:73:cd:03:9e:1f: 5b:f7:07:d8:5b:b3:a6:08:c7:fa:ed:c4:34:7f:18: c8:9c:61:d8:16:be:c2:aa:e4:3d:f5:24:23:5d:af: 5b:ea:61:3f:69:73:82:15:b5:e3:90:d2:f0:02:08: ee:e4:96:cb:17:85:96:8b:6d:a8:3d:16:a9:a4:be: 0c:b2:f5:40:a8:61:3d:60:d1:67:fb:ec:41:3d:1d: 19:bb:5b:57:cb:d8:fa:44:86:02:65:6c:26:c4:a8: ae:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3A:D0:66:9F:6C:73:42:86:C5:D4:74:73:65:AC:DB:19:01:27:38 X509v3 Authority Key Identifier: keyid:72:13:1B:F0:29:04:A8:49:1F:B9:3C:41:D4:5D:FB:E9:42:AA:D6:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/chMb8CkEqEkfuTxB1F376UKq1nE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128EED/283E4E52553A11EF9EC3B738C4F9AE02/chMb8CkEqEkfuTxB1F376UKq1nE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:c0:4c:34:59:97:68:42:66:69:55:3a:8b:63:ab:c9:7c:e9: d8:e6:04:12:c2:18:5d:d4:26:b8:ef:41:8e:99:62:a4:2a:ad: 8c:df:08:44:9e:d4:33:5f:55:97:48:0e:f7:27:d1:e9:75:a8: 58:c6:63:dc:91:5b:51:00:8a:3b:bd:90:15:53:d1:ad:99:16: ec:91:7e:15:55:72:bc:45:65:82:62:dc:d4:cb:a7:b0:41:b9: d1:b9:f3:67:64:4d:08:c0:cd:f7:f4:d3:ad:56:db:37:a6:d6: fa:a3:70:b1:bd:94:77:27:f0:73:91:fd:a6:d1:39:78:12:20: a5:d4:60:85:64:c6:93:b8:27:f5:82:04:10:75:5c:4e:a0:57: 71:e8:7f:52:b1:23:e7:2d:9d:c5:0f:3e:67:8c:5c:a4:0c:c9: 6f:ac:ed:c9:cd:05:28:8c:58:0a:ce:14:d0:5d:09:8d:99:4c: fa:1d:8e:9c:b7:2a:3d:33:30:ea:48:ab:52:a9:90:fd:81:0f: 85:49:a5:e7:aa:50:03:04:01:ec:eb:85:de:fe:ba:db:c6:41: cb:d2:f5:4f:f1:53:b0:56:34:f0:a3:6a:55:f7:7e:39:be:53: 1a:47:8b:5a:1b:e5:c1:17:eb:7d:11:ab:ea:d9:be:32:fa:75: 38:00:a0:c7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhFRUQxMTAvBgNVBAUTKDcyMTMxQkYwMjkwNEE4NDkxRkI5M0M0MUQ0NURGQkU5 NDJBQUQ2NzEwHhcNMjYwMzIxMDQyODU5WhcNMjYwMzI4MDQyODU5WjAYMRYwFAYD VQQDEw02OWJlMWU4Yi02MmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk45IWVJuz8qcaiXnI6dVPfzDm2wlgZ+yhq1l3pXfbHqJV27pF7pGAV0pKqc UM+oonNNgWJIHZp5o7whePV1XDSvS5/WINmLkVhv4/pn/z7IYJQux1bu8BzMmlTE 2+ywLLYPpgj9Bv0Sx9gAzPl5Wrm8DZOj4iC72DIEmjxwzqJMjk7bNdl6c9+ePKqC a145xrcEbFUZVXGOigQYpcu3c80Dnh9b9wfYW7OmCMf67cQ0fxjInGHYFr7CquQ9 9SQjXa9b6mE/aXOCFbXjkNLwAgju5JbLF4WWi22oPRappL4MsvVAqGE9YNFn++xB PR0Zu1tXy9j6RIYCZWwmxKiuEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB460Gaf bHNChsXUdHNlrNsZASc4MB8GA1UdIwQYMBaAFHITG/ApBKhJH7k8QdRd++lCqtZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEVFRC8yODNFNEU1MjU1 M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFFa2Z1VHhCMUYzNzZVS3Ex bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NoTWI4Q2tFcUVrZnVUeEIxRjM3NlVLcTFuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEVFRC8yODNFNEU1MjU1M0ExMUVGOUVDM0I3MzhDNEY5QUUwMi9jaE1iOENrRXFF a2Z1VHhCMUYzNzZVS3ExbkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQMBMNFmXaEJmaVU6i2OryXzp2OYEEsIYXdQmuO9BjplipCqtjN8IRJ7UM19V l0gO9yfR6XWoWMZj3JFbUQCKO72QFVPRrZkW7JF+FVVyvEVlgmLc1MunsEG50bnz Z2RNCMDN9/TTrVbbN6bW+qNwsb2Udyfwc5H9ptE5eBIgpdRghWTGk7gn9YIEEHVc TqBXceh/UrEj5y2dxQ8+Z4xcpAzJb6ztyc0FKIxYCs4U0F0JjZlM+h2OnLcqPTMw 6kirUqmQ/YEPhUml56pQAwQB7OuF3v6628ZBy9L1T/FTsFY08KNqVfd+Ob5TGkeL WhvlwRfrfRGr6tm+Mvp1OACgxw== -----END CERTIFICATE-----Generated at Sun Mar 22 19:03:26 2026 by rpki-client