$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft File: iX4CzNjrQDmng9AjecVf7p8M7lk.mft (raw, json) Hash identifier: RwUovEemLYo9B0ceFeQ1ADSN/SNO/ITV+x9AFfAKtnQ= Subject key identifier: DA:6C:DF:FB:DC:21:0A:0A:6A:E1:33:D3:4B:BC:67:FB:42:6A:1B:3B Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft Manifest number: 0880 Signing time: Fri 06 Mar 2026 15:49:49 +0000 Manifest this update: Fri 06 Mar 2026 15:49:49 +0000 Manifest next update: Fri 13 Mar 2026 15:49:49 +0000 Files and hashes: 1: iX4CzNjrQDmng9AjecVf7p8M7lk.crl (hash: m5Abo1Afzr+4Log5rBH6pgFuVpjcEviyrnKxtRSGJrU=) 2: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (hash: gRWxoMUhWR3o1/E004zC+NaDH3WtqhH3fFB+vz1MWo8=) 3: 6205FF52113D11F1BF40122E203D8C67.roa (hash: YZA4lVzt1mgdsEJ++kdTfFeCS9rYdciYFwgd714ipgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 15:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59 Validity Not Before: Mar 6 15:49:49 2026 GMT Not After : Mar 13 15:49:49 2026 GMT Subject: CN=69aaf79d-4cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:0d:8f:ac:17:bc:81:39:c6:95:8b:3e:8b: e4:0b:41:f2:23:66:94:d1:3e:6f:95:6b:ec:f0:33: 79:23:c9:a6:29:ab:18:c1:79:87:d5:6d:a0:95:48: df:dc:41:6b:5c:72:c9:94:39:40:e9:65:d6:87:e8: a7:89:91:31:05:db:00:d7:29:d2:70:16:58:f5:7e: fd:09:4f:56:ef:84:05:af:6b:d9:dc:14:91:b4:f7: 90:82:3d:60:69:32:57:4b:eb:9b:df:d5:4c:6c:9c: ef:97:d8:45:35:ab:9a:fb:3c:a2:d0:b5:c5:88:4e: e9:0d:69:11:d9:15:0d:f9:f8:3d:93:9c:d6:9e:1c: c1:8e:e1:42:f5:28:d0:f0:5b:09:88:ca:ac:4c:8d: 44:ee:78:a8:34:29:0c:a7:bd:c5:23:e5:8b:93:89: 4a:13:e4:3a:30:6c:8c:4d:81:be:de:28:ea:2c:23: ec:17:96:5e:34:5b:29:ec:e9:ab:20:85:bc:70:16: 03:ba:36:c0:ec:5b:3b:b1:45:52:84:86:60:0d:57: 20:d4:0c:13:3c:99:c1:ea:80:34:9d:3c:97:c8:8c: 2b:3b:88:df:86:16:a2:bc:bc:c2:78:b3:c5:25:be: 03:bb:76:a2:02:7b:86:60:eb:17:7d:78:07:52:e7: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6C:DF:FB:DC:21:0A:0A:6A:E1:33:D3:4B:BC:67:FB:42:6A:1B:3B X509v3 Authority Key Identifier: keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:48:8b:2c:8f:c5:23:7d:ef:e8:7a:fc:de:6e:7a:56:fc:ac: bb:08:cf:dc:19:71:eb:77:d7:ef:65:41:8a:df:9c:ac:f1:bb: 0c:83:15:06:85:62:d2:cc:bc:4f:86:cd:fe:38:0f:15:ee:17: 55:bf:c1:4d:f5:53:2a:40:10:c7:aa:03:f4:90:20:4e:5f:e5: ed:e0:94:0a:c9:e9:77:2d:d6:24:4d:7b:b1:02:4a:ee:f4:96: ef:05:5f:95:63:dc:54:fe:a9:85:05:03:a1:7d:a7:e8:de:4b: 1c:ee:ab:06:01:16:de:1a:80:75:1e:23:76:20:bb:bb:fd:fe: 2a:06:50:01:22:8d:59:ad:f7:f4:f5:58:52:07:6e:63:ec:f8: 2c:64:11:18:d3:e2:0f:7e:f4:5f:58:a0:78:36:cd:8c:a7:f0: dd:48:b7:8a:ef:05:19:30:d4:f5:ab:37:58:47:3b:e5:5e:d1: 45:a1:1a:29:5b:e2:fe:90:e6:d7:60:f0:db:02:9d:1f:77:b3: 03:01:b9:b9:c5:85:ae:f1:0e:aa:76:83:71:5d:59:86:ed:d5: f5:09:2d:9a:19:e3:67:d4:bb:c2:4e:05:2e:0d:f0:1e:74:ea: d8:a7:d4:19:da:18:6e:1e:b9:b5:1c:e0:d3:9c:4f:dd:a2:d0: 58:96:32:1a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF OUYwQ0VFNTkwHhcNMjYwMzA2MTU0OTQ5WhcNMjYwMzEzMTU0OTQ5WjAYMRYwFAYD VQQDEw02OWFhZjc5ZC00Y2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0oNj6wXvIE5xpWLPovkC0HyI2aU0T5vlWvs8DN5I8mmKasYwXmH1W2glUjf 3EFrXHLJlDlA6WXWh+iniZExBdsA1ynScBZY9X79CU9W74QFr2vZ3BSRtPeQgj1g aTJXS+ub39VMbJzvl9hFNaua+zyi0LXFiE7pDWkR2RUN+fg9k5zWnhzBjuFC9SjQ 8FsJiMqsTI1E7nioNCkMp73FI+WLk4lKE+Q6MGyMTYG+3ijqLCPsF5ZeNFsp7Omr IIW8cBYDujbA7Fs7sUVShIZgDVcg1AwTPJnB6oA0nTyXyIwrO4jfhhaivLzCeLPF Jb4Du3aiAnuGYOsXfXgHUuditwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNps3/vc IQoKauEz00u8Z/tCahs7MB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5 ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03 bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjIwNy84QzY4QjlBMjA5ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFE bW5nOUFqZWNWZjdwOE03bGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGUiLLI/FI33v6Hr83m56VvysuwjP3Blx63fX72VBit+crPG7DIMVBoVi0sy8 T4bN/jgPFe4XVb/BTfVTKkAQx6oD9JAgTl/l7eCUCsnpdy3WJE17sQJK7vSW7wVf lWPcVP6phQUDoX2n6N5LHO6rBgEW3hqAdR4jdiC7u/3+KgZQASKNWa339PVYUgdu Y+z4LGQRGNPiD370X1igeDbNjKfw3Ui3iu8FGTDU9as3WEc75V7RRaEaKVvi/pDm 12Dw2wKdH3ezAwG5ucWFrvEOqnaDcV1Zhu3V9QktmhnjZ9S7wk4FLg3wHnTq2KfU GdoYbh65tRzg05xP3aLQWJYyGg== -----END CERTIFICATE-----Generated at Sun Mar 8 01:48:17 2026 by rpki-client