$ rpki-client -vvf rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft File: v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft (raw, json) Hash identifier: Fg8ovpSWQMag5X77ektVTYNMN3cn6xQKGnzDyJqLGh8= Subject key identifier: 53:12:04:A8:4B:70:93:6B:0C:D2:08:04:CA:E1:0F:6F:C6:BB:E1:6B Authority key identifier: BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 Certificate issuer: /CN=A9167FF5/serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft Manifest number: 0241 Signing time: Sun 05 Apr 2026 02:02:23 +0000 Manifest this update: Sun 05 Apr 2026 02:02:22 +0000 Manifest next update: Sun 12 Apr 2026 02:02:22 +0000 Files and hashes: 1: v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl (hash: zBvOEBjBWCymmUc4+qQniJEjDIyxl4u2uV7RFNY8NWU=) 2: DCEA0362C17C11ED92AD7D85C4F9AE02.roa (hash: tbYd8JflLqAHQOW0BH5GJ8PqKcZMxydsXpsTFe7lGrM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 02:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167FF5, serialNumber=BFAF2363757729EE05AB21B71D205AB418E1B834 Validity Not Before: Apr 5 02:02:22 2026 GMT Not After : Apr 12 02:02:22 2026 GMT Subject: CN=69d1c2af-8bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:77:0d:85:d9:31:4d:10:32:66:d9:5a:85: c0:a9:f4:f8:72:55:99:7c:db:00:63:26:5e:a3:1f: 91:b7:a7:43:36:ce:91:e5:5c:04:f4:ee:d4:dd:3b: 35:51:50:c9:12:08:e6:85:a1:2f:c2:d7:98:6f:e1: c6:76:ef:55:6b:20:9f:e3:b8:34:f4:c8:56:8d:5e: 9c:ca:b0:de:3c:bb:aa:5a:ea:1f:84:76:5b:35:b6: d9:58:83:67:21:fe:f5:23:e6:7e:b3:74:d1:d7:cf: 03:89:3b:0f:72:05:ed:e6:bc:6c:f6:de:99:4d:06: 38:e7:35:35:92:ff:82:95:3c:29:61:d4:06:a1:71: 56:c2:6d:d4:c8:a5:b4:44:fa:5f:05:93:b3:14:30: b4:d6:af:e4:f0:47:9d:18:88:21:42:39:e3:8e:eb: b9:0a:df:99:d4:7e:8e:8d:79:2a:ca:4d:9c:6e:6c: 20:16:54:02:ed:8b:c8:63:58:a1:af:74:0e:7e:8c: 59:99:e8:5f:c2:10:d7:d5:20:45:1a:30:91:2c:f0: 08:b5:81:75:e7:19:29:d8:a4:b7:97:69:78:ea:2d: 5d:58:10:3f:76:3e:60:49:ff:db:79:56:dd:da:53: 99:a7:0c:71:9e:46:ab:4b:d3:e9:7a:b9:a1:68:2f: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:12:04:A8:4B:70:93:6B:0C:D2:08:04:CA:E1:0F:6F:C6:BB:E1:6B X509v3 Authority Key Identifier: keyid:BF:AF:23:63:75:77:29:EE:05:AB:21:B7:1D:20:5A:B4:18:E1:B8:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v68jY3V3Ke4FqyG3HSBatBjhuDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167FF5/27204392C17811EDAF54A95FC4F9AE02/v68jY3V3Ke4FqyG3HSBatBjhuDQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:7d:bf:22:b8:b3:b3:b1:a2:8a:c7:47:c4:8b:8c:3c:aa:b1: a2:3e:6b:47:4a:a1:88:8a:6a:db:db:61:c3:bc:34:8c:41:86: e5:9b:03:ad:a8:52:31:ff:b9:78:f8:66:02:33:61:18:70:d8: 2e:04:6f:c3:9c:cc:c3:85:48:af:eb:1e:48:95:61:55:75:45: 50:51:3f:28:a1:88:22:99:45:f9:b4:40:6f:4a:1e:04:af:27: 64:8a:de:d9:a2:92:86:8d:a8:3b:9e:34:0b:a2:e2:c8:1d:9b: 17:8a:f8:58:67:d6:e1:71:d0:68:f1:31:48:7d:da:fa:48:24: 0e:3d:be:6b:08:c4:e1:0e:7c:b4:8f:68:a5:e0:1a:ce:91:a9: ba:fc:52:c7:c4:d7:df:a5:a0:cc:8e:3d:33:46:f9:f3:56:a1: e7:a9:9b:4f:cb:07:e3:6c:c1:80:cf:54:83:35:44:4f:69:27: 56:79:a7:c6:f4:00:6d:dd:32:22:49:6f:f9:f0:86:5c:ee:a2: 4e:3a:97:c1:33:bd:70:1d:60:a9:53:9e:2e:9f:05:5f:31:55: ed:c9:b3:25:f3:7c:b6:2e:38:b3:1c:5d:cd:3d:15:9d:2d:55: 4c:1f:43:d8:4a:e8:cb:63:6b:9a:29:9f:3b:d2:0b:63:78:20: 3e:e4:8b:9c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdGRjUxMTAvBgNVBAUTKEJGQUYyMzYzNzU3NzI5RUUwNUFCMjFCNzFEMjA1QUI0 MThFMUI4MzQwHhcNMjYwNDA1MDIwMjIyWhcNMjYwNDEyMDIwMjIyWjAYMRYwFAYD VQQDEw02OWQxYzJhZi04YmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIl3DYXZMU0QMmbZWoXAqfT4clWZfNsAYyZeox+Rt6dDNs6R5VwE9O7U3Ts1 UVDJEgjmhaEvwteYb+HGdu9VayCf47g09MhWjV6cyrDePLuqWuofhHZbNbbZWINn If71I+Z+s3TR188DiTsPcgXt5rxs9t6ZTQY45zU1kv+ClTwpYdQGoXFWwm3UyKW0 RPpfBZOzFDC01q/k8EedGIghQjnjjuu5Ct+Z1H6OjXkqyk2cbmwgFlQC7YvIY1ih r3QOfoxZmehfwhDX1SBFGjCRLPAItYF15xkp2KS3l2l46i1dWBA/dj5gSf/beVbd 2lOZpwxxnkarS9PpermhaC91rQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFMSBKhL cJNrDNIIBMrhD2/Gu+FrMB8GA1UdIwQYMBaAFL+vI2N1dynuBashtx0gWrQY4bg0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0ZGNS8yNzIwNDM5MkMx NzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tlNEZxeUczSFNCYXRCamh1 RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y2OGpZM1YzS2U0RnF5RzNIU0JhdEJqaHVEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0ZGNS8yNzIwNDM5MkMxNzgxMUVEQUY1NEE5NUZDNEY5QUUwMi92NjhqWTNWM0tl NEZxeUczSFNCYXRCamh1RFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAk32/Irizs7GiisdHxIuMPKqxoj5rR0qhiIpq29thw7w0jEGG5ZsDrahSMf+5 ePhmAjNhGHDYLgRvw5zMw4VIr+seSJVhVXVFUFE/KKGIIplF+bRAb0oeBK8nZIre 2aKSho2oO540C6LiyB2bF4r4WGfW4XHQaPExSH3a+kgkDj2+awjE4Q58tI9opeAa zpGpuvxSx8TX36WgzI49M0b581ah56mbT8sH42zBgM9UgzVET2knVnmnxvQAbd0y Iklv+fCGXO6iTjqXwTO9cB1gqVOeLp8FXzFV7cmzJfN8ti44sxxdzT0VnS1VTB9D 2Eroy2NrmimfO9ILY3ggPuSLnA== -----END CERTIFICATE-----Generated at Mon Apr 6 08:31:48 2026 by rpki-client