$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft File: IUKTP75ufF-3Z6hqXiHdYBeOo50.mft (raw, json) Hash identifier: 0e2lBT93BbXM2pzHJ7MSxx4czbUolTPU0UAXcb3p+94= Subject key identifier: 0E:F5:64:40:8D:41:C5:F2:BB:D9:6E:E4:4F:7B:B9:AA:6B:88:EE:9F Authority key identifier: 21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D Certificate issuer: /CN=A9168D00/serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft Manifest number: 7D Signing time: Mon 02 Mar 2026 22:26:33 +0000 Manifest this update: Mon 02 Mar 2026 22:26:33 +0000 Manifest next update: Mon 09 Mar 2026 22:26:33 +0000 Files and hashes: 1: IUKTP75ufF-3Z6hqXiHdYBeOo50.crl (hash: B2PWwbLNtEwey8JtiCYGWRqcoLY3ykMAi8VmKaPmU3s=) 2: E92F49E661EA11F087750C23C4F9AE02.roa (hash: I1AL4lbWGPIfV3u+8QvI9wVl+esLP3oBbI38pSI4a6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D00, serialNumber=2142933FBE6E7C5FB767A86A5E21DD60178EA39D Validity Not Before: Mar 2 22:26:33 2026 GMT Not After : Mar 9 22:26:33 2026 GMT Subject: CN=69a60e99-0c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:3d:d7:2a:74:4d:9d:fd:c5:66:a0:4d:1f: ae:80:09:8a:3a:ec:3f:7c:bb:49:5c:81:a3:2c:3e: 2d:73:8a:a0:c6:b7:7e:ad:b0:7e:54:1f:43:7c:c5: 64:49:4f:43:37:92:eb:6f:34:ca:f5:f2:fc:3e:83: 1b:3b:39:1d:f9:3b:0b:49:ca:29:cd:92:30:ec:88: f6:31:20:a0:d7:ad:f8:a5:a4:35:44:7f:cf:bd:0b: ee:3d:92:e9:cc:ca:d1:e9:ce:28:18:e5:4b:89:f4: 9e:24:49:31:0f:86:93:a3:45:78:0c:b4:4b:18:92: ac:2c:80:7b:31:4d:75:79:c3:41:be:32:ba:c6:c8: 2d:cd:fd:d9:a4:d6:ca:f2:3f:a7:aa:56:92:eb:2a: a0:34:c5:ca:1f:d2:93:8b:83:cc:7c:f5:f2:af:bf: 1d:35:7f:16:49:46:8e:02:f5:4a:4b:f4:f8:e5:a9: 28:d5:62:55:98:ce:3a:73:a8:52:d8:66:98:d2:9f: 16:8a:f2:f7:2f:14:17:05:0e:55:37:d9:eb:26:1e: 4d:dd:db:15:70:1b:18:a0:b7:ee:6a:82:dc:b0:cc: ea:15:08:ca:55:85:9c:07:b6:54:ac:13:f4:23:25: 99:04:8c:f3:45:52:e7:0e:74:6a:00:7d:b1:8b:99: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:64:40:8D:41:C5:F2:BB:D9:6E:E4:4F:7B:B9:AA:6B:88:EE:9F X509v3 Authority Key Identifier: keyid:21:42:93:3F:BE:6E:7C:5F:B7:67:A8:6A:5E:21:DD:60:17:8E:A3:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IUKTP75ufF-3Z6hqXiHdYBeOo50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D00/F1AF105261DF11F0A6F74D7FC4F9AE02/IUKTP75ufF-3Z6hqXiHdYBeOo50.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:c3:6b:37:4c:c4:0e:89:79:51:f0:92:5c:f0:5f:e8:53:b5: e6:8d:6d:5d:d6:18:d6:23:72:3d:e5:ea:0e:7b:a7:63:44:d8: 4f:32:b2:f7:d4:72:f6:52:0e:a9:ba:52:6c:58:c1:c2:99:21: a5:c9:66:cd:73:c2:ab:7d:64:26:e7:48:9f:ac:95:c2:30:24: 13:21:c0:94:c7:d3:86:ad:e3:6e:33:75:73:b8:ba:e4:4d:a4: 5b:74:70:d0:52:9e:b7:b7:2f:6e:0c:ef:66:c7:67:a2:f7:40: 0a:c2:14:63:41:70:b6:45:56:14:a9:79:34:6b:8d:a4:00:5f: c8:11:0c:44:24:2b:8b:07:6d:b7:00:f2:25:c3:ce:89:ee:ca: c2:25:e4:3f:c4:4f:19:67:0c:fe:60:71:3f:71:40:b2:20:a8: a2:ca:b8:d4:ed:0f:15:b1:62:52:9b:da:83:21:bf:50:5c:ad: f2:66:6e:44:fe:b4:8c:27:5d:2c:b6:76:41:b5:b5:7c:cd:0f: 38:e9:79:77:4d:1d:c4:07:38:4c:23:d8:ca:46:40:49:9e:2b: 83:55:a2:f9:19:2b:b8:c5:19:28:d3:d8:b2:f1:49:04:af:3e: d7:45:1e:08:cc:fd:e0:bb:04:31:6c:28:5d:80:aa:ad:e2:65: d9:43:28:6d -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEQwMDExMC8GA1UEBRMoMjE0MjkzM0ZCRTZFN0M1RkI3NjdBODZBNUUyMURENjAx NzhFQTM5RDAeFw0yNjAzMDIyMjI2MzNaFw0yNjAzMDkyMjI2MzNaMBgxFjAUBgNV BAMTDTY5YTYwZTk5LTBjN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHKD3XKnRNnf3FZqBNH66ACYo67D98u0lcgaMsPi1ziqDGt36tsH5UH0N8xWRJ T0M3kutvNMr18vw+gxs7OR35OwtJyinNkjDsiPYxIKDXrfilpDVEf8+9C+49kunM ytHpzigY5UuJ9J4kSTEPhpOjRXgMtEsYkqwsgHsxTXV5w0G+MrrGyC3N/dmk1sry P6eqVpLrKqA0xcof0pOLg8x89fKvvx01fxZJRo4C9UpL9PjlqSjVYlWYzjpzqFLY ZpjSnxaK8vcvFBcFDlU32esmHk3d2xVwGxigt+5qgtywzOoVCMpVhZwHtlSsE/Qj JZkEjPNFUucOdGoAfbGLmceRAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUDvVkQI1B xfK72W7kT3u5qmuI7p8wHwYDVR0jBBgwFoAUIUKTP75ufF+3Z6hqXiHdYBeOo50w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RDAwL0YxQUYxMDUyNjFE RjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYtM1o2aHFYaUhkWUJlT281 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSVVLVFA3NXVmRi0zWjZocVhpSGRZQmVPbzUwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RDAwL0YxQUYxMDUyNjFERjExRjBBNkY3NEQ3RkM0RjlBRTAyL0lVS1RQNzV1ZkYt M1o2aHFYaUhkWUJlT281MC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCuw2s3TMQOiXlR8JJc8F/oU7XmjW1d1hjWI3I95eoOe6djRNhPMrL31HL2Ug6p ulJsWMHCmSGlyWbNc8KrfWQm50ifrJXCMCQTIcCUx9OGreNuM3VzuLrkTaRbdHDQ Up63ty9uDO9mx2ei90AKwhRjQXC2RVYUqXk0a42kAF/IEQxEJCuLB223APIlw86J 7srCJeQ/xE8ZZwz+YHE/cUCyIKiiyrjU7Q8VsWJSm9qDIb9QXK3yZm5E/rSMJ10s tnZBtbV8zQ846Xl3TR3EBzhMI9jKRkBJniuDVaL5GSu4xRko09iy8UkErz7XRR4I zP3guwQxbChdgKqt4mXZQyht -----END CERTIFICATE-----Generated at Wed Mar 4 08:19:27 2026 by rpki-client