$ rpki-client -vvf rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft File: 1NF3merJyZYrMl_th_kwwurILK8.mft (raw, json) Hash identifier: OElIEYsDdQzZEfRMe8nkxMUUN1tIYcWpEcL8p4bvQws= Subject key identifier: C0:0D:17:07:D4:47:F2:F8:25:F4:EC:06:D9:2D:DA:E7:76:94:50:F3 Authority key identifier: D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF Certificate issuer: /CN=A91970E2/serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Certificate serial: 1C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft Manifest number: 1C76 Signing time: Sat 04 Apr 2026 16:06:35 +0000 Manifest this update: Sat 04 Apr 2026 16:06:35 +0000 Manifest next update: Sat 11 Apr 2026 16:06:35 +0000 Files and hashes: 1: 1NF3merJyZYrMl_th_kwwurILK8.crl (hash: Em9SqMlFlsh4sSB3YmmwEElSvz2GoUd0wl9+X4KyyNc=) 2: ADB6934A9A4911E7857CA62FC4F9AE02.roa (hash: rpWO/lHhm5TFSW6ilLk7bGl8UUGMVt6i+NJTBnIB37Q=) 3: AC8124909A4911E7857CA62FC4F9AE02.roa (hash: Kodnm0+rS9iUqWFMV9owslM69gEEqhhUDC5QqGUYClg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 Apr 2026 16:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7323 (0x1c9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91970E2, serialNumber=D4D17799EAC9C9962B325FED87F930C2EAC82CAF Validity Not Before: Apr 4 16:06:35 2026 GMT Not After : Apr 11 16:06:35 2026 GMT Subject: CN=69d1370b-7a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d6:56:97:07:d0:18:53:2d:aa:6c:ee:b1:3c: ea:4b:bb:d9:f5:d3:2e:d1:da:19:07:57:ab:91:ef: 01:d1:33:b0:37:d9:3e:29:10:a4:79:a9:c8:4c:50: bd:66:4e:12:c6:d3:5b:62:a7:cb:81:bb:08:99:11: fe:bf:33:3b:12:6d:7a:ee:4b:53:fd:e9:e2:7b:0b: 58:6a:d8:0a:7f:aa:f9:a4:74:bf:9e:3b:01:8b:67: 4c:e6:3e:d6:4d:2c:53:b8:75:6a:37:98:4e:82:59: 99:7c:96:e7:7c:e6:01:27:2c:c3:bb:e0:00:e8:bc: 05:8d:ef:0d:0b:04:4e:59:e7:8b:e7:df:f7:be:e2: bb:7c:ce:be:63:4b:c8:69:1b:63:09:d6:53:f9:0b: 75:51:df:f0:17:4b:86:db:d8:3b:7b:a4:fb:a0:62: ef:9a:86:a2:b0:95:a8:ec:4c:fb:6d:32:d7:81:61: d4:44:d2:c1:50:75:2e:52:aa:4d:cf:ba:95:de:0a: fb:5a:ad:8d:81:29:7e:5d:9e:89:09:be:07:97:5a: 8f:f0:db:4a:60:97:69:5b:50:69:98:36:5a:22:f2: 5b:67:49:5c:ef:70:78:38:d7:b0:5b:a9:05:2a:77: 29:35:37:d3:6d:85:33:74:9a:0f:f3:8d:38:20:ce: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:17:07:D4:47:F2:F8:25:F4:EC:06:D9:2D:DA:E7:76:94:50:F3 X509v3 Authority Key Identifier: keyid:D4:D1:77:99:EA:C9:C9:96:2B:32:5F:ED:87:F9:30:C2:EA:C8:2C:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1NF3merJyZYrMl_th_kwwurILK8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91970E2/8101258CF9A811E6A4EFE02EC4F9AE02/1NF3merJyZYrMl_th_kwwurILK8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:30:bd:a6:0b:74:bb:2e:c5:25:34:50:f8:a3:be:d7:06:6c: 28:1e:00:e4:c8:e7:0a:f5:97:6c:52:c6:6d:f3:39:c1:c1:44: f7:01:bf:71:f7:45:c9:7a:40:f3:52:59:0e:50:2c:4a:87:34: 2c:45:85:93:03:62:be:7d:76:2b:9e:13:37:7a:dc:d8:99:0e: 8c:5a:be:16:7b:e5:8e:74:b1:71:59:8f:8c:98:76:e1:14:1a: e4:90:46:33:38:78:0d:b7:35:84:f2:6e:ee:88:5a:13:9e:5f: 8e:a5:4a:c4:29:0f:d7:5b:e4:40:f4:e0:b1:5e:17:8b:9d:1c: 6c:f2:f7:31:f3:33:f0:25:6b:06:87:a8:7f:30:bf:a2:1e:21: 9e:c7:73:24:40:5e:cf:88:58:da:ec:c5:4c:c5:3f:36:82:95: c3:cc:cf:5e:5a:ce:9f:0d:bb:a0:1d:0d:93:23:1d:e8:f8:0a: c4:32:dc:fd:0e:4c:cf:76:07:f4:54:d9:97:77:dc:0d:28:ae: 61:a8:21:3b:c9:f8:7b:4a:4a:90:4b:47:75:6a:e4:bf:68:a5: d6:d2:ff:62:f4:de:e2:77:27:e2:f2:ff:3d:ec:83:cb:fa:5d: 61:fc:73:04:0c:74:de:63:ba:2d:d1:38:91:47:b0:8b:cd:20: a4:22:97:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICHJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcwRTIxMTAvBgNVBAUTKEQ0RDE3Nzk5RUFDOUM5OTYyQjMyNUZFRDg3RjkzMEMy RUFDODJDQUYwHhcNMjYwNDA0MTYwNjM1WhcNMjYwNDExMTYwNjM1WjAYMRYwFAYD VQQDEw02OWQxMzcwYi03YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NZWlwfQGFMtqmzusTzqS7vZ9dMu0doZB1erke8B0TOwN9k+KRCkeanITFC9 Zk4SxtNbYqfLgbsImRH+vzM7Em167ktT/eniewtYatgKf6r5pHS/njsBi2dM5j7W TSxTuHVqN5hOglmZfJbnfOYBJyzDu+AA6LwFje8NCwROWeeL59/3vuK7fM6+Y0vI aRtjCdZT+Qt1Ud/wF0uG29g7e6T7oGLvmoaisJWo7Ez7bTLXgWHURNLBUHUuUqpN z7qV3gr7Wq2NgSl+XZ6JCb4Hl1qP8NtKYJdpW1BpmDZaIvJbZ0lc73B4ONewW6kF KncpNTfTbYUzdJoP8404IM7KIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMANFwfU R/L4JfTsBtkt2ud2lFDzMB8GA1UdIwQYMBaAFNTRd5nqycmWKzJf7Yf5MMLqyCyv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzBFMi84MTAxMjU4Q0Y5 QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnlaWXJNbF90aF9rd3d1cklM SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFORjNtZXJKeVpZck1sX3RoX2t3d3VySUxLOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzBFMi84MTAxMjU4Q0Y5QTgxMUU2QTRFRkUwMkVDNEY5QUUwMi8xTkYzbWVySnla WXJNbF90aF9rd3d1cklMSzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEATjC9pgt0uy7FJTRQ+KO+1wZsKB4A5MjnCvWXbFLGbfM5wcFE9wG/cfdFyXpA 81JZDlAsSoc0LEWFkwNivn12K54TN3rc2JkOjFq+FnvljnSxcVmPjJh24RQa5JBG Mzh4Dbc1hPJu7ohaE55fjqVKxCkP11vkQPTgsV4Xi50cbPL3MfMz8CVrBoeofzC/ oh4hnsdzJEBez4hY2uzFTMU/NoKVw8zPXlrOnw27oB0NkyMd6PgKxDLc/Q5Mz3YH 9FTZl3fcDSiuYaghO8n4e0pKkEtHdWrkv2il1tL/YvTe4ncn4vL/PeyDy/pdYfxz BAx03mO6LdE4kUewi80gpCKXXA== -----END CERTIFICATE-----Generated at Mon Apr 6 14:13:33 2026 by rpki-client