$ rpki-client -vvf rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft File: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft (raw, json) Hash identifier: h169ivebK+tAJQ73kQBqizhAIdYXRefCXNmBYAGIAlo= Subject key identifier: 84:67:FB:D6:17:D2:64:29:58:1A:24:95:B5:D2:FD:CD:3E:3F:F9:51 Authority key identifier: 22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 Certificate issuer: /CN=A919D539/serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Certificate serial: 08B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft Manifest number: 0897 Signing time: Sat 28 Mar 2026 20:26:03 +0000 Manifest this update: Sat 28 Mar 2026 20:26:03 +0000 Manifest next update: Sat 04 Apr 2026 20:26:03 +0000 Files and hashes: 1: Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl (hash: SKuMrNfOTC3HXDn8yHnxiCkjJxT7HH7UQN3fIchXwII=) 2: 903E8812E38A11EAA3B8AE59C4F9AE02.roa (hash: GhHf45/vb5I/X0MIOpzOvwX20CEWTC0IaH/0NH4EfF4=) 3: DA0C233E3EE411ED905A3415C4F9AE02.roa (hash: mf6qln82PscHDH0xPIvnUcgowJvdgyrORzlGrhrol0w=) 4: B94BEEA036D811ECB5BD1470C4F9AE02.roa (hash: +xbbDGKjJ6DqQpBrbDd8JJCmqdHxccmvBDGEJY8Y1eA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 20:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2225 (0x8b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D539, serialNumber=221F50143E1D5F93C4CD31C9FEE7A24DE801F2D7 Validity Not Before: Mar 28 20:26:03 2026 GMT Not After : Apr 4 20:26:03 2026 GMT Subject: CN=69c8395b-25aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:6c:84:e4:84:43:18:50:68:10:b2:1c:2c: af:ae:17:0e:5d:00:52:9b:22:41:a9:3b:8b:64:54: 47:ea:bb:ad:e4:ad:91:e3:48:ff:97:11:8f:5a:33: 79:b9:80:03:aa:cb:f9:39:d2:75:69:ed:7d:5d:d6: c1:ca:4f:00:5f:16:2b:ec:2e:3a:41:f2:c4:18:05: 8e:5a:a8:9c:50:95:82:49:1a:0b:d7:3d:e9:9f:1b: f2:7b:3e:9f:18:0e:00:18:7f:da:a8:cb:20:17:d8: af:23:99:cd:49:71:0f:4b:96:eb:4b:b9:91:17:3f: 58:aa:19:10:41:a1:86:82:9b:43:e4:f0:37:b4:73: f4:5a:dc:e3:c9:3a:02:2f:f6:a6:1d:2f:95:68:fc: 37:89:9d:60:95:2d:bf:02:62:d8:7f:73:ee:52:d2: e2:a6:16:8e:bd:a0:a5:aa:73:ce:3a:a0:24:6f:84: 2b:5c:b5:b4:41:fc:3d:1a:ec:76:ce:ef:bd:74:bc: 6d:d2:0c:2b:77:ca:d8:a5:56:ee:f1:31:d0:d5:41: 1e:70:0e:8f:35:ea:93:b1:1c:73:f5:6c:cf:34:34: 8e:1c:19:ab:8c:98:1b:13:86:cb:ef:01:04:f3:ce: da:38:d7:03:49:0e:f8:0d:60:85:cb:53:9b:1c:f4: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:67:FB:D6:17:D2:64:29:58:1A:24:95:B5:D2:FD:CD:3E:3F:F9:51 X509v3 Authority Key Identifier: keyid:22:1F:50:14:3E:1D:5F:93:C4:CD:31:C9:FE:E7:A2:4D:E8:01:F2:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D539/C1265DC0E38911EAB73A3659C4F9AE02/Ih9QFD4dX5PEzTHJ_ueiTegB8tc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:dd:34:2d:6c:b3:91:6a:5d:ec:4f:77:87:10:62:cd:d6:5e: 71:36:0a:5a:68:01:74:04:9d:07:77:a1:3d:4b:31:32:ce:0f: 2d:83:01:12:24:f6:28:cf:97:b6:bf:c1:8d:c0:38:17:1f:72: 35:fd:a6:2a:8a:04:51:e3:72:cc:8c:ef:ff:f0:6d:13:11:75: fe:2c:72:c9:0c:5e:64:08:bc:0f:f1:dc:f6:9b:7f:c2:4b:22: c9:dc:2e:d3:11:a7:7f:12:e8:43:df:01:f4:ec:27:51:b2:25: 17:a2:db:e9:a1:47:99:7c:45:8f:7e:c3:9c:ab:42:1e:b9:c3: 2b:31:96:f6:ab:36:ae:df:f9:16:3d:e8:cc:28:02:43:bf:6c: 11:04:82:7b:72:1d:d7:53:73:46:6f:d8:71:89:3b:2d:5d:e2: 91:42:b1:3c:21:2e:f8:f5:26:cd:0e:56:d3:62:8e:df:2d:14: 3d:07:da:ec:ce:34:35:5e:9f:6b:ba:cb:3c:f0:e0:9b:99:69: 90:85:c2:e1:3a:c8:42:bd:08:77:72:80:73:db:e5:d3:51:b6: 27:92:73:6d:94:be:bd:a6:22:d2:ca:27:90:a6:0e:17:0e:32: bc:69:68:c7:6a:51:00:e4:4b:ad:a8:98:e7:11:95:f9:65:05: 1c:e9:9c:3c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQ1MzkxMTAvBgNVBAUTKDIyMUY1MDE0M0UxRDVGOTNDNENEMzFDOUZFRTdBMjRE RTgwMUYyRDcwHhcNMjYwMzI4MjAyNjAzWhcNMjYwNDA0MjAyNjAzWjAYMRYwFAYD VQQDEw02OWM4Mzk1Yi0yNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApaNshOSEQxhQaBCyHCyvrhcOXQBSmyJBqTuLZFRH6rut5K2R40j/lxGPWjN5 uYADqsv5OdJ1ae19XdbByk8AXxYr7C46QfLEGAWOWqicUJWCSRoL1z3pnxvyez6f GA4AGH/aqMsgF9ivI5nNSXEPS5brS7mRFz9YqhkQQaGGgptD5PA3tHP0WtzjyToC L/amHS+VaPw3iZ1glS2/AmLYf3PuUtLiphaOvaClqnPOOqAkb4QrXLW0Qfw9Gux2 zu+9dLxt0gwrd8rYpVbu8THQ1UEecA6PNeqTsRxz9WzPNDSOHBmrjJgbE4bL7wEE 887aONcDSQ74DWCFy1ObHPSxlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIRn+9YX 0mQpWBoklbXS/c0+P/lRMB8GA1UdIwQYMBaAFCIfUBQ+HV+TxM0xyf7nok3oAfLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDUzOS9DMTI2NURDMEUz ODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1UEV6VEhKX3VlaVRlZ0I4 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0loOVFGRDRkWDVQRXpUSEpfdWVpVGVnQjh0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDUzOS9DMTI2NURDMEUzODkxMUVBQjczQTM2NTlDNEY5QUUwMi9JaDlRRkQ0ZFg1 UEV6VEhKX3VlaVRlZ0I4dGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA2N00LWyzkWpd7E93hxBizdZecTYKWmgBdASdB3ehPUsxMs4PLYMBEiT2KM+X tr/BjcA4Fx9yNf2mKooEUeNyzIzv//BtExF1/ixyyQxeZAi8D/Hc9pt/wksiydwu 0xGnfxLoQ98B9OwnUbIlF6Lb6aFHmXxFj37DnKtCHrnDKzGW9qs2rt/5Fj3ozCgC Q79sEQSCe3Id11NzRm/YcYk7LV3ikUKxPCEu+PUmzQ5W02KO3y0UPQfa7M40NV6f a7rLPPDgm5lpkIXC4TrIQr0Id3KAc9vl01G2J5JzbZS+vaYi0sonkKYOFw4yvGlo x2pRAORLraiY5xGV+WUFHOmcPA== -----END CERTIFICATE-----Generated at Sun Mar 29 19:51:49 2026 by rpki-client