$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: WKDN2O8KqUUQDdx31dIdFdbSojIzNQth3pzw/42NeTA= Subject key identifier: 9E:E4:C1:BA:93:D8:5D:29:0E:B7:9A:36:C8:8A:F5:99:9F:E1:1C:02 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 01DB Signing time: Sun 01 Mar 2026 22:22:20 +0000 Manifest this update: Sun 01 Mar 2026 22:22:19 +0000 Manifest next update: Sun 08 Mar 2026 22:22:19 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: 3yD7a82z+dezgjn2nHxvXG8k8nUDMQz4YyKIDoTbgUQ=) 2: C93C3BD2BF1211F0825A8B67C4F9AE02.roa (hash: n9/IQR0BwLZbi9yJcCTUnntLY2aytZXC8mDV+WP0G4o=) 3: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=) 4: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:22:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Mar 1 22:22:19 2026 GMT Not After : Mar 8 22:22:19 2026 GMT Subject: CN=69a4bc1c-5166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b2:b4:67:29:fb:30:dd:79:ad:c7:84:66:54: 50:9e:3d:6e:2f:cc:3d:c3:ac:45:b4:73:9d:ab:8e: da:f5:96:cd:5a:3b:44:fe:f2:4a:df:05:c4:ed:e4: e8:2b:8d:64:01:35:7b:28:ca:57:97:65:1d:f1:3f: 36:a5:92:1a:36:2e:98:da:3b:46:ec:27:9f:b6:d1: 25:e2:d2:fb:16:03:9b:0b:80:6f:a0:a1:51:04:ca: 8d:80:5f:f6:45:51:17:c3:00:2f:d7:a1:ec:81:72: 2c:67:7d:bd:6f:73:32:28:73:2c:1a:53:2c:21:c7: cb:44:30:56:c5:1e:ec:5e:fe:9e:56:a5:de:af:88: 4b:ba:94:c8:12:a3:05:31:c7:5a:20:bb:ed:f0:23: 14:25:99:a9:11:a6:7d:da:c4:33:e1:4e:1f:5f:1b: 4f:78:06:bd:4c:d2:77:cd:41:48:a7:f1:bd:24:ec: cc:a4:4c:64:b8:57:55:0f:2a:42:1d:0f:0d:ff:68: bc:6b:60:94:b2:e0:3e:40:67:7c:0b:b0:ba:1d:78: 11:20:48:2a:86:b0:b9:33:8c:71:89:97:af:e3:1d: 32:f4:9c:46:cc:75:80:02:89:48:29:3f:91:16:3e: 1e:fe:b5:95:f4:9f:70:4e:b6:15:4e:b4:e3:10:50: 02:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E4:C1:BA:93:D8:5D:29:0E:B7:9A:36:C8:8A:F5:99:9F:E1:1C:02 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:88:db:af:08:ad:9e:4b:50:f8:a1:9e:0d:0f:2e:65:de:ba: 3f:41:32:66:ac:32:3e:37:d6:15:e5:a8:6a:37:db:68:41:9b: 47:4d:17:31:81:cb:38:cf:b6:14:66:38:7e:5b:ca:94:9c:9d: 33:bf:17:7d:69:0b:cf:fa:09:57:be:ab:72:00:80:f2:29:2e: 9b:3f:29:b6:90:63:81:15:91:64:5c:19:4b:d3:ad:0e:5b:9e: 56:ce:79:3c:93:71:07:53:a8:f1:fb:07:a4:54:55:7f:69:b7: 69:4d:b7:8f:d2:8f:12:e2:5c:f9:6c:c0:0f:d6:83:d3:d0:08: 58:7a:e9:70:b2:cf:33:99:04:fc:71:9c:8e:6f:f4:96:c8:54: a2:98:90:15:f6:f6:a6:96:4a:b1:d3:3a:66:10:bd:8e:b0:9b: 1f:36:88:e3:31:c2:1d:bb:7e:db:fb:53:8a:06:3f:00:8a:8b: e0:b7:79:e3:cd:b8:77:d8:e5:6f:a5:a2:e1:1b:a1:88:ec:8f: bb:dd:0d:66:ae:c7:21:94:41:61:68:95:f4:2b:c8:fc:ff:ef: e3:c5:28:b8:6c:86:5c:f5:f9:cc:81:75:ac:c8:d8:ea:2b:52: 89:e6:da:c5:9d:f4:9e:f1:44:bf:49:bd:71:69:7f:3c:f8:8c: 7c:4e:79:ac -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjYwMzAxMjIyMjE5WhcNMjYwMzA4MjIyMjE5WjAYMRYwFAYD VQQDEw02OWE0YmMxYy01MTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LK0Zyn7MN15rceEZlRQnj1uL8w9w6xFtHOdq47a9ZbNWjtE/vJK3wXE7eTo K41kATV7KMpXl2Ud8T82pZIaNi6Y2jtG7CefttEl4tL7FgObC4BvoKFRBMqNgF/2 RVEXwwAv16HsgXIsZ329b3MyKHMsGlMsIcfLRDBWxR7sXv6eVqXer4hLupTIEqMF McdaILvt8CMUJZmpEaZ92sQz4U4fXxtPeAa9TNJ3zUFIp/G9JOzMpExkuFdVDypC HQ8N/2i8a2CUsuA+QGd8C7C6HXgRIEgqhrC5M4xxiZev4x0y9JxGzHWAAolIKT+R Fj4e/rWV9J9wTrYVTrTjEFACtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJ7kwbqT 2F0pDreaNsiK9Zmf4RwCMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABIjbrwitnktQ+KGeDQ8uZd66P0EyZqwyPjfWFeWoajfbaEGbR00XMYHLOM+2 FGY4flvKlJydM78XfWkLz/oJV76rcgCA8ikumz8ptpBjgRWRZFwZS9OtDlueVs55 PJNxB1Oo8fsHpFRVf2m3aU23j9KPEuJc+WzAD9aD09AIWHrpcLLPM5kE/HGcjm/0 lshUopiQFfb2ppZKsdM6ZhC9jrCbHzaI4zHCHbt+2/tTigY/AIqL4Ld54824d9jl b6Wi4RuhiOyPu90NZq7HIZRBYWiV9CvI/P/v48UouGyGXPX5zIF1rMjY6itSieba xZ30nvFEv0m9cWl/PPiMfE55rA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:19 2026 by rpki-client