$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft File: tOfjRK3ONthPHzq8zRSyTBUSu6o.mft (raw, json) Hash identifier: HImQpPelmie4VfpQBpyOyUWhTeDEc1f1YrSjEajc9G4= Subject key identifier: 11:24:65:F0:8A:E1:95:60:6C:C7:29:E3:75:2F:8F:67:0B:77:9F:77 Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA Certificate issuer: /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft Manifest number: 0134 Signing time: Mon 02 Mar 2026 00:18:25 +0000 Manifest this update: Mon 02 Mar 2026 00:18:22 +0000 Manifest next update: Mon 09 Mar 2026 00:18:22 +0000 Files and hashes: 1: tOfjRK3ONthPHzq8zRSyTBUSu6o.crl (hash: 8NHm0hBPI8INVu/ZlNILGETHbTajkL/pIwU5kTfQ5og=) 2: 6A5F29CED8A511F0B3F453F094D3641D.roa (hash: x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=) 3: 723720464ABE11EFA87EE85BC4F9AE02.roa (hash: /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA Validity Not Before: Mar 2 00:18:22 2026 GMT Not After : Mar 9 00:18:22 2026 GMT Subject: CN=69a4d751-6864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:2e:6f:ec:0d:01:d3:d7:c4:2c:ff:64:ff: 51:19:20:b7:b0:73:f7:00:dd:1e:e4:05:66:29:0a: e4:7f:ff:af:bc:00:b8:16:f8:4a:14:80:86:a3:47: 12:90:d6:79:f1:ea:41:62:b7:95:09:30:bf:f5:7b: 74:27:11:fb:54:19:ae:2b:25:34:58:e3:e5:c3:87: fe:0c:d5:17:80:5c:03:11:4e:ed:05:8f:31:0b:71: ce:8e:e3:cc:6b:12:fd:1b:10:fb:91:10:0f:00:4b: 06:d0:83:62:07:2f:a8:fa:92:37:4d:bc:ec:01:f1: b6:65:35:30:8b:66:fe:33:97:93:9b:0e:cb:b7:d4: 02:98:8b:c9:ec:bd:4b:e5:1e:1e:f5:92:e9:bd:3d: 9b:c3:78:75:12:ed:ed:be:60:2c:78:df:c5:6d:b8: d4:6e:51:30:d1:f2:15:55:b4:0d:14:a0:a7:8a:58: ae:45:b6:f5:95:b8:57:23:40:04:00:8d:ba:8e:d8: 3b:0a:ef:43:20:9c:b3:a3:e3:ce:e1:7c:51:08:bf: 78:de:81:fe:1d:65:dc:a3:3a:81:c9:bb:83:79:6a: 3b:b1:61:8b:e3:fc:a5:62:a1:d6:e3:76:c3:c1:2f: 0a:86:92:09:3c:2f:fc:4e:4c:7f:73:ea:5c:a9:cc: 36:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:24:65:F0:8A:E1:95:60:6C:C7:29:E3:75:2F:8F:67:0B:77:9F:77 X509v3 Authority Key Identifier: keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:6d:c2:59:69:84:10:b6:7b:10:69:32:e9:7d:f2:a3:c5:e3: c0:b9:ad:cc:90:2a:80:be:a9:78:cf:ca:ef:81:19:5f:2d:19: a2:1a:07:cf:f8:c8:98:ec:a4:57:98:cd:6f:2c:0d:82:fa:71: 17:3e:92:b4:7f:ef:fd:d6:38:0e:64:5e:48:29:c5:4b:8a:37: fe:eb:96:50:4c:db:14:aa:03:6a:58:4f:77:80:42:6a:97:1c: 25:ec:00:eb:7b:47:a6:2d:fa:2b:38:ae:41:0b:cb:9b:d9:36: 47:85:41:21:86:cc:d6:51:91:8d:61:22:db:d4:ed:94:22:72: 62:5f:b7:db:de:7a:23:60:bf:d9:da:1d:92:b4:23:b8:65:e2: fe:18:a2:77:39:b7:5e:af:bd:92:da:af:68:bc:93:58:84:bb: b0:ad:93:34:c1:36:1d:6a:5c:b1:f1:75:4a:24:4b:66:fe:e5: e8:38:6f:ed:8d:5b:95:7b:ad:26:28:d3:a6:03:57:5b:af:9c: 78:ed:f2:a4:11:9b:d4:fc:57:7c:d7:53:91:4a:91:d0:61:b1: 49:e9:80:b4:ac:ba:2d:55:49:f1:a4:34:9d:02:91:0a:f0:81: b1:69:95:f5:d5:89:e8:92:7b:1c:ef:b4:ec:4f:d0:ad:e9:8a: f2:f3:5c:75 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKEI0RTdFMzQ0QURDRTM2RDg0RjFGM0FCQ0NEMTRCMjRD MTUxMkJCQUEwHhcNMjYwMzAyMDAxODIyWhcNMjYwMzA5MDAxODIyWjAYMRYwFAYD VQQDEw02OWE0ZDc1MS02ODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2H0ub+wNAdPXxCz/ZP9RGSC3sHP3AN0e5AVmKQrkf/+vvAC4FvhKFICGo0cS kNZ58epBYreVCTC/9Xt0JxH7VBmuKyU0WOPlw4f+DNUXgFwDEU7tBY8xC3HOjuPM axL9GxD7kRAPAEsG0INiBy+o+pI3TbzsAfG2ZTUwi2b+M5eTmw7Lt9QCmIvJ7L1L 5R4e9ZLpvT2bw3h1Eu3tvmAseN/FbbjUblEw0fIVVbQNFKCniliuRbb1lbhXI0AE AI26jtg7Cu9DIJyzo+PO4XxRCL943oH+HWXcozqBybuDeWo7sWGL4/ylYqHW43bD wS8KhpIJPC/8Tkx/c+pcqcw2NwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBEkZfCK 4ZVgbMcp43Uvj2cLd593MB8GA1UdIwQYMBaAFLTn40StzjbYTx86vM0UskwVEruq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8zNkE1MzBGNjQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050aFBIenE4elJTeVRCVVN1 Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RPZmpSSzNPTnRoUEh6cTh6UlN5VEJVU3U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBOS8zNkE1MzBGNjQ0QkQxMUVGQjczREI3N0JDNEY5QUUwMi90T2ZqUkszT050 aFBIenE4elJTeVRCVVN1Nm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAg23CWWmEELZ7EGky6X3yo8XjwLmtzJAqgL6peM/K74EZXy0ZohoHz/jImOyk V5jNbywNgvpxFz6StH/v/dY4DmReSCnFS4o3/uuWUEzbFKoDalhPd4BCapccJewA 63tHpi36KziuQQvLm9k2R4VBIYbM1lGRjWEi29TtlCJyYl+32956I2C/2dodkrQj uGXi/hiidzm3Xq+9ktqvaLyTWIS7sK2TNME2HWpcsfF1SiRLZv7l6Dhv7Y1blXut JijTpgNXW6+ceO3ypBGb1PxXfNdTkUqR0GGxSemAtKy6LVVJ8aQ0nQKRCvCBsWmV 9dWJ6JJ7HO+07E/QremK8vNcdQ== -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:42 2026 by rpki-client