$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft File: tNIXk5onUZOOB2WaeUiFqciEGRk.mft (raw, json) Hash identifier: 6rUis2aNPppAKIFdW7S9T0aJt40YghFiYp3lTdND0LA= Subject key identifier: 71:C0:82:48:5E:2C:D9:A3:59:C9:52:5F:5A:FD:94:22:89:3A:A4:5A Authority key identifier: B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 Certificate issuer: /CN=A9145B13/serialNumber=B4D217939A2751938E07659A794885A9C8841919 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft Manifest number: EC Signing time: Mon 02 Mar 2026 01:51:05 +0000 Manifest this update: Mon 02 Mar 2026 01:51:03 +0000 Manifest next update: Mon 09 Mar 2026 01:51:03 +0000 Files and hashes: 1: tNIXk5onUZOOB2WaeUiFqciEGRk.crl (hash: jwqTtugpUdFP/n2tdfjve8bvBH4Y6VKnPPB7nT9IUM4=) 2: 793486E0C11A11EF99C19012C4F9AE02.roa (hash: v6BylN14fOxA4ftijT2xm8ugkwjC+LIOM8D065x7bmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145B13, serialNumber=B4D217939A2751938E07659A794885A9C8841919 Validity Not Before: Mar 2 01:51:03 2026 GMT Not After : Mar 9 01:51:03 2026 GMT Subject: CN=69a4ed08-b428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2c:ff:f5:df:1c:7d:25:94:db:16:f0:f4:fb: 12:7f:8f:eb:02:e8:1f:0d:f1:07:89:8a:85:be:79: 21:38:9d:36:69:99:cb:62:ff:f3:fd:92:b5:ea:a4: a4:7d:4a:09:61:1e:dc:e1:d2:d6:17:b0:31:05:5c: ce:03:7c:1b:54:61:8e:11:84:32:48:71:0d:1b:34: 8f:5e:b5:9a:f5:53:9d:0f:1d:2f:bb:7c:88:5d:32: d3:09:4c:ed:f5:9c:fc:49:39:fa:a1:7b:fd:b5:32: 1a:58:10:e0:9b:53:59:63:f8:0c:0b:b4:4b:05:68: 49:87:d3:f1:5e:80:ba:cb:51:d9:e6:f2:73:fc:88: c7:27:69:be:cf:c6:2f:6b:94:23:27:f8:46:79:b2: 5a:b2:7e:f7:24:d0:17:39:1b:ab:9b:e2:89:e1:e0: 9f:1e:a1:8d:53:3f:95:75:60:cf:56:cd:ff:59:11: 70:da:a5:c7:b0:a8:c8:c8:39:eb:bb:d4:96:c8:e2: 05:92:d3:f3:24:26:87:9d:fc:06:d4:10:4b:85:88: 57:8b:cf:0a:d3:84:80:9f:ee:6b:95:58:19:b6:c4: 0b:e8:e2:d0:b2:c3:8b:e0:7c:4c:2d:c5:e7:a5:f2: 9e:34:00:a7:95:ac:b3:54:76:66:da:1e:b5:03:91: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C0:82:48:5E:2C:D9:A3:59:C9:52:5F:5A:FD:94:22:89:3A:A4:5A X509v3 Authority Key Identifier: keyid:B4:D2:17:93:9A:27:51:93:8E:07:65:9A:79:48:85:A9:C8:84:19:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNIXk5onUZOOB2WaeUiFqciEGRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/50BD230EB12811EFB750A52BC4F9AE02/tNIXk5onUZOOB2WaeUiFqciEGRk.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f3:9f:f7:2a:d3:89:ee:c9:9b:73:e3:b8:7e:d3:13:10:65: d5:94:8e:89:81:93:5d:36:c5:7a:6b:a2:f1:33:45:38:3c:3b: 55:40:94:db:3b:00:e5:22:ff:aa:33:bf:27:82:12:b4:14:6d: b5:2b:b3:50:44:b0:ff:00:04:12:e9:6d:27:2f:43:a2:ee:4e: 26:bc:e2:c0:11:b1:49:e5:bd:28:99:66:a9:56:89:82:a6:98: 49:11:54:9f:0a:cf:28:80:66:f4:80:4e:40:ef:99:03:01:07: b5:ab:18:2a:80:21:39:ae:ba:b2:81:6a:98:1c:66:58:db:e2: b9:03:f4:0e:22:80:bd:55:b3:71:61:b0:53:8d:c3:3a:03:3d: 71:ed:be:d2:4b:c9:75:d3:c9:83:d2:41:a8:d8:a8:b3:b9:ea: a8:5c:d5:d3:eb:4f:54:92:ad:ac:e4:99:df:74:2e:ed:07:20: 18:70:a4:6a:5c:be:72:e6:d3:92:7e:07:15:d5:31:b3:33:7e: 3f:5c:5c:1c:1b:bb:d1:e0:be:84:79:46:f2:62:59:18:2e:a5: 28:57:ca:fb:5e:27:3e:40:3a:8d:98:ee:dd:cb:f8:1c:17:b5: 64:d2:81:bb:67:9d:bf:63:0e:54:ff:37:17:19:a4:54:8f:a8: 6f:21:85:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVCMTMxMTAvBgNVBAUTKEI0RDIxNzkzOUEyNzUxOTM4RTA3NjU5QTc5NDg4NUE5 Qzg4NDE5MTkwHhcNMjYwMzAyMDE1MTAzWhcNMjYwMzA5MDE1MTAzWjAYMRYwFAYD VQQDEw02OWE0ZWQwOC1iNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiz/9d8cfSWU2xbw9PsSf4/rAugfDfEHiYqFvnkhOJ02aZnLYv/z/ZK16qSk fUoJYR7c4dLWF7AxBVzOA3wbVGGOEYQySHENGzSPXrWa9VOdDx0vu3yIXTLTCUzt 9Zz8STn6oXv9tTIaWBDgm1NZY/gMC7RLBWhJh9PxXoC6y1HZ5vJz/IjHJ2m+z8Yv a5QjJ/hGebJasn73JNAXORurm+KJ4eCfHqGNUz+VdWDPVs3/WRFw2qXHsKjIyDnr u9SWyOIFktPzJCaHnfwG1BBLhYhXi88K04SAn+5rlVgZtsQL6OLQssOL4HxMLcXn pfKeNACnlayzVHZm2h61A5GnVwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHHAgkhe LNmjWclSX1r9lCKJOqRaMB8GA1UdIwQYMBaAFLTSF5OaJ1GTjgdlmnlIhanIhBkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUIxMy81MEJEMjMwRUIx MjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVaT09CMldhZVVpRnFjaUVH UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ROSVhrNW9uVVpPT0IyV2FlVWlGcWNpRUdSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUIxMy81MEJEMjMwRUIxMjgxMUVGQjc1MEE1MkJDNEY5QUUwMi90TklYazVvblVa T09CMldhZVVpRnFjaUVHUmsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAavOf9yrTie7Jm3PjuH7TExBl1ZSOiYGTXTbFemui8TNFODw7VUCU2zsA5SL/ qjO/J4IStBRttSuzUESw/wAEEultJy9Dou5OJrziwBGxSeW9KJlmqVaJgqaYSRFU nwrPKIBm9IBOQO+ZAwEHtasYKoAhOa66soFqmBxmWNviuQP0DiKAvVWzcWGwU43D OgM9ce2+0kvJddPJg9JBqNios7nqqFzV0+tPVJKtrOSZ33Qu7QcgGHCkaly+cubT kn4HFdUxszN+P1xcHBu70eC+hHlG8mJZGC6lKFfK+14nPkA6jZju3cv4HBe1ZNKB u2edv2MOVP83FxmkVI+obyGFhw== -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:36 2026 by rpki-client