$ rpki-client -vvf rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft File: X2mHOU7ukmatexkjRBv29RNP-VA.mft (raw, json) Hash identifier: IQMt4wbDX/txvIyprFqgd8fsSUyaEhLCh/xchGdqmeI= Subject key identifier: CD:AB:C2:21:A6:AD:3C:0C:78:67:3C:20:C8:CD:44:DE:D6:AD:B0:01 Authority key identifier: 5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 Certificate issuer: /CN=A9147241/serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft Manifest number: 0876 Signing time: Mon 02 Mar 2026 00:36:05 +0000 Manifest this update: Mon 02 Mar 2026 00:36:03 +0000 Manifest next update: Mon 09 Mar 2026 00:36:03 +0000 Files and hashes: 1: X2mHOU7ukmatexkjRBv29RNP-VA.crl (hash: sS9K6xlGLwqWDb1sk3pw4gwxrTXaNz86hka/zHSxeg0=) 2: F69648C2ECF211EABBFDDD24C4F9AE02.roa (hash: cf4yHcoutqovI1dQvoBzonoaRmnFgyfFyjHSp2dFK4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147241, serialNumber=5F6987394EEE9266AD7B1923441BF6F5134FF950 Validity Not Before: Mar 2 00:36:03 2026 GMT Not After : Mar 9 00:36:03 2026 GMT Subject: CN=69a4db74-05f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:54:2a:aa:ea:64:2a:29:01:ba:d7:2e:af: 35:23:88:6c:82:22:dc:91:b9:0f:01:21:cb:96:82: 54:8f:0e:99:d3:3e:ea:ee:bc:ca:9f:f5:94:b1:90: 1c:c3:b6:d4:fe:cf:30:e9:de:a9:03:68:2e:7e:0d: 58:c3:bb:0b:ea:70:54:93:7b:56:da:bb:03:ff:c1: e9:fd:13:28:69:65:19:c5:47:ec:b6:6e:08:74:92: 49:76:a1:e1:23:2c:5c:4e:52:17:b2:7a:49:51:72: 73:d6:2f:9d:e5:7c:be:11:87:30:4e:b3:a3:84:a4: 50:f1:b2:81:d0:b8:61:ce:f4:0d:75:83:a4:7d:6c: 6f:38:79:bf:d0:23:dd:a1:af:2a:99:8c:0b:25:20: 47:a0:dd:5a:17:55:f6:c6:b5:3f:4b:c0:7a:ba:12: 85:f0:bf:cb:dc:09:a7:a1:75:85:e6:6c:8d:7f:df: b0:71:01:a6:1c:fb:1c:0e:30:74:f8:9c:98:2a:fa: 29:59:42:f3:bd:67:eb:a5:a9:b2:93:33:ce:c2:1e: a6:03:5d:62:03:a2:ab:30:f4:85:e1:28:7b:54:3f: ee:59:40:c3:df:c2:d1:31:3a:a5:cb:5d:62:f5:01: 32:03:93:7b:ac:d2:4b:68:b4:c9:02:b9:86:6d:11: 5e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:AB:C2:21:A6:AD:3C:0C:78:67:3C:20:C8:CD:44:DE:D6:AD:B0:01 X509v3 Authority Key Identifier: keyid:5F:69:87:39:4E:EE:92:66:AD:7B:19:23:44:1B:F6:F5:13:4F:F9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2mHOU7ukmatexkjRBv29RNP-VA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147241/62BB5C74ECF111EAA39D5722C4F9AE02/X2mHOU7ukmatexkjRBv29RNP-VA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:b6:2f:bd:4e:d9:ce:b1:36:92:11:70:bb:a6:32:fb:62:a5: 85:13:91:02:1c:f8:fc:83:69:f4:aa:2d:7d:cd:87:d7:d3:d9: 48:41:a5:72:87:8a:e7:a1:28:57:d9:d8:d0:08:08:ce:7f:03: 32:4d:26:02:81:61:0e:9d:68:dc:c5:84:c1:8e:a3:bb:60:74: ca:50:81:6c:e2:c0:f2:c8:fe:f9:76:81:e0:6a:13:bb:98:5b: af:01:2a:15:83:37:93:8a:31:7d:4f:6e:bf:b5:e6:ae:cf:6b: 0d:e3:8e:1a:9b:e4:68:5f:4b:9f:48:4f:e1:51:ff:98:40:89: 30:bd:78:55:de:21:90:e7:f7:8e:72:0e:4e:cd:c1:85:5f:cb: 86:fa:6a:2d:ea:62:ae:1c:7f:6d:d8:c4:ba:9d:fc:b0:c0:3e: 4b:16:07:ce:6f:60:12:6f:de:32:11:2a:36:a2:4e:7b:c3:e6: 8c:75:b2:8c:6c:9d:10:aa:0b:97:cd:56:d4:cd:49:b0:f4:88: e8:4a:49:b0:76:40:e4:4b:ca:7c:82:ba:4b:28:8e:28:16:71: cb:ca:a3:41:11:3e:13:75:39:aa:fd:df:40:10:1f:e5:25:98: 92:94:fa:d2:b2:fc:af:c2:15:c3:c1:0e:d6:42:66:8c:05:8a: dc:bc:59:c9 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDcyNDExMTAvBgNVBAUTKDVGNjk4NzM5NEVFRTkyNjZBRDdCMTkyMzQ0MUJGNkY1 MTM0RkY5NTAwHhcNMjYwMzAyMDAzNjAzWhcNMjYwMzA5MDAzNjAzWjAYMRYwFAYD VQQDEw02OWE0ZGI3NC0wNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjT5UKqrqZCopAbrXLq81I4hsgiLckbkPASHLloJUjw6Z0z7q7rzKn/WUsZAc w7bU/s8w6d6pA2gufg1Yw7sL6nBUk3tW2rsD/8Hp/RMoaWUZxUfstm4IdJJJdqHh IyxcTlIXsnpJUXJz1i+d5Xy+EYcwTrOjhKRQ8bKB0LhhzvQNdYOkfWxvOHm/0CPd oa8qmYwLJSBHoN1aF1X2xrU/S8B6uhKF8L/L3AmnoXWF5myNf9+wcQGmHPscDjB0 +JyYKvopWULzvWfrpamykzPOwh6mA11iA6KrMPSF4Sh7VD/uWUDD38LRMTqly11i 9QEyA5N7rNJLaLTJArmGbRFetQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM2rwiGm rTwMeGc8IMjNRN7WrbABMB8GA1UdIwQYMBaAFF9phzlO7pJmrXsZI0Qb9vUTT/lQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI0MS82MkJCNUM3NEVD RjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWttYXRleGtqUkJ2MjlSTlAt VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gybUhPVTd1a21hdGV4a2pSQnYyOVJOUC1WQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzI0MS82MkJCNUM3NEVDRjExMUVBQTM5RDU3MjJDNEY5QUUwMi9YMm1IT1U3dWtt YXRleGtqUkJ2MjlSTlAtVkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEASbYvvU7ZzrE2khFwu6Yy+2KlhRORAhz4/INp9Kotfc2H19PZSEGlcoeK56Eo V9nY0AgIzn8DMk0mAoFhDp1o3MWEwY6ju2B0ylCBbOLA8sj++XaB4GoTu5hbrwEq FYM3k4oxfU9uv7Xmrs9rDeOOGpvkaF9Ln0hP4VH/mECJML14Vd4hkOf3jnIOTs3B hV/LhvpqLepirhx/bdjEup38sMA+SxYHzm9gEm/eMhEqNqJOe8PmjHWyjGydEKoL l81W1M1JsPSI6EpJsHZA5EvKfIK6SyiOKBZxy8qjQRE+E3U5qv3fQBAf5SWYkpT6 0rL8r8IVw8EO1kJmjAWK3LxZyQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:07:25 2026 by rpki-client