$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json) Hash identifier: WY6brAk03jFU3g73tPC830EV/wedpMjVdOal3wXQbYU= Subject key identifier: F7:70:68:A1:4F:CE:66:D5:6B:AA:70:33:37:71:5C:74:33:96:9C:DB Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft Manifest number: DB Signing time: Mon 02 Mar 2026 01:34:31 +0000 Manifest this update: Mon 02 Mar 2026 01:34:30 +0000 Manifest next update: Mon 09 Mar 2026 01:34:30 +0000 Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: ycWVG3al0SMeRsDyoBkp7JtOOmnrx0Q6Fm/+sidhVPo=) 2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: kVyhvgjxUwUSm0wPasDIxMkRKwNbqO3guIkhR0YMhkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Validity Not Before: Mar 2 01:34:30 2026 GMT Not After : Mar 9 01:34:30 2026 GMT Subject: CN=69a4e927-d79e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:38:2c:45:9d:61:28:8a:7e:46:7c:4d:44: 73:17:df:70:2d:db:15:e2:3a:5f:b3:f5:a7:3b:2e: 59:09:d8:b2:2e:5a:36:0c:1a:1f:c1:f3:5d:b6:4c: 76:37:46:2e:2a:4b:b6:49:5c:97:ce:d7:46:8d:33: 51:1e:1b:bb:14:91:84:b8:76:73:52:dc:a9:27:bc: 6f:47:8c:c8:5c:56:aa:a0:67:bd:31:83:c5:f0:73: 79:21:bc:87:05:1b:0f:83:44:be:a7:b6:7a:24:08: c3:37:a9:cf:91:a6:9a:5f:46:9a:3f:b3:91:40:e4: 79:db:89:c2:79:fd:da:83:9e:0a:8d:ae:d5:ac:ad: 9a:4b:c6:06:ad:95:bf:ea:61:a1:cf:66:b0:43:c5: 8f:ed:76:1e:01:72:69:f1:2b:47:78:3a:ef:0b:d0: 24:05:46:81:92:6a:8d:87:a2:77:44:cc:20:c8:0d: 55:8f:89:9f:69:ae:0e:d8:72:9f:63:95:a8:70:dd: ee:3b:7d:71:93:d3:92:08:e2:08:0a:30:7d:d5:d8: 19:6c:7b:a8:ad:00:d9:5f:31:da:ca:52:56:ff:c5: dc:4c:4b:ad:01:4d:55:89:84:ea:a1:29:a7:5f:b1: 15:49:83:bf:36:6d:3e:e5:ca:c3:1a:1a:3f:13:9c: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:68:A1:4F:CE:66:D5:6B:AA:70:33:37:71:5C:74:33:96:9C:DB X509v3 Authority Key Identifier: keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:3f:5c:66:7e:7b:64:b7:1c:4f:c8:b8:78:ec:a2:9e:fe:ed: 8d:74:0a:00:02:9d:c6:01:3d:6c:0b:41:1a:22:9c:66:7f:f6: 77:65:44:f9:0b:81:c7:24:c0:77:08:17:94:1d:4c:b5:5a:06: 6e:aa:27:9b:cf:bc:c1:de:70:40:0a:37:09:34:65:8d:ab:07: 65:e6:d0:bd:34:af:6c:05:0b:45:0b:27:85:6b:b2:7a:e1:b8: 6d:06:15:56:59:08:c3:93:50:0e:f9:b9:10:ed:35:d8:7b:b9: c9:6b:ad:d8:0d:2e:35:ae:ef:37:8d:74:30:01:12:f3:61:24: ce:58:66:e4:a7:e1:82:f4:46:5e:c7:5d:6f:26:84:e5:28:65: 4c:65:0f:0e:65:c0:16:7d:8a:da:81:68:43:96:80:71:27:b4: 41:fa:53:d8:23:a0:26:18:90:20:db:01:c5:c3:eb:d9:14:f2: 4c:8b:30:c2:1d:71:e9:39:36:f7:b9:1e:f6:33:3c:43:a7:f8: ad:ed:ee:79:43:65:cc:22:47:dd:3f:62:f3:63:db:98:5e:14: 97:a6:16:a3:ae:13:5e:de:ef:a3:8d:9e:c9:31:9f:84:24:38: 69:d4:94:7d:07:f6:59:82:ae:06:23:ed:4c:aa:5e:0d:27:29: ec:28:67:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4NTQxMTAvBgNVBAUTKDZEQTc0ODFFMzk2MzJEMzM4MDM2NjkwRjdCNDNBMkM0 ODM2M0RCNjgwHhcNMjYwMzAyMDEzNDMwWhcNMjYwMzA5MDEzNDMwWjAYMRYwFAYD VQQDEw02OWE0ZTkyNy1kNzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5s4LEWdYSiKfkZ8TURzF99wLdsV4jpfs/WnOy5ZCdiyLlo2DBofwfNdtkx2 N0YuKku2SVyXztdGjTNRHhu7FJGEuHZzUtypJ7xvR4zIXFaqoGe9MYPF8HN5IbyH BRsPg0S+p7Z6JAjDN6nPkaaaX0aaP7ORQOR524nCef3ag54Kja7VrK2aS8YGrZW/ 6mGhz2awQ8WP7XYeAXJp8StHeDrvC9AkBUaBkmqNh6J3RMwgyA1Vj4mfaa4O2HKf Y5WocN3uO31xk9OSCOIICjB91dgZbHuorQDZXzHaylJW/8XcTEutAU1ViYTqoSmn X7EVSYO/Nm0+5crDGho/E5zP6QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPdwaKFP zmbVa6pwMzdxXHQzlpzbMB8GA1UdIwQYMBaAFG2nSB45Yy0zgDZpD3tDosSDY9to MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ERDkwQzNDMENC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxUT0FObWtQZTBPaXhJTmoy MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhZElIamxqTFRPQU5ta1BlME9peElOajIyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ERDkwQzNDMENCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxU T0FObWtQZTBPaXhJTmoyMmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsj9cZn57ZLccT8i4eOyinv7tjXQKAAKdxgE9bAtBGiKcZn/2d2VE+QuBxyTA dwgXlB1MtVoGbqonm8+8wd5wQAo3CTRljasHZebQvTSvbAULRQsnhWuyeuG4bQYV VlkIw5NQDvm5EO012Hu5yWut2A0uNa7vN410MAES82Ekzlhm5KfhgvRGXsddbyaE 5ShlTGUPDmXAFn2K2oFoQ5aAcSe0QfpT2COgJhiQINsBxcPr2RTyTIswwh1x6Tk2 97ke9jM8Q6f4re3ueUNlzCJH3T9i82PbmF4Ul6YWo64TXt7vo42eyTGfhCQ4adSU fQf2WYKuBiPtTKpeDScp7ChnSA== -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:40 2026 by rpki-client