$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft File: G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json) Hash identifier: kNaYFeCM363d1gkXPB/0YYUrmz4Ifh7V3bFhWx8nLIo= Subject key identifier: 5A:D1:98:02:6F:6E:53:04:DB:69:05:7E:A0:EF:DE:8D:82:EF:E8:55 Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 Certificate issuer: /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft Manifest number: 34 Signing time: Sun 01 Mar 2026 10:02:42 +0000 Manifest this update: Sun 01 Mar 2026 10:02:42 +0000 Manifest next update: Sun 08 Mar 2026 10:02:42 +0000 Files and hashes: 1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: dYDSjmzNHfM4gvxH9Jq1s8UDskWMMHPkaRWg4u+08Sk=) 2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61 Validity Not Before: Mar 1 10:02:42 2026 GMT Not After : Mar 8 10:02:42 2026 GMT Subject: CN=69a40ec2-5cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f3:1c:4c:38:64:56:75:18:96:a4:64:85:e6: 43:20:67:95:03:1a:e8:d1:e2:74:d3:0e:50:5d:cd: 27:ee:e7:ce:ab:25:96:63:b1:a2:09:69:09:98:bb: b0:49:94:51:46:14:dc:97:75:a0:d0:df:9d:87:dd: 89:4a:9c:72:78:9e:0a:a9:63:01:91:96:92:f1:3e: 17:7f:bf:3f:f2:0b:e3:55:73:f3:5a:8d:9b:94:72: 61:c6:a5:cd:a1:0b:d4:e2:64:c9:eb:97:15:11:fb: f9:18:a6:05:05:4b:8e:ef:c9:3a:20:7c:ef:6c:68: 3d:1e:ff:af:13:22:e1:02:e8:b6:0e:d7:89:d1:76: 06:6f:a9:77:7c:97:67:40:59:2b:d1:16:c1:4b:82: 4a:f1:37:4c:bf:e7:88:31:75:16:41:89:24:88:5d: 0d:f2:af:84:8a:47:45:c3:69:ca:9e:72:43:5b:d6: 45:d0:e7:4a:25:66:c9:82:af:68:bf:ef:be:e9:fa: 15:2c:98:7a:dc:a0:ad:7c:e4:45:4f:0f:40:3f:eb: 1d:fb:3e:ed:9c:7c:da:ab:aa:29:c9:dc:0b:56:23: b3:18:a4:93:c8:ed:b7:e6:ff:cd:de:40:cf:50:f5: 01:d2:39:8d:69:19:14:9a:e1:85:be:23:a4:66:36: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D1:98:02:6F:6E:53:04:DB:69:05:7E:A0:EF:DE:8D:82:EF:E8:55 X509v3 Authority Key Identifier: keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:d0:65:18:15:0b:68:e8:7c:11:cc:63:c4:55:3e:15:5d:44: c8:55:90:13:d8:ac:4b:8f:67:b0:78:f2:5d:02:32:3e:15:06: 3c:12:80:a6:41:c5:48:b3:f8:0f:24:08:db:74:d6:75:d3:ed: c5:d2:8e:d5:8d:1c:d0:ce:e9:4a:19:1e:54:ab:f6:c3:dc:a3: 97:b0:8d:7c:c5:f7:a5:d5:ae:17:36:1b:83:b9:12:26:21:b1: 98:a4:33:fb:a6:7f:3e:04:1c:8c:1a:01:6c:6f:5a:e5:3b:dc: 2f:8a:51:b2:f9:60:dd:6f:55:13:aa:b2:d0:56:14:6d:84:12: dd:9a:bd:85:3e:21:db:91:44:9b:d9:a3:a0:44:6a:2e:bf:74: fa:d4:da:4a:5d:4d:09:48:df:47:65:c4:ec:fd:e6:b9:a1:6c: f2:69:80:46:d0:d8:bc:3a:0c:f0:04:72:8b:68:eb:40:8e:f9: c5:0a:a9:dc:90:c6:73:5e:67:49:b6:bf:9d:89:47:4d:27:61: 46:e9:9b:44:4c:7f:a7:bc:e5:60:ff:7a:29:4c:ac:de:7c:ae: 93:bf:25:65:ef:9f:fa:20:1f:26:db:80:66:aa:3c:82:3b:27: 35:df:e2:33:69:2b:0a:a9:e8:09:ee:04:6a:c9:3f:54:3f:39: 08:80:ee:a0 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OEY1MDExMC8GA1UEBRMoMUJFQTM4MTE0RTlFRTgyRTQwNjRFQjNCRjkxMzI4MDg2 QzM1N0I2MTAeFw0yNjAzMDExMDAyNDJaFw0yNjAzMDgxMDAyNDJaMBgxFjAUBgNV BAMTDTY5YTQwZWMyLTVjZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh8xxMOGRWdRiWpGSF5kMgZ5UDGujR4nTTDlBdzSfu586rJZZjsaIJaQmYu7BJ lFFGFNyXdaDQ352H3YlKnHJ4ngqpYwGRlpLxPhd/vz/yC+NVc/NajZuUcmHGpc2h C9TiZMnrlxUR+/kYpgUFS47vyTogfO9saD0e/68TIuEC6LYO14nRdgZvqXd8l2dA WSvRFsFLgkrxN0y/54gxdRZBiSSIXQ3yr4SKR0XDacqeckNb1kXQ50olZsmCr2i/ 777p+hUsmHrcoK185EVPD0A/6x37Pu2cfNqrqinJ3AtWI7MYpJPI7bfm/83eQM9Q 9QHSOY1pGRSa4YW+I6RmNtbnAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWtGYAm9u UwTbaQV+oO/ejYLv6FUwHwYDVR0jBBgwFoAUG+o4EU6e6C5AZOs7+RMoCGw1e2Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4RjUwLzAzM0VDRDcyQzlC MzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZlNkM1QVpPczctUk1vQ0d3MWUy RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRy1vNEVVNmU2QzVBWk9zNy1STW9DR3cxZTJFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4 RjUwLzAzM0VDRDcyQzlCMzExRjBBRDYzRkM3OEM0RjlBRTAyL0ctbzRFVTZlNkM1 QVpPczctUk1vQ0d3MWUyRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQA40GUYFQto6HwRzGPEVT4VXUTIVZAT2KxLj2ewePJdAjI+FQY8EoCmQcVIs/gP JAjbdNZ10+3F0o7VjRzQzulKGR5Uq/bD3KOXsI18xfel1a4XNhuDuRImIbGYpDP7 pn8+BByMGgFsb1rlO9wvilGy+WDdb1UTqrLQVhRthBLdmr2FPiHbkUSb2aOgRGou v3T61NpKXU0JSN9HZcTs/ea5oWzyaYBG0Ni8OgzwBHKLaOtAjvnFCqnckMZzXmdJ tr+diUdNJ2FG6ZtETH+nvOVg/3opTKzefK6TvyVl75/6IB8m24BmqjyCOyc13+Iz aSsKqegJ7gRqyT9UPzkIgO6g -----END CERTIFICATE-----Generated at Mon Mar 2 08:47:40 2026 by rpki-client