$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft File: LThammVNvyfyEuUykzG0AdAlKDo.mft (raw, json) Hash identifier: Ggc1R+1PsUOy5T86Edfm4Iukkokah6OsJi1awSAPMN8= Subject key identifier: C9:31:EB:3D:02:15:21:ED:BF:C0:8C:F0:13:4F:D4:0A:4E:2F:7D:03 Authority key identifier: 2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A Certificate issuer: /CN=A9178AFC/serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft Manifest number: 0B Signing time: Sun 01 Mar 2026 10:41:33 +0000 Manifest this update: Sun 01 Mar 2026 10:41:32 +0000 Manifest next update: Sun 08 Mar 2026 10:41:32 +0000 Files and hashes: 1: LThammVNvyfyEuUykzG0AdAlKDo.crl (hash: z9rmLaSJIkec9hXB9b7oi0cDhyUYCgzJcfCkpuetyDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178AFC, serialNumber=2D385A9A654DBF27F212E5329331B401D025283A Validity Not Before: Mar 1 10:41:32 2026 GMT Not After : Mar 8 10:41:32 2026 GMT Subject: CN=69a417dc-57c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:12:c8:8c:86:fc:4a:36:8c:64:61:d9:f2: ea:e2:40:84:66:b5:b2:2c:cf:74:f4:a4:d1:e5:f7: 2b:01:b4:92:26:df:93:d1:c9:35:70:9b:93:0a:a7: 77:c3:4b:20:34:6f:bc:9a:ad:61:66:02:e9:8b:1b: 42:45:93:42:b6:ee:f2:e2:1a:f2:f6:04:d5:bf:85: 83:ab:9a:61:52:13:d3:10:24:69:72:bf:9c:3a:f0: 73:80:49:9a:93:7e:66:63:f5:4f:f3:fa:4f:65:e8: e1:83:63:30:f7:d7:75:9b:14:fb:5c:58:0e:57:f3: 19:d2:aa:58:cc:fe:33:5d:b8:52:f0:35:c7:d3:e5: 45:eb:30:be:4d:00:97:fe:b4:c5:59:cb:a2:aa:e5: 8b:f0:30:0e:94:42:e1:e0:ed:fc:49:07:49:46:8d: 4b:1a:7f:9d:64:d8:94:c0:64:3c:4b:ea:f3:2c:ab: e7:36:7a:d8:52:8b:21:7c:0f:3d:7f:ad:07:18:27: 1e:2d:ea:28:96:13:28:91:0b:98:f5:ac:91:0e:dc: c9:76:ff:e7:9b:7b:07:88:5d:27:cc:46:3c:d7:e8: 55:44:2a:9f:55:a2:21:a3:ab:5d:75:b9:f7:e7:cc: 06:1c:ae:ef:90:17:c8:d3:03:1e:9e:53:92:64:a6: 0e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:31:EB:3D:02:15:21:ED:BF:C0:8C:F0:13:4F:D4:0A:4E:2F:7D:03 X509v3 Authority Key Identifier: keyid:2D:38:5A:9A:65:4D:BF:27:F2:12:E5:32:93:31:B4:01:D0:25:28:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LThammVNvyfyEuUykzG0AdAlKDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AFC/2921D1D40FDA11F1AD0F898F043D8C67/LThammVNvyfyEuUykzG0AdAlKDo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9c:48:a9:f4:7a:25:76:9c:c4:d6:e3:84:48:e9:aa:6e:56: 04:a2:f9:fb:79:d6:82:e3:2a:e6:3d:1b:35:1d:54:3a:11:cf: 0e:d3:bd:62:1c:72:93:bf:45:ee:6c:eb:25:f1:f4:fe:1b:7f: 27:5c:71:d2:5b:4f:14:ee:96:53:bf:2c:2b:64:ff:a2:e1:c8: 08:eb:8d:81:04:3b:ad:68:d7:0d:35:e7:c6:ba:80:17:ac:3a: 49:56:6e:81:8e:20:e1:80:24:fb:67:d5:5f:01:aa:aa:a9:04: bc:4b:13:70:62:29:ef:5e:5c:45:e0:79:2a:f2:c4:74:27:51: 44:0e:01:88:31:20:2e:04:69:13:d8:0b:2b:b1:f3:79:cc:ea: 0b:2c:03:59:77:6e:8d:dc:88:8c:5e:0d:11:8d:62:ee:ff:e0: 7a:3f:72:b6:be:42:06:78:cb:3e:87:e7:4f:db:8b:99:d7:45: 05:fd:74:ad:e8:38:e0:1d:17:c1:37:68:2f:69:c1:cf:00:b7: 0a:86:ba:cc:90:89:b7:e3:85:41:22:6f:b5:af:5a:94:c7:08: 9d:74:ac:82:46:ca:b5:9d:46:b7:d7:4c:de:41:e9:b8:69:e1: 25:48:e0:0d:69:aa:58:0e:c6:d7:0e:2c:f5:94:9c:17:7d:81: e9:29:07:b7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 OEFGQzExMC8GA1UEBRMoMkQzODVBOUE2NTREQkYyN0YyMTJFNTMyOTMzMUI0MDFE MDI1MjgzQTAeFw0yNjAzMDExMDQxMzJaFw0yNjAzMDgxMDQxMzJaMBgxFjAUBgNV BAMTDTY5YTQxN2RjLTU3YzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCf9hLIjIb8SjaMZGHZ8uriQIRmtbIsz3T0pNHl9ysBtJIm35PRyTVwm5MKp3fD SyA0b7yarWFmAumLG0JFk0K27vLiGvL2BNW/hYOrmmFSE9MQJGlyv5w68HOASZqT fmZj9U/z+k9l6OGDYzD313WbFPtcWA5X8xnSqljM/jNduFLwNcfT5UXrML5NAJf+ tMVZy6Kq5YvwMA6UQuHg7fxJB0lGjUsaf51k2JTAZDxL6vMsq+c2ethSiyF8Dz1/ rQcYJx4t6iiWEyiRC5j1rJEO3Ml2/+ebeweIXSfMRjzX6FVEKp9VoiGjq111uffn zAYcru+QF8jTAx6eU5Jkpg79AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUyTHrPQIV Ie2/wIzwE0/UCk4vfQMwHwYDVR0jBBgwFoAULThammVNvyfyEuUykzG0AdAlKDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4QUZDLzI5MjFEMUQ0MEZE QTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlmeUV1VXlrekcwQWRBbEtE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFRoYW1tVk52eWZ5RXVVeWt6RzBBZEFsS0RvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc4 QUZDLzI5MjFEMUQ0MEZEQTExRjFBRDBGODk4RjA0M0Q4QzY3L0xUaGFtbVZOdnlm eUV1VXlrekcwQWRBbEtEby5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBfnEip9HoldpzE1uOESOmqblYEovn7edaC4yrmPRs1HVQ6Ec8O071iHHKTv0Xu bOsl8fT+G38nXHHSW08U7pZTvywrZP+i4cgI642BBDutaNcNNefGuoAXrDpJVm6B jiDhgCT7Z9VfAaqqqQS8SxNwYinvXlxF4Hkq8sR0J1FEDgGIMSAuBGkT2AsrsfN5 zOoLLANZd26N3IiMXg0RjWLu/+B6P3K2vkIGeMs+h+dP24uZ10UF/XSt6DjgHRfB N2gvacHPALcKhrrMkIm344VBIm+1r1qUxwiddKyCRsq1nUa310zeQem4aeElSOAN aapYDsbXDiz1lJwXfYHpKQe3 -----END CERTIFICATE-----Generated at Sun Mar 1 22:32:19 2026 by rpki-client