$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft File: U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json) Hash identifier: IPv9Ozo3wpiSSi0FTMQQXvv2ZZUH9olmxhIrRy9vYCs= Subject key identifier: 03:B1:94:FC:10:C1:A4:21:96:78:28:A7:7D:BA:A9:A7:42:E3:A0:DD Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E Certificate issuer: /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft Manifest number: 55 Signing time: Wed 25 Mar 2026 04:04:14 +0000 Manifest this update: Wed 25 Mar 2026 04:04:14 +0000 Manifest next update: Wed 01 Apr 2026 04:04:14 +0000 Files and hashes: 1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: 2CUBksvyA28KvU828XJPSaM2NisQFwlf1iSDSt9WK/g=) 2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: 9GlbWuuC2bE+UdBoyFcAWB1MfE//yKAukP+jTpIhxrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E Validity Not Before: Mar 25 04:04:14 2026 GMT Not After : Apr 1 04:04:14 2026 GMT Subject: CN=69c35ebe-46ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:0f:e7:1b:8a:f8:02:a4:43:da:69:aa:70: 7c:72:1a:20:8f:e6:6d:45:ac:85:5f:67:40:40:b5: e0:53:69:c7:be:8d:81:5c:ad:7c:7f:98:17:65:e1: 67:85:cc:bc:5c:56:f0:c7:82:31:f7:a4:13:06:6e: 9c:3b:01:02:95:0b:40:94:66:31:42:fc:51:d6:98: 79:92:d7:b9:c5:60:bd:0e:df:10:61:8a:d2:f4:4d: 95:52:17:5a:70:60:03:6f:7c:49:15:cb:2c:ad:24: 5b:9e:86:1a:0c:f4:d5:92:ba:a9:ce:a9:bb:d3:eb: 61:d0:ed:c7:31:bb:40:b8:4e:5b:15:96:f5:1a:a3: c0:37:03:12:ad:0f:4c:61:d9:a6:73:01:02:17:c2: 05:51:ba:13:5b:b7:e1:61:7a:11:e5:69:5e:4c:e3: a6:7d:d2:3c:1d:43:6a:2f:24:7e:f2:ff:6d:fa:fc: b0:70:5d:cd:7c:e1:40:8e:c6:22:fa:51:63:e3:ab: 7d:8b:ec:60:4f:91:2a:5b:cf:b8:a5:11:38:ad:01: f0:98:41:de:3e:de:fd:a0:6a:fb:c1:05:3b:56:3d: 70:aa:eb:a1:c0:fe:d6:06:93:f5:ec:26:8f:e8:70: fc:29:f6:37:e3:65:31:8a:27:85:03:59:4a:5e:c9: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B1:94:FC:10:C1:A4:21:96:78:28:A7:7D:BA:A9:A7:42:E3:A0:DD X509v3 Authority Key Identifier: keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:65:26:98:6d:5c:f7:38:f6:6e:53:42:fb:fe:ea:c8:c9:db: 87:7f:34:f2:84:40:bd:59:dc:1b:df:b2:5e:48:26:30:40:a0: c8:27:8b:7b:87:d9:1a:03:44:10:6f:9f:4d:10:4b:ff:ed:dc: 9c:0a:89:bf:10:93:d6:64:5d:55:5d:e2:86:d3:ee:9b:d4:05: db:61:c3:06:7f:e2:c2:de:fe:79:92:87:f1:52:f1:34:2a:d6: 87:89:3a:f4:7c:9e:08:cd:2e:8a:56:e1:7a:d9:f0:bb:7f:4b: 9d:c5:34:cb:23:c3:2e:23:8d:b2:1d:a2:a8:90:84:87:be:69: 2f:f5:7a:a5:88:5c:cc:89:17:cc:a9:b3:75:bc:69:94:f7:02: 09:e8:fa:5f:27:0d:64:52:a5:cb:63:a9:e7:b2:89:aa:e3:95: 4b:0c:23:44:19:12:98:6c:e3:50:e4:88:5d:68:9d:3e:91:62: af:dd:3f:b4:8c:97:ca:22:6d:2b:8e:37:a2:c3:98:7c:5a:c8: c8:d2:6c:19:a3:27:cf:99:3f:a3:0e:f4:98:26:21:23:50:d0: 64:de:60:67:d2:47:33:d6:5d:39:ed:7e:9e:2c:5c:a4:c2:eb: fe:b2:d9:6e:5a:5a:09:1a:e4:d9:4f:92:26:a3:cb:42:c2:f1: 79:52:74:e1 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MTYyMzExMC8GA1UEBRMoNTM0OTJCOTlENkQwN0Q5NDlGNjkwQTkzNjk1QjE0OTI4 MjE2OUEyRTAeFw0yNjAzMjUwNDA0MTRaFw0yNjA0MDEwNDA0MTRaMBgxFjAUBgNV BAMTDTY5YzM1ZWJlLTQ2Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/ZA/nG4r4AqRD2mmqcHxyGiCP5m1FrIVfZ0BAteBTace+jYFcrXx/mBdl4WeF zLxcVvDHgjH3pBMGbpw7AQKVC0CUZjFC/FHWmHmS17nFYL0O3xBhitL0TZVSF1pw YANvfEkVyyytJFuehhoM9NWSuqnOqbvT62HQ7ccxu0C4TlsVlvUao8A3AxKtD0xh 2aZzAQIXwgVRuhNbt+FhehHlaV5M46Z90jwdQ2ovJH7y/236/LBwXc184UCOxiL6 UWPjq32L7GBPkSpbz7ilETitAfCYQd4+3v2gavvBBTtWPXCq66HA/tYGk/XsJo/o cPwp9jfjZTGKJ4UDWUpeyTLHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUA7GU/BDB pCGWeCinfbqpp0LjoN0wHwYDVR0jBBgwFoAUU0krmdbQfZSfaQqTaVsUkoIWmi4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExNjIzLzkwNzAwMEY2QUIy NDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpTZmFRcVRhVnNVa29JV21p NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVTBrcm1kYlFmWlNmYVFxVGFWc1Vrb0lXbWk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEx NjIzLzkwNzAwMEY2QUIyNDExRjBBRkNFNUQyRkM0RjlBRTAyL1Uwa3JtZGJRZlpT ZmFRcVRhVnNVa29JV21pNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAuZSaYbVz3OPZuU0L7/urIyduHfzTyhEC9Wdwb37JeSCYwQKDIJ4t7h9kaA0QQ b59NEEv/7dycCom/EJPWZF1VXeKG0+6b1AXbYcMGf+LC3v55kofxUvE0KtaHiTr0 fJ4IzS6KVuF62fC7f0udxTTLI8MuI42yHaKokISHvmkv9XqliFzMiRfMqbN1vGmU 9wIJ6PpfJw1kUqXLY6nnsomq45VLDCNEGRKYbONQ5IhdaJ0+kWKv3T+0jJfKIm0r jjeiw5h8WsjI0mwZoyfPmT+jDvSYJiEjUNBk3mBn0kcz1l057X6eLFykwuv+stlu WloJGuTZT5Imo8tCwvF5UnTh -----END CERTIFICATE-----Generated at Thu Mar 26 11:23:54 2026 by rpki-client