$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft File: 9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json) Hash identifier: OL6BGft55/3aMn0zEHaI0O5JyLkpfxzPfX+rYTrXUQY= Subject key identifier: AD:20:9C:C9:5F:D0:6B:DE:6D:C8:18:00:D0:93:66:A7:B7:38:72:18 Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 Certificate issuer: /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft Manifest number: 0A0F Signing time: Tue 24 Mar 2026 20:58:58 +0000 Manifest this update: Tue 24 Mar 2026 20:58:57 +0000 Manifest next update: Tue 31 Mar 2026 20:58:57 +0000 Files and hashes: 1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: xX3KdfuxoHW7U6DUtD7OMpLeBmJksqsdKUNFRBsS8HA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42 Validity Not Before: Mar 24 20:58:57 2026 GMT Not After : Mar 31 20:58:57 2026 GMT Subject: CN=69c2fb12-b2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:be:a0:b3:4e:74:19:67:d7:79:9c:f6:52: a6:61:01:5d:7c:62:f4:eb:33:df:19:38:8a:0d:75: fb:dc:bf:13:59:35:21:61:37:7a:fa:57:06:b3:72: a6:ae:cf:26:d5:67:2d:f4:ed:03:a8:13:28:53:9e: 1e:4d:e0:ae:a2:27:2b:8c:c9:58:2b:b0:a0:c4:10: 65:f3:41:bb:8f:ce:56:5f:b7:be:59:20:ff:2b:16: fc:4c:11:d1:67:2f:61:d1:ea:d2:87:e3:6d:f5:94: b2:97:35:4d:2b:aa:fa:ef:27:fd:5c:99:4b:4c:ab: ea:b3:7b:a8:8c:58:f7:d7:98:b0:a4:fd:14:b2:2b: f4:b8:39:5a:21:b0:1c:28:38:4d:0f:72:e4:98:2d: ee:ff:44:c9:b1:34:68:a0:ae:e2:73:b1:d7:fa:43: 32:39:e4:4c:8f:3e:c9:ab:90:a5:3d:6e:6c:a3:06: fb:8c:40:27:01:e7:5e:ee:36:dd:e6:ec:0c:79:33: 8c:a1:fc:e8:2b:92:da:0d:84:7e:bf:f0:d6:33:bb: 17:0d:8d:a9:9c:d4:f1:18:b5:8d:39:bb:e6:1f:7c: 97:cf:3b:b8:10:b5:84:32:ef:b3:a2:31:91:21:15: 27:cb:a1:44:7a:6a:bc:a0:ef:6e:f9:af:c4:2f:73: 7f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:20:9C:C9:5F:D0:6B:DE:6D:C8:18:00:D0:93:66:A7:B7:38:72:18 X509v3 Authority Key Identifier: keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b7:cb:d5:9e:93:ec:fb:0d:49:eb:f5:0a:ad:05:47:8f:24: 0e:00:e5:aa:11:d2:d3:cf:e9:8e:5b:95:9d:d5:db:5e:96:8a: af:3b:18:19:bb:a4:60:53:7a:51:1e:45:16:c0:ef:76:62:e5: 43:12:11:2c:46:a7:a4:40:6b:60:40:ef:9e:eb:1c:30:6b:76: 62:e2:75:e5:86:04:e1:0e:d9:9e:c3:f1:bf:28:67:94:3e:75: 22:bc:cd:30:0a:64:2f:ec:b4:8d:89:ed:b8:07:13:59:86:e6: 84:60:32:ab:0b:dd:5e:89:dd:ee:4b:43:33:08:d1:38:0d:54: eb:94:90:91:9a:61:50:4b:2b:91:33:d1:83:0f:12:f1:04:bc: 8b:41:05:1f:78:d6:13:f1:f7:28:f9:b6:13:ff:5c:18:96:86: 56:cd:9a:de:d8:22:e7:49:4a:83:a0:03:34:79:fa:a4:1b:e5: 51:ba:70:69:49:80:96:9f:28:9d:3d:52:e4:15:cd:54:b7:9c: 87:ea:73:92:1f:23:b3:6c:49:95:c0:21:c8:d5:c6:96:e2:ee: 9f:36:e9:4f:a1:49:50:99:fd:af:fa:de:67:7d:3b:f3:7f:d5: 62:af:d2:2c:c4:b3:a3:2f:41:d5:f0:14:fd:5e:20:0d:88:15: d8:58:8b:48 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2 N0U2QTBGNDIwHhcNMjYwMzI0MjA1ODU3WhcNMjYwMzMxMjA1ODU3WjAYMRYwFAYD VQQDEw02OWMyZmIxMi1iMmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm5S+oLNOdBln13mc9lKmYQFdfGL06zPfGTiKDXX73L8TWTUhYTd6+lcGs3Km rs8m1Wct9O0DqBMoU54eTeCuoicrjMlYK7CgxBBl80G7j85WX7e+WSD/Kxb8TBHR Zy9h0erSh+Nt9ZSylzVNK6r67yf9XJlLTKvqs3uojFj315iwpP0Usiv0uDlaIbAc KDhND3LkmC3u/0TJsTRooK7ic7HX+kMyOeRMjz7Jq5ClPW5sowb7jEAnAede7jbd 5uwMeTOMofzoK5LaDYR+v/DWM7sXDY2pnNTxGLWNObvmH3yXzzu4ELWEMu+zojGR IRUny6FEemq8oO9u+a/EL3N/FwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFK0gnMlf 0GvebcgYANCTZqe3OHIYMB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1 NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo dzdOME5JdU5GZU5uNXFEMEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO7fL1Z6T7PsNSev1Cq0FR48kDgDlqhHS08/pjluVndXbXpaKrzsYGbukYFN6 UR5FFsDvdmLlQxIRLEanpEBrYEDvnuscMGt2YuJ15YYE4Q7ZnsPxvyhnlD51IrzN MApkL+y0jYntuAcTWYbmhGAyqwvdXond7ktDMwjROA1U65SQkZphUEsrkTPRgw8S 8QS8i0EFH3jWE/H3KPm2E/9cGJaGVs2a3tgi50lKg6ADNHn6pBvlUbpwaUmAlp8o nT1S5BXNVLech+pzkh8js2xJlcAhyNXGluLunzbpT6FJUJn9r/reZ30783/VYq/S LMSzoy9B1fAU/V4gDYgV2FiLSA== -----END CERTIFICATE-----Generated at Thu Mar 26 22:08:08 2026 by rpki-client