$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft File: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft (raw, json) Hash identifier: rYBtcT/cojej04e1dyqVAsOWMIcoHAr//g0QzhqEFiE= Subject key identifier: 15:ED:B3:5E:1F:7A:AF:10:16:95:30:22:E3:D1:9D:85:B2:5A:7D:EB Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 Certificate issuer: /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft Manifest number: 2B Signing time: Wed 25 Mar 2026 07:57:37 +0000 Manifest this update: Wed 25 Mar 2026 07:57:36 +0000 Manifest next update: Wed 01 Apr 2026 07:57:36 +0000 Files and hashes: 1: 1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl (hash: W69TuUY+QjElhWawtY9tpVXgM8/ILTA9MoxK2Aap6iQ=) 2: 2235EF78F12011F0BFBF3F154E6F56BC.roa (hash: PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=) 3: F5568448F11C11F0AC52AD484D6F56BC.roa (hash: FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9 Validity Not Before: Mar 25 07:57:36 2026 GMT Not After : Apr 1 07:57:36 2026 GMT Subject: CN=69c39571-d1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:d4:7e:9f:7f:c1:dc:71:f2:6d:2c:99:47: 2b:a7:2d:e2:2d:ee:26:39:4d:63:30:84:ed:0e:4b: 1f:1a:3d:d0:5e:33:70:ad:73:4b:03:f6:56:16:0b: 7e:0d:52:de:db:ee:0d:f9:f4:6c:99:08:73:96:db: e2:50:73:b1:f5:7e:fa:d7:1b:1b:e4:e6:7a:98:fb: f1:79:48:94:bd:84:9d:57:05:fa:ce:2a:57:54:24: 9e:8e:a5:00:bf:3e:a4:0b:0e:4e:c2:bc:41:ef:be: 17:a0:14:2d:b0:17:bc:bd:f2:50:61:20:2a:e3:f3: 9a:2a:cc:b2:a8:fa:80:6a:61:cf:f7:1a:4d:69:2b: bd:69:32:79:e4:80:1c:9b:96:71:b3:d2:96:85:65: ff:95:44:39:d1:1f:d8:9a:34:95:46:30:62:25:76: 27:1c:86:52:80:25:98:f1:8d:e3:2d:b5:46:a0:31: cf:63:32:93:71:a1:33:93:77:0d:e8:fd:aa:98:5e: 9a:c4:43:c6:5a:8d:34:e2:7b:c4:e2:2e:d9:9d:82: ca:2c:ad:8f:01:98:6f:d5:d6:82:87:26:cf:cb:ed: ed:90:37:e0:c0:82:55:6a:63:cf:d9:ce:e0:0d:33: 2d:13:27:fc:dd:8a:3b:87:c9:fb:d0:94:49:be:16: c5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:ED:B3:5E:1F:7A:AF:10:16:95:30:22:E3:D1:9D:85:B2:5A:7D:EB X509v3 Authority Key Identifier: keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ef:2a:07:7e:93:ca:21:8f:92:e2:5f:bc:d2:33:f0:ac:cb: 80:bc:08:b4:72:2b:b4:76:3e:b6:cd:97:b7:c4:7e:ab:ae:e8: f4:11:19:f6:02:91:46:23:84:63:93:03:2d:a7:c3:a2:a9:e1: cd:b8:6e:92:e3:38:64:b3:54:2e:2e:d6:cb:82:aa:7b:90:80: 60:c7:b9:b3:9b:38:5d:a6:1b:44:5d:47:d3:38:0b:48:42:dc: 64:86:78:38:07:b5:bd:e5:02:f0:92:bb:63:ea:ac:b9:1b:b5: 52:6e:7f:72:25:9e:c9:52:f3:b1:27:4f:3a:fa:ba:17:58:f8: 48:6e:01:74:99:ae:f4:d4:72:bd:de:2a:c7:b4:43:22:81:5c: b4:98:3f:bd:98:fe:aa:ca:2f:bb:35:29:5a:7a:3a:25:b8:66: e0:28:16:5c:bc:64:b6:ff:16:16:d5:21:8c:b1:98:61:38:51: b9:b6:10:5b:2b:8e:ca:5b:8d:d9:7f:e8:af:1e:17:1e:ed:f4: ba:e0:37:47:2e:b6:84:9e:6e:ca:e1:7a:75:c8:e9:93:ba:17: 1a:51:61:cc:dd:59:0f:1b:12:e7:2c:4e:3f:ed:ad:ee:ef:cf: 36:5e:1a:a3:aa:46:b3:28:e0:27:0d:aa:86:9c:57:32:27:04: 2f:c2:71:43 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NkIwQzExMC8GA1UEBRMoRDVCMTY3Njg5MTRBODBDOTMxMjQ2Mjk2MTBDQzQwNTAy QUFFRDBFOTAeFw0yNjAzMjUwNzU3MzZaFw0yNjA0MDEwNzU3MzZaMBgxFjAUBgNV BAMTDTY5YzM5NTcxLWQxYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzK9R+n3/B3HHybSyZRyunLeIt7iY5TWMwhO0OSx8aPdBeM3Ctc0sD9lYWC34N Ut7b7g359GyZCHOW2+JQc7H1fvrXGxvk5nqY+/F5SJS9hJ1XBfrOKldUJJ6OpQC/ PqQLDk7CvEHvvhegFC2wF7y98lBhICrj85oqzLKo+oBqYc/3Gk1pK71pMnnkgByb lnGz0paFZf+VRDnRH9iaNJVGMGIldicchlKAJZjxjeMttUagMc9jMpNxoTOTdw3o /aqYXprEQ8ZajTTie8TiLtmdgsosrY8BmG/V1oKHJs/L7e2QN+DAglVqY8/ZzuAN My0TJ/zdijuHyfvQlEm+FsU5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUFe2zXh96 rxAWlTAi49GdhbJafeswHwYDVR0jBBgwFoAU1bFnaJFKgMkxJGKWEMxAUCqu0Okw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2QjBDL0I2MTM4NkU2RjEx QzExRjBBMzhGMjg0NzRENkY1NkJDLzFiRm5hSkZLZ01reEpHS1dFTXhBVUNxdTBP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMWJGbmFKRktnTWt4SkdLV0VNeEFVQ3F1ME9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2 QjBDL0I2MTM4NkU2RjExQzExRjBBMzhGMjg0NzRENkY1NkJDLzFiRm5hSkZLZ01r eEpHS1dFTXhBVUNxdTBPay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCp7yoHfpPKIY+S4l+80jPwrMuAvAi0ciu0dj62zZe3xH6rruj0ERn2ApFGI4Rj kwMtp8OiqeHNuG6S4zhks1QuLtbLgqp7kIBgx7mzmzhdphtEXUfTOAtIQtxkhng4 B7W95QLwkrtj6qy5G7VSbn9yJZ7JUvOxJ086+roXWPhIbgF0ma701HK93irHtEMi gVy0mD+9mP6qyi+7NSlaejoluGbgKBZcvGS2/xYW1SGMsZhhOFG5thBbK47KW43Z f+ivHhce7fS64DdHLraEnm7K4Xp1yOmTuhcaUWHM3VkPGxLnLE4/7a3u7882Xhqj qkazKOAnDaqGnFcyJwQvwnFD -----END CERTIFICATE-----Generated at Thu Mar 26 23:44:38 2026 by rpki-client