$ rpki-client -vvf rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft File: ao09a_bbD13jJOQgxXOwqRhDx5Q.mft (raw, json) Hash identifier: hX2kNyYHjiROz/nDXUt3gElysKIrn9iPFtELgpe/5wc= Subject key identifier: 9A:35:C0:F3:D4:A4:6A:DB:BD:9F:D5:89:97:7A:E2:06:A6:E5:56:A4 Authority key identifier: 6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 Certificate issuer: /CN=A911A108/serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft Manifest number: 01CD Signing time: Wed 25 Mar 2026 03:00:16 +0000 Manifest this update: Wed 25 Mar 2026 03:00:15 +0000 Manifest next update: Wed 01 Apr 2026 03:00:15 +0000 Files and hashes: 1: ao09a_bbD13jJOQgxXOwqRhDx5Q.crl (hash: /UQfqK5/kgP3ppoDA1YHymuHn6tmILhK/M9FBNW/uh8=) 2: 2152B7B06C0411EEBC1AA814C4F9AE02.roa (hash: hDaWJ1MPMK/kTcYrElHYKR5D6BKNhIGyYI8+GpXOoQk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A108, serialNumber=6A8D3D6BF6DB0F5DE324E420C573B0A91843C794 Validity Not Before: Mar 25 03:00:15 2026 GMT Not After : Apr 1 03:00:15 2026 GMT Subject: CN=69c34fc0-59b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:c5:87:4e:78:6c:df:bd:80:4a:ec:ba:aa: 8a:37:30:dc:82:3c:55:48:e4:30:78:4e:04:1f:7f: 90:33:75:22:1a:67:c9:bc:05:71:06:ff:31:21:b9: f1:26:40:ef:82:61:23:7b:d6:c2:54:25:1f:f1:d3: f0:6c:16:6d:19:7e:59:08:d2:64:57:b6:d4:65:c5: 38:59:63:58:34:79:bf:aa:1e:74:46:19:98:77:9e: dc:ec:d6:44:b3:2c:50:0b:48:f7:54:8d:44:bd:f8: a5:4c:30:2a:2a:78:10:1d:c1:29:07:fc:b2:79:c2: 0f:46:05:d3:a6:81:9b:da:f4:91:f8:05:2c:26:16: f0:32:7d:ca:90:04:46:b3:37:b6:2d:36:18:73:cf: 1c:ce:73:74:17:62:65:ea:76:15:36:52:ba:0b:3b: 60:e8:f1:d6:3e:8a:9a:a6:65:1f:39:5b:8a:75:6d: ec:64:65:52:2f:a2:58:2c:77:a9:99:c1:f6:6d:3b: 9a:fc:a8:fc:e3:88:1e:0d:1a:e5:cf:1c:ef:70:00: 49:63:ba:db:f8:65:58:1a:4d:66:10:95:2b:dc:64: d6:fa:41:55:27:b8:0f:16:d3:23:b4:09:de:d2:ec: d7:68:02:49:48:cb:f9:bd:f8:38:ff:17:dc:0c:e6: 15:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:35:C0:F3:D4:A4:6A:DB:BD:9F:D5:89:97:7A:E2:06:A6:E5:56:A4 X509v3 Authority Key Identifier: keyid:6A:8D:3D:6B:F6:DB:0F:5D:E3:24:E4:20:C5:73:B0:A9:18:43:C7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ao09a_bbD13jJOQgxXOwqRhDx5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A108/F958FC4A6C0011EEB98B430EC4F9AE02/ao09a_bbD13jJOQgxXOwqRhDx5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:1a:3e:9b:92:7e:b3:d7:84:eb:b3:49:5c:eb:32:6e:83:59: ab:b8:1b:3c:0e:5a:9d:55:ec:b0:c0:db:6b:d3:55:f1:5a:6d: d5:eb:c1:b1:74:a3:89:bc:c3:4c:85:cf:1d:2b:14:e2:a5:3c: 80:86:0d:e8:c3:18:2d:16:bc:09:95:9c:f5:df:97:96:f6:c9: 96:c1:ca:89:4c:3a:fe:90:3b:0d:06:f7:da:06:c4:5f:79:16: 84:6c:10:af:25:41:1e:51:bd:97:26:d9:dc:9a:d8:5f:f5:f3: b6:06:45:2d:b6:fb:49:59:04:c0:30:9e:c3:8f:9d:0e:90:29: 02:96:0d:6c:54:57:e0:38:2d:6e:87:68:90:0b:3f:5c:be:cb: 1f:db:4d:91:35:13:68:3c:63:ec:b2:a3:ee:e3:8f:0f:0f:8e: ca:5d:77:25:55:6f:2a:6d:cb:2b:f4:de:58:70:9d:ff:47:65: 7c:e7:5c:37:7a:ab:55:bd:d2:3c:ac:38:a2:ff:bb:3d:11:61: 45:85:7d:12:e8:79:63:89:b0:c9:60:bf:d1:2d:03:bd:a9:66: b2:9c:f6:f7:97:8c:19:e1:56:36:9d:b8:80:91:31:d1:44:cc: 25:b5:08:67:a9:bd:92:9c:c6:05:e3:08:3c:fc:fb:6a:dc:3a: 37:98:32:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUExMDgxMTAvBgNVBAUTKDZBOEQzRDZCRjZEQjBGNURFMzI0RTQyMEM1NzNCMEE5 MTg0M0M3OTQwHhcNMjYwMzI1MDMwMDE1WhcNMjYwNDAxMDMwMDE1WjAYMRYwFAYD VQQDEw02OWMzNGZjMC01OWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbHFh054bN+9gErsuqqKNzDcgjxVSOQweE4EH3+QM3UiGmfJvAVxBv8xIbnx JkDvgmEje9bCVCUf8dPwbBZtGX5ZCNJkV7bUZcU4WWNYNHm/qh50RhmYd57c7NZE syxQC0j3VI1EvfilTDAqKngQHcEpB/yyecIPRgXTpoGb2vSR+AUsJhbwMn3KkARG sze2LTYYc88cznN0F2Jl6nYVNlK6Cztg6PHWPoqapmUfOVuKdW3sZGVSL6JYLHep mcH2bTua/Kj844geDRrlzxzvcABJY7rb+GVYGk1mEJUr3GTW+kFVJ7gPFtMjtAne 0uzXaAJJSMv5vfg4/xfcDOYV0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJo1wPPU pGrbvZ/ViZd64gam5VakMB8GA1UdIwQYMBaAFGqNPWv22w9d4yTkIMVzsKkYQ8eU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTEwOC9GOTU4RkM0QTZD MDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQxM2pKT1FneFhPd3FSaER4 NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FvMDlhX2JiRDEzakpPUWd4WE93cVJoRHg1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTEwOC9GOTU4RkM0QTZDMDAxMUVFQjk4QjQzMEVDNEY5QUUwMi9hbzA5YV9iYkQx M2pKT1FneFhPd3FSaER4NVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcxo+m5J+s9eE67NJXOsyboNZq7gbPA5anVXssMDba9NV8Vpt1evBsXSjibzD TIXPHSsU4qU8gIYN6MMYLRa8CZWc9d+XlvbJlsHKiUw6/pA7DQb32gbEX3kWhGwQ ryVBHlG9lybZ3JrYX/XztgZFLbb7SVkEwDCew4+dDpApApYNbFRX4DgtbodokAs/ XL7LH9tNkTUTaDxj7LKj7uOPDw+Oyl13JVVvKm3LK/TeWHCd/0dlfOdcN3qrVb3S PKw4ov+7PRFhRYV9Euh5Y4mwyWC/0S0Dvalmspz295eMGeFWNp24gJEx0UTMJbUI Z6m9kpzGBeMIPPz7atw6N5gyVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:25:06 2026 by rpki-client