$ rpki-client -vvf rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft File: P9UxYCV9sBsu4O8BPB4tQusaKI0.mft (raw, json) Hash identifier: eXKLKoVP/3fnCX+BfBjZQQq8W3ya4ACNa2j6HLvCGWU= Subject key identifier: CA:48:1F:8B:35:DF:00:33:B4:DB:37:F3:D3:6C:B1:F5:D2:50:73:10 Authority key identifier: 3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D Certificate issuer: /CN=A911D51C/serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Certificate serial: 0592 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft Manifest number: 058B Signing time: Tue 24 Mar 2026 22:55:56 +0000 Manifest this update: Tue 24 Mar 2026 22:55:55 +0000 Manifest next update: Tue 31 Mar 2026 22:55:55 +0000 Files and hashes: 1: P9UxYCV9sBsu4O8BPB4tQusaKI0.crl (hash: liBeIJyogNm5CNCuElqie3cKa6wtEE8uz+s+7ZaaoKw=) 2: A7493DA6145611ECAA3B5769C4F9AE02.roa (hash: 9No5R6QsEqMvq6ApWij+X8OuZMaVXyEFFrhes/cBm9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1426 (0x592) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D51C, serialNumber=3FD53160257DB01B2EE0EF013C1E2D42EB1A288D Validity Not Before: Mar 24 22:55:55 2026 GMT Not After : Mar 31 22:55:55 2026 GMT Subject: CN=69c3167c-2eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:49:74:44:cb:65:30:b6:9b:6f:f4:6f:67: 0c:c8:97:a9:9b:16:d9:55:4b:83:89:7c:ae:e4:bb: 40:34:99:c7:74:2c:6c:bc:d8:21:eb:ea:9e:73:ab: 98:e5:9f:3d:43:04:9b:29:ac:76:89:fa:dd:d8:48: 89:c0:62:43:a6:2e:ea:4b:d3:ea:c9:b9:1f:3e:e8: fc:6f:f9:c1:28:33:fb:b0:3a:d6:7b:63:9f:99:86: d7:16:88:b1:71:24:54:54:12:3a:cf:a4:b0:d0:cf: 28:05:de:0a:4f:ee:11:2e:a6:63:1e:64:fe:c4:ea: 63:88:7f:bb:33:8c:fb:3a:ce:71:11:0a:20:46:35: af:7b:04:71:af:9a:16:48:76:e8:01:85:3e:5a:76: ef:5f:52:3b:5b:62:88:58:0b:91:e1:88:1c:cd:b2: 79:e5:d3:cf:1c:7b:3a:ac:7d:23:86:69:09:76:a2: f6:f1:62:3c:25:7e:1d:84:e9:74:8d:db:cf:fb:88: 32:24:8f:77:3b:79:1d:93:e0:b7:1f:b0:5d:07:6d: 67:1f:16:dd:6c:9e:3a:ae:3f:fb:23:cb:e7:1b:18: f7:85:1f:2c:6e:7d:87:7f:7b:8d:a3:bf:5a:1c:3d: 26:b8:42:ae:ef:9f:38:1b:a0:84:f9:61:78:2d:4f: b4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:48:1F:8B:35:DF:00:33:B4:DB:37:F3:D3:6C:B1:F5:D2:50:73:10 X509v3 Authority Key Identifier: keyid:3F:D5:31:60:25:7D:B0:1B:2E:E0:EF:01:3C:1E:2D:42:EB:1A:28:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9UxYCV9sBsu4O8BPB4tQusaKI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D51C/BD312716145411ECA4687268C4F9AE02/P9UxYCV9sBsu4O8BPB4tQusaKI0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bd:cd:28:92:dd:d6:59:40:df:10:56:c0:85:07:2d:f0:8b: d3:c3:43:ba:c8:4c:3e:86:37:4e:bc:f6:06:3f:c2:6c:0b:1c: 01:c6:22:20:c0:53:6f:fc:4a:d1:70:d8:d0:c3:64:77:f0:0a: 73:f6:0c:ab:8f:cf:c0:e2:8c:b0:05:a8:72:b3:8b:2f:f6:99: d6:4f:eb:03:c1:b6:b8:76:4e:f8:64:c9:8a:c4:58:23:84:9d: e5:13:45:43:e4:a9:c3:da:ce:03:51:3f:c3:fa:e4:ff:06:e3: c0:f1:c6:66:8a:c2:f7:3e:97:88:bc:04:9c:a6:17:f7:93:de: 7a:0e:f1:a5:e5:bd:5c:c9:a6:50:3f:29:4d:43:48:48:9b:c1: 08:a1:bc:62:cb:52:55:84:22:89:a5:3c:db:c3:3c:15:d9:c6: ed:d9:10:1b:09:2d:36:f1:91:84:a6:52:f5:18:3a:61:91:b8: ba:ea:00:f8:89:83:b5:80:49:30:8e:e6:53:ba:af:d2:93:19: 4f:e6:4e:20:be:c7:97:a7:b7:26:38:9f:fd:47:52:94:05:10: 8a:37:15:ff:68:8a:82:50:4d:ac:34:b1:9c:d2:d9:b7:08:4e: d3:ee:30:d8:50:60:dd:33:60:f9:63:9c:81:dd:0a:f1:29:e9: 8b:2b:26:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ1MUMxMTAvBgNVBAUTKDNGRDUzMTYwMjU3REIwMUIyRUUwRUYwMTNDMUUyRDQy RUIxQTI4OEQwHhcNMjYwMzI0MjI1NTU1WhcNMjYwMzMxMjI1NTU1WjAYMRYwFAYD VQQDEw02OWMzMTY3Yy0yZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtuJJdETLZTC2m2/0b2cMyJepmxbZVUuDiXyu5LtANJnHdCxsvNgh6+qec6uY 5Z89QwSbKax2ifrd2EiJwGJDpi7qS9PqybkfPuj8b/nBKDP7sDrWe2OfmYbXFoix cSRUVBI6z6Sw0M8oBd4KT+4RLqZjHmT+xOpjiH+7M4z7Os5xEQogRjWvewRxr5oW SHboAYU+WnbvX1I7W2KIWAuR4YgczbJ55dPPHHs6rH0jhmkJdqL28WI8JX4dhOl0 jdvP+4gyJI93O3kdk+C3H7BdB21nHxbdbJ46rj/7I8vnGxj3hR8sbn2Hf3uNo79a HD0muEKu7584G6CE+WF4LU+0TQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMpIH4s1 3wAztNs389NssfXSUHMQMB8GA1UdIwQYMBaAFD/VMWAlfbAbLuDvATweLULrGiiN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDUxQy9CRDMxMjcxNjE0 NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNCc3U0TzhCUEI0dFF1c2FL STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5VXhZQ1Y5c0JzdTRPOEJQQjR0UXVzYUtJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDUxQy9CRDMxMjcxNjE0NTQxMUVDQTQ2ODcyNjhDNEY5QUUwMi9QOVV4WUNWOXNC c3U0TzhCUEI0dFF1c2FLSTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAP73NKJLd1llA3xBWwIUHLfCL08NDushMPoY3Trz2Bj/CbAscAcYiIMBTb/xK 0XDY0MNkd/AKc/YMq4/PwOKMsAWocrOLL/aZ1k/rA8G2uHZO+GTJisRYI4Sd5RNF Q+Spw9rOA1E/w/rk/wbjwPHGZorC9z6XiLwEnKYX95Peeg7xpeW9XMmmUD8pTUNI SJvBCKG8YstSVYQiiaU828M8FdnG7dkQGwktNvGRhKZS9Rg6YZG4uuoA+ImDtYBJ MI7mU7qv0pMZT+ZOIL7Hl6e3Jjif/UdSlAUQijcV/2iKglBNrDSxnNLZtwhO0+4w 2FBg3TNg+WOcgd0K8Snpiysm5Q== -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:33 2026 by rpki-client