$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft File: 9gKmKT9-ZJIHfntNYBYwftEsHDE.mft (raw, json) Hash identifier: Zk0NXUrCJ/7aKcvWBGqJQ/+UVgulUq+XNQoZJJt8oBk= Subject key identifier: 32:8F:6F:60:3E:02:34:20:B7:9C:86:27:8B:A7:05:4E:B7:EA:42:6B Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 Certificate issuer: /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Certificate serial: 0289 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft Manifest number: 027B Signing time: Wed 25 Mar 2026 01:20:40 +0000 Manifest this update: Wed 25 Mar 2026 01:20:40 +0000 Manifest next update: Wed 01 Apr 2026 01:20:40 +0000 Files and hashes: 1: 9gKmKT9-ZJIHfntNYBYwftEsHDE.crl (hash: h9sLRmfLiGARPYc3DSeeqs0wdNVJDhtiRzyx5kqQHyk=) 2: 748DB0E603F711F18E6BFAB3133D8C67.roa (hash: 5yXcCvusSroRDCFFg1R3qeA96L5dbXS1rgIr2rg2kIE=) 3: 642AEE6EB3FF11F0A569692DC4F9AE02.roa (hash: UHPdn9BG8m1PhuGE+xBj8BNQRhz4kLJQXAW0qSBQ+5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 649 (0x289) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31 Validity Not Before: Mar 25 01:20:40 2026 GMT Not After : Apr 1 01:20:40 2026 GMT Subject: CN=69c33868-70a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d2:46:d2:07:a7:a1:44:e6:76:c4:88:61:21: f7:ab:9a:e3:6d:46:eb:c9:5e:e2:c5:1f:fe:14:c9: 10:eb:a0:6f:2f:0b:0a:2e:72:8c:fc:8a:2b:95:85: e6:14:f7:b2:ba:47:3e:3e:78:89:b9:ab:10:7e:bf: 68:22:be:d6:d4:dc:10:25:f1:b5:bd:57:0f:2e:08: 33:7d:16:1d:1d:9a:16:61:91:fe:56:61:3a:3d:5c: 5a:5c:a4:94:4b:45:15:f3:a3:45:9f:42:57:02:0f: c2:f0:6d:9d:a1:72:36:0b:eb:5d:3e:bf:22:07:c7: f1:c8:7d:ec:7c:94:62:0e:51:5b:b2:bc:85:f1:02: d5:0a:b9:ae:51:f7:0f:91:4d:a5:48:85:a3:71:6a: 9e:68:00:c6:1d:c3:30:cc:54:46:25:2e:89:95:23: 18:b0:ee:8d:54:24:4a:8b:61:b0:da:7b:32:2d:a4: f7:03:47:4b:5a:2b:c8:b8:c7:0e:6b:d6:14:82:05: cb:d5:2e:95:8c:6d:5a:64:88:05:89:8c:21:7c:94: 07:90:ca:99:8e:51:2e:01:c4:1b:32:38:87:b0:e9: 34:62:38:e8:6a:53:85:3e:3c:f1:cd:b8:7d:d8:d7: f3:be:56:ee:2b:9d:5f:47:e6:3a:26:f3:3f:6d:f5: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8F:6F:60:3E:02:34:20:B7:9C:86:27:8B:A7:05:4E:B7:EA:42:6B X509v3 Authority Key Identifier: keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:f4:ea:bd:af:cb:4c:c6:6f:50:55:f6:7b:54:00:bf:ad:26: 03:4d:e5:ce:ac:1b:e1:b3:fc:81:f8:3c:f9:fd:1d:a9:ce:00: 96:ba:b0:d7:6d:bf:a4:32:cf:83:ac:96:2c:ca:f6:8e:29:e7: b2:69:c6:97:09:7e:8b:fb:7d:cc:ff:6f:80:2e:67:96:10:c2: 89:ec:97:76:64:29:7b:f6:32:ba:79:78:39:84:df:d3:43:a5: 7d:80:73:e6:97:5b:c0:66:c4:dc:a1:64:47:c4:53:8e:40:6e: 46:43:f2:50:6b:ad:15:f5:a8:bb:1f:a9:e8:7e:91:f7:1a:27: a1:8b:2d:54:59:42:24:94:f5:73:90:6c:8e:94:46:d7:7f:80: 65:79:03:4b:96:0a:5c:3c:3f:cf:ab:c1:fb:e8:03:78:4b:67: 4a:2c:b4:7b:63:74:fe:35:89:de:7e:48:bb:74:d6:af:4b:b4: 30:80:01:e1:d3:28:a5:20:9c:be:25:4d:58:ca:2c:6b:7d:76: 23:e1:06:5a:4e:33:1e:1b:42:30:74:c2:c0:05:c9:b1:d3:3c: a4:2e:15:95:6a:74:29:ab:32:d2:b9:5e:57:04:0c:36:45:7d: da:03:91:e4:36:b8:d9:4e:95:4a:e3:05:9d:ff:e2:37:6a:a8: 35:70:60:5d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAokwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU3NEYxMTAvBgNVBAUTKEY2MDJBNjI5M0Y3RTY0OTIwNzdFN0I0RDYwMTYzMDdF RDEyQzFDMzEwHhcNMjYwMzI1MDEyMDQwWhcNMjYwNDAxMDEyMDQwWjAYMRYwFAYD VQQDEw02OWMzMzg2OC03MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApdJG0genoUTmdsSIYSH3q5rjbUbryV7ixR/+FMkQ66BvLwsKLnKM/IorlYXm FPeyukc+PniJuasQfr9oIr7W1NwQJfG1vVcPLggzfRYdHZoWYZH+VmE6PVxaXKSU S0UV86NFn0JXAg/C8G2doXI2C+tdPr8iB8fxyH3sfJRiDlFbsryF8QLVCrmuUfcP kU2lSIWjcWqeaADGHcMwzFRGJS6JlSMYsO6NVCRKi2Gw2nsyLaT3A0dLWivIuMcO a9YUggXL1S6VjG1aZIgFiYwhfJQHkMqZjlEuAcQbMjiHsOk0YjjoalOFPjzxzbh9 2NfzvlbuK51fR+Y6JvM/bfW6QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDKPb2A+ AjQgt5yGJ4unBU636kJrMB8GA1UdIwQYMBaAFPYCpik/fmSSB357TWAWMH7RLBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTc0Ri8xRTE1NzAzODYz OEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpKSUhmbnROWUJZd2Z0RXNI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlnS21LVDktWkpJSGZudE5ZQll3ZnRFc0hERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTc0Ri8xRTE1NzAzODYzOEIxMUVEQjEwM0MwMkNDNEY5QUUwMi85Z0ttS1Q5LVpK SUhmbnROWUJZd2Z0RXNIREUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQvTqva/LTMZvUFX2e1QAv60mA03lzqwb4bP8gfg8+f0dqc4Alrqw122/pDLP g6yWLMr2jinnsmnGlwl+i/t9zP9vgC5nlhDCieyXdmQpe/Yyunl4OYTf00OlfYBz 5pdbwGbE3KFkR8RTjkBuRkPyUGutFfWoux+p6H6R9xonoYstVFlCJJT1c5BsjpRG 13+AZXkDS5YKXDw/z6vB++gDeEtnSiy0e2N0/jWJ3n5Iu3TWr0u0MIAB4dMopSCc viVNWMosa312I+EGWk4zHhtCMHTCwAXJsdM8pC4VlWp0Kasy0rleVwQMNkV92gOR 5Da42U6VSuMFnf/iN2qoNXBgXQ== -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:30 2026 by rpki-client