$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft File: a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json) Hash identifier: eojzCyiQJ6IbkL+n8zEHWnncW/3phkKTSap55NhC/Kg= Subject key identifier: 8E:9F:96:2C:C4:7D:E0:B3:DB:34:56:37:62:4B:59:CC:91:FD:6D:A3 Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 Certificate issuer: /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft Manifest number: 01D5 Signing time: Fri 27 Mar 2026 03:04:04 +0000 Manifest this update: Fri 27 Mar 2026 03:04:03 +0000 Manifest next update: Fri 03 Apr 2026 03:04:03 +0000 Files and hashes: 1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: 26J0BJ/iNOrBJyu8NVNGVmEHifbf+YH+ZAHYmaVoH58=) 2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: qK+khHCIuI//dPRwyz9oPvFPdzHoY4nUbkit8bRPNhA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5 Validity Not Before: Mar 27 03:04:03 2026 GMT Not After : Apr 3 03:04:03 2026 GMT Subject: CN=69c5f3a4-8045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:51:7a:31:a5:44:20:1f:32:53:da:f9:b5: a1:75:99:54:66:61:37:f0:61:30:7c:6d:10:9f:89: 90:60:36:c3:f8:ed:65:5b:06:51:e2:35:e6:3c:7b: 4d:ba:f1:eb:a6:36:b2:5c:85:fe:72:24:51:b4:67: d3:5b:a4:5d:3f:6a:60:17:27:0d:c0:c2:4f:7b:48: 50:f6:52:1e:90:7a:8f:e1:72:6f:64:41:e4:32:f7: 19:c7:d1:d8:93:47:86:f1:e8:fd:d9:d3:46:a4:5b: e4:8a:48:b6:4b:b0:1a:8f:ee:ee:b7:48:ed:bc:39: dd:4e:15:03:6d:30:83:37:b1:3b:8b:b4:15:0b:aa: c6:ea:fb:f4:d1:9d:9c:43:b8:a4:65:fc:47:08:c4: 82:11:23:06:ba:29:67:36:4a:44:56:11:b2:3a:e4: 95:04:0d:16:aa:44:79:e1:08:92:63:e3:20:46:49: 30:92:14:25:ee:3b:cf:a7:27:02:b3:a6:3a:90:7f: 19:ca:a5:b2:1c:9d:0d:64:05:6a:86:0c:2f:0e:a8: 2b:83:a5:84:c9:9b:0b:ee:20:f3:e3:c4:10:c8:27: 89:56:90:09:7a:3f:bf:91:dc:39:48:53:e8:40:5b: a8:48:58:42:64:de:8c:8b:a1:df:7c:87:ed:92:ba: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9F:96:2C:C4:7D:E0:B3:DB:34:56:37:62:4B:59:CC:91:FD:6D:A3 X509v3 Authority Key Identifier: keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a7:ab:3e:5c:6d:ca:8d:f9:6e:73:e7:df:45:c4:ac:a9:a0: bb:2b:d6:21:77:c3:44:44:8c:3f:cd:15:1f:7c:70:1b:d3:a5: c6:6f:64:cb:ee:9e:90:24:ba:75:7e:ff:71:b3:96:ad:05:8f: a7:a3:99:a1:3f:ac:97:e6:a9:64:0e:6f:7d:c1:4a:4f:d2:08: 4a:7a:8b:9e:4d:5b:95:2f:cb:e8:7e:7c:77:e2:dc:c4:17:12: 0a:de:6f:40:65:af:1b:90:db:46:bc:6f:de:ec:6e:77:a4:be: 4e:33:27:27:67:ec:06:d0:2f:5e:49:1c:ac:8b:b0:d2:f3:97: 58:ec:c7:2e:0e:7f:05:9a:02:92:aa:05:c0:d5:0c:7b:d0:06: 76:33:38:90:1d:ea:8a:f4:0a:0d:74:ab:aa:13:ac:eb:05:91: ab:cb:67:0d:9f:fe:c7:30:ae:f5:dc:95:e6:0a:14:97:db:f4: d6:23:1c:ff:86:a0:39:9f:8f:cb:f8:5c:d5:8c:a4:f6:11:9c: f3:43:67:4b:81:66:f6:c2:ef:0d:45:2c:76:f6:42:f4:5f:79: f9:81:6e:c8:5c:20:a4:63:59:33:d9:9e:2d:fc:f5:7d:f8:7c: 00:98:11:27:ad:bd:bb:16:b2:29:24:e5:34:78:63:a0:d0:b3: fc:84:e8:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQUExMTAvBgNVBAUTKDZCNTcwOTMyOTBEMTFGNjVDRkI5MUYxMjEyQzI4Q0Y3 MzNGOUMyQjUwHhcNMjYwMzI3MDMwNDAzWhcNMjYwNDAzMDMwNDAzWjAYMRYwFAYD VQQDEw02OWM1ZjNhNC04MDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQhRejGlRCAfMlPa+bWhdZlUZmE38GEwfG0Qn4mQYDbD+O1lWwZR4jXmPHtN uvHrpjayXIX+ciRRtGfTW6RdP2pgFycNwMJPe0hQ9lIekHqP4XJvZEHkMvcZx9HY k0eG8ej92dNGpFvkiki2S7Aaj+7ut0jtvDndThUDbTCDN7E7i7QVC6rG6vv00Z2c Q7ikZfxHCMSCESMGuilnNkpEVhGyOuSVBA0WqkR54QiSY+MgRkkwkhQl7jvPpycC s6Y6kH8ZyqWyHJ0NZAVqhgwvDqgrg6WEyZsL7iDz48QQyCeJVpAJej+/kdw5SFPo QFuoSFhCZN6Mi6HffIftkrowIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI6flizE feCz2zRWN2JLWcyR/W2jMB8GA1UdIwQYMBaAFGtXCTKQ0R9lz7kfEhLCjPcz+cK1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFBQS8wQ0E3N0M4MjVD NDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgyWFB1UjhTRXNLTTl6UDV3 clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExY0pNcERSSDJYUHVSOFNFc0tNOXpQNXdyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFBQS8wQ0E3N0M4MjVDNDcxMUVFQUE5RkU5NjZDNEY5QUUwMi9hMWNKTXBEUkgy WFB1UjhTRXNLTTl6UDV3clUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAb6erPlxtyo35bnPn30XErKmguyvWIXfDRESMP80VH3xwG9Olxm9ky+6ekCS6 dX7/cbOWrQWPp6OZoT+sl+apZA5vfcFKT9IISnqLnk1blS/L6H58d+LcxBcSCt5v QGWvG5DbRrxv3uxud6S+TjMnJ2fsBtAvXkkcrIuw0vOXWOzHLg5/BZoCkqoFwNUM e9AGdjM4kB3qivQKDXSrqhOs6wWRq8tnDZ/+xzCu9dyV5goUl9v01iMc/4agOZ+P y/hc1Yyk9hGc80NnS4Fm9sLvDUUsdvZC9F95+YFuyFwgpGNZM9meLfz1ffh8AJgR J629uxayKSTlNHhjoNCz/ITolQ== -----END CERTIFICATE-----Generated at Sat Mar 28 14:14:43 2026 by rpki-client