$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft File: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft (raw, json) Hash identifier: 2ffPw+h4D8p+96BLkl/F9MFsbp2U5Jgm8eSfAQvRFyw= Subject key identifier: 6B:CC:2A:04:71:3E:D3:A7:D5:2F:D2:30:F9:C8:28:0C:49:3C:BA:0B Authority key identifier: 77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 Certificate issuer: /CN=A9120AC1/serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Certificate serial: 0561 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft Manifest number: 054D Signing time: Tue 24 Mar 2026 23:07:51 +0000 Manifest this update: Tue 24 Mar 2026 23:07:51 +0000 Manifest next update: Tue 31 Mar 2026 23:07:51 +0000 Files and hashes: 1: d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl (hash: LR7iFlnB/HVBGeus4e/aPJlK4fvmLRfp+PlMHL66DaQ=) 2: B5AC177E3E0411ECABD9496CC4F9AE02.roa (hash: yeDD3azucqTXwa0Gdb8W5tD9O2qrp+zwpH6Y+zEBWbM=) 3: EBF4C0063C8811EC889B9D78C4F9AE02.roa (hash: xL18VcZ56ntQg06dxu8mPMsho0DT/fe8AiSvaUT/7NM=) 4: 9BBDF5DEFFD611EF9AE4D35EC4F9AE02.roa (hash: Z6zpJNeDiRoumvX5lCIDf2X6SZzpmpEYlhnAJ6yadjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1377 (0x561) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120AC1, serialNumber=7740CE0E6CD054C432DE46D4C3EDA14F642FDA14 Validity Not Before: Mar 24 23:07:51 2026 GMT Not After : Mar 31 23:07:51 2026 GMT Subject: CN=69c31947-fa00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fe:12:6e:77:3c:c0:20:a4:1a:a2:93:31:f1: 50:0f:51:f9:52:62:8c:5b:ba:7b:6e:aa:95:7e:ee: 1e:e5:97:1c:29:aa:47:eb:6d:df:28:8b:b3:23:c0: bf:10:0d:b0:3f:37:ef:ba:5d:c1:64:1e:97:c1:a8: 56:3c:c6:d2:c1:e2:c1:5f:87:e2:37:ef:4f:49:70: 12:93:3e:f0:d9:0e:23:20:99:47:b3:d7:e9:fd:fb: 0f:f1:c1:30:9c:f1:2f:1e:f7:26:b0:2b:95:fe:c1: e1:42:2b:5c:c8:39:38:25:25:d9:5f:0e:07:89:c0: fc:85:af:6c:fd:8b:75:1c:2d:b6:39:63:fb:0c:11: 8c:bd:87:9d:92:6e:4f:fa:07:51:23:5c:20:a5:cc: 7f:c4:cd:77:98:47:8d:14:5b:c9:a5:9d:27:6f:97: 4b:56:e2:f8:03:f2:17:cb:19:31:cd:3d:35:15:c3: fe:a2:36:e3:a5:d8:80:d2:bc:29:3d:f4:1b:2b:62: 8d:1a:60:b1:31:52:c0:50:38:a7:e6:e0:df:5c:6e: a2:ec:98:01:4e:98:82:21:0b:0f:94:11:45:b6:59: a9:10:32:eb:26:b9:1d:46:8a:a1:2f:75:30:73:78: 60:e4:43:1b:a1:99:8a:d4:3a:39:7d:d8:52:3e:6d: 82:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CC:2A:04:71:3E:D3:A7:D5:2F:D2:30:F9:C8:28:0C:49:3C:BA:0B X509v3 Authority Key Identifier: keyid:77:40:CE:0E:6C:D0:54:C4:32:DE:46:D4:C3:ED:A1:4F:64:2F:DA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AC1/359065A6309711ECB285A64BC4F9AE02/d0DODmzQVMQy3kbUw-2hT2Qv2hQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4e:f4:44:bf:a4:17:79:5f:42:a7:7d:86:77:08:28:f8:b7: ba:4c:b3:c9:0b:9f:93:b0:28:ef:78:12:a9:83:d9:8e:bc:8a: 2a:f8:3b:23:b6:71:42:01:45:28:83:4f:d9:b6:f1:6d:e8:20: 26:8c:6d:ac:c5:af:8a:38:a2:80:60:3c:78:85:95:72:5f:84: 16:06:46:d9:33:05:f3:25:25:69:21:76:dc:3b:cd:cf:fd:f1: 19:d8:2e:1a:85:d1:d3:3f:27:21:d3:c9:bb:74:2b:c6:f4:2e: a2:f9:e9:f3:37:0c:70:a6:85:6c:82:25:cc:88:92:d0:90:cf: 76:18:e8:5a:a5:58:8e:9e:d4:60:5f:6f:13:25:9f:62:3b:cd: 72:06:3a:a2:9f:79:d1:49:05:77:93:8a:fb:3c:b6:7b:97:6c: ac:47:06:09:2d:8b:52:5c:d5:b0:d7:8e:32:fe:2e:5c:b5:86: e3:71:02:72:77:56:f4:ce:d3:bd:9b:da:64:54:1c:4f:b1:81: 0c:e1:f8:d9:47:b3:b9:6a:1a:ed:8c:ba:89:89:75:81:4a:ea: 2e:88:db:af:3c:88:a7:ad:8b:98:8f:48:e8:b6:ab:7c:f6:df: 38:70:bf:eb:6d:0e:aa:f8:0c:74:5d:58:2f:06:ff:24:42:2c: 57:0c:70:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBBQzExMTAvBgNVBAUTKDc3NDBDRTBFNkNEMDU0QzQzMkRFNDZENEMzRURBMTRG NjQyRkRBMTQwHhcNMjYwMzI0MjMwNzUxWhcNMjYwMzMxMjMwNzUxWjAYMRYwFAYD VQQDEw02OWMzMTk0Ny1mYTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6f4Sbnc8wCCkGqKTMfFQD1H5UmKMW7p7bqqVfu4e5ZccKapH623fKIuzI8C/ EA2wPzfvul3BZB6XwahWPMbSweLBX4fiN+9PSXASkz7w2Q4jIJlHs9fp/fsP8cEw nPEvHvcmsCuV/sHhQitcyDk4JSXZXw4HicD8ha9s/Yt1HC22OWP7DBGMvYedkm5P +gdRI1wgpcx/xM13mEeNFFvJpZ0nb5dLVuL4A/IXyxkxzT01FcP+ojbjpdiA0rwp PfQbK2KNGmCxMVLAUDin5uDfXG6i7JgBTpiCIQsPlBFFtlmpEDLrJrkdRoqhL3Uw c3hg5EMboZmK1Do5fdhSPm2C/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGvMKgRx PtOn1S/SMPnIKAxJPLoLMB8GA1UdIwQYMBaAFHdAzg5s0FTEMt5G1MPtoU9kL9oU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEFDMS8zNTkwNjVBNjMw OTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZNUXkza2JVdy0yaFQyUXYy aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2QwRE9EbXpRVk1ReTNrYlV3LTJoVDJRdjJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEFDMS8zNTkwNjVBNjMwOTcxMUVDQjI4NUE2NEJDNEY5QUUwMi9kMERPRG16UVZN UXkza2JVdy0yaFQyUXYyaFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtE70RL+kF3lfQqd9hncIKPi3ukyzyQufk7Ao73gSqYPZjryKKvg7I7ZxQgFF KINP2bbxbeggJoxtrMWvijiigGA8eIWVcl+EFgZG2TMF8yUlaSF23DvNz/3xGdgu GoXR0z8nIdPJu3QrxvQuovnp8zcMcKaFbIIlzIiS0JDPdhjoWqVYjp7UYF9vEyWf YjvNcgY6op950UkFd5OK+zy2e5dsrEcGCS2LUlzVsNeOMv4uXLWG43ECcndW9M7T vZvaZFQcT7GBDOH42UezuWoa7Yy6iYl1gUrqLojbrzyIp62LmI9I6LarfPbfOHC/ 620OqvgMdF1YLwb/JEIsVwxwkQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:17:19 2026 by rpki-client