$ rpki-client -vvf rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft File: 1m4Cgid2-1UUPQyeVJAyhlal4I0.mft (raw, json) Hash identifier: ycHPgX7EtwEg+Mqx3zr+8ybHVm7GIxoFEO2wh3cmXfE= Subject key identifier: 9C:81:E8:62:5A:CF:E8:A8:1E:91:73:76:57:4A:79:49:D4:16:0D:46 Authority key identifier: D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D Certificate issuer: /CN=A9123180/serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Certificate serial: 0CDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft Manifest number: 0CD2 Signing time: Tue 24 Mar 2026 18:10:57 +0000 Manifest this update: Tue 24 Mar 2026 18:10:56 +0000 Manifest next update: Tue 31 Mar 2026 18:10:56 +0000 Files and hashes: 1: 1m4Cgid2-1UUPQyeVJAyhlal4I0.crl (hash: HjaBw5wV3ZVzzyhRT2M3+LAtzJ9P659iaG/1WSmF868=) 2: 0EE3438A07FC11EABAD90A47C4F9AE02.roa (hash: MsSst93R2N7mg9PwvaaO00iOqWPQd/MBvSgtfftl+bo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3293 (0xcdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123180, serialNumber=D66E02822776FB55143D0C9E5490328656A5E08D Validity Not Before: Mar 24 18:10:56 2026 GMT Not After : Mar 31 18:10:56 2026 GMT Subject: CN=69c2d3b1-f329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:75:ac:4d:26:d0:aa:1c:04:78:86:00:82:c9: 08:ed:ea:eb:3f:b1:c4:aa:2f:b4:f4:fb:59:93:41: 9c:f7:05:68:99:b1:32:03:50:01:11:c0:8c:f3:5a: fb:42:51:30:50:58:7d:1d:70:ec:33:f1:b0:ed:ce: f4:9e:7d:4a:2d:dc:26:78:98:8f:57:5b:b5:cc:26: 3b:0b:62:e2:67:b8:3c:d0:4d:22:b7:38:b3:27:32: 49:32:e4:18:ba:ee:98:a4:86:c9:d5:f1:0b:d2:05: 90:65:8d:bb:fc:c8:47:40:42:e3:d2:52:b6:ff:63: de:59:27:69:3f:cc:30:f8:a8:d1:56:28:42:c0:d5: 48:9e:f2:f5:a0:4d:62:dd:8e:56:41:10:ee:49:c9: 68:e0:b6:a4:3a:72:24:dc:a0:c8:09:f1:ae:c2:eb: f8:d0:c2:52:19:7b:a1:08:aa:3e:9e:1f:07:2c:0c: e3:8c:69:17:b4:c6:b1:ab:ed:52:ad:19:17:f7:3a: 17:26:b3:3b:cb:88:7e:24:3e:41:ba:9f:4e:29:63: 0d:7a:e9:22:a6:f5:12:d8:d4:78:f2:ac:81:1e:c6: e3:9e:ea:14:5f:3a:a2:5f:f1:d7:96:29:41:f7:90: 36:bb:10:15:f3:d6:67:96:36:67:cb:97:9e:e8:44: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:81:E8:62:5A:CF:E8:A8:1E:91:73:76:57:4A:79:49:D4:16:0D:46 X509v3 Authority Key Identifier: keyid:D6:6E:02:82:27:76:FB:55:14:3D:0C:9E:54:90:32:86:56:A5:E0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1m4Cgid2-1UUPQyeVJAyhlal4I0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123180/30569DB007FB11EA9B34CC45C4F9AE02/1m4Cgid2-1UUPQyeVJAyhlal4I0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:08:30:60:4c:52:a4:c0:53:e6:c6:b3:17:47:77:0e:6e:1e: da:4f:34:76:da:55:fd:ca:b1:6a:37:eb:16:5d:01:db:c9:bf: d2:b7:64:b6:22:ed:d8:ad:1d:85:16:e5:a6:0c:a1:c9:19:c6: 79:ca:b6:d6:8b:de:58:cc:ef:b1:c5:cc:e7:ce:1c:14:67:74: e1:c8:60:2c:60:ac:d9:a8:a2:b6:9b:8e:cb:2f:2a:2d:5b:69: df:d0:3d:6f:ae:37:b9:fe:c8:70:67:cc:08:2a:c6:ad:f0:04: 62:bc:16:72:16:ea:fe:de:70:2e:84:7e:bc:ca:e0:16:47:8e: 5e:e4:a9:0d:48:a2:ab:62:37:6b:c3:36:7c:ee:28:9a:c3:d9: 3a:3e:6c:9d:73:85:8f:1b:97:df:33:ca:53:63:5a:8e:ab:1c: 14:84:43:98:ad:fc:18:e9:58:bb:35:27:bf:f4:40:a3:52:4e: 8a:9a:9e:49:a1:d7:80:e0:c7:d8:a5:08:f0:80:aa:48:28:77: 9b:29:17:72:0d:e4:50:ef:be:7d:b9:46:e0:25:ad:95:55:bf: a5:8b:15:bd:84:5b:58:0a:ee:92:8c:a2:40:6d:2a:83:d3:93: 85:09:20:1f:fa:69:1b:64:a6:ad:8f:54:4c:ce:69:30:72:cd: e8:eb:ad:01 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxODAxMTAvBgNVBAUTKEQ2NkUwMjgyMjc3NkZCNTUxNDNEMEM5RTU0OTAzMjg2 NTZBNUUwOEQwHhcNMjYwMzI0MTgxMDU2WhcNMjYwMzMxMTgxMDU2WjAYMRYwFAYD VQQDEw02OWMyZDNiMS1mMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nWsTSbQqhwEeIYAgskI7errP7HEqi+09PtZk0Gc9wVombEyA1ABEcCM81r7 QlEwUFh9HXDsM/Gw7c70nn1KLdwmeJiPV1u1zCY7C2LiZ7g80E0itzizJzJJMuQY uu6YpIbJ1fEL0gWQZY27/MhHQELj0lK2/2PeWSdpP8ww+KjRVihCwNVInvL1oE1i 3Y5WQRDuSclo4LakOnIk3KDICfGuwuv40MJSGXuhCKo+nh8HLAzjjGkXtMaxq+1S rRkX9zoXJrM7y4h+JD5Bup9OKWMNeukipvUS2NR48qyBHsbjnuoUXzqiX/HXlilB 95A2uxAV89ZnljZny5ee6EQs7QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJyB6GJa z+ioHpFzdldKeUnUFg1GMB8GA1UdIwQYMBaAFNZuAoIndvtVFD0MnlSQMoZWpeCN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE4MC8zMDU2OURCMDA3 RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0xVVVQUXllVkpBeWhsYWw0 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFtNENnaWQyLTFVVVBReWVWSkF5aGxhbDRJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE4MC8zMDU2OURCMDA3RkIxMUVBOUIzNENDNDVDNEY5QUUwMi8xbTRDZ2lkMi0x VVVQUXllVkpBeWhsYWw0STAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJggwYExSpMBT5sazF0d3Dm4e2k80dtpV/cqxajfrFl0B28m/0rdktiLt2K0d hRblpgyhyRnGecq21oveWMzvscXM584cFGd04chgLGCs2aiitpuOyy8qLVtp39A9 b643uf7IcGfMCCrGrfAEYrwWchbq/t5wLoR+vMrgFkeOXuSpDUiiq2I3a8M2fO4o msPZOj5snXOFjxuX3zPKU2NajqscFIRDmK38GOlYuzUnv/RAo1JOipqeSaHXgODH 2KUI8ICqSCh3mykXcg3kUO++fblG4CWtlVW/pYsVvYRbWArukoyiQG0qg9OThQkg H/ppG2SmrY9UTM5pMHLN6OutAQ== -----END CERTIFICATE-----Generated at Thu Mar 26 15:43:24 2026 by rpki-client