$ rpki-client -vvf rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft File: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft (raw, json) Hash identifier: 2IfijgbEZOayuFt3FoTuQonYJQtQSfSdJMGm9l8l7AU= Subject key identifier: 02:D3:17:45:2C:8D:AE:51:08:98:86:9B:29:D8:98:AA:AB:79:11:D3 Authority key identifier: 72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 Certificate issuer: /CN=A9126356/serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Certificate serial: 11AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft Manifest number: 11A3 Signing time: Thu 26 Mar 2026 17:09:37 +0000 Manifest this update: Thu 26 Mar 2026 17:09:36 +0000 Manifest next update: Thu 02 Apr 2026 17:09:36 +0000 Files and hashes: 1: cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl (hash: JE8Ml+OiXQgng/BJCynxEXgWzV9e5zdCrKxdX3eEsp0=) 2: FBD6D2BE158711E9881C4D1FC4F9AE02.roa (hash: STeyXyMTSYyvRcahtnut8o6/l8sNSI++3Wnn1BDQDwg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 17:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4527 (0x11af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126356, serialNumber=72CD1D560904458308E91A3ACC9A3D70B67D8492 Validity Not Before: Mar 26 17:09:36 2026 GMT Not After : Apr 2 17:09:36 2026 GMT Subject: CN=69c56851-8e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:ee:05:3d:6b:d1:34:58:78:c6:87:8e:ac: b0:fb:13:d1:03:68:76:5b:81:b5:bd:c1:ed:ba:4a: 38:87:c1:64:3a:01:f5:34:6c:83:8f:be:31:1d:19: ca:9a:6b:f5:96:44:23:18:4d:6c:ea:fb:bf:40:70: ec:3d:ac:59:83:88:5b:83:a8:1b:b2:e2:21:67:88: b2:bf:13:ed:d7:f2:0f:e7:17:77:60:7a:c5:a5:b2: e7:34:54:20:72:00:5e:7e:61:3c:b2:50:8c:ba:24: 99:dd:f8:67:11:a5:c6:1d:ac:b1:f7:32:c7:5f:2d: 09:53:28:3c:47:38:f3:d7:73:20:e6:df:43:15:d1: 39:4d:ca:c5:3c:76:60:58:1f:70:14:cf:c2:88:4b: 56:6c:2c:c5:9f:88:ab:53:38:48:a1:78:f0:bf:fa: c2:e9:2c:70:82:5b:96:fd:45:1d:c8:ee:c5:75:9e: e4:7d:dc:d2:1c:87:b0:a5:26:f5:d9:c3:a5:d3:1d: 3c:98:89:87:66:c7:ec:b2:be:cd:be:c6:dd:35:9e: aa:e5:ea:fa:36:a8:df:17:98:a0:7b:cc:5d:3e:b6: 96:45:61:23:ac:09:05:d6:68:bb:8b:26:20:6e:ee: cb:e5:6f:74:a2:a3:d2:ad:ef:02:65:ac:e2:91:bf: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:17:45:2C:8D:AE:51:08:98:86:9B:29:D8:98:AA:AB:79:11:D3 X509v3 Authority Key Identifier: keyid:72:CD:1D:56:09:04:45:83:08:E9:1A:3A:CC:9A:3D:70:B6:7D:84:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126356/33A53D76158711E9B8A8401EC4F9AE02/cs0dVgkERYMI6Ro6zJo9cLZ9hJI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:95:43:41:6a:41:cc:ab:9d:ab:3c:b8:11:f6:81:f0:b2:99: 20:67:b5:88:26:d1:4e:96:8a:96:6b:23:95:68:2e:23:a8:23: 4a:54:df:c1:93:0d:59:60:02:a9:d3:44:8f:c9:0d:35:25:86: f7:4b:3d:96:7f:7d:85:97:0e:48:79:c5:8e:1c:6f:b9:85:bc: 59:e1:1e:cf:7e:34:45:33:72:bf:dd:07:23:2c:52:6a:a3:fd: 36:ce:61:71:41:3f:2c:65:2c:92:db:a8:63:6a:e4:c5:e5:84: 66:1b:04:bf:e2:5d:ca:65:17:6d:d5:e8:eb:7f:25:02:d0:5b: 69:2d:26:3c:c2:99:38:e8:8d:3b:5b:d0:6a:dc:eb:ff:5f:59: 73:68:4b:63:16:7a:b1:3a:3b:e9:4f:a7:80:ea:f7:42:dd:48: 85:24:e4:6d:48:d7:f6:ff:d1:3d:ee:0d:6f:c4:58:4d:2c:d9: c0:d5:e7:b7:c6:0d:9d:7d:03:a9:a4:e2:b2:07:c6:46:0b:ce: ee:f5:c6:39:6c:28:03:e6:00:a1:86:67:0b:9c:2e:c5:fc:89: 2e:15:40:7e:46:3a:ee:af:02:fc:9d:08:0e:4e:59:0d:e5:4b: 01:b1:06:7d:41:50:1a:b4:bc:1c:c3:69:5d:cb:14:37:bf:c6: f7:81:71:ef -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzNTYxMTAvBgNVBAUTKDcyQ0QxRDU2MDkwNDQ1ODMwOEU5MUEzQUNDOUEzRDcw QjY3RDg0OTIwHhcNMjYwMzI2MTcwOTM2WhcNMjYwNDAyMTcwOTM2WjAYMRYwFAYD VQQDEw02OWM1Njg1MS04ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2AXuBT1r0TRYeMaHjqyw+xPRA2h2W4G1vcHtuko4h8FkOgH1NGyDj74xHRnK mmv1lkQjGE1s6vu/QHDsPaxZg4hbg6gbsuIhZ4iyvxPt1/IP5xd3YHrFpbLnNFQg cgBefmE8slCMuiSZ3fhnEaXGHayx9zLHXy0JUyg8Rzjz13Mg5t9DFdE5TcrFPHZg WB9wFM/CiEtWbCzFn4irUzhIoXjwv/rC6SxwgluW/UUdyO7FdZ7kfdzSHIewpSb1 2cOl0x08mImHZsfssr7NvsbdNZ6q5er6NqjfF5ige8xdPraWRWEjrAkF1mi7iyYg bu7L5W90oqPSre8CZazikb/VCwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFALTF0Us ja5RCJiGmynYmKqreRHTMB8GA1UdIwQYMBaAFHLNHVYJBEWDCOkaOsyaPXC2fYSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjM1Ni8zM0E1M0Q3NjE1 ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZTUk2Um82ekpvOWNMWjlo SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NzMGRWZ2tFUllNSTZSbzZ6Sm85Y0xaOWhKSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjM1Ni8zM0E1M0Q3NjE1ODcxMUU5QjhBODQwMUVDNEY5QUUwMi9jczBkVmdrRVJZ TUk2Um82ekpvOWNMWjloSkkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK5VDQWpBzKudqzy4EfaB8LKZIGe1iCbRTpaKlmsjlWguI6gjSlTfwZMNWWAC qdNEj8kNNSWG90s9ln99hZcOSHnFjhxvuYW8WeEez340RTNyv90HIyxSaqP9Ns5h cUE/LGUsktuoY2rkxeWEZhsEv+JdymUXbdXo638lAtBbaS0mPMKZOOiNO1vQatzr /19Zc2hLYxZ6sTo76U+ngOr3Qt1IhSTkbUjX9v/RPe4Nb8RYTSzZwNXnt8YNnX0D qaTisgfGRgvO7vXGOWwoA+YAoYZnC5wuxfyJLhVAfkY67q8C/J0IDk5ZDeVLAbEG fUFQGrS8HMNpXcsUN7/G94Fx7w== -----END CERTIFICATE-----Generated at Sat Mar 28 12:16:54 2026 by rpki-client