$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: vciLg+WlmLzYMnJ6TD8kodtKN1NTW7bEhbV74Lw+/QA= Subject key identifier: 9A:3E:D2:59:13:B7:40:07:8E:49:B6:FB:E5:97:8D:EC:56:A2:EC:FD Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 05E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 05DA Signing time: Tue 24 Mar 2026 22:40:38 +0000 Manifest this update: Tue 24 Mar 2026 22:40:37 +0000 Manifest next update: Tue 31 Mar 2026 22:40:37 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: 88JSXh4Teud6RE44htAJb20+zk2CCrtoBhifCoE2uRo=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: aqvU+UiVz5EiQm3aVLx9pIrD5pXO9qkeQ5aR6UKmmFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1504 (0x5e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Mar 24 22:40:37 2026 GMT Not After : Mar 31 22:40:37 2026 GMT Subject: CN=69c312e5-c973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:85:3f:8b:45:d1:85:e1:59:38:34:f2:7e:57: 42:f1:c7:57:79:9e:41:8b:8f:61:89:d6:e0:0b:5f: 93:74:d8:d7:ad:fb:34:70:63:f9:93:79:f2:a3:b3: a3:91:47:e0:b6:9d:8d:53:50:b7:21:aa:9d:70:1d: e1:c4:ad:47:58:81:fb:5b:f4:8b:88:34:3e:85:ee: fb:10:54:1a:2f:7e:0c:b4:75:81:b2:e8:18:7b:8a: 1a:a2:a8:62:77:c6:dc:12:41:74:77:d9:b0:de:ed: e6:06:bf:5b:a5:bd:6f:b8:7d:07:bb:bb:05:4e:9c: 84:86:6a:56:83:b6:f2:0d:9e:6b:fb:d0:bf:f9:8d: 59:09:dd:03:c8:5d:ee:c3:7d:4f:22:24:2f:fa:3a: 5c:e4:a2:5a:27:5f:7e:67:dd:01:bf:48:d3:a8:76: f9:f7:53:1a:01:a4:8c:12:88:81:14:ab:fb:42:51: 9a:ea:14:ec:4a:56:66:7c:de:3b:86:85:4f:4d:7d: 25:91:51:ac:0c:f0:02:29:ff:6f:2a:fa:ff:3c:a7: 3b:bb:61:c7:dc:fc:99:58:a5:4b:45:fd:76:94:12: 7c:fd:2f:f1:50:20:dd:d2:70:df:26:e9:d1:f6:26: aa:07:e2:55:00:35:61:67:9f:95:a5:72:07:2e:8d: b5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3E:D2:59:13:B7:40:07:8E:49:B6:FB:E5:97:8D:EC:56:A2:EC:FD X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:82:8d:49:b6:ab:2b:bb:a5:1e:20:47:cf:6c:1c:52:da:01: 51:8f:89:3b:7e:b6:0e:e3:0e:56:9c:48:49:1b:ec:20:64:7e: 10:9e:aa:e8:fc:29:84:6b:87:4c:81:9e:5d:0e:0d:f8:fd:dc: 4b:c9:5a:cf:a0:7a:34:1f:78:c2:4d:bb:76:7e:ad:a6:f9:82: 0b:fc:8c:07:1e:81:5e:7c:65:7f:ff:2b:32:0a:05:02:d0:d3: 14:14:63:c8:7e:4a:2e:a9:f6:a9:aa:c8:e0:1d:84:f6:f6:1b: bf:d2:3d:b4:46:5c:35:bd:e4:fb:c3:1f:7e:c0:2e:5f:42:50: 99:44:5a:43:5f:7c:9f:88:26:6d:40:5b:01:53:ea:8c:14:2d: d7:c6:2a:3a:f5:60:f8:0a:d2:c1:43:b7:4d:73:fc:45:e2:9c: 47:e3:72:d6:9e:58:0c:f8:33:ab:ed:1c:6e:61:13:85:d4:f2: f9:c0:35:6b:ff:1a:81:c5:dd:37:0a:a1:c4:2a:45:28:b1:f3: 82:b2:7b:71:f2:21:12:be:0e:8e:60:cd:f9:6a:be:fb:39:bd: 65:ee:ae:f3:a1:75:4e:67:87:14:71:c8:7c:d1:fa:6b:c8:7a: 05:7c:85:e5:29:f1:5a:4c:5b:94:8b:b6:04:00:16:0c:ad:7a: 76:e7:7f:9d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjYwMzI0MjI0MDM3WhcNMjYwMzMxMjI0MDM3WjAYMRYwFAYD VQQDEw02OWMzMTJlNS1jOTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1YU/i0XRheFZODTyfldC8cdXeZ5Bi49hidbgC1+TdNjXrfs0cGP5k3nyo7Oj kUfgtp2NU1C3IaqdcB3hxK1HWIH7W/SLiDQ+he77EFQaL34MtHWBsugYe4oaoqhi d8bcEkF0d9mw3u3mBr9bpb1vuH0Hu7sFTpyEhmpWg7byDZ5r+9C/+Y1ZCd0DyF3u w31PIiQv+jpc5KJaJ19+Z90Bv0jTqHb591MaAaSMEoiBFKv7QlGa6hTsSlZmfN47 hoVPTX0lkVGsDPACKf9vKvr/PKc7u2HH3PyZWKVLRf12lBJ8/S/xUCDd0nDfJunR 9iaqB+JVADVhZ5+VpXIHLo21CwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJo+0lkT t0AHjkm2++WXjexWouz9MB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEIKNSbarK7ulHiBHz2wcUtoBUY+JO362DuMOVpxISRvsIGR+EJ6q6PwphGuH TIGeXQ4N+P3cS8laz6B6NB94wk27dn6tpvmCC/yMBx6BXnxlf/8rMgoFAtDTFBRj yH5KLqn2qarI4B2E9vYbv9I9tEZcNb3k+8MffsAuX0JQmURaQ198n4gmbUBbAVPq jBQt18YqOvVg+ArSwUO3TXP8ReKcR+Ny1p5YDPgzq+0cbmEThdTy+cA1a/8agcXd NwqhxCpFKLHzgrJ7cfIhEr4OjmDN+Wq++zm9Ze6u86F1TmeHFHHIfNH6a8h6BXyF 5SnxWkxblIu2BAAWDK16dud/nQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:50 2026 by rpki-client