$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft File: xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json) Hash identifier: 6B1hjDZOre12M7UVpQ3FH5QDj6BmslOuySpWIzBC/pE= Subject key identifier: 1D:FD:00:9D:BC:9E:89:1C:C4:85:BF:DE:C2:22:CD:AD:A2:25:6B:07 Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C Certificate issuer: /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Certificate serial: 23B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft Manifest number: 2398 Signing time: Thu 26 Mar 2026 15:49:11 +0000 Manifest this update: Thu 26 Mar 2026 15:49:10 +0000 Manifest next update: Thu 02 Apr 2026 15:49:10 +0000 Files and hashes: 1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: wK0Wh07N+jt4YMldmzq0j63hwt1HyY9HLDD9TEOWd80=) 2: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: oPPTl1sV6xGDw5Unly6kTOoNd3Ow/tpEEI0WHWs24Fo=) 3: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: wQrd292YTRpmRkuOGjz/MSOU9HFRIK607/TbYDjVG7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 15:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9143 (0x23b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C Validity Not Before: Mar 26 15:49:10 2026 GMT Not After : Apr 2 15:49:10 2026 GMT Subject: CN=69c55577-2403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c9:e5:31:e0:15:2f:b0:be:66:15:d4:24:a3: 37:59:a3:bd:25:5a:3a:1a:2c:f1:cc:dc:e1:1b:39: f3:a0:12:24:bd:f6:7d:ae:c5:b2:2b:75:be:fd:a7: 0b:91:3f:f0:b3:a4:70:3a:98:12:6a:ce:b0:ca:ed: 17:b3:22:ee:87:88:48:21:cd:f7:3f:22:04:8f:99: 1d:77:16:fb:cb:9c:90:97:cb:3e:f7:5e:6c:91:48: b7:4a:08:df:1f:51:24:73:af:c3:23:50:98:90:3d: 73:e0:c9:bb:b5:1b:f3:ee:f3:6d:f7:94:90:66:1b: 94:3a:49:8f:5d:bc:22:25:fb:15:13:d8:0d:fe:da: 4b:14:73:d8:c0:22:9f:c7:78:e2:0d:db:b4:8b:9a: 22:2e:12:fd:0a:f2:f2:8a:30:15:5e:4a:98:30:8e: bf:e8:0d:bc:ff:a9:f2:6e:c6:00:15:dc:ad:ce:64: 24:c1:b0:eb:d7:ad:0b:a4:15:42:be:aa:86:dd:93: d4:89:3d:a1:9b:80:35:de:ec:b9:e2:b8:90:e5:bf: 8a:8f:f1:98:74:3b:3c:65:4d:92:70:e1:13:d0:c1: fb:6b:6c:d5:0d:12:db:59:09:1d:88:98:56:71:59: dd:f1:28:16:4e:56:76:56:90:f9:e8:e7:74:16:9b: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FD:00:9D:BC:9E:89:1C:C4:85:BF:DE:C2:22:CD:AD:A2:25:6B:07 X509v3 Authority Key Identifier: keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f2:cc:c7:d4:74:ad:a6:06:51:f2:cd:f6:9b:e1:0e:e1:4f: 87:d2:dc:e7:aa:1a:a2:9e:d4:ad:e0:62:51:d8:e5:84:e1:81: d8:93:16:48:ea:f6:bc:0e:ec:c8:93:16:1a:89:54:c0:44:41: f9:f3:56:4d:32:67:df:c1:2b:a8:9a:ff:43:4f:ff:e1:93:66: c8:21:2e:fe:8f:65:3a:11:d4:4e:a6:d8:b8:8b:0e:db:c0:f8: a1:42:9d:50:92:1f:31:ec:15:ef:bf:45:0a:79:b9:c5:62:74: 21:e8:ee:23:ab:98:23:17:48:46:b2:bc:f8:ca:57:4a:71:37: 09:0a:ec:3b:2b:8b:c6:eb:9b:10:63:e6:62:ac:f0:d8:35:86: 8b:ab:60:3e:29:1e:83:e4:84:6a:90:98:be:c1:b5:0d:f7:45: 88:42:97:65:db:fb:8a:35:92:60:1b:11:af:28:d0:66:2b:c5: 56:28:65:c1:f8:1a:43:0d:18:05:4b:b5:6d:2a:e7:13:4c:d3: 59:04:24:16:82:77:dd:bc:47:5a:84:d2:10:4b:45:b6:45:5e: 8a:d7:2b:aa:e5:4d:03:6c:a2:e3:8c:4d:b5:4e:60:ed:df:42: 71:76:16:d2:27:50:cd:fa:a3:dd:d8:7c:fd:b8:86:0c:ae:4f: 28:c2:48:c0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICI7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4 RTAxNTQ2N0MwHhcNMjYwMzI2MTU0OTEwWhcNMjYwNDAyMTU0OTEwWjAYMRYwFAYD VQQDEw02OWM1NTU3Ny0yNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cnlMeAVL7C+ZhXUJKM3WaO9JVo6GizxzNzhGznzoBIkvfZ9rsWyK3W+/acL kT/ws6RwOpgSas6wyu0XsyLuh4hIIc33PyIEj5kddxb7y5yQl8s+915skUi3Sgjf H1Ekc6/DI1CYkD1z4Mm7tRvz7vNt95SQZhuUOkmPXbwiJfsVE9gN/tpLFHPYwCKf x3jiDdu0i5oiLhL9CvLyijAVXkqYMI6/6A28/6nybsYAFdytzmQkwbDr160LpBVC vqqG3ZPUiT2hm4A13uy54riQ5b+Kj/GYdDs8ZU2ScOET0MH7a2zVDRLbWQkdiJhW cVnd8SgWTlZ2VpD56Od0Fpv1fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFB39AJ28 nokcxIW/3sIiza2iJWsHMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10 ZERoQXZHZjloNy1PQVZSbncubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAovLMx9R0raYGUfLN9pvhDuFPh9Lc56oaop7UreBiUdjlhOGB2JMWSOr2vA7s yJMWGolUwERB+fNWTTJn38ErqJr/Q0//4ZNmyCEu/o9lOhHUTqbYuIsO28D4oUKd UJIfMewV779FCnm5xWJ0IejuI6uYIxdIRrK8+MpXSnE3CQrsOyuLxuubEGPmYqzw 2DWGi6tgPikeg+SEapCYvsG1DfdFiEKXZdv7ijWSYBsRryjQZivFVihlwfgaQw0Y BUu1bSrnE0zTWQQkFoJ33bxHWoTSEEtFtkVeitcrquVNA2yi44xNtU5g7d9CcXYW 0idQzfqj3dh8/biGDK5PKMJIwA== -----END CERTIFICATE-----Generated at Sat Mar 28 12:14:25 2026 by rpki-client