$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft File: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft (raw, json) Hash identifier: ez9I876RBb0Y33RgKX8HtPXOWU3xMuQlPr+MfrgAEG0= Subject key identifier: FB:4F:06:D7:A3:B1:FF:D9:FC:A2:D9:01:48:FB:F4:1B:FB:7E:62:79 Authority key identifier: AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E Certificate issuer: /CN=A9128C33/serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft Manifest number: 01B6 Signing time: Wed 25 Mar 2026 03:20:57 +0000 Manifest this update: Wed 25 Mar 2026 03:20:57 +0000 Manifest next update: Wed 01 Apr 2026 03:20:57 +0000 Files and hashes: 1: ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl (hash: 0GOA1AhGC2GOa7KBfXefwE/GJ0eYuj9oIKTcCFB03iY=) 2: 813EDCA4137E11EF9969A86BC4F9AE02.roa (hash: MD6k5wA0AqG/dEECYzynxqcMbFFUqeKVXvzHIx4QFZQ=) 3: 210A4EBAC0F211EE99FFBA21C4F9AE02.roa (hash: u48zpmX4MX32BsS3SWmiT1sLqFE6P1rFb2rRJj5ZiBw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C33, serialNumber=AF2EE04412356ABFD8E19AE2C1B22A737CDF5E9E Validity Not Before: Mar 25 03:20:57 2026 GMT Not After : Apr 1 03:20:57 2026 GMT Subject: CN=69c35499-a5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:ef:ab:eb:54:47:e3:48:0f:12:05:cd:a1: 5c:6c:5c:82:c0:5f:86:b0:96:a1:55:8c:c7:04:ed: ca:6f:e1:fa:d6:aa:30:28:98:a0:be:1d:80:3a:8b: ae:89:5c:76:9c:3c:68:45:da:87:45:d7:2a:5c:21: de:04:38:c6:32:96:2d:97:00:d6:3b:f6:4e:85:f9: a0:35:31:be:84:0b:af:80:ac:65:61:38:c5:1a:05: c0:4a:bc:7a:db:e4:24:10:cf:c5:ff:40:0f:45:02: b7:18:c7:b4:9d:3d:47:12:33:3b:1e:8f:9a:fd:5c: b0:b8:36:c9:37:32:a1:e3:ef:f9:7c:3e:1c:e4:cb: 58:f4:ad:95:92:c6:0a:88:86:64:4b:3c:da:1c:4c: 58:fe:ee:c1:e5:7d:2a:49:d5:03:7b:d0:69:f2:b9: e5:8d:84:93:32:19:a2:a1:da:d9:ba:e8:0e:0e:eb: 3b:d3:5f:e9:cb:46:60:31:80:c8:7e:07:45:81:97: 3b:f4:c0:32:76:44:d8:1c:d9:c7:4c:31:61:d7:80: 46:d6:c8:da:7b:82:e0:65:5f:21:41:00:28:62:18: 28:f4:7e:c3:85:1d:83:4c:2f:62:3f:bb:bb:f6:b2: eb:6a:a3:5b:e6:73:f5:0b:dd:b3:29:0c:69:ed:ac: 38:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4F:06:D7:A3:B1:FF:D9:FC:A2:D9:01:48:FB:F4:1B:FB:7E:62:79 X509v3 Authority Key Identifier: keyid:AF:2E:E0:44:12:35:6A:BF:D8:E1:9A:E2:C1:B2:2A:73:7C:DF:5E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C33/956CB086981B11EEAB0FC922C4F9AE02/ry7gRBI1ar_Y4ZriwbIqc3zfXp4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:eb:fb:b1:d0:f9:1c:d0:72:fd:16:57:4c:eb:ba:7c:c5:77: 62:4e:8b:8d:0e:ae:05:2f:5c:c7:7d:da:45:52:24:39:4c:4a: cd:5f:42:90:29:1f:92:de:f8:76:a5:c1:c6:10:8e:64:4a:a4: 94:f7:5c:0c:93:8f:0c:16:19:26:46:1a:dd:c5:55:58:39:10: ea:17:b8:d8:48:81:03:d0:92:9a:d0:e0:4e:80:85:36:73:81: b3:fa:32:9c:92:dd:db:57:b7:5b:cd:c6:e4:bf:86:ef:95:ca: 12:2c:0f:45:5a:31:ff:dc:bf:02:79:b5:62:0a:b2:f5:50:15: e8:e3:27:6a:46:19:2e:74:a6:a8:6c:33:8d:6c:76:a8:65:80: 00:9a:08:b5:10:61:a2:46:c1:48:28:4d:48:7f:4b:bb:cd:23: d2:98:12:c6:95:09:89:78:38:c1:cd:fd:fe:bc:50:c6:33:30: 42:c2:6e:2e:51:79:e2:dc:fa:0d:6f:eb:bc:e1:13:08:65:92: 3b:01:1d:37:26:88:f2:73:75:c4:f4:f1:86:f1:ce:d1:f0:5f: b7:83:d6:f5:79:fc:13:35:b1:df:56:52:bc:fc:1b:25:77:42: 45:40:97:44:f5:2d:c7:ec:44:86:12:65:f5:d2:cf:c8:80:22: ba:6e:f2:30 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDMzMxMTAvBgNVBAUTKEFGMkVFMDQ0MTIzNTZBQkZEOEUxOUFFMkMxQjIyQTcz N0NERjVFOUUwHhcNMjYwMzI1MDMyMDU3WhcNMjYwNDAxMDMyMDU3WjAYMRYwFAYD VQQDEw02OWMzNTQ5OS1hNWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlifvq+tUR+NIDxIFzaFcbFyCwF+GsJahVYzHBO3Kb+H61qowKJigvh2AOouu iVx2nDxoRdqHRdcqXCHeBDjGMpYtlwDWO/ZOhfmgNTG+hAuvgKxlYTjFGgXASrx6 2+QkEM/F/0APRQK3GMe0nT1HEjM7Ho+a/VywuDbJNzKh4+/5fD4c5MtY9K2VksYK iIZkSzzaHExY/u7B5X0qSdUDe9Bp8rnljYSTMhmiodrZuugODus701/py0ZgMYDI fgdFgZc79MAydkTYHNnHTDFh14BG1sjae4LgZV8hQQAoYhgo9H7DhR2DTC9iP7u7 9rLraqNb5nP1C92zKQxp7aw4fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPtPBtej sf/Z/KLZAUj79Bv7fmJ5MB8GA1UdIwQYMBaAFK8u4EQSNWq/2OGa4sGyKnN8316e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEMzMy85NTZDQjA4Njk4 MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFyX1k0WnJpd2JJcWMzemZY cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3J5N2dSQkkxYXJfWTRacml3YklxYzN6ZlhwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEMzMy85NTZDQjA4Njk4MUIxMUVFQUIwRkM5MjJDNEY5QUUwMi9yeTdnUkJJMWFy X1k0WnJpd2JJcWMzemZYcDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD+v7sdD5HNBy/RZXTOu6fMV3Yk6LjQ6uBS9cx33aRVIkOUxKzV9CkCkfkt74 dqXBxhCOZEqklPdcDJOPDBYZJkYa3cVVWDkQ6he42EiBA9CSmtDgToCFNnOBs/oy nJLd21e3W83G5L+G75XKEiwPRVox/9y/Anm1Ygqy9VAV6OMnakYZLnSmqGwzjWx2 qGWAAJoItRBhokbBSChNSH9Lu80j0pgSxpUJiXg4wc39/rxQxjMwQsJuLlF54tz6 DW/rvOETCGWSOwEdNyaI8nN1xPTxhvHO0fBft4PW9Xn8EzWx31ZSvPwbJXdCRUCX RPUtx+xEhhJl9dLPyIAium7yMA== -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:08 2026 by rpki-client