$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft File: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft (raw, json) Hash identifier: HUnn7SkryCfrapFAtbSDihdTjHgT68yIyVdi2MeB0O8= Subject key identifier: 67:8C:85:9D:C9:B5:F3:29:89:60:48:89:AB:9C:47:CA:9B:4A:5D:A1 Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Certificate serial: 0840 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft Manifest number: 0823 Signing time: Tue 24 Mar 2026 20:49:22 +0000 Manifest this update: Tue 24 Mar 2026 20:49:21 +0000 Manifest next update: Tue 31 Mar 2026 20:49:21 +0000 Files and hashes: 1: Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl (hash: ukKeeUkXgKzMUxdSd1ru3LgaOICeTnEi0KmY2v5h2DY=) 2: 7A299148000311F191DFD8AE3C6F56BC.roa (hash: CFc84riH2MB87zU/DpJZ0VZbTskfpT/fcnC+lNYeR50=) 3: 7AAA8154000311F191DFD8AE3C6F56BC.roa (hash: x6G+iXovRti/BntEfhaZ6wM5ntzRbJdW9j8h7+t6XG0=) 4: 8D0DD6C2690811EFAC6DE109C4F9AE02.roa (hash: XxTxvEaSE5hUqY+FgqA+JjfK7ug+VG+l0z5zQK56p5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2112 (0x840) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F Validity Not Before: Mar 24 20:49:21 2026 GMT Not After : Mar 31 20:49:21 2026 GMT Subject: CN=69c2f8d1-b7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:38:93:2f:d0:23:ae:12:1f:03:f3:2e:ba:01: d2:8a:9a:86:8e:a6:79:a9:ad:85:ec:29:6b:dd:ae: df:6e:66:bf:52:5e:b6:68:0c:5a:80:c8:36:1b:05: 24:ec:7c:97:86:2d:97:88:8c:52:90:09:4a:f4:f1: 5c:11:a0:4b:a0:4f:04:de:59:71:4b:c3:ab:9a:f6: 32:2b:97:44:ed:d3:23:fd:d2:eb:ea:51:fc:82:ee: ad:4e:e2:a2:82:ef:d2:1b:78:44:15:e8:d8:7c:53: f0:fe:b7:10:f2:28:2e:59:74:d8:f3:ae:96:26:e4: d9:0f:99:43:bd:a3:b9:70:24:8d:24:c5:5d:5c:b5: e8:2e:b0:96:4e:3c:9a:54:30:49:8a:bf:71:84:84: de:1f:96:05:19:fc:d3:82:29:09:78:94:49:9f:8f: ae:90:20:50:53:4b:c6:80:db:ea:5f:60:1a:39:da: 6f:6d:63:ac:d8:fb:89:28:c0:37:d0:8f:34:6a:2e: 5c:fe:1e:ad:91:81:39:37:1d:17:e8:b2:55:3c:0c: cc:95:e4:7c:51:93:12:a7:51:66:c6:dc:c8:c9:7d: 30:34:14:d0:91:78:d4:3d:dd:c7:cc:18:e0:72:25: a2:2a:04:c7:35:c2:2f:60:48:3b:5e:91:b0:87:42: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8C:85:9D:C9:B5:F3:29:89:60:48:89:AB:9C:47:CA:9B:4A:5D:A1 X509v3 Authority Key Identifier: keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:1b:38:32:fa:cd:b0:a0:61:96:1a:3b:83:d8:0f:99:75:1c: 72:a9:00:f4:61:d4:db:cb:43:87:0b:09:51:73:b1:81:05:9e: 83:02:fc:5c:50:36:d1:5e:19:3a:f1:d8:d1:d9:48:98:5e:2a: 33:ad:28:3f:7c:24:17:89:5c:33:28:49:8b:22:df:30:52:b1: da:bd:49:2e:26:e5:3a:47:9b:a9:4b:43:6b:b7:1b:e3:d3:52: dd:ac:d7:71:e8:c8:5b:03:73:f0:49:00:13:c1:73:31:86:8d: 54:4d:9a:cb:b2:50:7e:35:ce:6e:2f:29:78:86:6a:f9:20:d3: 37:01:57:ef:95:cf:ec:1d:2c:0e:c1:b5:5a:2e:03:ad:66:64: b2:56:87:b5:dc:22:bd:ac:1e:ef:37:e5:5c:86:82:96:1a:21: 24:dd:60:d9:03:7e:62:0e:5f:2a:ff:50:d8:36:e0:00:71:cb: 45:c3:4c:96:95:77:de:e3:d1:04:18:58:fe:ef:d6:15:30:63: 12:2f:8b:4c:b8:02:37:e9:9b:84:9e:11:e8:5a:01:37:b8:e5: 00:bd:74:80:f0:e5:37:f1:36:22:1d:5f:50:21:49:dc:ba:9b: 63:e6:42:da:fd:c8:51:a8:23:8d:1a:6c:35:b4:04:cb:6d:c8: 74:64:ed:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAzOTUxMTAvBgNVBAUTKDYyQ0Q2RTY1MEQyMDlFNTBFRUZENjZDMzUyODhCNjA2 RjM2MkU4MEYwHhcNMjYwMzI0MjA0OTIxWhcNMjYwMzMxMjA0OTIxWjAYMRYwFAYD VQQDEw02OWMyZjhkMS1iN2FhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9DiTL9AjrhIfA/MuugHSipqGjqZ5qa2F7Clr3a7fbma/Ul62aAxagMg2GwUk 7HyXhi2XiIxSkAlK9PFcEaBLoE8E3llxS8OrmvYyK5dE7dMj/dLr6lH8gu6tTuKi gu/SG3hEFejYfFPw/rcQ8iguWXTY866WJuTZD5lDvaO5cCSNJMVdXLXoLrCWTjya VDBJir9xhITeH5YFGfzTgikJeJRJn4+ukCBQU0vGgNvqX2AaOdpvbWOs2PuJKMA3 0I80ai5c/h6tkYE5Nx0X6LJVPAzMleR8UZMSp1FmxtzIyX0wNBTQkXjUPd3HzBjg ciWiKgTHNcIvYEg7XpGwh0JDIwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGeMhZ3J tfMpiWBIiaucR8qbSl2hMB8GA1UdIwQYMBaAFGLNbmUNIJ5Q7v1mw1KItgbzYugP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDM5NS9FQjY3MjI2NDE0 Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25sRHVfV2JEVW9pMkJ2Tmk2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lzMXVaUTBnbmxEdV9XYkRVb2kyQnZOaTZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDM5NS9FQjY3MjI2NDE0Q0ExMUVCODE2NDNCMEZDNEY5QUUwMi9ZczF1WlEwZ25s RHVfV2JEVW9pMkJ2Tmk2QTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYhs4MvrNsKBhlho7g9gPmXUccqkA9GHU28tDhwsJUXOxgQWegwL8XFA20V4Z OvHY0dlImF4qM60oP3wkF4lcMyhJiyLfMFKx2r1JLiblOkebqUtDa7cb49NS3azX cejIWwNz8EkAE8FzMYaNVE2ay7JQfjXObi8peIZq+SDTNwFX75XP7B0sDsG1Wi4D rWZkslaHtdwivawe7zflXIaClhohJN1g2QN+Yg5fKv9Q2DbgAHHLRcNMlpV33uPR BBhY/u/WFTBjEi+LTLgCN+mbhJ4R6FoBN7jlAL10gPDlN/E2Ih1fUCFJ3LqbY+ZC 2v3IUagjjRpsNbQEy23IdGTtMg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:20 2026 by rpki-client