$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft File: -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json) Hash identifier: B0K0aBEXbnSQlE72CCkmxjN/2ScBUMowmGhdnPWUk/o= Subject key identifier: 2C:10:9E:4F:FA:6A:3B:C6:1E:7C:42:6F:19:A4:37:C1:BD:0C:0B:A9 Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D Certificate issuer: /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft Manifest number: 0190 Signing time: Wed 25 Mar 2026 03:43:13 +0000 Manifest this update: Wed 25 Mar 2026 03:43:13 +0000 Manifest next update: Wed 01 Apr 2026 03:43:13 +0000 Files and hashes: 1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: zQ1zzd3/RKEmWN6yNYhVU6YBO9TJ88YtJRnpazjtRhk=) 2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D Validity Not Before: Mar 25 03:43:13 2026 GMT Not After : Apr 1 03:43:13 2026 GMT Subject: CN=69c359d1-bce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:40:db:a0:c1:0e:ea:ee:d1:49:4e:bf:bb: 1d:4d:16:9b:12:98:03:2d:c7:6c:5c:27:d9:65:9c: 6f:88:8b:7e:c9:34:48:4d:5a:73:14:93:51:b0:bb: d9:80:10:af:67:1e:b3:23:d2:99:b8:64:76:6b:3e: fc:be:1c:fe:ad:a4:a1:3e:75:01:fd:a3:36:bd:bb: 49:61:11:48:77:e5:7f:d3:9f:b6:21:04:15:15:83: 7c:08:42:40:d7:7c:23:61:f6:b6:3b:4d:65:c5:88: d1:af:66:02:65:f2:97:c8:8f:1c:39:c3:b8:b6:bc: db:e2:9b:df:19:ce:c3:ac:70:52:80:fe:84:66:b6: b0:07:f5:20:bf:17:b7:93:52:4e:b2:67:43:6f:48: 99:2b:55:70:47:55:c0:f1:32:b8:10:f0:94:68:ce: 58:96:2b:44:0f:07:52:ee:78:61:ab:a3:61:17:7e: 12:ed:ad:41:a7:2e:26:b2:9e:ff:01:e0:ac:96:9e: 1f:f7:3e:09:47:ca:66:4a:41:35:08:5d:f6:2d:b2: fd:54:f3:0d:45:28:3c:a5:a7:da:ad:14:5a:9f:ee: 22:70:e9:eb:b4:b3:82:35:64:2b:3a:61:9f:75:57: 04:65:4f:52:c0:91:f1:49:b5:64:8d:b7:38:8e:c3: 19:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:10:9E:4F:FA:6A:3B:C6:1E:7C:42:6F:19:A4:37:C1:BD:0C:0B:A9 X509v3 Authority Key Identifier: keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c4:df:3e:13:33:09:89:d7:16:a6:8e:2c:d3:0a:8a:8f:f6: 44:5f:77:65:06:dc:08:fa:c2:23:cb:a5:00:84:bb:d5:df:26: b3:3d:6c:8f:fe:96:dd:bf:62:3f:f7:dc:83:8e:83:b3:4f:cd: 53:45:b1:6c:b9:10:71:ab:4a:1c:ef:79:40:e7:10:a3:03:19: 56:d7:01:3b:bf:96:2f:dd:6a:36:00:73:07:b7:50:75:5b:cd: 12:34:2f:e8:bc:67:14:04:3d:5e:4c:5a:db:ec:e9:97:cc:1e: 56:f3:d4:4d:58:f8:b6:5b:0d:df:f9:d6:c5:a4:1c:89:b5:27: c4:02:4f:44:4e:dd:6d:f6:7b:42:ca:b0:4d:51:ca:1b:ad:fc: a4:cd:23:74:46:4e:1d:22:f2:34:58:c0:2f:d6:95:33:65:e2: db:3b:17:af:77:0d:a5:77:35:a5:2e:66:fe:79:8c:b0:c1:a6: 50:ae:f3:6f:f4:26:24:cf:bf:87:56:71:ac:da:b0:53:c2:29: c5:d5:e8:77:f6:d0:21:a5:30:70:91:c6:70:b5:6e:2d:6d:08: 05:e2:77:c5:cd:76:d3:94:55:e1:46:51:7d:a7:c2:32:69:8a: cc:b7:35:f2:92:19:9d:5f:28:ea:89:04:f7:c6:a4:a5:f7:91: 36:85:07:3a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBMzAxMTAvBgNVBAUTKEY5MkRCNUJBMzUxMkU0NkE3Q0RCRkI0QjM1MTRCRDZG Rjg1QzhGM0QwHhcNMjYwMzI1MDM0MzEzWhcNMjYwNDAxMDM0MzEzWjAYMRYwFAYD VQQDEw02OWMzNTlkMS1iY2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEBA26DBDuru0UlOv7sdTRabEpgDLcdsXCfZZZxviIt+yTRITVpzFJNRsLvZ gBCvZx6zI9KZuGR2az78vhz+raShPnUB/aM2vbtJYRFId+V/05+2IQQVFYN8CEJA 13wjYfa2O01lxYjRr2YCZfKXyI8cOcO4trzb4pvfGc7DrHBSgP6EZrawB/Ugvxe3 k1JOsmdDb0iZK1VwR1XA8TK4EPCUaM5YlitEDwdS7nhhq6NhF34S7a1Bpy4msp7/ AeCslp4f9z4JR8pmSkE1CF32LbL9VPMNRSg8pafarRRan+4icOnrtLOCNWQrOmGf dVcEZU9SwJHxSbVkjbc4jsMZLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCwQnk/6 ajvGHnxCbxmkN8G9DAupMB8GA1UdIwQYMBaAFPkttbo1EuRqfNv7SzUUvW/4XI89 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUEzMC80QjdBMTg2QUNB RjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVHcDgyX3RMTlJTOWJfaGNq ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1TMjF1alVTNUdwODJfdExOUlM5Yl9oY2p6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUEzMC80QjdBMTg2QUNBRjIxMUVFQUNEQjJFMUVDNEY5QUUwMi8tUzIxdWpVUzVH cDgyX3RMTlJTOWJfaGNqejAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOMTfPhMzCYnXFqaOLNMKio/2RF93ZQbcCPrCI8ulAIS71d8msz1sj/6W3b9i P/fcg46Ds0/NU0WxbLkQcatKHO95QOcQowMZVtcBO7+WL91qNgBzB7dQdVvNEjQv 6LxnFAQ9Xkxa2+zpl8weVvPUTVj4tlsN3/nWxaQcibUnxAJPRE7dbfZ7QsqwTVHK G638pM0jdEZOHSLyNFjAL9aVM2Xi2zsXr3cNpXc1pS5m/nmMsMGmUK7zb/QmJM+/ h1ZxrNqwU8IpxdXod/bQIaUwcJHGcLVuLW0IBeJ3xc1205RV4UZRfafCMmmKzLc1 8pIZnV8o6okE98akpfeRNoUHOg== -----END CERTIFICATE-----Generated at Thu Mar 26 22:07:53 2026 by rpki-client