$ rpki-client -vvf rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft File: P-xz79qKnlyT0KYKshWc4HCDC3E.mft (raw, json) Hash identifier: rRDbpieE82+3tQ2FkqeYg+opCAlE8c2cRQw+eZBKluI= Subject key identifier: 39:29:97:D4:D6:2D:3E:EF:0E:F4:01:CD:22:86:2E:28:5B:AF:CF:AD Authority key identifier: 3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 Certificate issuer: /CN=A9135597/serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Certificate serial: 0268 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft Manifest number: 025D Signing time: Wed 25 Mar 2026 01:42:41 +0000 Manifest this update: Wed 25 Mar 2026 01:42:40 +0000 Manifest next update: Wed 01 Apr 2026 01:42:40 +0000 Files and hashes: 1: P-xz79qKnlyT0KYKshWc4HCDC3E.crl (hash: vxRwqdwOm9lFnPGLhEQimBLhgXDaYj2Isu94cqWKgM0=) 2: 8140448E2D4211F0AB8B522BC4F9AE02.roa (hash: v3YArWNkFrdMq+ee+R0bqrCDqiwPYpiGlz8cLqE3fYY=) 3: 3F6EE8E42D4211F09E0C422AC4F9AE02.roa (hash: s7T3fDzFUmaFMuceB1FEdhH7hiWK+2N1YXF00t2ZV8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 616 (0x268) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135597, serialNumber=3FEC73EFDA8A9E5C93D0A60AB2159CE070830B71 Validity Not Before: Mar 25 01:42:40 2026 GMT Not After : Apr 1 01:42:40 2026 GMT Subject: CN=69c33d91-206e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:d2:e5:c0:9e:ea:c2:95:24:34:de:6a:6c: 27:1f:c9:ad:86:a7:53:45:5e:cc:9c:bd:18:3e:6d: f6:05:7b:ab:69:07:70:db:b0:02:df:68:cc:dd:46: 54:3b:64:10:50:c6:5b:bf:c7:34:80:79:6a:92:5a: 98:ad:9d:16:bc:53:ad:11:2c:8e:96:b4:e5:32:c6: 96:cd:ea:e3:7f:92:9c:c7:59:00:51:1c:d8:c2:e4: 6a:fc:bb:14:22:72:9c:2d:cf:bb:77:0d:de:3c:a2: 9b:7f:fe:6c:a3:d2:3c:9f:a1:f4:f7:1e:1e:2b:0f: 58:46:ea:0b:b5:f1:9b:50:c8:0b:29:45:a9:0b:47: b7:a9:7a:ac:a7:23:d8:95:af:da:fa:55:fb:f3:93: 2a:19:ed:7f:ac:a0:d7:26:5c:e7:f3:ad:3f:2e:b0: 66:41:44:91:fe:6d:3b:c6:73:5b:d8:d9:fc:74:f4: 1c:9f:c2:7d:04:eb:28:fd:8f:5c:92:80:b7:09:15: 5b:ed:a1:47:df:08:fc:16:77:66:09:a9:92:47:6b: ca:a6:ee:4c:73:e5:4c:41:6c:11:f0:5c:09:ca:19: 78:82:07:f2:77:75:da:c0:1c:23:da:77:af:19:04: e8:e7:fd:09:a7:aa:1c:57:53:b8:74:06:7c:e4:dc: 28:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:29:97:D4:D6:2D:3E:EF:0E:F4:01:CD:22:86:2E:28:5B:AF:CF:AD X509v3 Authority Key Identifier: keyid:3F:EC:73:EF:DA:8A:9E:5C:93:D0:A6:0A:B2:15:9C:E0:70:83:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P-xz79qKnlyT0KYKshWc4HCDC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135597/E9707D1E9A3A11ED81B1271DC4F9AE02/P-xz79qKnlyT0KYKshWc4HCDC3E.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:63:07:37:03:63:d5:34:19:63:5c:35:27:fb:42:58:59:85: 06:9a:c1:f1:58:b3:3e:fd:ac:16:d0:f8:d0:cc:13:4c:12:3f: 78:b1:9d:e7:31:ca:9b:70:3d:20:6d:19:75:59:80:8d:00:d3: b8:7a:cd:25:56:ce:c7:2d:27:d5:5d:9e:b3:54:c0:bd:66:93: 84:95:f2:13:ac:3d:78:74:96:b3:56:1d:97:fa:c8:4c:28:96: a2:cf:95:38:66:69:c0:39:1c:a2:0c:60:b2:57:99:07:20:e4: 6e:90:ef:39:cd:fa:2d:36:09:e3:2e:f5:f8:82:3b:b6:e8:a5: 9a:88:d0:01:e5:a4:d9:12:fb:a0:e8:ce:14:6a:d6:82:f7:da: f3:82:76:66:5e:89:24:ee:73:a3:18:41:53:96:8a:b4:59:6b: 76:66:d1:93:81:ae:9c:c5:1f:15:9f:25:9d:ca:ff:09:e5:f6: fe:47:1a:23:88:2d:a5:8a:a3:4a:22:1f:fd:c8:07:9e:ab:9e: bc:b8:91:6c:f1:25:ef:4a:2f:7c:04:2c:4f:24:41:26:61:50: 0a:67:04:b9:fc:77:14:59:42:ec:19:92:1f:3e:88:e1:dc:9e: f1:25:3e:19:c0:6b:a6:be:22:84:1b:2c:e6:b6:bf:50:e3:a9: c1:92:0f:87 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU1OTcxMTAvBgNVBAUTKDNGRUM3M0VGREE4QTlFNUM5M0QwQTYwQUIyMTU5Q0Uw NzA4MzBCNzEwHhcNMjYwMzI1MDE0MjQwWhcNMjYwNDAxMDE0MjQwWjAYMRYwFAYD VQQDEw02OWMzM2Q5MS0yMDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQ/S5cCe6sKVJDTeamwnH8mthqdTRV7MnL0YPm32BXuraQdw27AC32jM3UZU O2QQUMZbv8c0gHlqklqYrZ0WvFOtESyOlrTlMsaWzerjf5Kcx1kAURzYwuRq/LsU InKcLc+7dw3ePKKbf/5so9I8n6H09x4eKw9YRuoLtfGbUMgLKUWpC0e3qXqspyPY la/a+lX785MqGe1/rKDXJlzn860/LrBmQUSR/m07xnNb2Nn8dPQcn8J9BOso/Y9c koC3CRVb7aFH3wj8FndmCamSR2vKpu5Mc+VMQWwR8FwJyhl4ggfyd3XawBwj2nev GQTo5/0Jp6ocV1O4dAZ85NwoFwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDkpl9TW LT7vDvQBzSKGLihbr8+tMB8GA1UdIwQYMBaAFD/sc+/aip5ck9CmCrIVnOBwgwtx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTU5Ny9FOTcwN0QxRTlB M0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25seVQwS1lLc2hXYzRIQ0RD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1AteHo3OXFLbmx5VDBLWUtzaFdjNEhDREMzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTU5Ny9FOTcwN0QxRTlBM0ExMUVEODFCMTI3MURDNEY5QUUwMi9QLXh6NzlxS25s eVQwS1lLc2hXYzRIQ0RDM0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAGWMHNwNj1TQZY1w1J/tCWFmFBprB8VizPv2sFtD40MwTTBI/eLGd5zHKm3A9 IG0ZdVmAjQDTuHrNJVbOxy0n1V2es1TAvWaThJXyE6w9eHSWs1Ydl/rITCiWos+V OGZpwDkcogxgsleZByDkbpDvOc36LTYJ4y71+II7tuilmojQAeWk2RL7oOjOFGrW gvfa84J2Zl6JJO5zoxhBU5aKtFlrdmbRk4GunMUfFZ8lncr/CeX2/kcaI4gtpYqj SiIf/cgHnquevLiRbPEl70ovfAQsTyRBJmFQCmcEufx3FFlC7BmSHz6I4dye8SU+ GcBrpr4ihBss5ra/UOOpwZIPhw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:56 2026 by rpki-client