$ rpki-client -vvf rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft File: pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft (raw, json) Hash identifier: lNwa5J5tmO2OPEaT8kLdss6etVgO+Lqscjs6h24FsFw= Subject key identifier: 2D:A7:37:6A:75:FB:54:4D:25:4A:C1:F5:E2:2C:FA:D3:85:7D:05:FA Authority key identifier: A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 Certificate issuer: /CN=A9138506/serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft Manifest number: 066F Signing time: Tue 24 Mar 2026 22:13:57 +0000 Manifest this update: Tue 24 Mar 2026 22:13:56 +0000 Manifest next update: Tue 31 Mar 2026 22:13:56 +0000 Files and hashes: 1: pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl (hash: 4bWHHL1+38IcAL5j8qMGHGwfYNmDVSbQ4AT8pXi6e1Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138506, serialNumber=A4EC17B5FD2D44CD2DDD055BF534139F68FC6990 Validity Not Before: Mar 24 22:13:56 2026 GMT Not After : Mar 31 22:13:56 2026 GMT Subject: CN=69c30ca5-0424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:57:4a:fb:9f:96:db:ce:78:54:99:e4:02: 77:ab:73:f4:5d:f5:3f:e9:87:cf:e7:22:7b:af:74: 76:7f:2f:65:c6:36:28:97:39:4f:9d:6b:d7:29:31: c8:57:df:4f:08:87:d5:65:c5:7f:6d:8e:0e:6a:a8: 4a:ca:07:14:69:69:5c:27:fa:89:94:57:7c:d4:00: de:e0:0f:b4:f8:49:16:a2:e5:8e:32:c1:ce:9e:b0: c8:66:8d:09:c9:e5:66:ca:f2:e1:99:c9:31:51:26: 2b:fc:c4:88:25:8a:be:db:68:4b:3c:33:44:46:9c: 8b:34:52:d6:00:b4:f7:9d:9e:67:f0:4e:69:3d:e2: d7:93:d1:88:fc:17:19:f2:dd:89:97:0f:73:41:18: 5e:5e:6d:2e:d4:19:f4:c5:cf:33:b3:86:ab:66:2b: 8f:83:8b:e2:54:d5:2b:8a:75:27:ba:ff:b6:23:6f: 72:f5:1e:2d:12:80:86:4c:91:49:af:2d:99:b3:9c: 8a:2e:40:e4:4b:2e:2f:88:b5:ca:03:d7:65:d6:ab: 8c:d9:91:9c:89:a7:28:02:9b:a6:eb:23:b5:d4:61: f8:c8:f7:91:ed:02:52:0e:27:d8:ce:ff:86:bc:9c: fa:9b:16:42:c1:c0:59:ef:39:6f:80:e0:64:71:8a: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A7:37:6A:75:FB:54:4D:25:4A:C1:F5:E2:2C:FA:D3:85:7D:05:FA X509v3 Authority Key Identifier: keyid:A4:EC:17:B5:FD:2D:44:CD:2D:DD:05:5B:F5:34:13:9F:68:FC:69:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOwXtf0tRM0t3QVb9TQTn2j8aZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138506/159EB692B7C211EBBAFB7E65C4F9AE02/pOwXtf0tRM0t3QVb9TQTn2j8aZA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:6b:b9:ba:87:1e:de:fc:42:3d:f3:0c:d4:ee:62:fe:bc:87: 94:3e:9b:69:aa:fa:2a:c3:85:7d:b7:5a:77:db:25:df:01:72: 81:e8:84:7c:ba:04:71:05:b7:bb:a6:62:e9:86:18:f6:02:71: 7a:4c:60:a0:aa:bf:9e:50:58:bd:78:f9:c1:4a:9c:5c:13:b2: 9f:7e:4d:2b:f6:ff:e0:d2:3f:d8:5d:ec:bb:95:80:11:61:be: 61:4c:83:80:10:48:e3:73:58:38:a7:f2:99:99:19:21:b8:59: c5:5d:a9:e0:22:14:b9:17:9c:36:d6:4e:ad:06:f1:72:70:8e: c1:fc:73:dc:b8:11:b7:d4:a5:8e:e1:aa:09:97:b8:e6:d6:54: 02:47:30:8c:fa:e9:a1:a7:eb:62:75:6b:66:a0:01:7f:cb:ae: fd:56:84:0c:54:43:d5:97:6d:1d:e0:3b:2f:ad:ab:f8:cb:ec: 87:65:e6:8a:ff:c0:15:7f:c5:b8:2b:19:19:f8:87:28:86:8e: 0d:73:62:71:63:69:dc:03:63:00:5d:7c:72:9d:f4:0b:55:54: 2e:21:4a:49:db:e7:6c:f6:dc:e2:ec:88:9e:23:ba:80:1e:57: 97:d4:9a:85:2b:a6:c1:f5:f4:42:c4:53:8b:38:b6:7b:83:b5: 7d:74:9d:8c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzg1MDYxMTAvBgNVBAUTKEE0RUMxN0I1RkQyRDQ0Q0QyREREMDU1QkY1MzQxMzlG NjhGQzY5OTAwHhcNMjYwMzI0MjIxMzU2WhcNMjYwMzMxMjIxMzU2WjAYMRYwFAYD VQQDEw02OWMzMGNhNS0wNDI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmXhXSvufltvOeFSZ5AJ3q3P0XfU/6YfP5yJ7r3R2fy9lxjYolzlPnWvXKTHI V99PCIfVZcV/bY4OaqhKygcUaWlcJ/qJlFd81ADe4A+0+EkWouWOMsHOnrDIZo0J yeVmyvLhmckxUSYr/MSIJYq+22hLPDNERpyLNFLWALT3nZ5n8E5pPeLXk9GI/BcZ 8t2Jlw9zQRheXm0u1Bn0xc8zs4arZiuPg4viVNUrinUnuv+2I29y9R4tEoCGTJFJ ry2Zs5yKLkDkSy4viLXKA9dl1quM2ZGciacoApum6yO11GH4yPeR7QJSDifYzv+G vJz6mxZCwcBZ7zlvgOBkcYqTgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC2nN2p1 +1RNJUrB9eIs+tOFfQX6MB8GA1UdIwQYMBaAFKTsF7X9LUTNLd0FW/U0E59o/GmQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODUwNi8xNTlFQjY5MkI3 QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJNMHQzUVZiOVRRVG4yajhh WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BPd1h0ZjB0Uk0wdDNRVmI5VFFUbjJqOGFaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODUwNi8xNTlFQjY5MkI3QzIxMUVCQkFGQjdFNjVDNEY5QUUwMi9wT3dYdGYwdFJN MHQzUVZiOVRRVG4yajhhWkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlWu5uoce3vxCPfMM1O5i/ryHlD6baar6KsOFfbdad9sl3wFygeiEfLoEcQW3 u6Zi6YYY9gJxekxgoKq/nlBYvXj5wUqcXBOyn35NK/b/4NI/2F3su5WAEWG+YUyD gBBI43NYOKfymZkZIbhZxV2p4CIUuRecNtZOrQbxcnCOwfxz3LgRt9SljuGqCZe4 5tZUAkcwjPrpoafrYnVrZqABf8uu/VaEDFRD1ZdtHeA7L62r+Mvsh2Xmiv/AFX/F uCsZGfiHKIaODXNicWNp3ANjAF18cp30C1VULiFKSdvnbPbc4uyIniO6gB5Xl9Sa hSumwfX0QsRTizi2e4O1fXSdjA== -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:54 2026 by rpki-client