$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft File: oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft (raw, json) Hash identifier: 1Anr/3J2W+xh1E7kmTevNlZ3rPJcsI7xWVo7SQ7FcQw= Subject key identifier: BD:2A:9F:AD:DB:88:ED:5C:74:65:8C:35:33:59:2C:18:50:32:EB:4A Authority key identifier: A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 Certificate issuer: /CN=A9138B72/serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Certificate serial: 09EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft Manifest number: 09E4 Signing time: Tue 24 Mar 2026 19:40:07 +0000 Manifest this update: Tue 24 Mar 2026 19:40:06 +0000 Manifest next update: Tue 31 Mar 2026 19:40:06 +0000 Files and hashes: 1: oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl (hash: lfbkdGxFaju1Vb3phspJPn/El3w/tM+zQGFsGMQuBSk=) 2: 311647C0896C11EBA85B0747C4F9AE02.roa (hash: uCqwfowHtQ8vPR+sncnEXEdldLZsVFqnmIJTdvUAfsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2543 (0x9ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B72, serialNumber=A0CBB2CF7AED83C21973C70B64C0A4156C5BF5D2 Validity Not Before: Mar 24 19:40:06 2026 GMT Not After : Mar 31 19:40:06 2026 GMT Subject: CN=69c2e896-095e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:ca:da:10:25:4f:0c:6c:34:50:d2:46:ea: ce:3d:10:64:b8:c2:9d:45:34:84:02:c4:c5:1d:11: 01:99:31:7c:98:5f:57:e7:80:c9:81:f8:86:fa:75: fd:09:1f:59:f7:b7:08:45:fd:f4:63:22:a9:ca:4a: 29:a5:fb:cf:cb:a9:12:29:76:60:0e:70:88:43:da: e8:20:7a:e0:08:83:2b:d5:45:9e:3e:d3:79:41:ef: c6:7d:0f:2d:93:f9:f6:0c:70:42:bd:06:17:de:3d: 22:b2:a0:e4:1e:a8:50:8e:6f:0e:eb:a2:85:d1:55: 8e:78:8d:8b:92:63:0b:5d:da:0f:67:24:75:2e:ee: e2:da:49:de:3e:a0:46:77:c7:4a:6c:1d:a8:e7:e9: a1:48:59:f6:c4:32:ec:26:e4:4f:29:48:c4:9a:94: c6:8d:e7:e1:8d:83:17:84:27:ed:38:d5:30:92:33: 46:f4:51:b4:d3:01:9a:a1:e1:bb:86:b2:0f:bf:5d: 70:58:7c:fb:9a:29:21:75:28:51:00:5c:4c:02:0c: f8:97:52:c8:cc:56:89:56:43:76:67:28:54:c1:3c: 4d:08:26:3c:09:56:a6:59:bc:2f:5d:eb:c6:11:85: a6:59:b7:46:a5:49:b2:99:2c:87:ef:c0:cf:60:2e: 67:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2A:9F:AD:DB:88:ED:5C:74:65:8C:35:33:59:2C:18:50:32:EB:4A X509v3 Authority Key Identifier: keyid:A0:CB:B2:CF:7A:ED:83:C2:19:73:C7:0B:64:C0:A4:15:6C:5B:F5:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oMuyz3rtg8IZc8cLZMCkFWxb9dI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B72/1E400A9A9AB711EAAB22A37DC4F9AE02/oMuyz3rtg8IZc8cLZMCkFWxb9dI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:8d:09:d6:b3:d6:2b:b1:e7:d8:9d:1f:d9:d4:2d:70:d1:b3: 89:54:cd:4d:67:6b:c2:9c:ca:c1:72:26:30:c0:7d:21:cd:13: a0:b6:16:65:1d:8c:b9:05:73:32:80:62:04:70:47:e8:18:1e: b7:17:cb:df:44:66:7d:cc:5e:e3:e4:f1:07:af:6b:7a:2c:3a: 58:13:49:82:5c:14:8a:25:04:39:a4:29:da:ed:a1:ea:d3:3b: 3a:ae:e3:bf:cd:a6:19:6a:de:b8:18:b9:09:a8:ed:19:5f:bb: 1d:86:63:61:27:8f:02:c2:16:bf:f7:0c:3b:ed:7a:a5:a1:32: 45:3e:b0:d6:82:7a:5c:ef:10:86:cf:6f:4e:8a:46:05:69:e5: 35:af:93:96:b3:ef:9e:5e:09:92:2c:f4:e5:70:9b:84:6a:cf: d7:2b:e0:44:ca:59:55:ab:bc:38:b0:d0:bc:12:55:b6:5b:35: a2:61:31:66:08:1e:43:62:3b:66:09:e0:98:dc:b2:4a:9b:b1: 07:5e:93:60:53:2c:c7:b3:ed:f1:b8:3d:54:63:09:70:49:e2: 1c:92:fa:b8:7a:c3:da:e2:6c:b8:04:21:d1:9c:55:7d:cd:07: be:13:7f:e4:86:33:d7:15:7c:d3:5b:78:aa:1f:80:22:fd:6b: 29:d6:20:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCNzIxMTAvBgNVBAUTKEEwQ0JCMkNGN0FFRDgzQzIxOTczQzcwQjY0QzBBNDE1 NkM1QkY1RDIwHhcNMjYwMzI0MTk0MDA2WhcNMjYwMzMxMTk0MDA2WjAYMRYwFAYD VQQDEw02OWMyZTg5Ni0wOTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsorK2hAlTwxsNFDSRurOPRBkuMKdRTSEAsTFHREBmTF8mF9X54DJgfiG+nX9 CR9Z97cIRf30YyKpykoppfvPy6kSKXZgDnCIQ9roIHrgCIMr1UWePtN5Qe/GfQ8t k/n2DHBCvQYX3j0isqDkHqhQjm8O66KF0VWOeI2LkmMLXdoPZyR1Lu7i2knePqBG d8dKbB2o5+mhSFn2xDLsJuRPKUjEmpTGjefhjYMXhCftONUwkjNG9FG00wGaoeG7 hrIPv11wWHz7mikhdShRAFxMAgz4l1LIzFaJVkN2ZyhUwTxNCCY8CVamWbwvXevG EYWmWbdGpUmymSyH78DPYC5nZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL0qn63b iO1cdGWMNTNZLBhQMutKMB8GA1UdIwQYMBaAFKDLss967YPCGXPHC2TApBVsW/XS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEI3Mi8xRTQwMEE5QTlB QjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4SVpjOGNMWk1Da0ZXeGI5 ZEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29NdXl6M3J0ZzhJWmM4Y0xaTUNrRld4YjlkSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEI3Mi8xRTQwMEE5QTlBQjcxMUVBQUIyMkEzN0RDNEY5QUUwMi9vTXV5ejNydGc4 SVpjOGNMWk1Da0ZXeGI5ZEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZ40J1rPWK7Hn2J0f2dQtcNGziVTNTWdrwpzKwXImMMB9Ic0ToLYWZR2MuQVz MoBiBHBH6BgetxfL30Rmfcxe4+TxB69reiw6WBNJglwUiiUEOaQp2u2h6tM7Oq7j v82mGWreuBi5CajtGV+7HYZjYSePAsIWv/cMO+16paEyRT6w1oJ6XO8Qhs9vTopG BWnlNa+TlrPvnl4Jkiz05XCbhGrP1yvgRMpZVau8OLDQvBJVtls1omExZggeQ2I7 ZgngmNyySpuxB16TYFMsx7Pt8bg9VGMJcEniHJL6uHrD2uJsuAQh0ZxVfc0HvhN/ 5IYz1xV801t4qh+AIv1rKdYgiA== -----END CERTIFICATE-----Generated at Thu Mar 26 09:05:06 2026 by rpki-client