$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json) Hash identifier: gmZnfFb/j2RVz4Eg+RlTNUKzzGzY6+1OYMeMR03eJP0= Subject key identifier: 63:88:B7:BD:CE:BD:85:B5:94:71:0D:08:8B:A3:96:84:A4:0C:87:A6 Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft Manifest number: 0587 Signing time: Tue 24 Mar 2026 23:03:15 +0000 Manifest this update: Tue 24 Mar 2026 23:03:15 +0000 Manifest next update: Tue 31 Mar 2026 23:03:15 +0000 Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: OH5JlObHZfTpS/wMduEHG0k0DdGQGPNZO5Zwqpml+ss=) 2: FAD3BBFCDA3311F08928C2DC8AD3641D.roa (hash: aSuiDoqVGUo9FqPyHFG/YLpJ9f8pam3kOcqDIBOTLpk=) 3: DFC29B9EDA3311F0AF85FF988AD3641D.roa (hash: APVAdn0V+JjNqtnYFJXrw3vnTk5N1Az4I90CmHo6gTE=) 4: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: mUW7mZkRK0183V8DRL68AAx4KDMDpyr2zgUqvRvduaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:03:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Mar 24 23:03:15 2026 GMT Not After : Mar 31 23:03:15 2026 GMT Subject: CN=69c31833-db3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:df:ed:9f:4c:e6:ee:2f:9d:fb:c4:0f:28:9d: fb:5f:3a:fe:37:5e:b8:9e:22:21:56:fb:01:25:9f: 39:e2:ec:d3:b2:b7:78:b2:c6:b8:2c:0c:cd:77:97: 5b:99:70:f8:72:7f:1c:a4:ec:22:7f:b2:a7:f7:35: 05:e2:5c:8f:a0:5a:c1:2c:6a:ea:95:4d:e2:6f:32: 7c:84:68:85:a7:76:d4:c6:2d:df:50:7c:fb:ff:df: 47:16:6a:55:72:5e:7d:6f:24:55:7f:3c:61:95:52: df:20:4d:56:d3:e0:35:86:c5:11:b6:08:9e:79:f1: c5:43:c1:02:d6:ab:4f:a3:54:11:4a:87:19:89:fa: 05:b8:59:cf:ec:1d:d8:00:b6:e9:8b:3f:93:3d:51: 48:ac:80:2f:12:5d:6d:b9:ab:23:a6:58:19:b2:a0: 62:61:5d:4b:eb:c6:f6:99:f6:9f:f5:5c:9c:3c:dc: ba:1b:1c:d3:7c:ef:53:63:4c:64:69:b3:46:9c:30: 49:b3:e0:7a:5e:37:78:4c:53:86:75:16:fb:d6:1b: 22:44:d3:aa:7f:da:66:08:a6:cd:2f:2d:0c:05:93: ed:16:9b:78:5a:1a:1c:ad:aa:14:e6:ef:ff:44:c2: fe:74:f0:18:38:8b:8c:5b:64:76:3d:d3:ce:b9:15: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:88:B7:BD:CE:BD:85:B5:94:71:0D:08:8B:A3:96:84:A4:0C:87:A6 X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b1:a8:a9:ca:77:75:d4:af:4d:d5:e3:fa:a4:9a:0d:7b:b2: 73:57:a7:fe:86:91:10:6e:7e:f8:f4:80:6b:5d:55:0e:5a:09: 3b:80:06:42:cf:6c:eb:ae:63:c4:8f:a0:1d:1e:4c:d5:26:56: 3f:9a:e6:ca:9c:98:75:1e:59:9d:1b:51:a5:b1:63:c6:21:7a: 48:48:8d:e8:88:2e:76:3e:aa:7f:e9:13:8a:cd:f6:49:e5:35: d0:0a:e8:4a:86:38:9a:49:2d:22:e0:11:24:5f:b5:8c:ff:e3: 3c:e0:e4:9f:bf:d9:00:c6:44:cb:9c:f7:b6:2c:bc:ec:1f:ab: 0b:37:f4:48:f8:54:92:b3:08:d2:fc:cc:85:6c:1a:f1:7c:af: 49:da:16:11:8f:91:dd:10:59:73:a4:07:00:1f:5c:8c:0a:6d: b3:dd:27:5a:83:e2:6f:09:6b:8a:da:72:43:e1:57:af:e7:05: 5a:e6:42:3a:41:d1:76:af:0c:03:76:24:1c:fb:e3:83:e6:4e: 60:7a:41:11:d7:b4:b8:37:f5:45:56:44:3d:67:1e:b8:9d:4f: 7d:4c:fe:57:1c:d3:43:36:05:83:6a:86:f3:93:45:83:a2:be: 2b:24:ce:40:67:96:e2:61:d7:e7:95:9c:90:5f:b9:39:d7:a8: 87:ef:41:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjYwMzI0MjMwMzE1WhcNMjYwMzMxMjMwMzE1WjAYMRYwFAYD VQQDEw02OWMzMTgzMy1kYjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9/tn0zm7i+d+8QPKJ37Xzr+N164niIhVvsBJZ854uzTsrd4ssa4LAzNd5db mXD4cn8cpOwif7Kn9zUF4lyPoFrBLGrqlU3ibzJ8hGiFp3bUxi3fUHz7/99HFmpV cl59byRVfzxhlVLfIE1W0+A1hsURtgieefHFQ8EC1qtPo1QRSocZifoFuFnP7B3Y ALbpiz+TPVFIrIAvEl1tuasjplgZsqBiYV1L68b2mfaf9VycPNy6GxzTfO9TY0xk abNGnDBJs+B6Xjd4TFOGdRb71hsiRNOqf9pmCKbNLy0MBZPtFpt4WhocraoU5u// RML+dPAYOIuMW2R2PdPOuRWNkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGOIt73O vYW1lHENCIujloSkDIemMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnbGoqcp3ddSvTdXj+qSaDXuyc1en/oaREG5++PSAa11VDloJO4AGQs9s665j xI+gHR5M1SZWP5rmypyYdR5ZnRtRpbFjxiF6SEiN6Igudj6qf+kTis32SeU10Aro SoY4mkktIuARJF+1jP/jPODkn7/ZAMZEy5z3tiy87B+rCzf0SPhUkrMI0vzMhWwa 8XyvSdoWEY+R3RBZc6QHAB9cjApts90nWoPibwlritpyQ+FXr+cFWuZCOkHRdq8M A3YkHPvjg+ZOYHpBEde0uDf1RVZEPWceuJ1PfUz+VxzTQzYFg2qG85NFg6K+KyTO QGeW4mHX55WckF+5Odeoh+9B0w== -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:49 2026 by rpki-client