$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: qUn99VNuBed/hsHoW9VsgF5hytsjiLbOSy3XcwmY+2o= Subject key identifier: 60:5B:12:FC:6A:C2:01:17:B1:D4:14:71:97:F8:D3:DB:EB:E6:FE:62 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 1096 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 1078 Signing time: Tue 24 Mar 2026 17:16:30 +0000 Manifest this update: Tue 24 Mar 2026 17:16:29 +0000 Manifest next update: Tue 31 Mar 2026 17:16:29 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: drkXi7RBee+0CZ2Bz+DGWPNP9Qs3ymN9Jbcy3yfqfNY=) 2: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: FSH4LGHmCoYoOJO4j4TtaEvquXPAlXoI4u1Q0paHlwc=) 3: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: sXBQBxueKe1CqsSkcLSZtAl1yOR3L97KsnKbAwvpYXA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4246 (0x1096) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Mar 24 17:16:29 2026 GMT Not After : Mar 31 17:16:29 2026 GMT Subject: CN=69c2c6ee-f0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:16:a5:ad:48:4c:03:56:eb:cc:4a:34:79: 9c:f7:df:ae:42:14:2c:a0:43:45:19:74:5a:a7:2a: 4b:6b:6f:55:71:c0:7e:79:90:6e:b1:2d:76:b2:87: 08:32:a2:0c:45:62:fc:55:5e:12:87:e8:3c:81:05: c8:44:11:ef:85:f2:b9:17:e4:b0:43:a3:b1:af:f5: 42:ad:62:11:b0:d8:b8:f8:35:bd:9d:f4:8f:c7:6e: 14:37:e1:fa:25:ba:17:75:1b:2e:87:77:b2:bb:24: 48:e7:1c:b7:8e:de:58:dd:0b:10:62:b1:8b:fd:68: a4:ed:63:ee:24:13:1f:71:ad:88:e3:3a:c0:bc:4b: 5a:81:aa:79:30:0b:ea:19:e0:2d:63:22:9b:c2:ef: 48:1f:5a:3d:73:3d:c7:d2:05:54:e0:8b:aa:b4:c4: 41:e5:d6:c0:de:46:fb:ad:ec:2e:f3:ef:ff:b0:08: ac:62:0a:fe:bc:4f:80:2d:2b:fc:7a:31:93:29:69: f7:6c:fd:e8:01:bc:31:ab:e4:d5:e6:2f:21:a6:aa: 0b:27:2a:6e:b7:7a:dd:08:19:45:78:44:2e:d8:1f: 4b:2b:c8:7e:a2:fe:a8:44:a1:46:75:a9:08:14:55: b9:b3:31:6b:d0:1e:67:31:1f:97:5b:89:c1:9b:64: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:5B:12:FC:6A:C2:01:17:B1:D4:14:71:97:F8:D3:DB:EB:E6:FE:62 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:86:87:0d:14:a2:13:9c:c7:d0:4a:03:9a:e7:3f:82:ac:94: d5:c6:ce:ae:6c:0d:b1:b3:74:61:21:f4:93:d5:b2:f3:f8:ab: 31:fd:ca:c3:26:29:97:7f:c5:ea:e2:d2:9e:45:77:12:2c:fd: ce:60:d2:f3:85:4d:d3:df:bd:f0:ff:13:70:ba:3f:99:a2:23: 4b:48:d2:9e:fa:80:5b:7c:6b:d2:5a:87:02:7d:2b:97:a5:b5: 79:4c:cd:b0:56:6a:1f:6e:81:56:78:f4:77:cd:af:fb:cd:c6: fb:9a:53:ab:a7:96:29:c5:77:7b:b2:7c:eb:ff:99:ee:69:85: c4:b1:24:7d:40:98:c6:4b:26:81:ba:5f:c0:47:2c:34:3a:77: eb:b4:5b:44:35:2c:82:7d:34:9e:e3:39:62:9d:43:7d:16:c2: 5f:7e:11:86:71:15:a2:d0:bb:c6:b8:f8:4c:e3:b1:a7:69:e7: 0d:35:b0:a4:50:fe:de:5b:0c:b5:77:ef:74:e7:73:7f:6c:8c: 9b:0a:ba:0a:79:a9:10:20:1a:77:b6:05:75:6f:e3:09:49:d2: c1:a1:ad:94:e6:55:5b:17:0c:af:94:69:d1:8f:2f:3f:1e:95: 50:cc:e4:e2:9f:df:54:21:e5:66:f1:2c:74:68:b8:d1:da:1e: fd:15:71:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjYwMzI0MTcxNjI5WhcNMjYwMzMxMTcxNjI5WjAYMRYwFAYD VQQDEw02OWMyYzZlZS1mMGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY0Wpa1ITANW68xKNHmc99+uQhQsoENFGXRapypLa29VccB+eZBusS12socI MqIMRWL8VV4Sh+g8gQXIRBHvhfK5F+SwQ6Oxr/VCrWIRsNi4+DW9nfSPx24UN+H6 JboXdRsuh3eyuyRI5xy3jt5Y3QsQYrGL/Wik7WPuJBMfca2I4zrAvEtagap5MAvq GeAtYyKbwu9IH1o9cz3H0gVU4IuqtMRB5dbA3kb7rewu8+//sAisYgr+vE+ALSv8 ejGTKWn3bP3oAbwxq+TV5i8hpqoLJyput3rdCBlFeEQu2B9LK8h+ov6oRKFGdakI FFW5szFr0B5nMR+XW4nBm2QC1QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBbEvxq wgEXsdQUcZf409vr5v5iMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAD4aHDRSiE5zH0EoDmuc/gqyU1cbOrmwNsbN0YSH0k9Wy8/irMf3KwyYpl3/F 6uLSnkV3Eiz9zmDS84VN09+98P8TcLo/maIjS0jSnvqAW3xr0lqHAn0rl6W1eUzN sFZqH26BVnj0d82v+83G+5pTq6eWKcV3e7J86/+Z7mmFxLEkfUCYxksmgbpfwEcs NDp367RbRDUsgn00nuM5Yp1DfRbCX34RhnEVotC7xrj4TOOxp2nnDTWwpFD+3lsM tXfvdOdzf2yMmwq6CnmpECAad7YFdW/jCUnSwaGtlOZVWxcMr5Rp0Y8vPx6VUMzk 4p/fVCHlZvEsdGi40doe/RVx1w== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:01 2026 by rpki-client