$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft File: rCP1TTAVC0YAnBoCnl7s224FVlY.mft (raw, json) Hash identifier: xRtbPqeQSMHI0h9tdEGMfE+g0sWicODlfBKaXy4HyMs= Subject key identifier: 2E:58:9B:12:FF:A6:EB:49:D8:C8:1E:90:F3:95:BE:03:E9:2E:0C:DB Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Certificate serial: 0321 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft Manifest number: 031B Signing time: Wed 25 Mar 2026 00:46:52 +0000 Manifest this update: Wed 25 Mar 2026 00:46:52 +0000 Manifest next update: Wed 01 Apr 2026 00:46:52 +0000 Files and hashes: 1: rCP1TTAVC0YAnBoCnl7s224FVlY.crl (hash: e8yYUkgJIX5aW6euLHuvhecLWKz8VRpxKcz+koJgoY0=) 2: CA08C348098D11EDAB30E934C4F9AE02.roa (hash: UvlKwQqXfNX6TNtFAKTDpqec7TKizL2BqsLfAWubGJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:46:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 801 (0x321) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141586, serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656 Validity Not Before: Mar 25 00:46:52 2026 GMT Not After : Apr 1 00:46:52 2026 GMT Subject: CN=69c3307c-d091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:25:43:2a:90:5d:f1:70:12:5b:55:a9:22:c6: df:35:e4:a7:93:ae:c4:67:9c:31:b8:70:8b:99:bb: 82:d8:e1:8a:b4:b4:84:2a:85:fd:ad:9a:23:bf:17: 24:ea:d0:e7:84:45:82:81:dc:fd:58:25:de:a4:f0: 06:af:2a:45:b4:e9:7d:7b:0b:1b:6d:98:8e:c0:84: 07:4f:ea:f8:29:f7:96:45:3f:b7:91:73:7c:1f:46: 5d:34:28:1b:c3:55:61:6c:f7:bc:ee:32:06:76:6c: a8:59:19:00:f3:a0:24:58:36:de:6d:a2:c1:d2:67: 90:eb:30:8e:13:77:f8:7c:09:5d:33:5e:e3:cd:bd: 9b:3b:cf:db:35:b4:58:98:ce:46:a9:85:63:1e:b2: 72:c3:3b:ee:a3:6c:8b:38:1c:9c:4a:15:30:e0:b1: e7:f9:ec:10:3a:99:fb:ac:69:6d:d4:8c:25:e3:66: b3:3a:fb:34:34:39:7f:49:ce:c4:80:99:f0:1b:4f: b9:fe:60:cd:d1:a2:bc:82:6e:5c:34:22:24:8d:e5: f5:cc:ff:e0:47:29:ed:5d:97:40:33:77:af:9d:00: c5:25:05:98:e2:1e:82:23:0e:d0:7e:c7:fd:31:5e: 27:ac:90:1b:ca:64:42:c7:47:37:6c:64:69:fd:22: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:58:9B:12:FF:A6:EB:49:D8:C8:1E:90:F3:95:BE:03:E9:2E:0C:DB X509v3 Authority Key Identifier: keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:80:7b:d9:e4:f6:1b:43:07:f8:9c:2a:dd:d5:24:a6:b4:f6: 03:f5:b8:0e:cf:e2:61:eb:52:c4:b8:54:b8:4b:07:14:53:dc: a1:9f:54:79:1f:ed:9f:a2:80:1d:16:16:37:41:af:a4:46:08: 02:10:ff:92:c0:aa:64:9f:d2:40:93:d8:21:c0:74:22:84:d5: 17:3c:b5:05:9e:d7:bc:51:55:ad:29:90:bc:a2:f4:c2:e0:57: 24:cf:5c:c4:ce:08:52:b8:9b:30:c6:ba:e3:23:70:17:97:28: 7f:d4:3e:99:45:90:cb:04:b2:b8:76:00:89:1c:47:1b:bc:f7: 6f:07:ae:5c:bc:1f:bc:4e:f9:c8:da:51:6b:00:a1:16:4e:91: 11:1d:09:90:e3:81:2e:36:ee:11:03:d6:55:94:d4:ff:65:c2: 97:ca:6c:d9:fd:62:0a:b2:d0:9e:2c:02:51:1b:29:05:c8:37: 9e:21:fd:af:3b:57:ff:7a:f7:bc:02:d7:7e:a7:22:76:aa:9c: 3e:3d:17:a4:95:a3:d0:ef:50:ea:47:4e:be:84:29:b8:c4:bb: 55:74:34:4a:3a:32:82:3c:3b:85:75:43:6e:74:4a:fe:69:3e: 5d:de:2d:fa:44:17:1e:1a:ac:a8:80:b9:4c:63:5f:4a:85:f0: 49:3d:51:c3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1ODYxMTAvBgNVBAUTKEFDMjNGNTREMzAxNTBCNDYwMDlDMUEwMjlFNUVFQ0RC NkUwNTU2NTYwHhcNMjYwMzI1MDA0NjUyWhcNMjYwNDAxMDA0NjUyWjAYMRYwFAYD VQQDEw02OWMzMzA3Yy1kMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5iVDKpBd8XASW1WpIsbfNeSnk67EZ5wxuHCLmbuC2OGKtLSEKoX9rZojvxck 6tDnhEWCgdz9WCXepPAGrypFtOl9ewsbbZiOwIQHT+r4KfeWRT+3kXN8H0ZdNCgb w1VhbPe87jIGdmyoWRkA86AkWDbebaLB0meQ6zCOE3f4fAldM17jzb2bO8/bNbRY mM5GqYVjHrJywzvuo2yLOBycShUw4LHn+ewQOpn7rGlt1Iwl42azOvs0NDl/Sc7E gJnwG0+5/mDN0aK8gm5cNCIkjeX1zP/gRyntXZdAM3evnQDFJQWY4h6CIw7Qfsf9 MV4nrJAbymRCx0c3bGRp/SKMRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC5YmxL/ putJ2MgekPOVvgPpLgzbMB8GA1UdIwQYMBaAFKwj9U0wFQtGAJwaAp5e7NtuBVZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTU4Ni8wRDYxOTE2ODA5 OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMwWUFuQm9Dbmw3czIyNEZW bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JDUDFUVEFWQzBZQW5Cb0NubDdzMjI0RlZsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTU4Ni8wRDYxOTE2ODA5OEIxMUVEQUM4RkNGMkZDNEY5QUUwMi9yQ1AxVFRBVkMw WUFuQm9Dbmw3czIyNEZWbFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAnYB72eT2G0MH+Jwq3dUkprT2A/W4Ds/iYetSxLhUuEsHFFPcoZ9UeR/tn6KA HRYWN0GvpEYIAhD/ksCqZJ/SQJPYIcB0IoTVFzy1BZ7XvFFVrSmQvKL0wuBXJM9c xM4IUribMMa64yNwF5cof9Q+mUWQywSyuHYAiRxHG7z3bweuXLwfvE75yNpRawCh Fk6RER0JkOOBLjbuEQPWVZTU/2XCl8ps2f1iCrLQniwCURspBcg3niH9rztX/3r3 vALXfqcidqqcPj0XpJWj0O9Q6kdOvoQpuMS7VXQ0Sjoygjw7hXVDbnRK/mk+Xd4t +kQXHhqsqIC5TGNfSoXwST1Rww== -----END CERTIFICATE-----Generated at Thu Mar 26 09:53:51 2026 by rpki-client