$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft File: N9M3SYXzuqgtC-BMbYejoDXiDeo.mft (raw, json) Hash identifier: gDI6MXgBljUlIWlTiydJXS1gbnk+BnFuKq8JH5l+VOY= Subject key identifier: 3A:F2:1B:51:D7:EB:A5:0C:65:4D:2F:C7:EC:13:E6:35:92:E1:B9:73 Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 1A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft Manifest number: 19F8 Signing time: Tue 24 Mar 2026 16:16:11 +0000 Manifest this update: Tue 24 Mar 2026 16:16:10 +0000 Manifest next update: Tue 31 Mar 2026 16:16:10 +0000 Files and hashes: 1: N9M3SYXzuqgtC-BMbYejoDXiDeo.crl (hash: UUcUU5UFN7/EXRUBz1fjMyJ+iCPXd9AbmsypObyh80I=) 2: 8351896675D611E88AFEBA28C4F9AE02.roa (hash: zRlRK9BeH8fdXLqsfz/46RYZS4/HEzNIowRP+B9H4J4=) 3: 226DEC1275D511E88D5FDF24C4F9AE02.roa (hash: zKRxtwWLD/aVwZZeGl5qQOwJsbYCaLBjaAyISkZq1sA=) 4: 433F089AE49A11EB85874B74C4F9AE02.roa (hash: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6683 (0x1a1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: Mar 24 16:16:10 2026 GMT Not After : Mar 31 16:16:10 2026 GMT Subject: CN=69c2b8cb-4a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:5c:af:66:4f:4f:c9:9a:dc:5b:4c:2b:fe: 99:b5:43:7f:7d:e0:d2:10:35:11:89:69:22:fe:96: 0c:5e:8f:bc:5a:f5:16:3b:a7:a2:aa:5b:28:0d:df: d8:5d:90:a8:f5:eb:89:9e:a4:5c:a2:c3:01:53:43: 87:c5:6a:8a:6e:73:c7:2b:d5:88:b6:39:5f:ff:56: c7:33:1c:c1:91:b7:79:e3:92:ee:13:b4:0c:c1:81: e4:d8:54:3b:1f:5c:3e:24:50:7a:81:41:87:a7:25: 15:d9:34:19:42:7e:27:4e:59:67:84:5f:99:55:a4: d7:0f:44:8d:5d:2f:3f:97:6c:27:08:8a:92:ff:f3: 7b:86:99:e3:81:38:fb:48:47:2e:ec:26:12:06:f8: a5:76:e5:49:35:3b:ca:54:92:ba:d1:6a:3c:73:dd: ef:0d:0c:38:77:0f:ca:fb:bb:06:18:68:e9:cc:c6: b8:03:0b:f1:b0:3c:7d:15:f4:e3:1e:e9:52:b0:6c: 55:d7:5f:bd:9c:48:95:73:21:aa:70:8b:f7:ab:ec: 37:05:21:91:9a:26:c0:fd:c9:06:36:f6:d6:5a:bd: c7:6e:40:19:0b:a2:62:f3:d1:6b:7e:74:93:f7:19: 8b:48:54:fe:a6:75:bb:50:8e:b6:27:f5:cb:78:69: 7e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F2:1B:51:D7:EB:A5:0C:65:4D:2F:C7:EC:13:E6:35:92:E1:B9:73 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:68:0d:46:7c:03:5d:ee:6c:1a:de:36:ef:f9:f7:99:dd:8a: b7:50:4e:88:75:43:86:35:10:16:45:e7:03:71:7c:6a:ef:38: 12:36:de:be:b1:fa:ab:89:61:01:95:09:91:89:bb:4a:00:5d: d0:77:ae:4b:a5:cc:f9:4f:07:ad:f7:81:c4:66:48:86:e1:ac: b3:73:17:e1:cf:2f:74:37:fe:da:32:cc:48:46:c2:88:b7:56: 85:e3:fb:f3:fc:f4:1d:a0:11:ae:e9:a1:56:be:ef:bd:e4:87: 87:3f:2c:20:49:73:99:27:3f:a7:89:b7:80:1f:32:07:5e:5e: 64:fd:5a:fc:94:37:80:ad:ef:8d:ac:2b:a4:aa:23:25:ea:a6: 3c:8a:23:a6:82:06:9a:0e:cd:c8:43:8b:06:c0:61:7f:2d:8d: 22:8b:cf:e2:e7:d1:99:46:d0:8c:f0:4d:c2:aa:b9:0c:71:0f: 53:b0:7e:26:81:f5:bb:42:5a:dc:65:e5:03:03:39:ef:e4:49: 56:03:86:c0:9c:31:03:1f:49:8f:7c:ca:d3:66:97:f7:87:d4: 74:e7:a7:f1:6a:95:98:55:03:b5:74:f4:e5:48:86:8b:36:50: 24:bc:7a:ad:b9:ad:19:82:36:78:56:eb:e2:63:41:26:fa:99: 32:70:86:79 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjYwMzI0MTYxNjEwWhcNMjYwMzMxMTYxNjEwWjAYMRYwFAYD VQQDEw02OWMyYjhjYi00YTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuytcr2ZPT8ma3FtMK/6ZtUN/feDSEDURiWki/pYMXo+8WvUWO6eiqlsoDd/Y XZCo9euJnqRcosMBU0OHxWqKbnPHK9WItjlf/1bHMxzBkbd545LuE7QMwYHk2FQ7 H1w+JFB6gUGHpyUV2TQZQn4nTllnhF+ZVaTXD0SNXS8/l2wnCIqS//N7hpnjgTj7 SEcu7CYSBvilduVJNTvKVJK60Wo8c93vDQw4dw/K+7sGGGjpzMa4AwvxsDx9FfTj HulSsGxV11+9nEiVcyGqcIv3q+w3BSGRmibA/ckGNvbWWr3HbkAZC6Ji89FrfnST 9xmLSFT+pnW7UI62J/XLeGl+QQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDryG1HX 66UMZU0vx+wT5jWS4blzMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVGQi83RjQ4ODk2ODczNUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVx Z3RDLUJNYlllam9EWGlEZW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA12gNRnwDXe5sGt427/n3md2Kt1BOiHVDhjUQFkXnA3F8au84EjbevrH6q4lh AZUJkYm7SgBd0HeuS6XM+U8HrfeBxGZIhuGss3MX4c8vdDf+2jLMSEbCiLdWheP7 8/z0HaARrumhVr7vveSHhz8sIElzmSc/p4m3gB8yB15eZP1a/JQ3gK3vjawrpKoj JeqmPIojpoIGmg7NyEOLBsBhfy2NIovP4ufRmUbQjPBNwqq5DHEPU7B+JoH1u0Ja 3GXlAwM57+RJVgOGwJwxAx9Jj3zK02aX94fUdOen8WqVmFUDtXT05UiGizZQJLx6 rbmtGYI2eFbr4mNBJvqZMnCGeQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:05 2026 by rpki-client