$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft File: rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json) Hash identifier: MHUfC84+D2wWkEQFAp7LV/mKMSpIn912ipRv+smSzCg= Subject key identifier: 7F:09:1A:3A:42:54:3D:F0:7A:65:99:FB:35:4E:07:83:87:E1:7F:0B Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 Certificate issuer: /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Certificate serial: 3528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft Manifest number: 3528 Signing time: Tue 24 Mar 2026 14:40:10 +0000 Manifest this update: Tue 24 Mar 2026 14:40:09 +0000 Manifest next update: Tue 31 Mar 2026 14:40:09 +0000 Files and hashes: 1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: ZIca+soAUPYjP8ArX5o4oohUMHtNZrBzWySKeijMey0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13608 (0x3528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606 Validity Not Before: Mar 24 14:40:09 2026 GMT Not After : Mar 31 14:40:09 2026 GMT Subject: CN=69c2a24a-ce5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:5c:e1:b6:f2:1d:3d:12:0b:5a:0a:2e:e4: cc:eb:2e:f8:ee:d2:a2:23:15:8c:cb:cd:38:83:3e: 7e:db:09:70:1e:eb:6e:bf:96:97:b3:12:27:d3:da: 37:08:54:f3:6b:32:6c:79:93:2d:79:e4:fd:0a:d2: 58:89:ef:51:6c:53:73:d1:3b:22:f0:44:88:42:7c: 91:c8:50:91:c2:0a:5e:13:f5:d8:14:52:94:f0:87: c3:52:2e:23:ef:75:98:9c:81:f5:ff:5a:24:1a:d2: 9b:1c:5f:ef:ca:11:6e:5b:bd:7c:bd:82:7b:db:15: 77:27:0f:68:83:73:41:38:f9:42:e8:90:9b:70:54: eb:d4:57:e2:93:29:15:37:c9:35:47:47:0a:a5:a0: 28:e1:e4:15:47:7c:4d:2e:c2:ad:37:59:3a:f9:b0: 05:76:54:c2:2c:5b:4d:cd:8b:90:d5:8e:dc:1c:d1: 7e:eb:03:54:d3:2b:24:f5:aa:be:59:0f:67:7b:cf: d5:df:e8:47:f5:f4:a1:fd:e3:f6:c5:75:13:b9:05: e4:e4:5d:ce:92:60:46:43:03:ed:5a:c8:c3:03:59: 07:08:cd:ae:40:4c:6c:0e:8c:82:2c:92:24:7b:df: 55:4f:22:b6:b6:1c:a7:a4:5d:92:68:84:f7:6e:36: 49:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:1A:3A:42:54:3D:F0:7A:65:99:FB:35:4E:07:83:87:E1:7F:0B X509v3 Authority Key Identifier: keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d0:43:05:a3:39:f2:69:be:02:e2:53:c9:8a:65:55:94:57: 09:c0:d5:1d:b7:e3:4c:f2:38:b5:fe:e9:da:50:a0:c5:0e:3a: b5:97:12:68:79:3e:4f:1c:80:c1:27:eb:de:80:59:b1:65:88: 3f:25:82:9c:4c:a1:64:b0:da:99:90:f0:cf:67:12:de:44:3e: 29:09:18:ec:09:cc:5e:68:4e:fe:ae:4d:15:86:3d:19:05:e6: 94:02:85:9c:bb:b7:34:f4:25:ad:30:c2:3c:d6:0a:c6:82:31: 54:d0:30:ed:b4:95:54:32:1c:51:05:92:65:97:2f:b1:44:68: 44:48:7c:1b:47:b9:6e:1e:17:39:4d:90:ab:da:57:5c:c7:9c: 1d:b8:87:b8:90:65:98:c3:7c:ac:d9:91:8a:a1:91:a9:75:5d: 81:7c:6e:49:dc:3b:9f:d8:2a:4c:c2:e0:1f:a2:1e:ec:1a:44: 01:5c:af:9e:65:8d:68:57:34:a4:1e:fc:84:c3:eb:54:ea:cb: 6c:a5:ab:f6:b2:a5:06:18:fd:35:9c:77:c0:00:8a:5b:53:8c: d0:cc:92:ec:56:48:4f:2e:1a:be:e1:a2:8c:b5:5c:b6:09:e3: 76:20:bf:b4:67:3d:96:82:90:21:11:a9:db:32:2c:db:8d:a1: 01:a7:5f:31 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFFMjgxMTAvBgNVBAUTKEFDMTlDNjZCQzRCMzFDRUI5MzBCQTZBRTBENkVCNzQ3 QjEwQUI2MDYwHhcNMjYwMzI0MTQ0MDA5WhcNMjYwMzMxMTQ0MDA5WjAYMRYwFAYD VQQDEw02OWMyYTI0YS1jZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8dc4bbyHT0SC1oKLuTM6y747tKiIxWMy804gz5+2wlwHutuv5aXsxIn09o3 CFTzazJseZMteeT9CtJYie9RbFNz0Tsi8ESIQnyRyFCRwgpeE/XYFFKU8IfDUi4j 73WYnIH1/1okGtKbHF/vyhFuW718vYJ72xV3Jw9og3NBOPlC6JCbcFTr1FfikykV N8k1R0cKpaAo4eQVR3xNLsKtN1k6+bAFdlTCLFtNzYuQ1Y7cHNF+6wNU0ysk9aq+ WQ9ne8/V3+hH9fSh/eP2xXUTuQXk5F3OkmBGQwPtWsjDA1kHCM2uQExsDoyCLJIk e99VTyK2thynpF2SaIT3bjZJ/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH8JGjpC VD3wemWZ+zVOB4OH4X8LMB8GA1UdIwQYMBaAFKwZxmvEsxzrkwumrg1ut0exCrYG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUUyOC84NDU4QjkxMDFE OEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhPdVRDNmF1RFc2M1I3RUt0 Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JCbkdhOFN6SE91VEM2YXVEVzYzUjdFS3RnWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUUyOC84NDU4QjkxMDFEOEYxMUUyQUIwM0EyRUUwOEIwMkNEMi9yQm5HYThTekhP dVRDNmF1RFc2M1I3RUt0Z1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHtBDBaM58mm+AuJTyYplVZRXCcDVHbfjTPI4tf7p2lCgxQ46tZcSaHk+TxyA wSfr3oBZsWWIPyWCnEyhZLDamZDwz2cS3kQ+KQkY7AnMXmhO/q5NFYY9GQXmlAKF nLu3NPQlrTDCPNYKxoIxVNAw7bSVVDIcUQWSZZcvsURoREh8G0e5bh4XOU2Qq9pX XMecHbiHuJBlmMN8rNmRiqGRqXVdgXxuSdw7n9gqTMLgH6Ie7BpEAVyvnmWNaFc0 pB78hMPrVOrLbKWr9rKlBhj9NZx3wACKW1OM0MyS7FZITy4avuGijLVctgnjdiC/ tGc9loKQIRGp2zIs242hAadfMQ== -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:00 2026 by rpki-client