$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft File: 9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json) Hash identifier: Qg/8/LmOUAICYRpmq+DyPqwOSqDyw9P1E3vC09YG7Rs= Subject key identifier: 5A:A0:05:6D:CE:DC:57:B7:45:E3:97:9B:98:D3:E8:40:FA:71:D3:9A Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 Certificate issuer: /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft Manifest number: 010C Signing time: Wed 25 Mar 2026 05:14:23 +0000 Manifest this update: Wed 25 Mar 2026 05:14:23 +0000 Manifest next update: Wed 01 Apr 2026 05:14:23 +0000 Files and hashes: 1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: 68K98VECdWMfVoCn5ZPTIQvNEDubcYOC6sH/on3fS70=) 2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488 Validity Not Before: Mar 25 05:14:23 2026 GMT Not After : Apr 1 05:14:23 2026 GMT Subject: CN=69c36f2f-6aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:e6:9e:a3:09:21:6a:89:0e:28:5c:37:b6: bf:14:45:5c:33:b2:11:50:bf:3c:b4:7d:43:83:ed: c1:11:45:dd:57:06:a1:43:d9:8e:38:b6:fc:6d:17: 31:55:07:c6:28:8c:12:0a:6f:fb:ab:d5:57:f8:33: db:cc:2a:3b:9d:1c:0b:c6:08:32:fa:7b:5b:4b:4c: 86:b0:64:87:bc:ab:6b:16:cb:6a:66:39:46:9b:9a: 87:a9:d7:4d:79:55:4f:98:ae:63:5f:36:1b:ad:c5: 01:ba:bb:22:7c:7a:ef:90:35:d1:33:5c:0a:d5:5f: 21:53:49:a3:d9:22:0b:31:df:72:12:e7:8e:3f:c0: cc:4b:d5:44:da:df:78:0c:a7:f2:c5:d8:b8:76:c8: ca:0d:87:40:23:ba:84:b6:55:86:54:5e:83:a2:f4: 1f:a8:d9:7f:d8:fb:97:75:b0:ee:56:a3:7a:0d:e3: 19:54:78:9a:00:08:06:22:b7:73:c3:74:e3:13:e7: aa:e3:e1:b2:a8:e1:d8:46:7f:2f:9c:24:b9:26:d8: a4:99:69:f2:09:13:71:ec:db:da:df:14:4f:48:b2: 5b:ca:1c:fe:27:b6:81:6c:70:54:fa:18:36:92:51: fb:3a:40:fe:40:3a:b1:2d:ff:25:14:88:f7:39:b8: 0b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A0:05:6D:CE:DC:57:B7:45:E3:97:9B:98:D3:E8:40:FA:71:D3:9A X509v3 Authority Key Identifier: keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:59:d0:bf:c5:60:e1:24:29:43:e4:68:1d:0f:c0:60:ce:5e: a6:5e:86:09:ac:2e:9a:70:62:05:ed:40:ab:8b:32:ed:e7:b7: 0e:d4:f0:b3:7c:a4:e3:cf:44:ae:4a:65:d9:8a:f1:22:74:eb: 63:ef:02:67:00:17:3b:e3:6c:7e:1b:15:5f:1d:df:93:56:ce: 19:ae:92:cb:85:57:8e:05:51:21:8b:0e:a9:cc:e0:53:65:7b: db:ae:71:cc:1a:2e:b7:4b:7e:43:38:63:98:a7:ff:08:a2:02: be:67:72:5c:e5:e7:7e:0c:97:d5:80:7e:60:3b:6b:de:e5:f3: 72:29:8f:e8:76:97:69:21:97:87:a6:fe:c3:eb:b8:a4:42:bc: fb:da:71:cd:3d:39:44:f6:09:84:8d:af:5d:7d:23:67:28:55: 38:c6:7e:bc:9c:03:d7:36:6f:40:80:2f:f0:43:05:be:97:bd: 61:05:90:69:6b:0c:0e:31:26:ea:91:66:0c:7f:6f:bc:a2:70: 59:71:75:8e:3b:1f:d2:df:df:f0:8d:a3:ec:53:2a:f8:0a:8d: bd:c5:1c:68:40:7d:fe:aa:49:c0:5d:3b:10:b2:39:3d:09:5e: 83:da:0d:3b:59:e8:ec:8d:8f:8d:fd:f3:18:f6:91:9b:09:33: 2f:f1:4c:91 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI3RTIxMTAvBgNVBAUTKEY0NDRCOEREQUMxQTJBRUM5Qzk4RDg5ODE2MUM3MzQ4 MkMyRUQ0ODgwHhcNMjYwMzI1MDUxNDIzWhcNMjYwNDAxMDUxNDIzWjAYMRYwFAYD VQQDEw02OWMzNmYyZi02YWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46TmnqMJIWqJDihcN7a/FEVcM7IRUL88tH1Dg+3BEUXdVwahQ9mOOLb8bRcx VQfGKIwSCm/7q9VX+DPbzCo7nRwLxggy+ntbS0yGsGSHvKtrFstqZjlGm5qHqddN eVVPmK5jXzYbrcUBursifHrvkDXRM1wK1V8hU0mj2SILMd9yEueOP8DMS9VE2t94 DKfyxdi4dsjKDYdAI7qEtlWGVF6DovQfqNl/2PuXdbDuVqN6DeMZVHiaAAgGIrdz w3TjE+eq4+GyqOHYRn8vnCS5JtikmWnyCRNx7Nva3xRPSLJbyhz+J7aBbHBU+hg2 klH7OkD+QDqxLf8lFIj3ObgLWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFqgBW3O 3Fe3ReOXm5jT6ED6cdOaMB8GA1UdIwQYMBaAFPREuN2sGirsnJjYmBYcc0gsLtSI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjdFMi83MDMxQTFFQzkz NTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1eWNtTmlZRmh4elNDd3Ux SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlFUzQzYXdhS3V5Y21OaVlGaHh6U0N3dTFJZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjdFMi83MDMxQTFFQzkzNTAxMUVGQkFDRTAwNENDNEY5QUUwMi85RVM0M2F3YUt1 eWNtTmlZRmh4elNDd3UxSWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQlnQv8Vg4SQpQ+RoHQ/AYM5epl6GCawumnBiBe1Aq4sy7ee3DtTws3yk489E rkpl2YrxInTrY+8CZwAXO+NsfhsVXx3fk1bOGa6Sy4VXjgVRIYsOqczgU2V7265x zBout0t+QzhjmKf/CKICvmdyXOXnfgyX1YB+YDtr3uXzcimP6HaXaSGXh6b+w+u4 pEK8+9pxzT05RPYJhI2vXX0jZyhVOMZ+vJwD1zZvQIAv8EMFvpe9YQWQaWsMDjEm 6pFmDH9vvKJwWXF1jjsf0t/f8I2j7FMq+AqNvcUcaEB9/qpJwF07ELI5PQleg9oN O1no7I2Pjf3zGPaRmwkzL/FMkQ== -----END CERTIFICATE-----Generated at Thu Mar 26 21:00:01 2026 by rpki-client