$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: jpG9bogV14I5VvFYE6fLUbFkXk8gRgubAOwPKTiF9Tw= Subject key identifier: D7:B2:A9:6B:37:E7:37:52:08:BF:02:55:BC:3D:75:95:0D:F7:AF:A8 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 275D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 26D5 Signing time: Tue 24 Mar 2026 15:38:53 +0000 Manifest this update: Tue 24 Mar 2026 15:38:53 +0000 Manifest next update: Tue 31 Mar 2026 15:38:53 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: GVhr/IpIhspljGWcD+R6QZjrAzDBc7jh+YTcJp6e00I=) 2: 694FA6C678B511F0B9F98C80C4F9AE02.roa (hash: hm0KCaXb41mi9NBkToKwy9CiaM9xrRxIoRjp59b6bWM=) 3: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: Tk8uY2cStt4p4GExDz8M5IvVPgQ0LOtVOZ04RW6Ye9g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 15:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10077 (0x275d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Mar 24 15:38:53 2026 GMT Not After : Mar 31 15:38:53 2026 GMT Subject: CN=69c2b00d-bc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8f:67:a0:92:1c:68:39:2f:32:c1:37:86:5c: bf:e2:8e:bf:f0:77:1e:df:51:72:5f:14:84:d5:9b: 34:85:9a:61:e3:e3:77:27:7e:83:32:d6:b7:a1:e5: 1d:1e:03:bc:df:41:35:de:79:45:b8:5f:44:c6:d3: 4b:50:72:ad:2f:a4:39:a7:f0:6b:3c:fb:0b:d0:21: af:36:bc:f7:e5:a7:29:e7:20:0c:93:14:15:da:d0: 07:7d:ac:91:30:86:be:45:6f:75:42:9a:f6:38:fc: 0f:0b:0b:43:25:86:eb:8f:83:62:1d:8c:76:36:38: be:30:26:a2:c6:3b:94:11:e1:be:cd:26:2e:8a:19: dc:78:f1:b7:94:a3:77:ac:2a:3b:26:0f:b9:a9:c2: 0e:b0:09:1c:cc:d6:03:f4:47:24:81:3e:94:b9:1e: bc:fe:15:2b:60:8f:8b:61:d6:33:4d:a6:a0:10:0f: 5a:2a:ad:ff:12:a0:9c:36:b0:4b:27:4d:e6:03:03: 91:04:81:04:38:a0:fc:b0:35:c8:c9:45:57:f2:60: 75:26:8c:f0:61:8a:dc:5f:4b:28:19:87:8b:bd:f8: f3:84:c7:57:d9:e8:1d:a4:d5:a7:5e:9e:3f:c6:d0: 26:c6:67:e1:99:78:9e:17:25:91:ec:21:37:f4:b1: 6e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B2:A9:6B:37:E7:37:52:08:BF:02:55:BC:3D:75:95:0D:F7:AF:A8 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:7d:d4:78:38:c5:9f:ee:36:dc:34:63:b6:1b:30:e9:95:4c: bc:43:28:ba:20:40:c9:99:5f:6f:f6:56:35:26:a9:44:68:4a: 7c:d9:7c:33:88:54:83:5c:4c:63:45:ec:07:cd:cd:a5:a7:bf: 47:cd:85:da:26:f0:94:5a:bc:53:88:df:37:11:96:a7:50:4f: 79:12:91:70:8e:05:08:51:7c:d8:80:64:c0:34:c6:d7:9c:3e: 57:d4:92:0f:73:b9:f0:9c:c6:ae:40:ba:89:10:3d:f1:49:a8: c7:95:43:96:8a:6a:4f:24:4e:0f:4e:81:cb:5d:7f:e2:81:a4: 75:ce:ff:1e:5b:d7:85:d0:8e:91:08:ae:b5:6b:2a:6c:74:1d: 4a:5e:67:17:8f:fb:c7:80:53:8d:45:cc:d8:6a:76:b4:8e:2c: 3a:d2:1c:c3:10:5e:ca:f4:c7:57:65:ee:cb:1e:bf:73:e7:13: 2c:67:90:69:8d:21:45:dc:95:35:98:f1:e0:53:6d:62:f2:ef: 1e:00:1a:b5:b0:33:26:01:3a:04:c4:f0:e7:29:54:f4:82:3a: c0:d4:07:a5:69:e1:af:f6:bc:71:6a:83:bf:28:aa:ed:f7:58: 45:e5:1b:e7:5f:3d:fc:57:64:69:1a:58:ae:12:06:28:d7:98: 7b:53:0f:dd -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICJ10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjYwMzI0MTUzODUzWhcNMjYwMzMxMTUzODUzWjAYMRYwFAYD VQQDEw02OWMyYjAwZC1iYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv49noJIcaDkvMsE3hly/4o6/8Hce31FyXxSE1Zs0hZph4+N3J36DMta3oeUd HgO830E13nlFuF9ExtNLUHKtL6Q5p/BrPPsL0CGvNrz35acp5yAMkxQV2tAHfayR MIa+RW91Qpr2OPwPCwtDJYbrj4NiHYx2Nji+MCaixjuUEeG+zSYuihncePG3lKN3 rCo7Jg+5qcIOsAkczNYD9EckgT6UuR68/hUrYI+LYdYzTaagEA9aKq3/EqCcNrBL J03mAwORBIEEOKD8sDXIyUVX8mB1JozwYYrcX0soGYeLvfjzhMdX2egdpNWnXp4/ xtAmxmfhmXieFyWR7CE39LFuRQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNeyqWs3 5zdSCL8CVbw9dZUN96+oMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEARn3UeDjFn+423DRjthsw6ZVMvEMouiBAyZlfb/ZWNSapRGhKfNl8M4hUg1xM Y0XsB83Npae/R82F2ibwlFq8U4jfNxGWp1BPeRKRcI4FCFF82IBkwDTG15w+V9SS D3O58JzGrkC6iRA98Umox5VDlopqTyROD06By11/4oGkdc7/HlvXhdCOkQiutWsq bHQdSl5nF4/7x4BTjUXM2Gp2tI4sOtIcwxBeyvTHV2Xuyx6/c+cTLGeQaY0hRdyV NZjx4FNtYvLvHgAatbAzJgE6BMTw5ylU9II6wNQHpWnhr/a8cWqDvyiq7fdYReUb 5189/FdkaRpYrhIGKNeYe1MP3Q== -----END CERTIFICATE-----Generated at Thu Mar 26 02:32:26 2026 by rpki-client