$ rpki-client -vvf rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft File: R9Br1-qN8hl_cScLdclkx5q58Mw.mft (raw, json) Hash identifier: PLFmbbWJXPbxhhd7ChBs9yH1+E6PAR00pvKIGswsXdY= Subject key identifier: 84:14:7E:3C:D0:25:0B:DC:D2:B0:67:5E:A5:4C:88:47:9A:91:A0:5C Authority key identifier: 47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC Certificate issuer: /CN=A9144354/serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Certificate serial: 120D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft Manifest number: 11F8 Signing time: Tue 24 Mar 2026 17:03:04 +0000 Manifest this update: Tue 24 Mar 2026 17:03:03 +0000 Manifest next update: Tue 31 Mar 2026 17:03:03 +0000 Files and hashes: 1: R9Br1-qN8hl_cScLdclkx5q58Mw.crl (hash: zy1h5T2DrGZ3F2pDo4Upx9pICgymyOH1LD5DFAkVoDk=) 2: 1B3EC39C525311EA939E4652C4F9AE02.roa (hash: OlyIY7R0t7UmXYws0QWQQU3lNAFUrjDepPqWUn8CEMM=) 3: 1C6ADB02525311EA939E4652C4F9AE02.roa (hash: QDOv/k1/6QwFO3v9/oK9m5KqC6iM+gtzDTOnLCwkAkg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4621 (0x120d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144354, serialNumber=47D06BD7EA8DF2197F71270B75C964C79AB9F0CC Validity Not Before: Mar 24 17:03:03 2026 GMT Not After : Mar 31 17:03:03 2026 GMT Subject: CN=69c2c3c8-d2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:53:07:53:79:19:73:10:cc:60:a2:2c:75:db: 70:a0:89:96:81:7f:02:fc:db:0a:7e:0f:c4:fb:11: 86:4f:ea:8a:ca:02:3c:83:82:6e:44:dd:19:c9:03: ef:6b:af:05:d6:16:e7:8e:d2:bd:f5:4b:10:2d:9d: bc:49:e1:66:f4:6a:cf:43:ac:f9:4e:30:26:67:80: 4a:0a:48:10:d2:07:d6:51:85:85:13:d1:ae:63:6e: 71:74:79:0c:7e:3d:f7:a1:e3:3b:b0:72:e7:99:59: b3:fa:5a:61:60:01:cb:b2:9d:e2:2e:71:4f:0a:53: 82:73:cc:d7:f5:3c:59:27:dd:8d:ea:d1:68:a5:70: df:84:f6:7c:49:e5:9d:f3:a9:f0:a1:b6:12:8c:f0: 3d:d9:2a:89:85:d0:85:f7:18:3d:7d:68:00:7c:76: 44:64:74:4a:43:f6:a5:b4:a2:66:f9:03:08:56:cf: 27:a3:82:47:b6:d9:bf:4c:bb:73:ae:45:f6:0a:30: c7:dd:07:41:07:98:fa:49:01:4d:4f:e6:14:c7:7b: e4:07:01:3a:c5:86:59:89:7a:60:83:8b:8b:eb:b5: 7a:bd:4e:68:14:e3:ab:1c:3b:98:ea:70:9a:31:d0: a1:3a:fc:54:de:ef:41:64:5c:fc:ef:25:66:a1:85: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:14:7E:3C:D0:25:0B:DC:D2:B0:67:5E:A5:4C:88:47:9A:91:A0:5C X509v3 Authority Key Identifier: keyid:47:D0:6B:D7:EA:8D:F2:19:7F:71:27:0B:75:C9:64:C7:9A:B9:F0:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R9Br1-qN8hl_cScLdclkx5q58Mw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144354/61A126E404E411E98CAFAA7BC4F9AE02/R9Br1-qN8hl_cScLdclkx5q58Mw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:66:35:8e:ce:ad:45:5b:4d:3b:68:d6:1e:01:38:82:5b:57: 5a:8b:ff:72:9d:d1:44:70:c9:20:ed:97:86:3a:13:f1:b0:08: 49:ea:3d:39:1c:38:4a:8c:97:ca:e0:8a:b7:4a:93:a3:ba:07: ee:58:e1:93:d5:fa:45:42:90:b0:cd:b4:30:db:4f:bc:f6:88: 04:97:ed:66:23:e0:39:ce:7c:7a:88:92:21:42:33:74:81:0b: a0:8c:04:66:5d:c9:68:48:cd:6a:c0:97:41:8b:32:a0:85:a0: 28:db:3f:3b:e6:00:39:af:d4:2b:07:6f:26:c0:4c:2f:e3:bf: 2d:2d:56:60:05:c8:d4:ca:f6:4f:91:a7:ce:69:0f:62:d9:6b: 9f:94:43:a2:58:76:bb:20:8e:fb:16:c1:c7:29:55:6d:74:ad: e7:89:8a:8b:e5:6f:a2:bf:51:34:14:cb:c0:5e:d9:ff:3b:26: b2:5e:26:b4:64:56:39:0b:65:0c:e1:e4:9c:47:97:fa:38:bc: fe:37:41:c8:50:7d:94:7d:b4:d2:bb:e1:84:82:c9:32:96:3c: c3:d0:9e:f1:33:9b:39:dc:f9:7f:dc:45:a9:d1:f8:6e:c2:db: a0:82:74:32:95:08:fa:88:a7:df:b2:05:22:de:5f:df:cd:a7: 56:ca:1f:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzNTQxMTAvBgNVBAUTKDQ3RDA2QkQ3RUE4REYyMTk3RjcxMjcwQjc1Qzk2NEM3 OUFCOUYwQ0MwHhcNMjYwMzI0MTcwMzAzWhcNMjYwMzMxMTcwMzAzWjAYMRYwFAYD VQQDEw02OWMyYzNjOC1kMmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21MHU3kZcxDMYKIsddtwoImWgX8C/NsKfg/E+xGGT+qKygI8g4JuRN0ZyQPv a68F1hbnjtK99UsQLZ28SeFm9GrPQ6z5TjAmZ4BKCkgQ0gfWUYWFE9GuY25xdHkM fj33oeM7sHLnmVmz+lphYAHLsp3iLnFPClOCc8zX9TxZJ92N6tFopXDfhPZ8SeWd 86nwobYSjPA92SqJhdCF9xg9fWgAfHZEZHRKQ/altKJm+QMIVs8no4JHttm/TLtz rkX2CjDH3QdBB5j6SQFNT+YUx3vkBwE6xYZZiXpgg4uL67V6vU5oFOOrHDuY6nCa MdChOvxU3u9BZFz87yVmoYWJlQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIQUfjzQ JQvc0rBnXqVMiEeakaBcMB8GA1UdIwQYMBaAFEfQa9fqjfIZf3EnC3XJZMeaufDM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM1NC82MUExMjZFNDA0 RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjhobF9jU2NMZGNsa3g1cTU4 TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I5QnIxLXFOOGhsX2NTY0xkY2xreDVxNThNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDM1NC82MUExMjZFNDA0RTQxMUU5OENBRkFBN0JDNEY5QUUwMi9SOUJyMS1xTjho bF9jU2NMZGNsa3g1cTU4TXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAqWY1js6tRVtNO2jWHgE4gltXWov/cp3RRHDJIO2XhjoT8bAISeo9ORw4SoyX yuCKt0qTo7oH7ljhk9X6RUKQsM20MNtPvPaIBJftZiPgOc58eoiSIUIzdIELoIwE Zl3JaEjNasCXQYsyoIWgKNs/O+YAOa/UKwdvJsBML+O/LS1WYAXI1Mr2T5GnzmkP Ytlrn5RDolh2uyCO+xbBxylVbXSt54mKi+Vvor9RNBTLwF7Z/zsmsl4mtGRWOQtl DOHknEeX+ji8/jdByFB9lH200rvhhILJMpY8w9Ce8TObOdz5f9xFqdH4bsLboIJ0 MpUI+oin37IFIt5f382nVsof3w== -----END CERTIFICATE-----Generated at Thu Mar 26 18:38:15 2026 by rpki-client