$ rpki-client -vvf rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft File: gg9wML6sbUnxCbqOwlplvyNprS8.mft (raw, json) Hash identifier: cd1wneMpSzIdGe3f5wrhNHEEx2xvxOFevvqjaoXNU2g= Subject key identifier: 40:8F:10:45:6A:03:F6:AD:B5:E7:7E:40:65:BC:7F:14:6C:82:C0:A2 Authority key identifier: 82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F Certificate issuer: /CN=A9146DAA/serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Certificate serial: 0243 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft Manifest number: 023D Signing time: Wed 25 Mar 2026 01:55:14 +0000 Manifest this update: Wed 25 Mar 2026 01:55:14 +0000 Manifest next update: Wed 01 Apr 2026 01:55:14 +0000 Files and hashes: 1: gg9wML6sbUnxCbqOwlplvyNprS8.crl (hash: RiIPBDmPfWrcKlj0r5Ihb4ZLlxChe6QQDvd1werzIWU=) 2: 08E67270C19611EDBDEEFD0BC4F9AE02.roa (hash: y+Wimi0nOKR+CCaPEyUVlyF7NSoOO3qXylD3M4nU6+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 579 (0x243) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146DAA, serialNumber=820F7030BEAC6D49F109BA8EC25A65BF2369AD2F Validity Not Before: Mar 25 01:55:14 2026 GMT Not After : Apr 1 01:55:14 2026 GMT Subject: CN=69c34082-3464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:a2:46:1c:83:7d:21:cf:27:07:1e:b2:f2: c3:fc:e7:91:33:24:4f:78:ac:5c:4f:48:0f:d3:28: 35:57:cc:35:38:bb:7e:e7:8a:ad:4c:4b:77:5b:59: c6:a3:ee:3c:ea:34:7b:01:99:76:87:45:37:7e:58: ef:dd:c6:64:e4:ec:98:d1:4c:0d:f9:b9:06:68:77: fb:cf:77:06:a7:e5:30:1f:77:5d:d8:5c:df:d4:02: b3:42:9e:d6:58:70:be:e6:2b:4d:95:57:5c:00:de: a0:70:8c:17:8e:b6:dc:24:2c:bb:31:20:76:63:bf: 2f:da:4d:35:9b:e4:fa:9b:e4:6a:2d:15:fa:5f:74: 66:e7:e4:63:fb:49:90:c6:77:42:35:9d:25:88:ad: b8:d4:89:65:2d:c8:5c:8f:a7:4a:29:78:b6:ce:76: f9:ba:96:00:49:69:4f:95:1f:22:a7:1f:6c:b4:6b: ac:f2:ad:42:e3:f5:ec:db:6a:3b:ed:89:1c:51:f0: b1:76:3a:1d:f8:41:a0:26:86:16:80:a9:02:7c:64: 3d:a9:ea:3f:b9:ad:79:c2:3d:e0:8c:db:51:e6:31: 22:ef:b8:a5:35:c5:ab:9d:5b:fa:8c:11:ea:ce:11: 84:62:97:ca:f2:5b:16:0d:ac:60:93:3c:3d:75:08: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8F:10:45:6A:03:F6:AD:B5:E7:7E:40:65:BC:7F:14:6C:82:C0:A2 X509v3 Authority Key Identifier: keyid:82:0F:70:30:BE:AC:6D:49:F1:09:BA:8E:C2:5A:65:BF:23:69:AD:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gg9wML6sbUnxCbqOwlplvyNprS8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146DAA/71EB7C5AC19311ED9B866B0BC4F9AE02/gg9wML6sbUnxCbqOwlplvyNprS8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:42:1f:d2:4a:e9:df:66:b0:7d:7c:88:1e:27:81:d9:26:86: 97:7d:be:e2:d9:4f:47:a2:98:b6:6c:ec:5c:76:48:f0:36:a9: a0:a8:37:62:7b:a4:e7:6a:11:e3:a8:80:bf:9e:ff:63:98:82: c9:f4:00:9b:fa:94:8a:14:7f:d0:af:3b:97:c9:1d:81:ec:0a: 8e:ce:70:65:2c:b4:c4:67:32:77:e2:09:ee:1d:11:1a:58:af: 9f:0a:7c:d9:6e:52:78:6a:a4:d5:a0:31:57:04:a2:96:d1:da: 2f:af:89:c7:8b:03:04:0a:1b:d3:be:a1:71:55:b1:79:d0:dd: 98:f3:5b:02:ae:ae:d8:e4:57:77:9c:95:3e:5c:89:b5:e5:f9: c4:47:af:32:29:89:2a:ef:70:49:2e:35:b5:ca:d1:8d:da:90: 4f:9f:ad:8e:a3:29:bf:4d:b6:1f:53:66:fb:82:0d:50:71:b5: 70:a4:14:d9:7c:b4:b9:9b:b4:dc:b1:6d:cb:61:f1:2a:67:f6: ff:27:56:89:01:d9:6d:1a:54:a7:5d:d6:58:ba:8f:dd:d1:f2: fc:24:ae:18:bd:73:f2:22:77:7d:4f:c5:58:e2:bf:05:01:84: eb:e3:51:59:4e:c8:a6:58:82:dc:15:17:b8:70:80:1c:40:51: 3a:11:d8:d3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAkMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZEQUExMTAvBgNVBAUTKDgyMEY3MDMwQkVBQzZENDlGMTA5QkE4RUMyNUE2NUJG MjM2OUFEMkYwHhcNMjYwMzI1MDE1NTE0WhcNMjYwNDAxMDE1NTE0WjAYMRYwFAYD VQQDEw02OWMzNDA4Mi0zNDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjiiRhyDfSHPJwcesvLD/OeRMyRPeKxcT0gP0yg1V8w1OLt+54qtTEt3W1nG o+486jR7AZl2h0U3fljv3cZk5OyY0UwN+bkGaHf7z3cGp+UwH3dd2Fzf1AKzQp7W WHC+5itNlVdcAN6gcIwXjrbcJCy7MSB2Y78v2k01m+T6m+RqLRX6X3Rm5+Rj+0mQ xndCNZ0liK241IllLchcj6dKKXi2znb5upYASWlPlR8ipx9stGus8q1C4/Xs22o7 7YkcUfCxdjod+EGgJoYWgKkCfGQ9qeo/ua15wj3gjNtR5jEi77ilNcWrnVv6jBHq zhGEYpfK8lsWDaxgkzw9dQj1iwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFECPEEVq A/atted+QGW8fxRsgsCiMB8GA1UdIwQYMBaAFIIPcDC+rG1J8Qm6jsJaZb8jaa0v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkRBQS83MUVCN0M1QUMx OTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JVbnhDYnFPd2xwbHZ5TnBy UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dnOXdNTDZzYlVueENicU93bHBsdnlOcHJTOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkRBQS83MUVCN0M1QUMxOTMxMUVEOUI4NjZCMEJDNEY5QUUwMi9nZzl3TUw2c2JV bnhDYnFPd2xwbHZ5TnByUzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO0If0krp32awfXyIHieB2SaGl32+4tlPR6KYtmzsXHZI8DapoKg3Ynuk52oR 46iAv57/Y5iCyfQAm/qUihR/0K87l8kdgewKjs5wZSy0xGcyd+IJ7h0RGlivnwp8 2W5SeGqk1aAxVwSiltHaL6+Jx4sDBAob076hcVWxedDdmPNbAq6u2ORXd5yVPlyJ teX5xEevMimJKu9wSS41tcrRjdqQT5+tjqMpv022H1Nm+4INUHG1cKQU2Xy0uZu0 3LFty2HxKmf2/ydWiQHZbRpUp13WWLqP3dHy/CSuGL1z8iJ3fU/FWOK/BQGE6+NR WU7IpliC3BUXuHCAHEBROhHY0w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:20:05 2026 by rpki-client