$ rpki-client -vvf rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft File: MR39neQF4HHYMSH7kCX7TyAkAyw.mft (raw, json) Hash identifier: Rit/kUhmC/rlTC2AkhxCLE7vZD8Up/m3nM4LwULNBlQ= Subject key identifier: A9:93:6C:5A:21:C8:F5:0C:56:1C:1A:46:14:AA:E9:9E:6D:26:A9:1E Authority key identifier: 31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C Certificate issuer: /CN=A9147B3A/serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft Manifest number: 0A60 Signing time: Tue 24 Mar 2026 19:24:56 +0000 Manifest this update: Tue 24 Mar 2026 19:24:56 +0000 Manifest next update: Tue 31 Mar 2026 19:24:56 +0000 Files and hashes: 1: MR39neQF4HHYMSH7kCX7TyAkAyw.crl (hash: jdsaXnhKIWCVZBC/Q8Ep84ArtyBpC8FR3e6n7ybk8Yg=) 2: CD57B28C814211EA94DD3E2DC4F9AE02.roa (hash: 434SKTTjwOXz4gdHaKbOEAJjn8UxSxw4vUoNH4RsWqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:24:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147B3A, serialNumber=311DFD9DE405E071D83121FB9025FB4F2024032C Validity Not Before: Mar 24 19:24:56 2026 GMT Not After : Mar 31 19:24:56 2026 GMT Subject: CN=69c2e508-3f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:19:2f:8b:58:cc:ea:7e:93:6d:52:7e:22:ed: ab:aa:da:2b:96:9a:f4:59:b7:f2:39:1d:dd:64:ae: a8:9f:fb:40:1d:cf:d7:32:9f:f7:2e:3b:a8:cf:59: c3:f8:75:58:a2:15:95:2e:61:39:66:af:7b:a1:c1: a6:76:42:6c:84:4b:0d:ed:73:4a:8c:86:05:3c:6c: 55:c6:de:b7:33:0c:e3:bf:ef:36:03:16:af:09:e4: 72:d1:e8:ca:f4:42:67:27:ae:d0:09:fa:6e:8d:2d: bd:eb:18:6d:1e:c4:59:23:97:ae:f1:6b:36:a6:ed: b2:05:70:49:aa:8a:a5:61:b0:52:ca:2c:64:58:87: 24:16:b0:4e:9a:d4:bb:40:33:b5:70:8e:4b:1c:d6: 9a:8e:10:b4:bc:18:d1:5e:34:26:13:25:84:1a:d1: dc:72:2d:50:22:fa:5b:83:a0:de:2d:d0:fb:82:e0: a9:38:3b:26:41:74:17:be:14:16:99:c8:4a:cd:a9: f4:8a:10:e2:3b:38:8a:b9:45:0e:2a:48:c3:84:97: 46:49:04:8f:07:8b:e7:ca:0f:3b:7f:9b:ec:24:98: 29:09:bd:3d:78:ca:3f:c4:55:95:bd:a2:39:26:27: c7:39:af:1e:6c:09:55:93:fd:93:c7:f9:19:f9:e8: fc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:93:6C:5A:21:C8:F5:0C:56:1C:1A:46:14:AA:E9:9E:6D:26:A9:1E X509v3 Authority Key Identifier: keyid:31:1D:FD:9D:E4:05:E0:71:D8:31:21:FB:90:25:FB:4F:20:24:03:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MR39neQF4HHYMSH7kCX7TyAkAyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147B3A/551BF2BC814011EABB0D7228C4F9AE02/MR39neQF4HHYMSH7kCX7TyAkAyw.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:6f:34:c7:2e:59:25:58:b1:18:39:90:f2:e1:37:8d:51:71: 8c:28:c5:d9:e5:0a:9c:22:f3:14:a4:12:45:2c:e1:f4:af:76: cd:18:16:12:38:33:90:eb:eb:8c:ae:32:fa:f1:a7:35:01:a0: b7:7c:d4:bb:9e:24:ba:35:b5:f5:16:31:3d:d4:a2:6e:76:5e: 5c:d0:74:8f:91:c3:15:2a:b0:d7:08:9c:bf:29:58:8b:61:7b: c2:49:54:d0:b8:ee:dd:93:f9:59:0c:65:b3:86:dc:cc:53:e6: f2:80:fd:bd:53:53:e7:c3:c5:7b:c0:af:b8:9f:03:d8:25:8c: 04:06:3c:41:c9:8c:d4:b7:f8:2a:ac:71:fa:ff:5d:da:bd:7d: 21:a3:ae:f0:2f:99:03:31:ad:36:04:d0:bf:10:40:37:6e:f8: 09:7e:f4:57:2d:89:75:b3:28:ea:19:da:d3:ec:5f:d4:f0:e9: 0a:c9:e0:84:ef:ff:4a:d7:b5:de:3b:f3:f3:c5:ab:59:b4:20: 1a:d1:a6:c3:24:ea:b0:9d:fc:1a:08:59:7f:5c:34:55:37:c5: e2:82:6e:85:34:39:96:61:a0:88:54:2c:f5:60:04:e6:4c:c3: a9:8b:25:f5:64:0a:92:6a:be:82:c3:26:e1:9b:ac:0f:79:2d: bc:b4:b9:17 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDdCM0ExMTAvBgNVBAUTKDMxMURGRDlERTQwNUUwNzFEODMxMjFGQjkwMjVGQjRG MjAyNDAzMkMwHhcNMjYwMzI0MTkyNDU2WhcNMjYwMzMxMTkyNDU2WjAYMRYwFAYD VQQDEw02OWMyZTUwOC0zZjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+Rkvi1jM6n6TbVJ+Iu2rqtorlpr0WbfyOR3dZK6on/tAHc/XMp/3Ljuoz1nD +HVYohWVLmE5Zq97ocGmdkJshEsN7XNKjIYFPGxVxt63Mwzjv+82AxavCeRy0ejK 9EJnJ67QCfpujS296xhtHsRZI5eu8Ws2pu2yBXBJqoqlYbBSyixkWIckFrBOmtS7 QDO1cI5LHNaajhC0vBjRXjQmEyWEGtHcci1QIvpbg6DeLdD7guCpODsmQXQXvhQW mchKzan0ihDiOziKuUUOKkjDhJdGSQSPB4vnyg87f5vsJJgpCb09eMo/xFWVvaI5 JifHOa8ebAlVk/2Tx/kZ+ej8YQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKmTbFoh yPUMVhwaRhSq6Z5tJqkeMB8GA1UdIwQYMBaAFDEd/Z3kBeBx2DEh+5Al+08gJAMs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0IzQS81NTFCRjJCQzgx NDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRISFlNU0g3a0NYN1R5QWtB eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01SMzluZVFGNEhIWU1TSDdrQ1g3VHlBa0F5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 N0IzQS81NTFCRjJCQzgxNDAxMUVBQkIwRDcyMjhDNEY5QUUwMi9NUjM5bmVRRjRI SFlNU0g3a0NYN1R5QWtBeXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAv280xy5ZJVixGDmQ8uE3jVFxjCjF2eUKnCLzFKQSRSzh9K92zRgWEjgzkOvr jK4y+vGnNQGgt3zUu54kujW19RYxPdSibnZeXNB0j5HDFSqw1wicvylYi2F7wklU 0Lju3ZP5WQxls4bczFPm8oD9vVNT58PFe8CvuJ8D2CWMBAY8QcmM1Lf4Kqxx+v9d 2r19IaOu8C+ZAzGtNgTQvxBAN274CX70Vy2JdbMo6hna0+xf1PDpCsnghO//Ste1 3jvz88WrWbQgGtGmwyTqsJ38GghZf1w0VTfF4oJuhTQ5lmGgiFQs9WAE5kzDqYsl 9WQKkmq+gsMm4ZusD3ktvLS5Fw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:55 2026 by rpki-client