$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft File: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json) Hash identifier: /Rf5HFxHiT05Vdqf7Z9doI7/hLN0QPqtmXIkWFs0pIQ= Subject key identifier: 3D:31:CC:89:D1:4E:29:77:26:0D:98:97:CC:F9:5B:E2:57:D2:9B:B0 Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F Certificate issuer: /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft Manifest number: 09 Signing time: Wed 25 Mar 2026 08:20:15 +0000 Manifest this update: Wed 25 Mar 2026 08:20:15 +0000 Manifest next update: Wed 01 Apr 2026 08:20:15 +0000 Files and hashes: 1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: fJVjY33wUPfI1XFVFhZwC7vEhNAcmvySfgY4IVzzhJs=) 2: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=) 3: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:20:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F Validity Not Before: Mar 25 08:20:15 2026 GMT Not After : Apr 1 08:20:15 2026 GMT Subject: CN=69c39abf-7cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8e:22:13:47:9d:bd:e4:0d:e4:9c:97:8f:22: eb:77:77:ba:9d:3b:67:51:3e:9e:f2:e7:79:86:e5: fd:df:54:55:88:bf:ae:c1:06:59:b4:ab:98:b5:22: 97:44:a7:97:d2:20:08:88:0b:ad:68:ce:70:4f:00: e6:5c:27:f5:30:79:4d:ad:91:88:af:dc:e4:71:9b: 38:ec:98:8a:3e:75:58:c6:ad:a2:fe:67:c8:74:01: 87:e7:ff:c3:ab:20:30:2c:80:bd:46:b5:b2:b2:1c: 1e:cb:93:18:7a:c0:f3:c6:7f:b2:e3:62:a6:a0:01: 92:a9:f9:6c:7f:35:af:d9:df:cd:57:d9:0e:80:b1: 0f:cf:45:90:6f:5c:8b:1b:53:e6:6f:94:7c:77:20: e5:f1:2b:3c:8a:33:4a:80:60:94:66:06:8c:53:93: 63:94:4a:cd:2e:4f:04:65:fb:26:bb:7b:4a:d0:50: da:95:22:43:df:96:f9:5c:bd:10:ac:13:76:57:03: fd:bb:41:69:1f:8e:95:35:d2:2d:66:3b:5c:40:1d: b3:3f:86:7c:ce:82:2b:d1:7e:b8:6f:46:69:3f:e2: bc:74:f9:a9:39:d9:ce:20:7a:6d:ba:a1:4a:e1:4c: 68:ae:17:59:dd:81:50:5c:c8:aa:09:a3:cd:49:04: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:CC:89:D1:4E:29:77:26:0D:98:97:CC:F9:5B:E2:57:D2:9B:B0 X509v3 Authority Key Identifier: keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ce:f4:e9:6e:6e:e7:41:2a:05:95:ef:ab:e5:0a:aa:32:b2: c3:30:a4:40:af:cd:93:9d:47:06:52:f2:00:dd:ac:08:10:6b: 75:01:9d:ab:09:86:42:8a:45:0b:67:86:c1:d6:fe:2b:78:71: 17:62:87:f2:a2:a3:3d:9f:84:a8:14:6d:10:74:6f:cf:81:f5: 60:26:20:29:0c:c7:47:79:fa:d2:76:f9:59:a4:60:26:44:16: d9:8b:f6:53:9d:37:08:8a:b8:57:23:e8:2c:ba:7b:f7:e0:e7: e4:8c:ba:ec:33:68:9a:b7:9b:e2:92:f5:6c:b0:52:23:cb:68: a4:00:ca:02:eb:30:d9:0c:0a:95:8c:fa:c3:65:43:85:c6:d3: 9e:18:69:8b:2e:90:3b:38:00:42:e3:b3:15:40:41:37:3a:2c: d2:03:77:37:ff:2d:e7:b3:ca:07:db:1d:c1:18:76:6d:67:79: a4:04:69:9f:5e:1c:5b:a4:9b:07:64:f0:5a:2b:33:1e:7e:10: e8:fb:d9:77:6c:6a:55:a2:6a:6f:67:fd:6e:69:82:aa:2d:b2: 84:cd:97:7c:f0:f8:3a:60:eb:48:1f:be:d2:a9:7e:b6:e5:4d: 79:5b:37:68:a4:08:f6:dc:94:a1:0f:c7:1a:08:42:47:23:d2: 46:5d:fd:04 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUMwNTExMC8GA1UEBRMoMDA4RDRGOUY1ODY4RUMyMkE3QTkxRUNBQURDRDdFMEQz QjMxMTE3RjAeFw0yNjAzMjUwODIwMTVaFw0yNjA0MDEwODIwMTVaMBgxFjAUBgNV BAMTDTY5YzM5YWJmLTdjZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDijiITR5295A3knJePIut3d7qdO2dRPp7y53mG5f3fVFWIv67BBlm0q5i1IpdE p5fSIAiIC61oznBPAOZcJ/UweU2tkYiv3ORxmzjsmIo+dVjGraL+Z8h0AYfn/8Or IDAsgL1GtbKyHB7Lkxh6wPPGf7LjYqagAZKp+Wx/Na/Z381X2Q6AsQ/PRZBvXIsb U+ZvlHx3IOXxKzyKM0qAYJRmBoxTk2OUSs0uTwRl+ya7e0rQUNqVIkPflvlcvRCs E3ZXA/27QWkfjpU10i1mO1xAHbM/hnzOgivRfrhvRmk/4rx0+ak52c4gem26oUrh TGiuF1ndgVBcyKoJo81JBNiHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUPTHMidFO KXcmDZiXzPlb4lfSm7AwHwYDVR0jBBgwFoAUAI1Pn1ho7CKnqR7Krc1+DTsxEX8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5QzA1Lzc3QkFDNDMwMUQw MDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NLbnFSN0tyYzEtRFRzeEVY OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUkxUG4xaG83Q0tucVI3S3JjMS1EVHN4RVg4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 QzA1Lzc3QkFDNDMwMUQwMDExRjFBMTIxMEIxRTAzM0Q4QzY3L0FJMVBuMWhvN0NL bnFSN0tyYzEtRFRzeEVYOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCPzvTpbm7nQSoFle+r5QqqMrLDMKRAr82TnUcGUvIA3awIEGt1AZ2rCYZCikUL Z4bB1v4reHEXYofyoqM9n4SoFG0QdG/PgfVgJiApDMdHefrSdvlZpGAmRBbZi/ZT nTcIirhXI+gsunv34OfkjLrsM2iat5vikvVssFIjy2ikAMoC6zDZDAqVjPrDZUOF xtOeGGmLLpA7OABC47MVQEE3OizSA3c3/y3ns8oH2x3BGHZtZ3mkBGmfXhxbpJsH ZPBaKzMefhDo+9l3bGpVompvZ/1uaYKqLbKEzZd88Pg6YOtIH77SqX625U15Wzdo pAj23JShD8caCEJHI9JGXf0E -----END CERTIFICATE-----Generated at Thu Mar 26 00:28:32 2026 by rpki-client