$ rpki-client -vvf rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft File: o9XPQ95bPYucND7UScFpDr40Fw4.mft (raw, json) Hash identifier: Ypau7ZWqCRd9b+QslkZ6xttLao4Aw5yKJsH0dQ0yJGI= Subject key identifier: 4C:E8:4F:5D:1F:DF:69:50:01:5C:02:5E:D1:20:1D:49:05:6E:6C:55 Authority key identifier: A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E Certificate issuer: /CN=A914CCD1/serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Certificate serial: 06AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft Manifest number: 067E Signing time: Thu 26 Mar 2026 22:33:49 +0000 Manifest this update: Thu 26 Mar 2026 22:33:49 +0000 Manifest next update: Thu 02 Apr 2026 22:33:49 +0000 Files and hashes: 1: o9XPQ95bPYucND7UScFpDr40Fw4.crl (hash: H0TjwPrOQyXQt7GYLtiWRXaA1vm5/IaNksZpS0uRORY=) 2: 05646F7C268211F19B4B306BB2833773.roa (hash: HZzicft3bos6w7OuWhMV24pkNyMhlarAtyII9OEKTS0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1709 (0x6ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CCD1, serialNumber=A3D5CF43DE5B3D8B9C343ED449C1690EBE34170E Validity Not Before: Mar 26 22:33:49 2026 GMT Not After : Apr 2 22:33:49 2026 GMT Subject: CN=69c5b44d-0a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9d:6a:ef:30:95:fb:82:99:30:3b:41:3b:2d: 77:e2:6b:28:c1:57:03:ce:df:55:42:c3:a1:6a:b5: a8:54:bc:d5:99:ee:a2:9c:0c:e3:8d:3d:06:31:0b: 86:4e:9e:55:5c:df:11:52:84:26:7d:83:ab:d3:6a: a6:7b:3a:f1:f5:b0:3a:41:94:4a:c2:48:67:13:eb: ec:92:9c:2e:33:c4:8e:12:ad:3f:53:dd:0f:35:e5: 68:c9:a1:e8:24:cf:88:08:ff:76:55:20:3b:ca:52: 05:47:57:c5:36:54:b7:91:b7:48:48:90:10:03:be: 5a:26:05:13:25:90:b5:8f:46:f5:cd:e0:a8:08:13: 7d:96:0b:30:a6:49:ee:0d:96:d5:b2:e9:1c:1a:09: 13:d3:3d:cf:c2:fb:20:fa:0e:4e:4e:38:c8:f6:93: b4:fb:a3:59:74:47:d7:13:c6:b2:4d:57:e1:38:93: 89:22:a0:35:3c:24:9d:83:c5:d7:91:86:71:8f:d2: ab:68:cf:4b:2d:27:de:83:c4:4a:58:22:46:19:2e: 39:fa:82:68:e8:90:10:68:83:92:e7:3a:3c:5e:e8: 39:77:b7:37:86:2f:a9:88:f9:af:3a:36:66:bb:03: 32:bb:2d:02:f0:58:21:0e:ba:3b:42:b6:00:b6:6c: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:E8:4F:5D:1F:DF:69:50:01:5C:02:5E:D1:20:1D:49:05:6E:6C:55 X509v3 Authority Key Identifier: keyid:A3:D5:CF:43:DE:5B:3D:8B:9C:34:3E:D4:49:C1:69:0E:BE:34:17:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9XPQ95bPYucND7UScFpDr40Fw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CCD1/AD7F45A4CDC411EBB5F48355C4F9AE02/o9XPQ95bPYucND7UScFpDr40Fw4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a5:d6:22:b7:6a:ad:07:de:56:00:cf:58:7f:c4:bf:2e:7c: 44:55:4a:18:52:6e:b7:d7:6f:fe:95:78:07:6a:a3:98:71:18: 02:41:0c:85:14:38:5c:4c:e6:b4:b3:9b:f7:99:10:32:54:66: 68:e7:c2:98:75:2e:18:bd:19:4b:04:39:0f:a7:f3:fc:bc:53: ec:48:fc:d3:90:98:84:69:b0:a6:84:59:5d:e5:8e:4e:50:49: a1:38:fa:09:38:ee:69:9a:f2:d7:1f:cd:cd:c5:32:f0:d0:b9: 6c:8b:71:47:34:ef:6d:e6:0d:f8:97:e7:b2:b5:a7:5e:71:5a: e1:40:25:a5:1c:eb:74:b2:4f:31:b3:4d:d1:62:70:24:f6:47: 27:3d:60:61:9d:4c:06:98:07:e7:6f:d1:14:c0:3d:5b:6b:3d: e2:89:7f:66:e8:45:f1:8e:8c:c0:fc:50:4c:8c:35:32:a1:6b: eb:b2:eb:2a:36:eb:e7:17:8a:7c:71:83:9d:30:4e:8e:b4:b5: a7:ed:14:b2:ec:99:27:34:85:e0:49:d5:d8:4a:77:f5:5e:fa: d8:5b:e7:56:0c:3b:05:31:4c:a7:da:75:b6:ed:ce:f0:e1:dc: 51:58:64:be:e4:2e:4b:56:df:44:83:24:29:a4:57:90:36:5d: b8:8a:df:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDRDExMTAvBgNVBAUTKEEzRDVDRjQzREU1QjNEOEI5QzM0M0VENDQ5QzE2OTBF QkUzNDE3MEUwHhcNMjYwMzI2MjIzMzQ5WhcNMjYwNDAyMjIzMzQ5WjAYMRYwFAYD VQQDEw02OWM1YjQ0ZC0wYTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6J1q7zCV+4KZMDtBOy134msowVcDzt9VQsOharWoVLzVme6inAzjjT0GMQuG Tp5VXN8RUoQmfYOr02qmezrx9bA6QZRKwkhnE+vskpwuM8SOEq0/U90PNeVoyaHo JM+ICP92VSA7ylIFR1fFNlS3kbdISJAQA75aJgUTJZC1j0b1zeCoCBN9lgswpknu DZbVsukcGgkT0z3Pwvsg+g5OTjjI9pO0+6NZdEfXE8ayTVfhOJOJIqA1PCSdg8XX kYZxj9KraM9LLSfeg8RKWCJGGS45+oJo6JAQaIOS5zo8Xug5d7c3hi+piPmvOjZm uwMyuy0C8FghDro7QrYAtmwyUwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEzoT10f 32lQAVwCXtEgHUkFbmxVMB8GA1UdIwQYMBaAFKPVz0PeWz2LnDQ+1EnBaQ6+NBcO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0NEMS9BRDdGNDVBNENE QzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZdWNORDdVU2NGcERyNDBG dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285WFBROTViUFl1Y05EN1VTY0ZwRHI0MEZ3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0NEMS9BRDdGNDVBNENEQzQxMUVCQjVGNDgzNTVDNEY5QUUwMi9vOVhQUTk1YlBZ dWNORDdVU2NGcERyNDBGdzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAE6XWIrdqrQfeVgDPWH/Evy58RFVKGFJut9dv/pV4B2qjmHEYAkEMhRQ4XEzm tLOb95kQMlRmaOfCmHUuGL0ZSwQ5D6fz/LxT7Ej805CYhGmwpoRZXeWOTlBJoTj6 CTjuaZry1x/NzcUy8NC5bItxRzTvbeYN+JfnsrWnXnFa4UAlpRzrdLJPMbNN0WJw JPZHJz1gYZ1MBpgH52/RFMA9W2s94ol/ZuhF8Y6MwPxQTIw1MqFr67LrKjbr5xeK fHGDnTBOjrS1p+0UsuyZJzSF4EnV2Ep39V762FvnVgw7BTFMp9p1tu3O8OHcUVhk vuQuS1bfRIMkKaRXkDZduIrftQ== -----END CERTIFICATE-----Generated at Sat Mar 28 09:13:34 2026 by rpki-client