$ rpki-client -vvf rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft File: cA9SATINxKfw-nMFyVWhmUwYJgA.mft (raw, json) Hash identifier: m24UyvrIK/oXkb5cz06W8d5lJZonMG4bgeyQWl1gMW8= Subject key identifier: 8F:1D:68:52:98:B7:E7:6E:94:6C:69:C1:EA:3A:48:0E:68:D8:33:7C Authority key identifier: 70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00 Certificate issuer: /CN=A9151290/serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600 Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft Manifest number: 2A Signing time: Wed 25 Mar 2026 07:58:48 +0000 Manifest this update: Wed 25 Mar 2026 07:58:47 +0000 Manifest next update: Wed 01 Apr 2026 07:58:47 +0000 Files and hashes: 1: cA9SATINxKfw-nMFyVWhmUwYJgA.crl (hash: s1BZFzrasaT00m61J2p1fuBWKPwY5Xlw+IIrZpKGzCI=) 2: 90360F96F35D11F08865480C646F56BC.roa (hash: +hYht0+VhMqie7zs0TemkZjgGj97GrUe4MXcjgwo+x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151290, serialNumber=700F5201320DC4A7F0FA7305C955A1994C182600 Validity Not Before: Mar 25 07:58:47 2026 GMT Not After : Apr 1 07:58:47 2026 GMT Subject: CN=69c395b7-e0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:63:2c:5c:60:5f:a6:f8:f5:26:2c:75:46:8d: 96:80:51:71:d0:1b:69:7f:8a:9a:39:5d:a1:96:b9: a2:4d:8b:b4:42:e2:66:1e:2f:55:c6:95:8e:d5:4e: fa:4b:69:9e:d7:f3:a9:e7:b5:d2:b8:39:99:28:e1: ba:68:08:61:c9:0d:ef:49:ec:4c:48:97:4d:1a:8c: 9c:c1:04:90:e5:b9:ca:77:41:e7:21:94:47:9e:3a: 6e:f1:fb:8d:34:3f:fc:cc:d7:74:9e:4f:38:47:0c: f4:b5:0e:50:c4:41:a9:4a:dc:e9:3a:18:41:3c:55: 7c:14:20:cb:e6:fe:d1:a4:37:ab:56:d8:83:0b:a1: db:5e:80:85:04:89:53:49:85:aa:22:ae:cd:fe:15: f6:dd:25:5c:0e:92:e6:9c:eb:d8:35:dd:e5:a0:cb: da:e2:70:46:35:90:81:2d:d2:72:ec:75:e8:4d:83: 20:f3:ab:ad:11:fd:e6:d9:71:d2:47:47:82:c0:1f: c2:54:e4:78:76:a7:49:89:06:05:61:ad:cd:e4:50: 39:f8:93:79:fb:12:aa:f6:c0:48:f4:9e:f4:49:0a: 9b:13:a8:ea:d8:6c:37:d2:1b:90:dc:74:b9:82:c9: da:36:e7:83:a1:95:a1:39:43:b1:a0:63:ff:1a:ac: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1D:68:52:98:B7:E7:6E:94:6C:69:C1:EA:3A:48:0E:68:D8:33:7C X509v3 Authority Key Identifier: keyid:70:0F:52:01:32:0D:C4:A7:F0:FA:73:05:C9:55:A1:99:4C:18:26:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cA9SATINxKfw-nMFyVWhmUwYJgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151290/4D8166CCF20511F0BD2586054A6F56BC/cA9SATINxKfw-nMFyVWhmUwYJgA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ad:85:85:66:12:b5:3a:ed:de:d3:83:eb:2f:ef:e2:dd:d2: a4:a1:e5:17:e5:a8:53:12:f9:03:96:a6:b8:95:19:b6:1d:1e: f0:24:e0:33:84:76:15:b9:fe:1e:28:22:80:46:ce:d4:04:0e: 32:f0:fb:5c:f6:40:79:08:e6:b6:a1:a7:0f:33:8f:4d:60:6a: 66:fa:c6:59:62:94:42:ff:72:81:12:17:07:7c:9e:e3:98:2d: a2:f1:f1:1a:94:f1:15:b3:58:16:0c:f8:ec:ef:69:4e:ff:e2: 09:a2:eb:7a:85:13:c6:d8:dd:84:d1:f3:ea:d7:ad:c3:8a:62: b2:e4:21:1f:97:8a:96:ff:4a:5b:50:f7:5a:a4:20:62:d0:46: 9c:38:fb:b6:5c:ea:c3:bb:97:37:b7:70:61:b4:16:a0:2d:99: 5c:81:cb:03:72:9a:1d:4b:6c:e6:dc:f7:56:3d:b8:68:1c:ab: 9c:f2:09:a1:a0:f1:3b:f5:1a:9a:14:52:e9:88:77:0c:f8:36: 3a:c0:9d:a2:ef:e7:1a:ed:c9:15:a4:20:bb:2e:17:af:38:f5: 46:48:a1:8e:9c:39:47:6f:63:f8:a0:f1:6b:1a:11:27:4f:5c: 1a:88:b8:11:a9:c2:52:34:36:9b:91:ba:7d:d0:16:8c:33:ca: 6d:b2:6d:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MTI5MDExMC8GA1UEBRMoNzAwRjUyMDEzMjBEQzRBN0YwRkE3MzA1Qzk1NUExOTk0 QzE4MjYwMDAeFw0yNjAzMjUwNzU4NDdaFw0yNjA0MDEwNzU4NDdaMBgxFjAUBgNV BAMTDTY5YzM5NWI3LWUwZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5YyxcYF+m+PUmLHVGjZaAUXHQG2l/ipo5XaGWuaJNi7RC4mYeL1XGlY7VTvpL aZ7X86nntdK4OZko4bpoCGHJDe9J7ExIl00ajJzBBJDlucp3QechlEeeOm7x+400 P/zM13SeTzhHDPS1DlDEQalK3Ok6GEE8VXwUIMvm/tGkN6tW2IMLodtegIUEiVNJ haoirs3+FfbdJVwOkuac69g13eWgy9ricEY1kIEt0nLsdehNgyDzq60R/ebZcdJH R4LAH8JU5Hh2p0mJBgVhrc3kUDn4k3n7Eqr2wEj0nvRJCpsTqOrYbDfSG5DcdLmC ydo254OhlaE5Q7GgY/8arEqlAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUjx1oUpi3 526UbGnB6jpIDmjYM3wwHwYDVR0jBBgwFoAUcA9SATINxKfw+nMFyVWhmUwYJgAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUxMjkwLzREODE2NkNDRjIw NTExRjBCRDI1ODYwNTRBNkY1NkJDL2NBOVNBVElOeEtmdy1uTUZ5VldobVV3WUpn QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0E5U0FUSU54S2Z3LW5NRnlWV2htVXdZSmdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUx MjkwLzREODE2NkNDRjIwNTExRjBCRDI1ODYwNTRBNkY1NkJDL2NBOVNBVElOeEtm dy1uTUZ5VldobVV3WUpnQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQACrYWFZhK1Ou3e04PrL+/i3dKkoeUX5ahTEvkDlqa4lRm2HR7wJOAzhHYVuf4e KCKARs7UBA4y8Ptc9kB5COa2oacPM49NYGpm+sZZYpRC/3KBEhcHfJ7jmC2i8fEa lPEVs1gWDPjs72lO/+IJout6hRPG2N2E0fPq163DimKy5CEfl4qW/0pbUPdapCBi 0EacOPu2XOrDu5c3t3BhtBagLZlcgcsDcpodS2zm3PdWPbhoHKuc8gmhoPE79Rqa FFLpiHcM+DY6wJ2i7+ca7ckVpCC7LhevOPVGSKGOnDlHb2P4oPFrGhEnT1waiLgR qcJSNDabkbp90BaMM8ptsm3v -----END CERTIFICATE-----Generated at Thu Mar 26 00:59:54 2026 by rpki-client