$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft File: _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json) Hash identifier: vqAaCLreDmxbaMXJCnj+ALBhKfspZN9E2yE3AZPeVmE= Subject key identifier: 18:EA:CF:FC:15:68:1B:20:F1:1E:63:49:BC:59:93:06:E4:5D:4D:A3 Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE Certificate issuer: /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft Manifest number: 08A7 Signing time: Tue 24 Mar 2026 20:15:27 +0000 Manifest this update: Tue 24 Mar 2026 20:15:27 +0000 Manifest next update: Tue 31 Mar 2026 20:15:27 +0000 Files and hashes: 1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: WFY+VBQWzQofjnNDX0QiSc9EQRpDhfwXIsBpeD8ijGU=) 2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: 08XSlJyPx4Pnv98WRUQO7iPvbktsbvN6HxXtSNgZ5oc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE Validity Not Before: Mar 24 20:15:27 2026 GMT Not After : Mar 31 20:15:27 2026 GMT Subject: CN=69c2f0df-fdd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:64:3d:cd:8b:27:f5:58:5a:2f:82:31:72: 1f:a1:a7:9c:4b:df:3a:25:54:9b:a6:97:e6:ce:0e: 71:e0:34:60:bb:38:b3:b9:d9:52:4c:4d:08:82:14: aa:e2:bb:ff:6f:0d:09:44:cf:50:91:47:29:80:b0: 6e:4a:f6:56:48:08:ce:ed:2c:53:8a:e9:13:45:32: 39:43:c7:ae:39:9a:4b:6d:b0:87:e4:db:e7:c0:bc: ff:c2:e6:52:3c:ae:2f:72:e3:89:26:f4:d0:2a:3a: 1e:3f:ca:bd:e8:9e:b3:68:f8:76:ac:b3:46:66:c4: 46:c3:4c:0b:66:3b:dd:af:2a:ea:44:86:7f:cd:11: 66:df:43:67:52:24:5c:a9:c8:2e:3f:07:a0:f8:b1: 3b:68:fa:e7:38:35:97:c6:90:58:9a:06:e8:e6:cf: 22:41:e5:8e:34:8b:f4:9e:0e:ba:56:63:bb:85:ef: d4:22:ed:f9:c0:31:ef:fe:59:32:f9:5a:51:c7:6a: a1:63:54:02:a3:1a:49:16:bc:ee:5e:a1:5f:23:5c: b0:83:2a:49:16:71:f7:30:61:a6:01:4f:ed:1d:c0: 6e:85:50:28:66:24:fb:dd:0c:24:78:77:95:51:ad: 6c:d5:4b:9c:60:72:6d:8e:ba:b6:48:6d:e9:ed:50: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:EA:CF:FC:15:68:1B:20:F1:1E:63:49:BC:59:93:06:E4:5D:4D:A3 X509v3 Authority Key Identifier: keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:8e:f5:e9:a2:84:57:50:9c:c9:74:33:c8:10:55:cf:7f:db: 9d:8b:ea:2d:46:a2:ac:99:0a:cb:54:41:2d:80:c1:99:01:ea: 02:98:01:02:88:58:65:24:20:fa:40:d5:8f:ca:5a:ae:92:54: 6a:0e:33:7a:ad:84:ec:18:c7:71:36:5a:ec:56:9e:8d:18:ee: 33:50:47:37:9d:3a:5c:e6:ec:b8:26:27:a0:22:ed:5a:37:85: e1:21:8f:4f:e5:90:e9:7a:3c:d4:d9:2a:d2:31:5b:3d:8a:fc: 3e:c9:dd:22:46:bf:fa:b2:ab:2d:6c:74:4c:19:67:56:78:0e: 28:a0:ef:a9:c3:d2:5d:bb:89:82:29:5e:98:15:40:98:89:c1: b0:83:97:ac:4e:c2:fa:a9:04:6e:1d:59:9e:0d:9e:fb:63:bc: ac:3c:3c:cb:eb:24:53:6b:cd:a8:40:0f:e6:c9:df:f6:e2:a4: 48:3b:30:df:22:0b:ec:b9:a7:06:39:80:b2:42:ca:d5:a5:30: d6:dd:a2:f9:c7:80:63:6d:9d:4d:cf:58:a2:42:55:30:88:f4: c1:9e:38:50:63:27:67:e4:cf:b8:20:88:22:64:52:68:26:77: 59:d2:e2:03:59:9b:72:36:fd:25:80:ee:36:2e:f3:95:f0:f7: 27:d9:8e:84 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI0NjIxMTAvBgNVBAUTKEZENEQ4QzYzOUFEQzE1ODQ3QzdCNDkxMTE1OURFNzFC RDgxMzkzQUUwHhcNMjYwMzI0MjAxNTI3WhcNMjYwMzMxMjAxNTI3WjAYMRYwFAYD VQQDEw02OWMyZjBkZi1mZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCFkPc2LJ/VYWi+CMXIfoaecS986JVSbppfmzg5x4DRguzizudlSTE0IghSq 4rv/bw0JRM9QkUcpgLBuSvZWSAjO7SxTiukTRTI5Q8euOZpLbbCH5NvnwLz/wuZS PK4vcuOJJvTQKjoeP8q96J6zaPh2rLNGZsRGw0wLZjvdryrqRIZ/zRFm30NnUiRc qcguPweg+LE7aPrnODWXxpBYmgbo5s8iQeWONIv0ng66VmO7he/UIu35wDHv/lky +VpRx2qhY1QCoxpJFrzuXqFfI1ywgypJFnH3MGGmAU/tHcBuhVAoZiT73QwkeHeV Ua1s1UucYHJtjrq2SG3p7VCoywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBjqz/wV aBsg8R5jSbxZkwbkXU2jMB8GA1UdIwQYMBaAFP1NjGOa3BWEfHtJERWd5xvYE5Ou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjQ2Mi8zMkM3NTdFNkRD NDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZUjhlMGtSRlozbkc5Z1Rr NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19VMk1ZNXJjRllSOGUwa1JGWjNuRzlnVGs2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MjQ2Mi8zMkM3NTdFNkRDNDUxMUVBODZBNzM3MTNDNEY5QUUwMi9fVTJNWTVyY0ZZ UjhlMGtSRlozbkc5Z1RrNjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgI716aKEV1CcyXQzyBBVz3/bnYvqLUairJkKy1RBLYDBmQHqApgBAohYZSQg +kDVj8parpJUag4zeq2E7BjHcTZa7FaejRjuM1BHN506XObsuCYnoCLtWjeF4SGP T+WQ6Xo81Nkq0jFbPYr8PsndIka/+rKrLWx0TBlnVngOKKDvqcPSXbuJgilemBVA mInBsIOXrE7C+qkEbh1Zng2e+2O8rDw8y+skU2vNqEAP5snf9uKkSDsw3yIL7Lmn BjmAskLK1aUw1t2i+ceAY22dTc9YokJVMIj0wZ44UGMnZ+TPuCCIImRSaCZ3WdLi A1mbcjb9JYDuNi7zlfD3J9mOhA== -----END CERTIFICATE-----Generated at Thu Mar 26 20:23:38 2026 by rpki-client