$ rpki-client -vvf rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft File: 9mSsAmv09HwIdXzefyHsPPKk5k4.mft (raw, json) Hash identifier: vJ2rjLloPNCE46UHpGvna7lMLnYBf0t+/xPXaQIf3xQ= Subject key identifier: D8:0E:A3:0E:78:10:F4:6A:F1:18:F0:5F:5A:1B:D1:14:08:8C:6D:E5 Authority key identifier: F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E Certificate issuer: /CN=A9153AE1/serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Certificate serial: 19C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft Manifest number: 1986 Signing time: Tue 24 Mar 2026 16:20:19 +0000 Manifest this update: Tue 24 Mar 2026 16:20:19 +0000 Manifest next update: Tue 31 Mar 2026 16:20:19 +0000 Files and hashes: 1: 9mSsAmv09HwIdXzefyHsPPKk5k4.crl (hash: AiQTEwLRKICITGsokwwSMdzvH5nX3O2zSBSFK/DVobU=) 2: 0333AD1461FE11ECBD833921C4F9AE02.roa (hash: 7a0c+0EHIoNbcnSaK8IXQEcApv+y2zuHAQ6u946vC8M=) 3: 118F422C816F11EF9ACB654AC4F9AE02.roa (hash: IRYVPGA8ipv1w1qXIOL0KZhl8fU2bAJ37nHpErWKNVo=) 4: 6314B0DEEAE411F0958BAC9D686F56BC.roa (hash: Kks/aY+pGXLNCd8X8RTgkkIIrtndgVhFfWnvMcGZU7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6601 (0x19c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153AE1, serialNumber=F664AC026BF4F47C08757CDE7F21EC3CF2A4E64E Validity Not Before: Mar 24 16:20:19 2026 GMT Not After : Mar 31 16:20:19 2026 GMT Subject: CN=69c2b9c3-8923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:4e:86:87:e8:1b:69:24:29:23:04:23:6f: cc:8b:eb:26:6f:dd:e1:82:09:98:b3:57:3d:59:54: 3b:73:64:c6:c3:22:ff:89:ed:da:b3:a9:0c:a8:f2: de:3c:49:9f:0f:aa:66:d8:2e:e1:89:39:71:df:8d: 2e:f3:b5:32:be:a0:8f:76:fb:9b:11:c1:37:d7:e7: a1:c9:92:91:0a:5a:cf:d8:12:26:f2:7b:be:6f:d5: 39:e4:db:35:02:19:c4:a7:a2:df:b0:2f:67:58:b0: b8:fa:ab:a3:fa:ae:72:8e:17:03:c5:e5:78:db:9f: d5:d0:e5:b4:d2:7e:83:14:92:22:f6:6a:79:76:cd: 48:7f:99:b2:91:2d:8e:2d:c5:24:6f:86:66:95:98: 01:37:0b:2e:02:d3:68:e5:65:5d:8e:53:6b:e4:94: f3:42:0c:68:d5:16:8c:41:58:e7:4e:7f:03:95:db: 4c:8e:d3:2a:2e:e7:77:f6:57:bb:32:38:8c:25:13: 06:47:fd:f9:aa:9a:33:3c:b5:09:a1:93:09:cc:d2: 57:a0:70:8a:66:78:62:f0:53:cf:97:24:80:dc:17: d3:b9:3b:df:d3:de:b4:9a:b2:87:bb:50:c3:da:96: cb:e6:2c:98:14:2e:e1:2c:88:95:f8:9c:cf:fa:39: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0E:A3:0E:78:10:F4:6A:F1:18:F0:5F:5A:1B:D1:14:08:8C:6D:E5 X509v3 Authority Key Identifier: keyid:F6:64:AC:02:6B:F4:F4:7C:08:75:7C:DE:7F:21:EC:3C:F2:A4:E6:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mSsAmv09HwIdXzefyHsPPKk5k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153AE1/63843ED0944011E7BC99C11AC4F9AE02/9mSsAmv09HwIdXzefyHsPPKk5k4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:33:c7:65:17:bb:4a:f5:ab:87:5a:db:de:60:57:47:6c:aa: 6e:e9:19:dd:71:90:5c:61:ab:d4:c6:57:41:6c:79:65:ab:32: c4:d5:65:17:6c:09:e6:3e:3d:ed:03:89:7f:eb:b0:a4:26:3f: 39:f2:36:2e:63:b3:fe:04:9d:22:f0:98:66:81:d0:e2:f4:a9: 1a:8b:4e:39:83:69:91:f6:d9:36:ba:92:4f:f0:90:eb:4e:f4: 79:aa:cc:23:82:bf:d0:a9:f3:44:29:62:7c:23:b1:a6:42:b5: 20:ee:de:a6:53:18:f4:47:d6:eb:f3:a8:b7:5a:33:29:9f:e5: 2b:f5:fe:9b:81:2e:2f:16:33:62:12:6d:3a:f5:b2:99:1f:ad: e7:c6:94:8d:6f:fe:ad:12:6c:42:56:62:a8:1a:69:d9:73:c5: d8:30:47:46:1b:cc:d7:ed:bb:d0:e0:4d:d2:e9:a1:88:64:94: 3a:4e:40:d9:13:43:bb:85:6b:c5:15:a6:1d:17:8a:5c:16:49: 76:ff:c1:ac:a0:38:4b:9d:c4:db:f1:37:f6:2f:e8:f6:34:22: 16:80:45:7c:af:5c:f1:64:a0:93:ab:cd:de:19:0b:3c:c3:11: 95:48:2c:9e:59:5c:35:6a:e9:83:aa:6e:06:eb:ef:8c:bb:d1: a2:20:a6:88 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTNBRTExMTAvBgNVBAUTKEY2NjRBQzAyNkJGNEY0N0MwODc1N0NERTdGMjFFQzND RjJBNEU2NEUwHhcNMjYwMzI0MTYyMDE5WhcNMjYwMzMxMTYyMDE5WjAYMRYwFAYD VQQDEw02OWMyYjljMy04OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfNOhofoG2kkKSMEI2/Mi+smb93hggmYs1c9WVQ7c2TGwyL/ie3as6kMqPLe PEmfD6pm2C7hiTlx340u87UyvqCPdvubEcE31+ehyZKRClrP2BIm8nu+b9U55Ns1 AhnEp6LfsC9nWLC4+quj+q5yjhcDxeV425/V0OW00n6DFJIi9mp5ds1If5mykS2O LcUkb4ZmlZgBNwsuAtNo5WVdjlNr5JTzQgxo1RaMQVjnTn8DldtMjtMqLud39le7 MjiMJRMGR/35qpozPLUJoZMJzNJXoHCKZnhi8FPPlySA3BfTuTvf0960mrKHu1DD 2pbL5iyYFC7hLIiV+JzP+jnyYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNgOow54 EPRq8RjwX1ob0RQIjG3lMB8GA1UdIwQYMBaAFPZkrAJr9PR8CHV83n8h7DzypOZO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0FFMS82Mzg0M0VEMDk0 NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlId0lkWHplZnlIc1BQS2s1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltU3NBbXYwOUh3SWRYemVmeUhzUFBLazVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 M0FFMS82Mzg0M0VEMDk0NDAxMUU3QkM5OUMxMUFDNEY5QUUwMi85bVNzQW12MDlI d0lkWHplZnlIc1BQS2s1azQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsjPHZRe7SvWrh1rb3mBXR2yqbukZ3XGQXGGr1MZXQWx5ZasyxNVlF2wJ5j49 7QOJf+uwpCY/OfI2LmOz/gSdIvCYZoHQ4vSpGotOOYNpkfbZNrqST/CQ6070earM I4K/0KnzRClifCOxpkK1IO7eplMY9EfW6/Oot1ozKZ/lK/X+m4EuLxYzYhJtOvWy mR+t58aUjW/+rRJsQlZiqBpp2XPF2DBHRhvM1+270OBN0umhiGSUOk5A2RNDu4Vr xRWmHReKXBZJdv/BrKA4S53E2/E39i/o9jQiFoBFfK9c8WSgk6vN3hkLPMMRlUgs nllcNWrpg6puBuvvjLvRoiCmiA== -----END CERTIFICATE-----Generated at Thu Mar 26 14:45:23 2026 by rpki-client