$ rpki-client -vvf rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft File: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft (raw, json) Hash identifier: J/EG4RyS98VDZ4uiJF1Rj4HVSOaEnsyig+k6Fw6q8PM= Subject key identifier: 47:89:89:C2:EC:8F:FA:DC:FB:DD:D9:B8:CB:5C:79:FF:F4:C9:3E:48 Authority key identifier: 7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E Certificate issuer: /CN=A9153F90/serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft Manifest number: 0B Signing time: Wed 25 Mar 2026 08:19:46 +0000 Manifest this update: Wed 25 Mar 2026 08:19:46 +0000 Manifest next update: Wed 01 Apr 2026 08:19:46 +0000 Files and hashes: 1: f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl (hash: qLFHwW7COSP7TeuAw4bodgXWEdRX81py3YWXqX4QDrA=) 2: A1369C781C3B11F1A9F167973A3D8C67.roa (hash: SY4VqkxyGoejCFuLzZISWSny3WC42+Mi6EDjqr/Szpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153F90, serialNumber=7F4935895C2D6CB62C4175C48E6ED95DC168197E Validity Not Before: Mar 25 08:19:46 2026 GMT Not After : Apr 1 08:19:46 2026 GMT Subject: CN=69c39aa2-1a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:47:70:5f:7a:e5:94:a6:01:09:b3:37:7a:ac: 31:58:08:ee:bb:b2:66:93:21:83:fb:43:26:ce:31: 9b:54:ca:92:e9:fb:72:ef:b8:b1:c0:e8:e2:d2:55: 6d:93:78:ed:e3:f5:4b:01:56:db:67:6b:c0:c3:84: e9:b8:78:a4:89:f9:46:a6:fb:e5:c5:27:c8:33:cd: 1b:9f:10:92:47:8b:20:ce:05:2d:04:9c:bb:e1:af: 17:2c:57:cf:c5:f8:82:93:14:04:6b:7e:da:73:4e: 24:1a:c7:63:7d:c1:00:67:a5:8f:3e:71:f0:99:ca: e8:2b:e2:6b:1a:9b:1a:be:39:91:c1:85:87:56:47: 31:21:1a:e5:5d:db:38:24:5d:9e:98:2a:bd:24:19: 5b:8b:8d:ec:ca:a8:6e:23:7a:db:b5:cb:ff:cf:c5: b5:75:bf:b9:1e:07:07:6e:a3:11:30:08:86:7b:62: 31:1d:dc:b0:ba:3a:24:c3:d0:1b:cc:47:d8:0e:c8: 50:b0:71:d3:03:5d:af:18:a4:64:d8:ca:a0:93:d9: 69:4f:a3:40:04:a4:f9:95:7f:48:15:9c:ad:09:02: c0:53:3c:31:64:4c:ee:4c:ff:a5:ac:6a:14:5b:0b: 2a:c1:5c:0e:7e:bf:5f:c7:34:b9:70:b0:b5:5e:64: 9d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:89:89:C2:EC:8F:FA:DC:FB:DD:D9:B8:CB:5C:79:FF:F4:C9:3E:48 X509v3 Authority Key Identifier: keyid:7F:49:35:89:5C:2D:6C:B6:2C:41:75:C4:8E:6E:D9:5D:C1:68:19:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153F90/F913D5141C3611F18847AB2B383D8C67/f0k1iVwtbLYsQXXEjm7ZXcFoGX4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:0b:24:84:df:eb:fb:74:20:33:f7:c0:2e:45:b5:a0:06:d1: 56:9c:b1:27:d7:18:2a:e9:8a:49:db:50:2c:40:89:c3:d4:42: cc:2c:5d:03:57:f4:b0:db:36:7b:89:f8:29:22:b1:3e:2f:57: b3:4d:69:88:be:49:57:80:da:07:f6:63:7f:0e:a8:ad:6a:fc: bc:cc:6c:5d:e1:d2:eb:bc:06:c6:df:1a:cf:48:7c:4f:22:1d: 24:41:57:4f:98:35:78:fd:3d:7a:ae:65:a4:26:62:09:c1:de: c7:13:e3:d6:5e:2c:b3:96:1a:1e:77:fb:49:9c:6c:09:39:8e: f4:e7:19:11:39:b3:5a:d0:0a:2e:8c:cc:75:24:7d:b1:1e:76: b4:68:e9:12:77:32:05:cf:c4:8d:d9:3a:cc:47:ec:bd:11:01: fb:5a:c8:b8:1b:e6:f6:8a:ce:e3:76:c4:3c:cc:dd:02:12:33: e6:4e:42:ea:91:86:a3:26:92:7c:3d:f7:b4:53:2b:66:58:14: f0:1d:ed:46:fa:f4:35:c6:94:ae:59:4b:49:f7:f0:86:7b:85: a2:37:82:f2:0a:cc:2c:77:01:cc:12:f7:c3:71:d0:5f:46:09: 4a:dd:86:bd:31:97:3c:27:b5:ae:c1:f4:fd:e4:45:d2:b2:d6: 52:30:cf:c7 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 M0Y5MDExMC8GA1UEBRMoN0Y0OTM1ODk1QzJENkNCNjJDNDE3NUM0OEU2RUQ5NURD MTY4MTk3RTAeFw0yNjAzMjUwODE5NDZaFw0yNjA0MDEwODE5NDZaMBgxFjAUBgNV BAMTDTY5YzM5YWEyLTFhOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCR3BfeuWUpgEJszd6rDFYCO67smaTIYP7QybOMZtUypLp+3LvuLHA6OLSVW2T eO3j9UsBVttna8DDhOm4eKSJ+Uam++XFJ8gzzRufEJJHiyDOBS0EnLvhrxcsV8/F +IKTFARrftpzTiQax2N9wQBnpY8+cfCZyugr4msamxq+OZHBhYdWRzEhGuVd2zgk XZ6YKr0kGVuLjezKqG4jetu1y//PxbV1v7keBwduoxEwCIZ7YjEd3LC6OiTD0BvM R9gOyFCwcdMDXa8YpGTYyqCT2WlPo0AEpPmVf0gVnK0JAsBTPDFkTO5M/6WsahRb CyrBXA5+v1/HNLlwsLVeZJ3TAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUR4mJwuyP +tz73dm4y1x5//TJPkgwHwYDVR0jBBgwFoAUf0k1iVwtbLYsQXXEjm7ZXcFoGX4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzRjkwL0Y5MTNENTE0MUMz NjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZc1FYWEVqbTdaWGNGb0dY NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZjBrMWlWd3RiTFlzUVhYRWptN1pYY0ZvR1g0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz RjkwL0Y5MTNENTE0MUMzNjExRjE4ODQ3QUIyQjM4M0Q4QzY3L2YwazFpVnd0YkxZ c1FYWEVqbTdaWGNGb0dYNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBiCySE3+v7dCAz98AuRbWgBtFWnLEn1xgq6YpJ21AsQInD1ELMLF0DV/Sw2zZ7 ifgpIrE+L1ezTWmIvklXgNoH9mN/Dqitavy8zGxd4dLrvAbG3xrPSHxPIh0kQVdP mDV4/T16rmWkJmIJwd7HE+PWXiyzlhoed/tJnGwJOY705xkRObNa0AoujMx1JH2x Hna0aOkSdzIFz8SN2TrMR+y9EQH7Wsi4G+b2is7jdsQ8zN0CEjPmTkLqkYajJpJ8 Pfe0UytmWBTwHe1G+vQ1xpSuWUtJ9/CGe4WiN4LyCswsdwHMEvfDcdBfRglK3Ya9 MZc8J7WuwfT95EXSstZSMM/H -----END CERTIFICATE-----Generated at Thu Mar 26 15:34:49 2026 by rpki-client