$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft File: ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json) Hash identifier: xhuNumFpOvCq0ka9ouUi/5AHc6hXUDo09eHbRSHcZWU= Subject key identifier: CD:CE:A9:07:F6:C1:E0:1C:19:44:53:2E:8B:10:3A:92:D5:C7:4B:4E Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 Certificate issuer: /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Certificate serial: 07C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft Manifest number: 07B1 Signing time: Tue 24 Mar 2026 21:14:52 +0000 Manifest this update: Tue 24 Mar 2026 21:14:51 +0000 Manifest next update: Tue 31 Mar 2026 21:14:51 +0000 Files and hashes: 1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: nfLG4rmm7O9nclMtkBHECHORV03yp22Gkas1nJ3KnVo=) 2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1984 (0x7c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8 Validity Not Before: Mar 24 21:14:51 2026 GMT Not After : Mar 31 21:14:51 2026 GMT Subject: CN=69c2fecb-5752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:41:ef:70:6a:7c:50:24:03:a6:dc:b5:1f: 4c:63:94:45:a7:7c:9c:c3:e7:ab:35:4d:99:45:b4: 47:96:bd:a2:e3:5b:6b:e8:34:7f:9c:72:15:7a:a5: e0:1a:d0:03:21:95:cd:77:f1:a4:9b:f5:d4:e2:d8: 5a:4a:08:a2:f1:06:46:3d:c7:f7:e6:4c:ab:f7:67: f0:56:4a:e2:c1:3f:d9:ec:b7:86:7f:d0:b9:1e:95: a3:76:71:5f:0f:4d:f1:3c:00:da:fe:bb:54:b8:82: 2a:9a:09:2c:90:c7:46:26:71:9e:67:98:d5:4e:67: fa:43:c9:50:d0:7a:db:bf:11:9a:91:77:d5:8d:97: b6:f9:21:e0:dd:93:8b:81:88:b0:0e:1a:18:43:e9: 61:36:91:3c:84:b6:0e:ab:92:61:cc:4d:9b:a2:b0: 67:0e:a6:c7:59:d7:9e:78:66:b3:78:f2:ee:d8:0f: 78:67:39:7f:43:e8:f7:6b:20:45:40:52:4c:fa:78: 86:a0:1b:96:e3:c8:24:6f:81:d3:5e:f1:e6:17:8e: 92:17:c3:db:2a:39:92:05:f5:15:85:58:3c:3b:37: af:92:da:84:de:03:4e:21:30:1c:36:b3:71:76:53: a0:a8:e2:c7:bb:6b:5a:28:57:5e:17:3f:24:96:7f: cd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CE:A9:07:F6:C1:E0:1C:19:44:53:2E:8B:10:3A:92:D5:C7:4B:4E X509v3 Authority Key Identifier: keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:b9:b7:b5:14:25:43:9f:04:87:b3:d2:c9:78:38:50:00:e3: cd:d0:9e:60:8a:c3:8c:20:07:51:68:98:71:38:0c:0b:bc:22: db:2d:06:04:c1:70:a3:1c:6d:d2:6a:28:5d:1b:6f:0e:c8:70: d9:1d:51:52:fe:d0:15:d8:49:72:9a:5a:4b:26:bb:45:40:c2: cc:a0:ac:6d:67:47:e7:3e:23:68:cb:f9:88:0b:57:81:85:07: 8e:dc:c6:11:19:a6:12:2c:21:74:ff:f3:92:bc:4e:a4:e9:67: 23:8d:a4:c0:5e:bb:d0:c1:a9:ff:40:59:a2:c7:90:e3:e2:39: 37:b0:d2:8e:3e:f3:64:32:4c:ec:09:1c:2b:ff:02:1f:82:83: 45:34:ce:c2:01:a0:0f:4c:b3:61:02:5b:41:5c:99:28:95:43: 4f:f8:9f:26:70:b5:a0:49:7c:04:81:8e:5a:12:4f:21:0a:cc: 0d:38:1e:dd:3e:0b:79:bf:19:62:42:7b:7b:0c:bd:99:07:80: 99:0e:1d:98:f4:7d:74:6f:fb:36:a8:b1:92:4e:19:86:0d:79: f5:a5:38:cd:42:44:a7:c9:d1:7f:f4:e9:b2:24:5e:93:6f:85: d9:e7:fa:7a:ad:6b:35:3c:e0:93:42:66:9a:7a:b0:1d:69:6e: 30:ab:0a:52 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz QUM5MTNGRTgwHhcNMjYwMzI0MjExNDUxWhcNMjYwMzMxMjExNDUxWjAYMRYwFAYD VQQDEw02OWMyZmVjYi01NzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGlB73BqfFAkA6bctR9MY5RFp3ycw+erNU2ZRbRHlr2i41tr6DR/nHIVeqXg GtADIZXNd/Gkm/XU4thaSgii8QZGPcf35kyr92fwVkriwT/Z7LeGf9C5HpWjdnFf D03xPADa/rtUuIIqmgkskMdGJnGeZ5jVTmf6Q8lQ0HrbvxGakXfVjZe2+SHg3ZOL gYiwDhoYQ+lhNpE8hLYOq5JhzE2borBnDqbHWdeeeGazePLu2A94Zzl/Q+j3ayBF QFJM+niGoBuW48gkb4HTXvHmF46SF8PbKjmSBfUVhVg8OzevktqE3gNOITAcNrNx dlOgqOLHu2taKFdeFz8kln/NpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFM3OqQf2 weAcGURTLosQOpLVx0tOMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0 MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAbm3tRQlQ58Eh7PSyXg4UADjzdCeYIrDjCAHUWiYcTgMC7wi2y0GBMFwoxxt 0mooXRtvDshw2R1RUv7QFdhJcppaSya7RUDCzKCsbWdH5z4jaMv5iAtXgYUHjtzG ERmmEiwhdP/zkrxOpOlnI42kwF670MGp/0BZoseQ4+I5N7DSjj7zZDJM7AkcK/8C H4KDRTTOwgGgD0yzYQJbQVyZKJVDT/ifJnC1oEl8BIGOWhJPIQrMDTge3T4Leb8Z YkJ7ewy9mQeAmQ4dmPR9dG/7Nqixkk4Zhg159aU4zUJEp8nRf/TpsiRek2+F2ef6 eq1rNTzgk0JmmnqwHWluMKsKUg== -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:13 2026 by rpki-client