$ rpki-client -vvf rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft File: w97H_d1FyVFyYIZPqe68_nuLz1c.mft (raw, json) Hash identifier: nfLhA8b5UBL3B49js1jk3Cc/ztUzTB+MjXwcsrzwZ58= Subject key identifier: 8E:BA:63:CC:02:A4:8C:39:76:3C:8C:38:50:2C:33:46:C5:F9:58:2E Authority key identifier: C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 Certificate issuer: /CN=A9159234/serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Certificate serial: 0605 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft Manifest number: 05F4 Signing time: Tue 24 Mar 2026 22:39:21 +0000 Manifest this update: Tue 24 Mar 2026 22:39:20 +0000 Manifest next update: Tue 31 Mar 2026 22:39:20 +0000 Files and hashes: 1: w97H_d1FyVFyYIZPqe68_nuLz1c.crl (hash: S+G01n5pMh3fRBFXJmtep7yS2z0cC3LJtdEBtyJQ828=) 2: B58C9578378011ECA9E26B5AC4F9AE02.roa (hash: tWNrfcWrRhpaxE6KzUPy0N1Gkp/CrciJBkIG+zBTsq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159234, serialNumber=C3DEC7FDDD45C9517260864FA9EEBCFE7B8BCF57 Validity Not Before: Mar 24 22:39:20 2026 GMT Not After : Mar 31 22:39:20 2026 GMT Subject: CN=69c31299-d30c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cf:55:8c:83:00:c3:79:a2:e2:ee:db:09:d8: 3c:c5:01:c3:28:06:90:ce:24:ad:07:7e:1a:07:8b: 08:50:53:6a:b5:20:e5:17:01:4b:01:bc:55:98:e8: 76:c3:45:5b:11:1a:98:28:a5:0c:4b:b9:4f:57:b6: 5b:74:f4:79:a2:00:a8:78:3d:9e:22:1d:55:01:fa: ee:b9:09:84:57:58:f8:0f:e3:86:53:85:f4:7a:9f: 28:06:06:34:c3:52:3f:78:3b:e9:04:12:19:8b:ac: 73:fb:69:ee:7d:07:77:c9:47:0b:3e:0a:c9:ce:8b: ad:4d:2e:5c:6a:9a:dc:a9:d2:0e:7e:16:5d:df:78: fa:d6:ee:38:23:01:59:8a:ce:60:b3:60:46:f5:ae: d8:20:47:67:df:5b:cb:ba:f7:23:d6:13:53:70:34: 56:5f:93:a1:b5:eb:45:0e:3d:ee:8b:f7:7a:b1:f3: 64:2f:00:37:4b:72:7e:88:3a:43:06:8f:f2:aa:0b: 5e:d0:e6:bf:2d:47:b0:4a:4c:00:af:51:11:8d:18: 77:93:9f:c4:d7:10:57:a8:cb:72:00:1d:ea:5c:f5: 22:05:a3:28:45:d9:ae:22:2f:c4:6f:4e:90:91:40: 63:d1:fe:31:7c:e6:f0:fc:b1:20:fe:6b:65:fd:97: 28:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BA:63:CC:02:A4:8C:39:76:3C:8C:38:50:2C:33:46:C5:F9:58:2E X509v3 Authority Key Identifier: keyid:C3:DE:C7:FD:DD:45:C9:51:72:60:86:4F:A9:EE:BC:FE:7B:8B:CF:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w97H_d1FyVFyYIZPqe68_nuLz1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159234/6A8E00EAEF8A11EBA2921764C4F9AE02/w97H_d1FyVFyYIZPqe68_nuLz1c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:0c:15:ab:5f:83:e3:cf:06:59:42:5b:bd:d1:14:69:35:8e: ab:64:39:1d:78:c5:45:58:38:68:8c:4c:6c:6c:b7:92:44:51: a8:5b:fe:9f:26:c7:bd:7d:ca:5d:de:a9:28:1b:9c:a8:35:18: fa:b8:32:de:51:8d:1a:39:e8:3c:cf:56:80:64:d5:09:06:ef: cb:29:f3:0a:6a:c5:ec:c8:c3:30:81:d9:fa:fa:61:4d:fc:af: 94:ed:19:0f:25:60:36:23:ad:27:04:1f:15:96:1b:f1:3e:d8: b0:07:60:7d:11:b1:34:3a:e9:db:2b:26:f0:c5:ac:ff:74:d3: 6a:ae:48:dd:70:81:4c:4d:48:f4:61:ae:3a:a8:4d:83:e1:ec: fb:a1:7f:6d:5f:4c:06:de:a3:48:de:92:53:da:06:d2:76:71: a5:5c:3f:30:9b:06:3c:a9:8c:be:75:55:99:95:b6:94:c9:98: 5b:11:3e:e4:7a:06:cf:81:c1:d2:b9:52:47:06:94:03:8a:97: eb:6e:9a:b1:6b:2b:d0:2a:91:21:b6:92:d0:e4:61:9f:47:1f: 5f:31:36:8b:7c:dd:74:db:fa:9c:ef:6b:d2:32:29:65:d5:c9: c1:a3:70:98:61:9e:84:d1:95:9a:d5:0c:9d:e6:64:fb:2a:77: 69:65:3e:05 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTkyMzQxMTAvBgNVBAUTKEMzREVDN0ZEREQ0NUM5NTE3MjYwODY0RkE5RUVCQ0ZF N0I4QkNGNTcwHhcNMjYwMzI0MjIzOTIwWhcNMjYwMzMxMjIzOTIwWjAYMRYwFAYD VQQDEw02OWMzMTI5OS1kMzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3c9VjIMAw3mi4u7bCdg8xQHDKAaQziStB34aB4sIUFNqtSDlFwFLAbxVmOh2 w0VbERqYKKUMS7lPV7ZbdPR5ogCoeD2eIh1VAfruuQmEV1j4D+OGU4X0ep8oBgY0 w1I/eDvpBBIZi6xz+2nufQd3yUcLPgrJzoutTS5caprcqdIOfhZd33j61u44IwFZ is5gs2BG9a7YIEdn31vLuvcj1hNTcDRWX5OhtetFDj3ui/d6sfNkLwA3S3J+iDpD Bo/yqgte0Oa/LUewSkwAr1ERjRh3k5/E1xBXqMtyAB3qXPUiBaMoRdmuIi/Eb06Q kUBj0f4xfObw/LEg/mtl/ZcosQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI66Y8wC pIw5djyMOFAsM0bF+VguMB8GA1UdIwQYMBaAFMPex/3dRclRcmCGT6nuvP57i89X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTIzNC82QThFMDBFQUVG OEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlWRnlZSVpQcWU2OF9udUx6 MWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5N0hfZDFGeVZGeVlJWlBxZTY4X251THoxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTIzNC82QThFMDBFQUVGOEExMUVCQTI5MjE3NjRDNEY5QUUwMi93OTdIX2QxRnlW RnlZSVpQcWU2OF9udUx6MWMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuAwVq1+D488GWUJbvdEUaTWOq2Q5HXjFRVg4aIxMbGy3kkRRqFv+nybHvX3K Xd6pKBucqDUY+rgy3lGNGjnoPM9WgGTVCQbvyynzCmrF7MjDMIHZ+vphTfyvlO0Z DyVgNiOtJwQfFZYb8T7YsAdgfRGxNDrp2ysm8MWs/3TTaq5I3XCBTE1I9GGuOqhN g+Hs+6F/bV9MBt6jSN6SU9oG0nZxpVw/MJsGPKmMvnVVmZW2lMmYWxE+5HoGz4HB 0rlSRwaUA4qX626asWsr0CqRIbaS0ORhn0cfXzE2i3zddNv6nO9r0jIpZdXJwaNw mGGehNGVmtUMneZk+yp3aWU+BQ== -----END CERTIFICATE-----Generated at Thu Mar 26 04:42:13 2026 by rpki-client