$ rpki-client -vvf rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft File: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft (raw, json) Hash identifier: 9O4IpbD7V8qislBZT1eJ6YMLfN1w5Y6qiPb68v9EBq0= Subject key identifier: 66:AA:68:1C:74:0E:1B:B4:A7:F9:FA:07:61:5B:79:7F:8F:1A:DB:4A Authority key identifier: FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B Certificate issuer: /CN=A915A247/serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft Manifest number: 01C9 Signing time: Wed 25 Mar 2026 03:03:03 +0000 Manifest this update: Wed 25 Mar 2026 03:03:03 +0000 Manifest next update: Wed 01 Apr 2026 03:03:03 +0000 Files and hashes: 1: -9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl (hash: ck9DLawWJWVS8rW1o9TO3/6zxDl5Ow93JsvnSrEa4Uw=) 2: B4350DCC6F4B11EEA062D464C4F9AE02.roa (hash: yaCD6IlFpNnlLI1rlXiBW7x7bvmFGdPJIOwJDR7gVRI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A247, serialNumber=FBD4B43B5678F1A06CC907C4ED04BDA211D9DD2B Validity Not Before: Mar 25 03:03:03 2026 GMT Not After : Apr 1 03:03:03 2026 GMT Subject: CN=69c35067-e372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:70:ce:e6:71:dc:81:7b:4b:1d:0b:0a:f0: 23:a4:a6:05:2d:75:5a:cd:09:21:3d:e4:1a:01:38: ff:d1:bd:bf:ee:9a:2e:79:94:fa:c6:60:93:b7:cf: 65:b4:3b:6d:f1:0b:ce:63:d6:2c:6a:f9:47:6a:a2: 44:7a:15:e2:0c:12:c4:0a:e0:d4:5c:66:44:de:b8: fd:32:36:b8:8d:62:b5:57:bf:37:38:4b:18:b2:e5: 95:10:91:fe:d6:20:4b:76:53:ba:e8:9a:4e:41:e0: 2d:4c:8c:1a:d4:20:18:f2:0a:e6:2e:7b:3e:df:de: 43:02:11:dd:e8:0d:cd:fe:1e:b7:b8:8d:0f:33:23: 98:21:ef:43:20:62:0e:8f:d6:bd:1d:1d:cb:0c:cd: fb:02:e7:f0:41:09:87:51:61:e2:14:47:51:e2:6b: 5d:f7:b0:55:57:da:30:38:1b:de:8a:d7:4f:db:3e: b6:c2:98:89:80:c0:de:7f:7e:87:51:9a:bd:dd:5f: f7:f9:e7:e5:f7:ac:5c:94:42:bf:95:37:8e:89:e4: 4a:eb:79:57:55:75:28:92:59:49:0a:f4:95:f5:89: 58:cf:7b:97:93:42:4d:7f:21:3c:d4:05:ed:51:c2: b9:8f:40:5d:f1:ee:b6:e0:87:ad:0d:a3:b2:0d:4d: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AA:68:1C:74:0E:1B:B4:A7:F9:FA:07:61:5B:79:7F:8F:1A:DB:4A X509v3 Authority Key Identifier: keyid:FB:D4:B4:3B:56:78:F1:A0:6C:C9:07:C4:ED:04:BD:A2:11:D9:DD:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A247/B1FC645C6F4A11EEA89F3363C4F9AE02/-9S0O1Z48aBsyQfE7QS9ohHZ3Ss.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e7:d3:e1:10:b9:45:52:4f:59:cb:d8:12:00:41:c0:c1:b4: de:fd:4e:98:cb:7d:1f:34:ef:f2:71:43:67:19:f6:b4:12:39: 8f:ce:23:12:2d:3e:70:c4:3b:dd:b1:95:ab:76:cf:68:4a:57: 59:93:db:c9:21:19:8b:04:3c:4f:ec:ed:e6:2b:dd:03:cd:7d: 69:d4:41:36:6d:4e:a1:3e:1f:58:87:e2:9d:4a:45:63:34:a7: 5e:4c:f6:23:62:04:22:14:bb:28:00:77:30:f0:1c:e5:d7:bc: 8e:7c:fb:96:4c:3f:58:9f:97:77:7c:bb:94:9e:71:e6:b6:7b: 0a:01:05:22:94:38:03:f9:86:31:09:a9:b7:aa:36:d0:d9:65: b5:93:a1:b2:81:9f:e2:97:b6:6a:94:a2:0f:8c:72:7b:59:f7: 71:40:1c:0f:7e:f9:3d:2f:13:66:bd:32:84:4d:f2:df:d5:03: d2:2a:da:3d:90:2b:6d:8b:ce:d0:19:0c:3f:a2:26:27:a6:86: d6:d8:a1:29:3c:53:0b:03:72:ae:27:e3:6e:99:68:ee:c7:a6: f0:d2:bf:46:a3:15:9e:64:fa:8b:8e:25:72:e1:8f:2a:df:ed: 50:23:b1:cd:e7:7d:e7:9c:56:02:9d:76:f3:ba:b5:fa:af:57: 2f:bc:ff:da -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEyNDcxMTAvBgNVBAUTKEZCRDRCNDNCNTY3OEYxQTA2Q0M5MDdDNEVEMDRCREEy MTFEOUREMkIwHhcNMjYwMzI1MDMwMzAzWhcNMjYwNDAxMDMwMzAzWjAYMRYwFAYD VQQDEw02OWMzNTA2Ny1lMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLpwzuZx3IF7Sx0LCvAjpKYFLXVazQkhPeQaATj/0b2/7poueZT6xmCTt89l tDtt8QvOY9YsavlHaqJEehXiDBLECuDUXGZE3rj9Mja4jWK1V783OEsYsuWVEJH+ 1iBLdlO66JpOQeAtTIwa1CAY8grmLns+395DAhHd6A3N/h63uI0PMyOYIe9DIGIO j9a9HR3LDM37AufwQQmHUWHiFEdR4mtd97BVV9owOBveitdP2z62wpiJgMDef36H UZq93V/3+efl96xclEK/lTeOieRK63lXVXUokllJCvSV9YlYz3uXk0JNfyE81AXt UcK5j0Bd8e624IetDaOyDU3fWwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGaqaBx0 Dhu0p/n6B2FbeX+PGttKMB8GA1UdIwQYMBaAFPvUtDtWePGgbMkHxO0EvaIR2d0r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTI0Ny9CMUZDNjQ1QzZG NEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhhQnN5UWZFN1FTOW9oSFoz U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy05UzBPMVo0OGFCc3lRZkU3UVM5b2hIWjNTcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTI0Ny9CMUZDNjQ1QzZGNEExMUVFQTg5RjMzNjNDNEY5QUUwMi8tOVMwTzFaNDhh QnN5UWZFN1FTOW9oSFozU3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAcOfT4RC5RVJPWcvYEgBBwMG03v1OmMt9HzTv8nFDZxn2tBI5j84jEi0+cMQ7 3bGVq3bPaEpXWZPbySEZiwQ8T+zt5ivdA819adRBNm1OoT4fWIfinUpFYzSnXkz2 I2IEIhS7KAB3MPAc5de8jnz7lkw/WJ+Xd3y7lJ5x5rZ7CgEFIpQ4A/mGMQmpt6o2 0NlltZOhsoGf4pe2apSiD4xye1n3cUAcD375PS8TZr0yhE3y39UD0iraPZArbYvO 0BkMP6ImJ6aG1tihKTxTCwNyrifjbplo7sem8NK/RqMVnmT6i44lcuGPKt/tUCOx zed955xWAp1287q1+q9XL7z/2g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:56:57 2026 by rpki-client