$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: kQx8f6tuVqj0UpS6IfeDDDKS5UgvtDym0TjUQpkm+gQ= Subject key identifier: D3:98:1D:3F:29:7E:18:03:8B:85:44:12:AA:A6:4F:74:DC:AF:26:EF Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: 36 Signing time: Wed 25 Mar 2026 07:48:09 +0000 Manifest this update: Wed 25 Mar 2026 07:48:08 +0000 Manifest next update: Wed 01 Apr 2026 07:48:08 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: sohmLwa+4Tf9v1Mem3fJ8wU5O4jhjD8vxo2m+FEhMRA=) 2: 6A76054C222211F19C27099F3C3D8C67.roa (hash: MpiKoxYJnNsJjTtWTryJas1e5Scy/NyWv0hZW7Vx2Hs=) 3: 709A2E7CDB9A11F0BFEA763F67D3641D.roa (hash: /7uGSz2004/QvinO+aiI/2uroEEvFBnQnqFbErCydxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:48:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Mar 25 07:48:08 2026 GMT Not After : Apr 1 07:48:08 2026 GMT Subject: CN=69c39338-13da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:45:28:4a:73:e8:b6:cd:76:81:63:94:88: ab:0d:91:7d:4f:3f:0e:2a:c9:0a:7c:fe:01:c6:f9: f9:3d:b5:81:d5:31:67:41:91:45:14:df:f2:a5:4e: be:85:89:b5:0a:b3:11:03:2d:75:ba:ce:eb:c0:13: f5:a3:c4:d6:b6:2d:1d:e4:b9:cf:26:b2:b6:cd:d4: 18:4d:b0:64:8c:0d:2c:ae:f2:35:39:1f:c9:4e:e4: 0b:1a:49:b5:df:29:c0:22:21:a5:c0:e0:16:be:47: d5:91:17:5c:0a:18:85:58:fc:77:50:1a:70:dc:46: 6f:b2:95:c5:22:c3:83:d4:ee:a5:52:93:4d:9f:c1: 11:da:76:1e:be:2c:6a:90:85:8b:2d:fa:bf:83:0b: 67:3a:4b:a2:65:ba:39:7e:ca:d8:94:7d:a2:cf:57: 7e:58:e2:99:19:e7:78:b8:60:5e:ca:07:d0:73:bd: 09:46:9f:cb:23:ff:b4:d3:83:c6:aa:5b:93:63:d0: 50:9a:81:c4:08:ff:ca:b3:ee:05:cf:54:e4:a3:8b: 7e:c3:81:d2:16:d0:a7:9b:d9:b0:da:ea:dc:47:f9: f4:ff:e9:e0:49:fe:e7:b7:a8:b3:70:ad:20:4f:28: 3f:83:73:ee:2a:91:48:df:05:72:03:84:80:fd:3f: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:98:1D:3F:29:7E:18:03:8B:85:44:12:AA:A6:4F:74:DC:AF:26:EF X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:32:05:9a:13:d9:c7:b0:20:e7:f0:4a:9d:fd:bf:cc:6e:f4: 2f:08:0d:ff:48:21:29:c7:01:f9:01:8f:15:9f:a4:e8:c7:27: db:8a:f1:b1:3d:f5:78:e7:87:0a:61:b7:3b:6d:0e:a7:b8:d9: 3d:38:29:70:22:6f:7d:b2:11:a7:95:0b:c1:e8:f5:e6:71:34: 9a:43:5d:a3:ad:fd:3c:11:75:92:0e:3f:be:1e:50:2a:86:0c: 5c:a8:b2:88:37:4a:53:e8:86:2d:02:65:83:e7:22:a3:4c:b2: 57:8b:b8:da:57:8d:38:9e:d2:50:32:c8:cd:dd:46:3f:ca:26: d1:27:7f:bc:10:24:70:30:55:31:13:ba:9c:8a:59:72:a8:03: 6c:9f:6c:94:e9:39:69:5a:1d:cb:f9:1d:78:a3:07:07:cb:99: 6a:92:91:4b:23:b4:3a:23:70:b3:40:9f:c1:28:4c:b2:7e:a8: a5:42:82:5c:cf:3a:83:14:a6:a3:c8:65:0d:38:ff:59:aa:db: 4b:70:d6:a9:1d:bb:6f:54:a7:78:d3:cd:d9:e9:c4:90:91:35: 1b:6c:31:12:a2:0e:dc:e5:dd:09:7d:7c:cb:55:5a:d8:85:71: bb:63:50:05:07:fb:36:3c:35:a6:70:3e:82:a8:95:4d:58:66: 20:11:5a:ed -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDA2MjExMC8GA1UEBRMoNDdEN0RGRjZCNDFCRDQ2OEMxRjBDOUQwNEM1RTg1RTBD MzNGOUZBQjAeFw0yNjAzMjUwNzQ4MDhaFw0yNjA0MDEwNzQ4MDhaMBgxFjAUBgNV BAMTDTY5YzM5MzM4LTEzZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmEkUoSnPots12gWOUiKsNkX1PPw4qyQp8/gHG+fk9tYHVMWdBkUUU3/KlTr6F ibUKsxEDLXW6zuvAE/WjxNa2LR3kuc8msrbN1BhNsGSMDSyu8jU5H8lO5AsaSbXf KcAiIaXA4Ba+R9WRF1wKGIVY/HdQGnDcRm+ylcUiw4PU7qVSk02fwRHadh6+LGqQ hYst+r+DC2c6S6Jlujl+ytiUfaLPV35Y4pkZ53i4YF7KB9BzvQlGn8sj/7TTg8aq W5Nj0FCagcQI/8qz7gXPVOSji37DgdIW0Keb2bDa6txH+fT/6eBJ/ue3qLNwrSBP KD+Dc+4qkUjfBXIDhID9P651AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU05gdPyl+ GAOLhUQSqqZPdNyvJu8wHwYDVR0jBBgwFoAUR9ff9rQb1GjB8MnQTF6F4MM/n6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEMDYyL0IxQjhCRUE2REI5 OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjlmZjlyUWIxR2pCOE1uUVRGNkY0TU1fbjZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE MDYyL0IxQjhCRUE2REI5OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdq QjhNblFURjZGNE1NX242cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCTMgWaE9nHsCDn8Eqd/b/MbvQvCA3/SCEpxwH5AY8Vn6ToxyfbivGxPfV454cK Ybc7bQ6nuNk9OClwIm99shGnlQvB6PXmcTSaQ12jrf08EXWSDj++HlAqhgxcqLKI N0pT6IYtAmWD5yKjTLJXi7jaV404ntJQMsjN3UY/yibRJ3+8ECRwMFUxE7qcilly qANsn2yU6TlpWh3L+R14owcHy5lqkpFLI7Q6I3CzQJ/BKEyyfqilQoJczzqDFKaj yGUNOP9ZqttLcNapHbtvVKd4083Z6cSQkTUbbDESog7c5d0JfXzLVVrYhXG7Y1AF B/s2PDWmcD6CqJVNWGYgEVrt -----END CERTIFICATE-----Generated at Thu Mar 26 15:41:45 2026 by rpki-client