$ rpki-client -vvf rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft File: scNHRW5UpGYuEJfs0zSsEcAs4As.mft (raw, json) Hash identifier: xEoMT7ZUsEBVdSoncVd8QXM6EmhBTrHp/crfB5/58Kw= Subject key identifier: 34:00:3C:CB:A0:29:D7:11:F7:15:AF:BE:05:58:88:76:03:77:3B:B6 Authority key identifier: B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B Certificate issuer: /CN=A9160438/serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Certificate serial: 0775 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft Manifest number: 075C Signing time: Tue 24 Mar 2026 21:25:01 +0000 Manifest this update: Tue 24 Mar 2026 21:25:01 +0000 Manifest next update: Tue 31 Mar 2026 21:25:01 +0000 Files and hashes: 1: scNHRW5UpGYuEJfs0zSsEcAs4As.crl (hash: 9gH6+bZuuJ4Y3Ay3E8V82Osde+XGlyOAJK6seJSSm20=) 2: 3263B6905E7311EB8B143F3BC4F9AE02.roa (hash: 8Bf2rdYfYL741zuMOv5KtG3C9cn1bSgEVEELLNz/YH8=) 3: 31137FAA5E7311EB8B143F3BC4F9AE02.roa (hash: Edqwd+7S5FW+RSH1hNv3IRDd/a/nupHqU/W9+fP/QYw=) 4: 31D902165E7311EB8B143F3BC4F9AE02.roa (hash: iME1Wafl/c0OdFfEQ+yf2PqIzRI/AG4449vj600jvuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1909 (0x775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160438, serialNumber=B1C347456E54A4662E1097ECD334AC11C02CE00B Validity Not Before: Mar 24 21:25:01 2026 GMT Not After : Mar 31 21:25:01 2026 GMT Subject: CN=69c3012d-e17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:49:1c:2b:5f:bd:97:e4:35:c5:42:02:c9:ee: 29:7d:50:3e:2b:03:c8:7b:f9:37:ec:d1:1e:03:e4: 03:3b:91:35:9e:76:2d:aa:e2:bc:c6:8c:5f:68:46: 84:68:9f:f9:61:ba:48:b1:a1:5a:d6:f5:44:0f:c7: e8:6d:4e:67:e0:bd:d8:0b:78:1f:6c:f3:63:c3:b2: 00:1d:61:a7:d3:78:71:33:d3:28:c9:27:d6:da:83: 98:3a:c7:09:4b:00:e1:84:46:5b:39:0e:31:8a:80: 79:37:57:31:ad:10:46:d5:fd:eb:de:72:f2:75:9f: 7d:ae:7c:71:d4:53:04:a1:fa:9f:a4:ab:7e:7f:bc: f3:07:07:2b:76:66:94:ac:e9:04:e2:a2:2c:ec:5a: e3:c3:38:b9:bb:66:7d:b4:38:60:1c:81:c5:d0:0d: ff:52:7e:a3:3e:88:67:e1:00:d3:ba:cc:0f:30:4d: 7d:19:68:82:db:20:db:6b:d2:e2:26:a6:a1:d3:e7: 03:73:7b:05:45:cf:f7:57:4e:0b:69:0c:b0:9a:a1: 9d:8a:5c:4e:a1:8e:25:19:b6:48:b0:df:02:81:7d: d7:6c:36:c4:d7:b0:8c:51:c4:d7:a4:e8:9a:16:1b: 19:32:fc:14:6b:09:1b:60:91:23:51:49:f1:ae:7b: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:00:3C:CB:A0:29:D7:11:F7:15:AF:BE:05:58:88:76:03:77:3B:B6 X509v3 Authority Key Identifier: keyid:B1:C3:47:45:6E:54:A4:66:2E:10:97:EC:D3:34:AC:11:C0:2C:E0:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/scNHRW5UpGYuEJfs0zSsEcAs4As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160438/C4509D545E7111EB849C333AC4F9AE02/scNHRW5UpGYuEJfs0zSsEcAs4As.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:e9:75:cb:16:98:58:19:f4:0e:57:d7:9c:e5:17:94:aa:0c: 9c:da:21:7e:6a:a6:b5:07:90:89:cc:27:a2:ca:14:23:4f:71: 8d:39:5a:0f:90:cd:d4:24:5a:01:0b:90:4d:80:9a:7e:21:83: 3c:be:7f:4d:54:4c:6d:fa:fb:bb:a7:ba:a7:67:6d:22:fc:0a: f7:62:fa:ee:01:bf:70:ca:ba:73:2f:7f:e7:34:89:8e:6c:86: 23:90:db:b8:05:61:f3:ee:95:8b:57:bf:fb:c1:e4:63:5c:c7: 25:7c:78:5a:6b:27:05:da:4d:ed:a6:29:5c:dc:b5:56:c0:b0: cb:ad:95:1a:40:83:2b:ac:20:95:54:39:8a:cf:81:b0:9c:38: eb:4e:f6:73:e0:2e:da:94:76:83:57:dd:18:c5:4f:bc:97:a5: 91:d1:b6:06:a9:23:a7:ab:8e:ee:80:f4:69:e0:de:55:4b:61: 71:eb:03:75:0c:b7:ac:c0:9f:a7:70:dc:3a:2f:6e:b6:5f:3d: 0f:5f:77:97:35:d1:62:c5:d6:57:1c:9b:a0:ef:41:15:f2:a1: 9d:5c:46:fe:05:c5:7f:5a:b7:3b:b7:14:19:af:f5:5c:36:27: ac:a9:d0:4e:aa:f1:45:ad:1d:52:84:c8:6c:44:68:22:ad:85: f9:5e:4c:b2 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB3UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0MzgxMTAvBgNVBAUTKEIxQzM0NzQ1NkU1NEE0NjYyRTEwOTdFQ0QzMzRBQzEx QzAyQ0UwMEIwHhcNMjYwMzI0MjEyNTAxWhcNMjYwMzMxMjEyNTAxWjAYMRYwFAYD VQQDEw02OWMzMDEyZC1lMTdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEkcK1+9l+Q1xUICye4pfVA+KwPIe/k37NEeA+QDO5E1nnYtquK8xoxfaEaE aJ/5YbpIsaFa1vVED8fobU5n4L3YC3gfbPNjw7IAHWGn03hxM9MoySfW2oOYOscJ SwDhhEZbOQ4xioB5N1cxrRBG1f3r3nLydZ99rnxx1FMEofqfpKt+f7zzBwcrdmaU rOkE4qIs7Frjwzi5u2Z9tDhgHIHF0A3/Un6jPohn4QDTuswPME19GWiC2yDba9Li Jqah0+cDc3sFRc/3V04LaQywmqGdilxOoY4lGbZIsN8CgX3XbDbE17CMUcTXpOia FhsZMvwUawkbYJEjUUnxrnu2MQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQAPMug KdcR9xWvvgVYiHYDdzu2MB8GA1UdIwQYMBaAFLHDR0VuVKRmLhCX7NM0rBHALOAL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQzOC9DNDUwOUQ1NDVF NzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBHWXVFSmZzMHpTc0VjQXM0 QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NjTkhSVzVVcEdZdUVKZnMwelNzRWNBczRBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQzOC9DNDUwOUQ1NDVFNzExMUVCODQ5QzMzM0FDNEY5QUUwMi9zY05IUlc1VXBH WXVFSmZzMHpTc0VjQXM0QXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAK+l1yxaYWBn0DlfXnOUXlKoMnNohfmqmtQeQicwnosoUI09xjTlaD5DN1CRa AQuQTYCafiGDPL5/TVRMbfr7u6e6p2dtIvwK92L67gG/cMq6cy9/5zSJjmyGI5Db uAVh8+6Vi1e/+8HkY1zHJXx4WmsnBdpN7aYpXNy1VsCwy62VGkCDK6wglVQ5is+B sJw46072c+Au2pR2g1fdGMVPvJelkdG2Bqkjp6uO7oD0aeDeVUthcesDdQy3rMCf p3DcOi9utl89D193lzXRYsXWVxyboO9BFfKhnVxG/gXFf1q3O7cUGa/1XDYnrKnQ TqrxRa0dUoTIbERoIq2F+V5Msg== -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:24 2026 by rpki-client