$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft File: D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json) Hash identifier: ssR8gMdN6w7IxTY8ks5+P0GYO/szXtrweVXb1HNpw9g= Subject key identifier: B1:E9:63:18:22:57:6F:7F:79:F5:CE:53:9D:8C:D6:FC:39:93:B0:E0 Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB Certificate issuer: /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft Manifest number: 0CB0 Signing time: Tue 24 Mar 2026 18:21:30 +0000 Manifest this update: Tue 24 Mar 2026 18:21:30 +0000 Manifest next update: Tue 31 Mar 2026 18:21:30 +0000 Files and hashes: 1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: yQP5WB9Y9UyJ0nURvG3E84BbY1m/VhizL1Y394jn8Yw=) 2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: p394FBhliDkNgoB99ryNw/y0SY40oLYwgw+ljbC9OLc=) 3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: ZfQ6vCvmZcjNcIncHT507Vz1iEI/7E5CygjpXRzzNSI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB Validity Not Before: Mar 24 18:21:30 2026 GMT Not After : Mar 31 18:21:30 2026 GMT Subject: CN=69c2d62a-d396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:1b:66:15:36:9c:af:0c:aa:1a:21:1f:ea:73: 66:a7:ce:fc:20:50:c9:7b:b7:9a:a3:f4:4e:4f:51: 3f:25:42:7b:19:87:41:0a:a1:65:a3:a8:a8:fa:d4: 50:ec:fb:88:85:b8:0e:5c:9c:b1:d6:87:70:9a:91: 47:68:75:9e:cd:36:ad:0b:c4:b6:f5:1b:56:bd:4b: d4:63:37:e9:36:7e:61:e6:a4:02:03:5d:c0:f5:fd: af:dd:cf:c5:8f:3d:02:31:d2:14:7e:88:82:05:6b: 7e:fb:85:e5:7e:19:e1:a3:da:5d:9b:f9:b7:21:b1: 81:6e:70:c3:0a:73:3b:f5:48:ba:1d:c5:44:0f:c1: dc:ed:29:a5:5c:52:a6:3a:fa:82:03:79:e1:40:d8: 65:0f:0d:83:0f:51:fd:39:a1:f2:c1:4d:2f:fb:d6: 4b:7b:30:6f:f7:58:a2:d1:0b:d4:ce:58:dd:c3:53: 45:67:f0:22:05:97:63:b1:fb:3b:69:0a:dc:03:8a: 41:81:2a:9c:44:e7:be:ac:d3:ad:f3:8c:8f:ee:68: 29:6f:82:40:2a:d5:67:e8:94:d5:5d:d1:47:e0:e6: 10:6f:c0:1d:a8:d7:04:b2:fc:37:39:a1:71:cb:ec: bd:a5:f4:43:88:a2:00:1d:6c:18:9d:7f:9d:b7:a1: 85:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E9:63:18:22:57:6F:7F:79:F5:CE:53:9D:8C:D6:FC:39:93:B0:E0 X509v3 Authority Key Identifier: keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:f6:53:08:e4:3b:e0:26:29:8e:7c:e5:10:6c:ed:cc:81:86: ce:65:38:ac:4c:b8:a4:d9:d3:a8:8c:5d:9a:99:eb:0e:db:b8: 1d:3f:12:04:f1:a4:ac:38:16:ae:ec:50:4c:b5:b0:f3:93:b3: 2e:1e:85:fe:8c:f8:ba:43:77:9d:80:df:3c:81:e4:ff:d8:c8: 5a:8c:6a:eb:6d:16:85:73:a7:55:32:41:01:ff:1b:16:33:3c: b9:b6:a3:0d:e6:ea:39:3d:28:ee:44:d8:f1:5c:95:82:5e:56: 54:61:a6:c8:fc:e7:34:cd:88:3b:bb:c0:91:cd:e3:ec:45:47: e4:ce:13:3c:e4:80:30:df:40:93:3d:8d:b5:e8:84:d8:5e:62: bd:7e:fd:ac:77:c0:81:96:3c:2c:29:9c:87:06:ff:0f:ad:b3: f3:08:2d:c1:22:9e:d2:3a:e9:5c:bc:3d:ac:37:17:19:ba:7c: 46:ae:b3:df:b1:96:3b:25:ee:00:c8:fa:e6:e5:d8:03:7a:54: d2:6a:80:dd:2b:21:13:38:38:2c:f3:82:3f:75:53:a2:0d:93: d8:c4:a9:b3:86:16:77:0a:d6:86:c8:f9:aa:22:23:55:8e:73: 4c:ef:00:e4:d0:d9:53:8e:ee:4d:2e:36:01:9e:bc:09:dc:3d: 34:eb:5a:55 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG ODU2RDVERUIwHhcNMjYwMzI0MTgyMTMwWhcNMjYwMzMxMTgyMTMwWjAYMRYwFAYD VQQDEw02OWMyZDYyYS1kMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RtmFTacrwyqGiEf6nNmp878IFDJe7eao/ROT1E/JUJ7GYdBCqFlo6io+tRQ 7PuIhbgOXJyx1odwmpFHaHWezTatC8S29RtWvUvUYzfpNn5h5qQCA13A9f2v3c/F jz0CMdIUfoiCBWt++4Xlfhnho9pdm/m3IbGBbnDDCnM79Ui6HcVED8Hc7SmlXFKm OvqCA3nhQNhlDw2DD1H9OaHywU0v+9ZLezBv91ii0QvUzljdw1NFZ/AiBZdjsfs7 aQrcA4pBgSqcROe+rNOt84yP7mgpb4JAKtVn6JTVXdFH4OYQb8AdqNcEsvw3OaFx y+y9pfRDiKIAHWwYnX+dt6GFkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLHpYxgi V29/efXOU52M1vw5k7DgMB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE d1VVd0FJcUxsaVA0VnRYZXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwfZTCOQ74CYpjnzlEGztzIGGzmU4rEy4pNnTqIxdmpnrDtu4HT8SBPGkrDgW ruxQTLWw85OzLh6F/oz4ukN3nYDfPIHk/9jIWoxq620WhXOnVTJBAf8bFjM8ubaj DebqOT0o7kTY8VyVgl5WVGGmyPznNM2IO7vAkc3j7EVH5M4TPOSAMN9Akz2NteiE 2F5ivX79rHfAgZY8LCmchwb/D62z8wgtwSKe0jrpXLw9rDcXGbp8Rq6z37GWOyXu AMj65uXYA3pU0mqA3SshEzg4LPOCP3VTog2T2MSps4YWdwrWhsj5qiIjVY5zTO8A 5NDZU47uTS42AZ68Cdw9NOtaVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 14:10:53 2026 by rpki-client