$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft File: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft (raw, json) Hash identifier: rdNJLfPmF1CfzkQEdYdKs6kgqVbv1Gx/DW+ug127igg= Subject key identifier: 8A:25:70:49:C1:E0:83:DF:66:CF:4D:38:3D:01:56:30:0D:39:4A:8C Authority key identifier: 10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE Certificate issuer: /CN=A9160C9E/serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Certificate serial: 0124 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft Manifest number: 011D Signing time: Wed 25 Mar 2026 05:09:24 +0000 Manifest this update: Wed 25 Mar 2026 05:09:24 +0000 Manifest next update: Wed 01 Apr 2026 05:09:24 +0000 Files and hashes: 1: EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl (hash: Myf5/hlRU36VpwoJ3AXjZIr6bDjJesC+YllIALYdTXM=) 2: 44B65A3890FF11EFA6BECB58C4F9AE02.roa (hash: /KryMHMfzm4mv+PmAUUQ97+ZD6cBoGkFzqrA/qBGskk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 292 (0x124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=100D9AEE91D227FE475934F2978C3617D8CFA8EE Validity Not Before: Mar 25 05:09:24 2026 GMT Not After : Apr 1 05:09:24 2026 GMT Subject: CN=69c36e04-fc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:6f:a8:72:fc:76:c7:fc:84:20:fc:27:d3: ba:96:69:5c:bc:9f:7c:83:e5:b8:af:3c:af:1a:c8: 23:eb:63:d9:d3:2e:9f:bc:5b:2c:9c:3a:c3:31:97: 7d:e3:fb:20:10:4f:89:13:12:77:b0:20:f2:5e:3f: ae:c9:0d:d4:b4:78:76:c6:e5:3e:84:61:b7:72:34: 4b:53:39:a9:e7:26:25:42:e0:d3:f6:44:80:4e:22: f0:80:9f:8d:4a:7f:a0:51:50:24:25:b8:b2:cb:20: 76:49:3c:29:10:58:38:14:88:75:bf:1d:a6:17:a9: e8:1f:d0:d3:29:c9:c0:57:bd:46:69:8f:8e:5e:8a: 34:a5:cc:14:ab:db:d5:93:46:45:ce:34:26:51:75: 98:a8:24:c7:06:3c:0e:70:88:53:e7:87:3e:81:81: 7b:12:7a:71:41:a3:e0:51:d7:fa:73:ee:9f:88:8c: a0:c4:5f:da:e0:2c:a4:e7:a4:8e:de:0a:19:93:1a: 50:c8:37:2c:98:6c:a0:a4:46:2d:02:d0:7c:ce:49: a5:43:76:e1:82:48:4d:03:1b:b5:32:69:fc:fe:ed: 38:8f:06:c7:43:24:33:1e:c8:3f:74:c4:c2:d4:c0: 8d:ed:1a:5f:b2:98:4d:3c:fe:30:06:d7:cf:ba:b7: 02:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:70:49:C1:E0:83:DF:66:CF:4D:38:3D:01:56:30:0D:39:4A:8C X509v3 Authority Key Identifier: keyid:10:0D:9A:EE:91:D2:27:FE:47:59:34:F2:97:8C:36:17:D8:CF:A8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/57FF4BCA8BCA11EFABFC1A39C4F9AE02/EA2a7pHSJ_5HWTTyl4w2F9jPqO4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:85:3b:cb:72:4f:c3:2d:c7:a0:61:be:c6:9a:13:91:b7:7c: ae:79:ec:e1:02:81:de:85:30:f2:ec:1d:2f:57:21:c6:2a:8c: ec:c7:51:e0:46:b1:6f:73:26:9f:fe:76:93:76:bc:f3:49:9b: 2f:9f:1b:4a:7f:57:4e:fd:fb:a5:8c:74:e8:3b:bd:e9:27:f5: 0d:8d:8b:b2:ba:3e:7f:64:52:ea:ed:ee:e1:6b:58:2e:1b:85: 63:ca:2e:84:1a:05:17:84:dc:0e:56:43:6b:da:2f:29:10:bb: bb:fc:b2:32:b4:59:98:a1:fa:b0:7c:9c:c6:fb:2c:19:f0:c3: ae:22:2c:e4:ca:1a:c4:cc:25:17:ff:2a:4d:64:42:4f:03:96: c2:ed:9e:d2:ed:da:87:31:f1:17:00:c8:27:46:60:19:fb:b2: 76:5a:af:1e:8d:44:01:9f:fc:f3:cd:d1:25:a1:92:86:a6:a1: b6:c0:b7:8d:2e:72:74:11:89:88:2f:c8:74:09:a8:8d:cc:17: 01:05:b4:bc:aa:62:bb:41:70:90:34:f0:b7:75:75:56:de:0e: de:56:68:54:67:10:bd:15:94:3a:aa:8a:ed:f5:63:a6:a8:a0: c9:d6:66:cd:84:b5:9d:a6:8f:fe:00:1b:63:b1:09:a9:68:c3: 64:85:1f:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICASQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKDEwMEQ5QUVFOTFEMjI3RkU0NzU5MzRGMjk3OEMzNjE3 RDhDRkE4RUUwHhcNMjYwMzI1MDUwOTI0WhcNMjYwNDAxMDUwOTI0WjAYMRYwFAYD VQQDEw02OWMzNmUwNC1mYzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFBvqHL8dsf8hCD8J9O6lmlcvJ98g+W4rzyvGsgj62PZ0y6fvFssnDrDMZd9 4/sgEE+JExJ3sCDyXj+uyQ3UtHh2xuU+hGG3cjRLUzmp5yYlQuDT9kSATiLwgJ+N Sn+gUVAkJbiyyyB2STwpEFg4FIh1vx2mF6noH9DTKcnAV71GaY+OXoo0pcwUq9vV k0ZFzjQmUXWYqCTHBjwOcIhT54c+gYF7EnpxQaPgUdf6c+6fiIygxF/a4Cyk56SO 3goZkxpQyDcsmGygpEYtAtB8zkmlQ3bhgkhNAxu1Mmn8/u04jwbHQyQzHsg/dMTC 1MCN7RpfsphNPP4wBtfPurcClwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIolcEnB 4IPfZs9NOD0BVjANOUqMMB8GA1UdIwQYMBaAFBANmu6R0if+R1k08peMNhfYz6ju MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS81N0ZGNEJDQThC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pfNUhXVFR5bDR3MkY5alBx TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VBMmE3cEhTSl81SFdUVHlsNHcyRjlqUHFPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS81N0ZGNEJDQThCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9FQTJhN3BIU0pf NUhXVFR5bDR3MkY5alBxTzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADIU7y3JPwy3HoGG+xpoTkbd8rnns4QKB3oUw8uwdL1chxiqM7MdR4Eaxb3Mm n/52k3a880mbL58bSn9XTv37pYx06Du96Sf1DY2Lsro+f2RS6u3u4WtYLhuFY8ou hBoFF4TcDlZDa9ovKRC7u/yyMrRZmKH6sHycxvssGfDDriIs5MoaxMwlF/8qTWRC TwOWwu2e0u3ahzHxFwDIJ0ZgGfuydlqvHo1EAZ/8883RJaGShqahtsC3jS5ydBGJ iC/IdAmojcwXAQW0vKpiu0FwkDTwt3V1Vt4O3lZoVGcQvRWUOqqK7fVjpqigydZm zYS1naaP/gAbY7EJqWjDZIUfJw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:23:43 2026 by rpki-client