$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft File: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft (raw, json) Hash identifier: RvML1yZFfca7zZSuWC90bWGkzqaD6btgkMrF1iGYZZ0= Subject key identifier: A2:B3:5E:19:60:9B:DB:94:7D:CC:C7:DF:29:A5:B7:07:2F:6F:9E:61 Authority key identifier: 26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 Certificate issuer: /CN=A9161CEF/serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Certificate serial: 0BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft Manifest number: 0C23 Signing time: Tue 24 Mar 2026 18:53:42 +0000 Manifest this update: Tue 24 Mar 2026 18:53:42 +0000 Manifest next update: Tue 31 Mar 2026 18:53:42 +0000 Files and hashes: 1: Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl (hash: c06mRTLOPP//d+HOCQ39unrQ3b+RY1DbU5L4NuXKARM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:53:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2991 (0xbaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=26DF4ECF938C4982D3577E1221EEB1B6AD22C346 Validity Not Before: Mar 24 18:53:42 2026 GMT Not After : Mar 31 18:53:42 2026 GMT Subject: CN=69c2ddb6-41f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:59:35:15:db:50:39:f2:04:26:df:ef:c1: 38:a0:74:af:37:a3:e8:64:12:38:b5:5e:dd:39:8e: 1d:3e:19:d8:b7:cb:b3:86:e5:03:97:16:ed:a4:c7: f7:1b:55:b3:d5:7b:2c:b0:a5:c9:f9:d8:0b:c7:be: ae:95:04:3f:8d:cf:59:29:ba:ce:72:8e:6d:64:e0: 9b:79:27:b8:82:06:00:63:fb:4a:25:62:7b:66:8e: ae:13:11:17:86:dc:88:94:ff:1a:ab:f2:cc:ed:2e: 0c:ac:bf:ef:48:c1:22:b2:11:1b:74:06:0d:be:58: 7c:82:44:72:fc:f4:7a:00:99:8c:4d:be:fc:07:8b: 86:b6:59:43:28:54:cc:bb:e0:30:eb:98:19:71:4c: b0:0f:a7:e0:38:26:e0:12:b8:e4:6c:f7:90:2e:83: 56:c8:29:c3:28:26:eb:d7:48:f1:01:52:69:70:d0: e0:cf:cd:3c:26:08:df:79:c6:fd:12:38:d8:c3:b8: f2:a9:a8:81:13:e8:68:43:a3:29:53:14:68:90:bf: bd:4b:e1:91:40:7b:9e:74:1e:b3:73:b0:07:7d:a5: 5a:89:ae:e0:b1:4a:d8:2e:85:7e:2e:d4:f6:af:b1: a3:12:f4:c4:ca:d5:98:ec:62:ab:29:bc:de:f5:43: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B3:5E:19:60:9B:DB:94:7D:CC:C7:DF:29:A5:B7:07:2F:6F:9E:61 X509v3 Authority Key Identifier: keyid:26:DF:4E:CF:93:8C:49:82:D3:57:7E:12:21:EE:B1:B6:AD:22:C3:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/Jt9Oz5OMSYLTV34SIe6xtq0iw0Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:73:0d:38:78:a3:72:f0:d3:af:53:1d:66:88:a9:d7:fe:3e: 93:06:d7:07:4b:c9:5b:c7:e5:bb:3f:00:f2:33:91:92:d2:9f: 5c:db:13:38:6d:dd:d2:07:ea:09:e5:1d:aa:3d:6d:f1:18:1d: 29:43:13:dc:50:94:96:bd:6c:45:75:71:e2:63:b1:35:96:ef: a8:86:68:30:9a:0a:00:eb:e7:dc:ef:63:df:87:25:94:f7:f4: 8e:4f:59:73:28:b5:95:5f:0e:40:40:9d:1c:9c:86:fa:fd:01: ba:4a:3b:5c:15:4f:ad:1e:0d:7b:3d:02:0a:77:64:96:99:b7: 5d:a6:ea:97:c8:52:c3:91:dc:e2:56:b0:8c:1f:f5:0d:9b:79: d4:e4:10:1d:35:9c:ee:10:0a:52:5e:0c:ff:bd:19:86:37:3e: 06:60:cb:c2:73:ec:ee:d1:94:e5:55:a3:93:36:60:85:1b:24: ff:39:6d:45:5e:b5:f6:2e:5f:8e:a3:26:76:e4:9b:10:96:c8: 30:90:1b:34:69:41:a6:33:7a:08:d3:5f:1f:b4:f7:0a:78:8c: a6:cd:df:1e:a0:0e:1b:27:2d:9d:30:ec:4f:c7:8f:24:3f:22: 60:88:89:7d:7c:7c:74:41:02:4a:12:0f:1d:1c:e2:75:84:ba: 5b:72:9f:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICC68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFDRUYxMTAvBgNVBAUTKDI2REY0RUNGOTM4QzQ5ODJEMzU3N0UxMjIxRUVCMUI2 QUQyMkMzNDYwHhcNMjYwMzI0MTg1MzQyWhcNMjYwMzMxMTg1MzQyWjAYMRYwFAYD VQQDEw02OWMyZGRiNi00MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsaNZNRXbUDnyBCbf78E4oHSvN6PoZBI4tV7dOY4dPhnYt8uzhuUDlxbtpMf3 G1Wz1XsssKXJ+dgLx76ulQQ/jc9ZKbrOco5tZOCbeSe4ggYAY/tKJWJ7Zo6uExEX htyIlP8aq/LM7S4MrL/vSMEishEbdAYNvlh8gkRy/PR6AJmMTb78B4uGtllDKFTM u+Aw65gZcUywD6fgOCbgErjkbPeQLoNWyCnDKCbr10jxAVJpcNDgz808Jgjfecb9 EjjYw7jyqaiBE+hoQ6MpUxRokL+9S+GRQHuedB6zc7AHfaVaia7gsUrYLoV+LtT2 r7GjEvTEytWY7GKrKbze9UMoPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKKzXhlg m9uUfczH3ymltwcvb55hMB8GA1UdIwQYMBaAFCbfTs+TjEmC01d+EiHusbatIsNG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUNFRi85Q0U1MTI1ODQ1 OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZTFRWMzRTSWU2eHRxMGl3 MFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0p0OU96NU9NU1lMVFYzNFNJZTZ4dHEwaXcwWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUNFRi85Q0U1MTI1ODQ1OTExMUVBQkU2QjkzMUJDNEY5QUUwMi9KdDlPejVPTVNZ TFRWMzRTSWU2eHRxMGl3MFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYnMNOHijcvDTr1MdZoip1/4+kwbXB0vJW8fluz8A8jORktKfXNsTOG3d0gfq CeUdqj1t8RgdKUMT3FCUlr1sRXVx4mOxNZbvqIZoMJoKAOvn3O9j34cllPf0jk9Z cyi1lV8OQECdHJyG+v0Buko7XBVPrR4Nez0CCndklpm3Xabql8hSw5Hc4lawjB/1 DZt51OQQHTWc7hAKUl4M/70Zhjc+BmDLwnPs7tGU5VWjkzZghRsk/zltRV619i5f jqMmduSbEJbIMJAbNGlBpjN6CNNfH7T3CniMps3fHqAOGyctnTDsT8ePJD8iYIiJ fXx8dEECShIPHRzidYS6W3Kf+w== -----END CERTIFICATE-----Generated at Thu Mar 26 13:06:22 2026 by rpki-client