$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json) Hash identifier: hdxhAIuaGJ/beHkp9p94iO97CaSvKzCZNg3loiIsGPQ= Subject key identifier: 00:7B:72:53:1B:D1:9F:F9:B2:63:DB:DD:01:24:34:76:E6:7E:AD:B6 Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft Manifest number: 21 Signing time: Wed 25 Mar 2026 08:07:08 +0000 Manifest this update: Wed 25 Mar 2026 08:07:07 +0000 Manifest next update: Wed 01 Apr 2026 08:07:07 +0000 Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: 8fYuLy9Jsy1YDFqsZhbV1bx1kKCFGTTCDBPjwNByNdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Validity Not Before: Mar 25 08:07:07 2026 GMT Not After : Apr 1 08:07:07 2026 GMT Subject: CN=69c397ac-c539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6c:f7:34:ae:0b:84:94:40:ff:58:a6:17:08: 8a:5b:0c:21:d2:d2:7b:95:5a:5f:38:43:aa:aa:03: ec:9b:5d:de:46:59:29:6a:8f:03:f5:ef:ea:94:62: 38:f4:ed:75:1a:bb:b0:4c:73:b0:5f:74:e5:08:f8: ea:a4:8e:0b:25:eb:18:5c:74:10:57:46:e4:39:a4: 02:3b:57:5f:1a:0d:92:80:41:79:97:1a:19:9a:24: 34:39:7b:15:1d:fe:af:b4:67:0e:65:5b:bd:83:f1: 7e:6f:dc:ec:e6:36:d6:37:bb:12:01:53:81:f5:79: 4d:5d:b6:68:ef:a0:89:3f:a4:29:4f:90:d1:d1:c9: 65:5e:8d:ae:74:15:71:25:eb:6d:86:cc:74:3d:1f: 56:82:d3:7e:cb:28:f9:7a:92:f0:9c:f2:25:e8:57: 9a:24:cd:fa:f5:c7:56:45:8f:73:a4:18:87:80:7f: 7b:03:62:15:dd:f9:3c:df:e8:a2:0b:c5:b4:5f:7a: 00:f2:76:2c:4e:47:f6:5a:9c:ed:c8:0e:f0:d5:e8: 84:36:0e:00:29:b4:cc:14:3a:23:0f:8a:85:f6:2a: 85:09:c7:ad:92:43:8c:ba:1b:e4:11:77:cf:c0:1e: 54:c4:58:ee:64:f2:d9:2b:8d:fd:94:24:25:15:c6: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7B:72:53:1B:D1:9F:F9:B2:63:DB:DD:01:24:34:76:E6:7E:AD:B6 X509v3 Authority Key Identifier: keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:7e:c1:57:31:56:74:b1:4c:b2:b9:05:b7:7e:34:78:7f: c1:6d:b4:4d:f5:61:e7:d9:b4:df:b5:97:5c:e7:a7:d3:41:0f: db:6f:18:5f:3f:b8:87:30:ba:c6:52:36:77:2f:bd:28:c1:40: 90:92:76:64:af:dd:7f:de:3c:25:98:81:f8:38:d7:bc:ad:ee: 4f:d9:b5:0c:13:7a:52:21:d9:15:52:a7:fd:5e:46:de:44:80: 06:8a:28:e4:49:b4:ab:04:69:4b:3d:2f:23:d3:d9:d9:28:62: 0f:f6:b2:3f:a2:df:e7:91:2a:e1:2c:52:bc:6d:d5:e4:d9:97: 95:88:41:ce:6f:1a:cf:55:cc:5b:f6:3f:6d:aa:3f:c3:03:29: ab:ee:14:40:87:3f:09:d1:9a:97:f3:37:b8:39:10:52:cc:8b: 0f:0d:78:c5:69:d6:f5:c2:9d:1b:21:fb:ac:cc:22:a9:e1:49: c3:46:c3:48:38:03:db:1f:91:80:78:dc:62:99:5e:dc:bb:63: c2:94:92:3f:d3:d8:eb:cd:ad:82:21:85:3c:c0:a7:d7:33:16: 75:d1:16:5d:54:b8:b6:e7:d2:7a:8c:ec:8d:aa:66:ff:c0:9a: 56:bf:4f:b2:45:a1:68:a5:1d:8e:bb:41:de:f1:db:c7:65:a9: 77:04:ae:d5 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1 OTU4REMwNTAeFw0yNjAzMjUwODA3MDdaFw0yNjA0MDEwODA3MDdaMBgxFjAUBgNV BAMTDTY5YzM5N2FjLWM1MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzbPc0rguElED/WKYXCIpbDCHS0nuVWl84Q6qqA+ybXd5GWSlqjwP17+qUYjj0 7XUau7BMc7BfdOUI+Oqkjgsl6xhcdBBXRuQ5pAI7V18aDZKAQXmXGhmaJDQ5exUd /q+0Zw5lW72D8X5v3OzmNtY3uxIBU4H1eU1dtmjvoIk/pClPkNHRyWVeja50FXEl 622GzHQ9H1aC037LKPl6kvCc8iXoV5okzfr1x1ZFj3OkGIeAf3sDYhXd+Tzf6KIL xbRfegDydixOR/ZanO3IDvDV6IQ2DgAptMwUOiMPioX2KoUJx62SQ4y6G+QRd8/A HlTEWO5k8tkrjf2UJCUVxqwVAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUAHtyUxvR n/myY9vdASQ0duZ+rbYwHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0M3QjBBM0JDMDBERTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFdu S3Z6UGp6a1hJcWxsWTNBVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAG237BVzFWdLFMsrkFt340eH/BbbRN9WHn2bTftZdc56fTQQ/bbxhfP7iHMLrG UjZ3L70owUCQknZkr91/3jwlmIH4ONe8re5P2bUME3pSIdkVUqf9XkbeRIAGiijk SbSrBGlLPS8j09nZKGIP9rI/ot/nkSrhLFK8bdXk2ZeViEHObxrPVcxb9j9tqj/D Aymr7hRAhz8J0ZqX8ze4ORBSzIsPDXjFadb1wp0bIfuszCKp4UnDRsNIOAPbH5GA eNximV7cu2PClJI/09jrza2CIYU8wKfXMxZ10RZdVLi259J6jOyNqmb/wJpWv0+y RaFopR2Ou0He8dvHZal3BK7V -----END CERTIFICATE-----Generated at Thu Mar 26 20:39:32 2026 by rpki-client