$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft File: mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft (raw, json) Hash identifier: GTYZ4ncUOYAw9gOzw2vTfH01b4GnXZlFGtpEnXUzSwI= Subject key identifier: 8F:92:1D:82:CB:EB:08:3A:A3:D4:85:B8:51:BE:4A:56:8B:DF:07:2C Authority key identifier: 99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D Certificate issuer: /CN=A9167B9D/serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Certificate serial: 0533 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft Manifest number: 052B Signing time: Tue 24 Mar 2026 23:14:27 +0000 Manifest this update: Tue 24 Mar 2026 23:14:26 +0000 Manifest next update: Tue 31 Mar 2026 23:14:26 +0000 Files and hashes: 1: mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl (hash: XeEvYwDSQOtEW/SCFWOpCaRdf8Ua5NInqC3eFFbJ2mg=) 2: D70119A43CB211EC9A01695FC4F9AE02.roa (hash: PEJr+Mm39qdGaPmAkNHpAbI5gf+Z7mrX4P7uIMXjoD4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1331 (0x533) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167B9D, serialNumber=99FCF804CAC87D5885718F190BAA2E2C85F1B18D Validity Not Before: Mar 24 23:14:26 2026 GMT Not After : Mar 31 23:14:26 2026 GMT Subject: CN=69c31ad3-8196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:43:cb:20:7f:48:15:31:51:09:f8:17:a2:08: cf:f8:13:7b:7f:50:70:ff:01:49:ea:d5:78:19:8c: a7:84:91:69:d6:9a:1f:3e:50:2d:84:4d:28:ca:f3: 6c:96:1c:50:9c:ca:af:e2:22:67:9c:a0:05:f9:1a: ff:85:ff:99:63:98:bb:d9:9f:d6:38:00:3e:4d:79: c1:ed:38:9f:97:7a:52:fa:95:9d:21:a3:52:cb:49: c5:dd:e7:95:60:d9:68:76:8b:f6:dc:d5:df:fa:9e: 1f:dd:df:e1:27:e5:37:97:e5:72:95:9d:21:db:e1: 01:b3:0c:62:cb:c4:e9:4c:da:e3:07:c1:3c:3c:d7: e1:88:6a:a3:fc:82:2b:5f:3e:77:a3:b2:2d:09:e1: 37:e0:d7:a4:88:49:d6:98:ad:ab:6e:e3:32:90:5e: e2:e8:97:c4:e5:bb:a0:37:15:75:20:46:d1:57:cc: 1f:28:c5:09:73:cb:3a:75:14:6c:72:38:7c:4c:7c: 42:31:79:ff:21:f1:99:9f:42:b8:a5:7a:1e:05:70: fa:1e:65:be:a0:0f:a3:0c:38:8c:63:ed:95:62:6d: 7b:14:e6:99:db:e8:d0:a8:83:f1:ba:03:77:6f:51: 1f:57:fb:a7:74:d1:93:77:e5:36:8c:c0:ab:d7:20: 36:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:92:1D:82:CB:EB:08:3A:A3:D4:85:B8:51:BE:4A:56:8B:DF:07:2C X509v3 Authority Key Identifier: keyid:99:FC:F8:04:CA:C8:7D:58:85:71:8F:19:0B:AA:2E:2C:85:F1:B1:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mfz4BMrIfViFcY8ZC6ouLIXxsY0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B9D/C5556F1E3CAF11ECB31F3C38C4F9AE02/mfz4BMrIfViFcY8ZC6ouLIXxsY0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption db:d4:6d:fd:f8:7f:72:ac:64:f4:a2:80:85:91:f5:24:77:f5: b0:58:85:30:f8:5d:4c:20:db:96:c2:82:e4:dc:c4:c1:e6:af: ad:8e:c9:98:49:91:37:02:b0:1e:71:7b:3d:b2:17:24:24:59: ea:9a:63:26:c8:14:20:e5:b1:20:5a:53:fb:24:aa:f6:e8:9f: 7d:a3:81:e1:3c:04:c5:99:98:46:ad:bb:8c:5c:17:93:3b:cb: fa:80:11:d6:83:e9:1d:42:60:fd:c8:be:21:d1:0b:02:9c:73: 8c:d6:0b:89:42:78:05:ee:af:50:e7:ee:fd:8f:75:c1:c0:08: c3:5d:b0:3b:ff:28:9c:8b:ba:d1:7d:3d:1c:eb:26:03:97:09: 83:5f:cf:00:80:dc:6f:8c:5a:c3:44:ef:3d:0d:9c:d2:e3:cc: 6b:e2:8f:37:ba:63:13:ed:7c:bb:bb:83:9f:6e:e1:4e:68:0e: e3:2d:70:65:2a:47:87:fc:81:a4:a3:80:55:37:b9:1d:a5:9c: 69:fa:12:16:9d:5f:7e:0a:18:72:21:76:24:3c:10:e5:21:86: 72:3f:a6:5e:e5:00:4d:78:95:22:be:9c:de:46:87:b1:a7:e2: 7c:2d:ba:4f:3a:09:88:cf:2f:22:2a:10:00:aa:40:09:1c:29: 06:fd:2b:a4 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdCOUQxMTAvBgNVBAUTKDk5RkNGODA0Q0FDODdENTg4NTcxOEYxOTBCQUEyRTJD ODVGMUIxOEQwHhcNMjYwMzI0MjMxNDI2WhcNMjYwMzMxMjMxNDI2WjAYMRYwFAYD VQQDEw02OWMzMWFkMy04MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEPLIH9IFTFRCfgXogjP+BN7f1Bw/wFJ6tV4GYynhJFp1pofPlAthE0oyvNs lhxQnMqv4iJnnKAF+Rr/hf+ZY5i72Z/WOAA+TXnB7Tifl3pS+pWdIaNSy0nF3eeV YNlodov23NXf+p4f3d/hJ+U3l+VylZ0h2+EBswxiy8TpTNrjB8E8PNfhiGqj/IIr Xz53o7ItCeE34NekiEnWmK2rbuMykF7i6JfE5bugNxV1IEbRV8wfKMUJc8s6dRRs cjh8THxCMXn/IfGZn0K4pXoeBXD6HmW+oA+jDDiMY+2VYm17FOaZ2+jQqIPxugN3 b1EfV/undNGTd+U2jMCr1yA2SQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI+SHYLL 6wg6o9SFuFG+SlaL3wcsMB8GA1UdIwQYMBaAFJn8+ATKyH1YhXGPGQuqLiyF8bGN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0I5RC9DNTU1NkYxRTND QUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZWaUZjWThaQzZvdUxJWHhz WTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21mejRCTXJJZlZpRmNZOFpDNm91TElYeHNZMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0I5RC9DNTU1NkYxRTNDQUYxMUVDQjMxRjNDMzhDNEY5QUUwMi9tZno0Qk1ySWZW aUZjWThaQzZvdUxJWHhzWTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEA29Rt/fh/cqxk9KKAhZH1JHf1sFiFMPhdTCDblsKC5NzEweavrY7JmEmRNwKw HnF7PbIXJCRZ6ppjJsgUIOWxIFpT+ySq9uiffaOB4TwExZmYRq27jFwXkzvL+oAR 1oPpHUJg/ci+IdELApxzjNYLiUJ4Be6vUOfu/Y91wcAIw12wO/8onIu60X09HOsm A5cJg1/PAIDcb4xaw0TvPQ2c0uPMa+KPN7pjE+18u7uDn27hTmgO4y1wZSpHh/yB pKOAVTe5HaWcafoSFp1ffgoYciF2JDwQ5SGGcj+mXuUATXiVIr6c3kaHsafifC26 TzoJiM8vIioQAKpACRwpBv0rpA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:10 2026 by rpki-client