$ rpki-client -vvf rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft File: A3uPBfSQLZ2otCTDk0CGXz2smyY.mft (raw, json) Hash identifier: IE3+EKm4WROC2FTXYmVnKbeGRHNyoxKpli2zab3NAZs= Subject key identifier: 7E:B9:9E:3C:48:BF:92:B6:9A:5A:5F:79:46:DC:72:9C:C3:C3:61:90 Authority key identifier: 03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 Certificate issuer: /CN=A9167D07/serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Certificate serial: 16CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft Manifest number: 16B4 Signing time: Tue 24 Mar 2026 16:36:33 +0000 Manifest this update: Tue 24 Mar 2026 16:36:32 +0000 Manifest next update: Tue 31 Mar 2026 16:36:32 +0000 Files and hashes: 1: A3uPBfSQLZ2otCTDk0CGXz2smyY.crl (hash: 70h+ySOVDwQ6SZsH4ZrbQknc/4NUNUvFhzl/VVqtevA=) 2: EFE8CDF6C8D111EE95249F25C4F9AE02.roa (hash: vxWTeDCOHWuEhOaJAF4VGFM0DqtGWr26nr5q8brIPcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:36:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5836 (0x16cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167D07, serialNumber=037B8F05F4902D9DA8B424C39340865F3DAC9B26 Validity Not Before: Mar 24 16:36:32 2026 GMT Not After : Mar 31 16:36:32 2026 GMT Subject: CN=69c2bd90-b99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5f:1e:f5:96:6b:65:74:5b:d2:2b:2b:ad:f7: 31:e0:07:fb:5c:cd:e2:61:0b:dc:47:a4:f8:01:2d: 29:b4:64:74:73:c2:81:bc:3e:8b:11:ae:34:cd:bd: 6d:3e:9d:88:b8:f8:4b:5a:80:01:77:d0:ac:ab:b3: 54:61:3c:c4:fc:92:97:50:a3:56:a9:0c:2b:40:62: 5c:33:c9:97:7f:b3:a8:9f:f6:bd:27:7d:6f:51:08: 10:9a:0a:d6:c6:e2:d6:5a:89:76:ac:78:f4:b3:04: e9:c2:01:24:32:63:de:37:78:d4:54:6d:aa:6e:00: b0:20:18:b5:3b:a6:15:16:f8:09:88:6c:64:7c:3a: f3:b6:77:b4:a5:fb:82:9f:09:6c:c9:d2:8c:57:03: 61:25:b8:6e:6f:fd:05:2b:67:96:aa:bc:9c:6f:76: 01:e1:45:94:20:c9:84:7f:d3:41:e4:c5:5e:e4:dd: af:ea:71:37:7d:97:8a:d5:58:e4:58:c0:78:5b:6b: 2d:c9:9f:e8:68:f9:1d:3a:30:41:aa:8e:02:99:a9: bb:75:24:3b:0a:3b:67:47:1b:7d:91:2f:1e:8d:0e: c1:d8:46:42:4d:c4:a5:a2:c8:3d:80:ab:ab:dc:5b: 60:20:06:33:83:b3:10:ed:52:c7:20:a8:2e:e5:52: 24:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B9:9E:3C:48:BF:92:B6:9A:5A:5F:79:46:DC:72:9C:C3:C3:61:90 X509v3 Authority Key Identifier: keyid:03:7B:8F:05:F4:90:2D:9D:A8:B4:24:C3:93:40:86:5F:3D:AC:9B:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3uPBfSQLZ2otCTDk0CGXz2smyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167D07/D74AE2741BA911E8A8F57865C4F9AE02/A3uPBfSQLZ2otCTDk0CGXz2smyY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ca:be:ab:fc:6b:52:2c:29:86:ea:a1:a0:ef:cf:76:7c:36: e2:3c:5b:be:5d:71:87:fd:2f:da:ea:df:03:69:15:9b:3e:61: 8f:49:1f:2d:90:55:06:33:f5:30:2f:fa:72:8b:6d:92:c0:10: 07:7a:5c:3f:0f:20:a0:09:97:96:db:b4:d2:b3:45:31:7e:4c: ba:b3:e7:d8:69:46:2a:12:fa:19:cd:c6:fe:dd:be:3b:9f:df: 6f:bf:17:ff:4e:bf:95:58:cf:86:35:82:64:13:ee:6a:9d:b4: 7e:c0:9e:14:6d:55:cc:09:dc:4d:d6:ce:3e:a3:bc:24:a5:cd: b5:8e:23:40:ca:63:ff:e5:2d:97:2a:11:5b:76:20:28:24:dd: 68:e9:f6:22:1d:38:9a:de:fd:2e:40:29:76:5e:b2:cf:cd:19: 02:b8:c3:7f:90:04:3c:0d:e6:6f:77:97:a5:e5:a0:3a:15:f9: 87:e8:42:e9:c8:61:1c:74:45:84:8e:bf:73:82:09:b1:f0:91: de:a8:1f:c1:d6:b5:05:44:2a:42:1a:d0:19:bb:47:ae:6b:68: bf:08:27:f8:23:5a:e5:82:ec:1d:5a:57:e3:10:1e:81:67:78: 93:0d:2c:14:0e:41:1d:32:2c:85:4f:d3:f2:ad:df:ab:6c:35: 0a:b0:e3:9f -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjdEMDcxMTAvBgNVBAUTKDAzN0I4RjA1RjQ5MDJEOURBOEI0MjRDMzkzNDA4NjVG M0RBQzlCMjYwHhcNMjYwMzI0MTYzNjMyWhcNMjYwMzMxMTYzNjMyWjAYMRYwFAYD VQQDEw02OWMyYmQ5MC1iOTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvV8e9ZZrZXRb0isrrfcx4Af7XM3iYQvcR6T4AS0ptGR0c8KBvD6LEa40zb1t Pp2IuPhLWoABd9Csq7NUYTzE/JKXUKNWqQwrQGJcM8mXf7Oon/a9J31vUQgQmgrW xuLWWol2rHj0swTpwgEkMmPeN3jUVG2qbgCwIBi1O6YVFvgJiGxkfDrztne0pfuC nwlsydKMVwNhJbhub/0FK2eWqrycb3YB4UWUIMmEf9NB5MVe5N2v6nE3fZeK1Vjk WMB4W2styZ/oaPkdOjBBqo4Cmam7dSQ7CjtnRxt9kS8ejQ7B2EZCTcSlosg9gKur 3FtgIAYzg7MQ7VLHIKgu5VIk2wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFH65njxI v5K2mlpfeUbccpzDw2GQMB8GA1UdIwQYMBaAFAN7jwX0kC2dqLQkw5NAhl89rJsm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2N0QwNy9ENzRBRTI3NDFC QTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxaMm90Q1REazBDR1h6MnNt eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EzdVBCZlNRTFoyb3RDVERrMENHWHoyc215WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 N0QwNy9ENzRBRTI3NDFCQTkxMUU4QThGNTc4NjVDNEY5QUUwMi9BM3VQQmZTUUxa Mm90Q1REazBDR1h6MnNteVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiMq+q/xrUiwphuqhoO/Pdnw24jxbvl1xh/0v2urfA2kVmz5hj0kfLZBVBjP1 MC/6cottksAQB3pcPw8goAmXltu00rNFMX5MurPn2GlGKhL6Gc3G/t2+O5/fb78X /06/lVjPhjWCZBPuap20fsCeFG1VzAncTdbOPqO8JKXNtY4jQMpj/+UtlyoRW3Yg KCTdaOn2Ih04mt79LkApdl6yz80ZArjDf5AEPA3mb3eXpeWgOhX5h+hC6chhHHRF hI6/c4IJsfCR3qgfwda1BUQqQhrQGbtHrmtovwgn+CNa5YLsHVpX4xAegWd4kw0s FA5BHTIshU/T8q3fq2w1CrDjnw== -----END CERTIFICATE-----Generated at Thu Mar 26 04:33:55 2026 by rpki-client