$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: xE+kltzME3wPmwGDNn+BnRUoI7IPUmgJUz0PAfDMrrY= Subject key identifier: EF:62:EA:BE:9D:9E:93:64:E0:11:F1:1B:9D:80:86:D0:50:C7:78:BC Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 06DB Signing time: Tue 24 Mar 2026 21:57:04 +0000 Manifest this update: Tue 24 Mar 2026 21:57:04 +0000 Manifest next update: Tue 31 Mar 2026 21:57:04 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: /4VP38AhWpAP50hB+KPc8nNpVPcvwV4WlFTx/+dSXWI=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: HmEJSmIlnqMRSQIFroiM2sK+BrSWqRLqcDK06fh9sgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:57:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Mar 24 21:57:04 2026 GMT Not After : Mar 31 21:57:04 2026 GMT Subject: CN=69c308b0-2437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:67:f4:5f:3e:3f:f5:89:e8:da:34:5c:d4:c6: d0:d5:de:52:31:5d:9f:1a:e8:c2:10:b3:28:9a:bb: 99:18:1a:20:c4:70:56:41:a8:94:48:ee:1f:00:ff: 6c:b8:4f:b2:dd:cb:61:e9:fa:81:7f:a2:9b:5c:f6: bd:3c:39:74:46:b5:89:f1:37:2a:ef:f3:8e:58:69: 55:4c:0f:f7:e7:f4:46:c6:3f:0a:33:40:6e:03:9a: 81:77:4d:15:44:ff:37:ca:0f:83:06:65:b0:9b:23: a2:eb:a3:28:c8:ce:3b:bf:e6:f9:d0:a3:2b:e2:69: dd:c0:f5:0f:55:58:9f:a6:ea:fd:38:3a:a6:97:c6: ed:f0:24:29:65:7d:4e:61:db:17:6f:3c:6f:e3:e0: b1:fe:91:fd:f9:a0:0a:30:e9:03:4d:0d:a1:6c:ac: bc:9d:b1:1e:f4:da:dc:b0:44:01:1e:bc:cf:83:03: ec:4d:5d:e2:de:fc:44:10:5f:41:29:17:99:68:59: 57:45:ac:1c:ba:d7:ae:de:68:70:05:80:3f:f0:f7: 08:66:be:3a:a6:79:f3:7e:b9:e7:cd:23:a5:b5:2b: 34:4f:4e:1e:94:c3:50:77:ff:05:67:b2:0f:1b:38: 61:5b:03:a7:4e:7e:ab:b9:ad:50:ac:33:16:94:65: 7a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:62:EA:BE:9D:9E:93:64:E0:11:F1:1B:9D:80:86:D0:50:C7:78:BC X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e6:58:e5:ca:e8:a2:d4:ff:96:f9:ed:23:a6:27:14:db:2a: cc:a2:c3:2e:fc:b9:3b:dd:b7:ee:db:1f:f5:57:cc:f1:eb:5e: f8:05:3a:04:10:e9:fe:17:19:55:75:ca:9b:3b:7f:f9:d2:7f: a0:cb:43:76:be:e6:c8:c1:05:7f:1c:18:b4:24:63:b4:01:71: fb:61:75:62:e0:cd:d6:20:5b:a9:7c:94:3e:89:69:ca:5b:82: 80:47:9c:55:fc:2f:d8:a4:76:bb:15:7f:79:62:e3:20:9a:46: fd:28:32:40:c5:b2:00:f6:87:a8:91:3c:bc:3d:e3:4b:d9:e7: 6b:bd:24:0d:10:3a:bd:53:88:48:1f:00:22:22:6c:7d:1b:d2: b6:ab:af:53:0b:62:95:8f:f9:7b:23:58:1f:0b:66:35:a3:08: a5:42:a7:45:c0:09:36:03:a3:4f:44:62:4a:e3:03:63:86:c1: ae:89:70:ab:ae:15:07:59:a2:09:c4:0e:50:4a:97:a2:59:22: 04:2d:7d:97:6d:24:dc:e1:dd:24:c9:15:a3:ad:ce:4d:86:ec: 26:e0:4c:4a:fe:2f:d9:f4:23:d6:77:68:b8:ca:30:bb:3a:37: 9a:01:70:83:d9:01:46:df:51:e6:0e:28:ad:33:ad:d0:93:11: 33:b3:70:d5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjYwMzI0MjE1NzA0WhcNMjYwMzMxMjE1NzA0WjAYMRYwFAYD VQQDEw02OWMzMDhiMC0yNDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi2f0Xz4/9Yno2jRc1MbQ1d5SMV2fGujCELMomruZGBogxHBWQaiUSO4fAP9s uE+y3cth6fqBf6KbXPa9PDl0RrWJ8Tcq7/OOWGlVTA/35/RGxj8KM0BuA5qBd00V RP83yg+DBmWwmyOi66MoyM47v+b50KMr4mndwPUPVVifpur9ODqml8bt8CQpZX1O YdsXbzxv4+Cx/pH9+aAKMOkDTQ2hbKy8nbEe9NrcsEQBHrzPgwPsTV3i3vxEEF9B KReZaFlXRawcuteu3mhwBYA/8PcIZr46pnnzfrnnzSOltSs0T04elMNQd/8FZ7IP GzhhWwOnTn6rua1QrDMWlGV6HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO9i6r6d npNk4BHxG52AhtBQx3i8MB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAH+ZY5crootT/lvntI6YnFNsqzKLDLvy5O9237tsf9VfM8ete+AU6BBDp/hcZ VXXKmzt/+dJ/oMtDdr7myMEFfxwYtCRjtAFx+2F1YuDN1iBbqXyUPolpyluCgEec Vfwv2KR2uxV/eWLjIJpG/SgyQMWyAPaHqJE8vD3jS9nna70kDRA6vVOISB8AIiJs fRvStquvUwtilY/5eyNYHwtmNaMIpUKnRcAJNgOjT0RiSuMDY4bBrolwq64VB1mi CcQOUEqXolkiBC19l20k3OHdJMkVo63OTYbsJuBMSv4v2fQj1ndouMowuzo3mgFw g9kBRt9R5g4orTOt0JMRM7Nw1Q== -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:00 2026 by rpki-client