$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft File: 1SAZKpWvyNXyc3TZo0xGM859rEQ.mft (raw, json) Hash identifier: 4SDPFA1Kil3MrAjIouRBXMnkvk+Fwun23JtdcQp+Mbc= Subject key identifier: AC:61:17:92:A2:CA:1E:CF:96:45:CC:FA:12:CF:9E:2B:E3:72:E0:6E Authority key identifier: D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 Certificate issuer: /CN=A9169A9C/serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft Manifest number: 0202 Signing time: Wed 25 Mar 2026 02:41:15 +0000 Manifest this update: Wed 25 Mar 2026 02:41:15 +0000 Manifest next update: Wed 01 Apr 2026 02:41:15 +0000 Files and hashes: 1: 1SAZKpWvyNXyc3TZo0xGM859rEQ.crl (hash: eYrZq2V2VDST0fXDhJ3unbBUdFOXhx2L0BOBHd0gpgs=) 2: 40D0157A4E6A11F088256D4EC4F9AE02.roa (hash: GtB+540Na9gBA/mhZk/pwr8xgrOuS92j17VMFwnTNm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169A9C, serialNumber=D520192A95AFC8D5F27374D9A34C4633CE7DAC44 Validity Not Before: Mar 25 02:41:15 2026 GMT Not After : Apr 1 02:41:15 2026 GMT Subject: CN=69c34b4b-9546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:23:f0:1d:4d:6e:de:af:e1:2e:d4:d8:c7:93: 13:ba:40:36:a9:f4:c6:41:91:51:9e:0a:95:89:20: 1c:47:60:83:80:e0:4c:9e:34:f9:fd:f3:e9:8d:40: ef:c5:4c:1f:b1:07:fc:7e:28:eb:ed:5d:54:6b:51: df:ad:c9:95:e5:c6:86:01:7e:63:a1:42:95:40:67: b5:8e:db:e4:19:fe:1b:28:be:ed:fd:5b:a2:6e:7f: 61:d7:54:16:f2:89:4b:22:72:5b:04:a6:e0:16:84: bf:8f:07:91:41:95:fa:36:5b:bd:3f:7b:86:92:64: df:fc:76:d3:d7:32:f8:4c:79:f1:d5:b3:78:98:0b: f0:e7:ce:40:15:42:82:99:f5:46:6d:64:11:66:a2: 4b:1c:0f:5b:e2:34:b9:86:2f:b6:c2:dd:5a:9b:5a: 5e:5b:72:7d:29:b5:0b:a2:99:48:b8:d3:ee:01:b9: 75:71:a8:28:93:9d:cb:7b:5f:27:74:15:74:3a:d8: c6:90:8c:3e:bd:13:5e:c6:46:5c:ab:b6:15:2e:48: 60:41:38:c6:6e:c1:c6:e5:24:8f:a4:9d:86:52:9b: 0e:20:f3:3c:b0:13:39:dd:98:fa:b4:37:c6:31:96: b1:c4:c0:b0:cf:09:f9:02:6d:da:1a:56:01:08:c0: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:61:17:92:A2:CA:1E:CF:96:45:CC:FA:12:CF:9E:2B:E3:72:E0:6E X509v3 Authority Key Identifier: keyid:D5:20:19:2A:95:AF:C8:D5:F2:73:74:D9:A3:4C:46:33:CE:7D:AC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1SAZKpWvyNXyc3TZo0xGM859rEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A9C/C3A804043F8411EEB900A90FC4F9AE02/1SAZKpWvyNXyc3TZo0xGM859rEQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e8:a8:d1:fd:ec:9e:9f:03:17:6d:65:01:0a:a6:1e:91:a1: 71:29:de:a4:1e:f2:a4:81:83:01:67:25:fb:64:a3:44:64:0b: 66:44:0d:09:77:57:55:23:f2:fd:6e:22:20:08:bb:8e:2f:3c: ac:4b:4b:50:96:69:2e:53:3a:a2:31:a8:65:14:4f:16:45:89: 05:ff:ed:9e:90:37:8b:fe:f5:0a:07:12:ee:72:7c:80:cd:26: 3d:a3:96:38:a0:5a:b8:d9:fe:44:df:f5:0e:7e:5f:c5:b8:9b: 61:cc:46:69:37:75:33:97:77:f2:70:f5:18:a1:b5:c6:19:02: 35:b0:cd:1e:58:9e:85:3c:91:2a:53:3b:68:e6:25:06:a7:68: da:fe:13:99:0f:72:82:1c:f8:58:f3:b1:bc:ae:56:11:1a:52: 44:1d:aa:01:2b:4e:04:6f:22:9f:05:76:5f:88:c9:bb:3e:5e: 3d:6e:94:79:2d:f1:84:40:f0:c4:ed:73:d0:20:e0:ce:7d:eb: ea:43:50:29:04:7c:52:31:0d:50:87:65:92:79:e6:28:03:1e: 75:af:41:de:ae:0f:6f:73:04:23:40:16:6a:26:f8:45:14:c2: ab:36:e8:cd:ca:58:4c:e1:e8:d0:c0:c3:a9:25:88:0f:95:92: de:d3:f1:4a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBOUMxMTAvBgNVBAUTKEQ1MjAxOTJBOTVBRkM4RDVGMjczNzREOUEzNEM0NjMz Q0U3REFDNDQwHhcNMjYwMzI1MDI0MTE1WhcNMjYwNDAxMDI0MTE1WjAYMRYwFAYD VQQDEw02OWMzNGI0Yi05NTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtiPwHU1u3q/hLtTYx5MTukA2qfTGQZFRngqViSAcR2CDgOBMnjT5/fPpjUDv xUwfsQf8fijr7V1Ua1HfrcmV5caGAX5joUKVQGe1jtvkGf4bKL7t/Vuibn9h11QW 8olLInJbBKbgFoS/jweRQZX6Nlu9P3uGkmTf/HbT1zL4THnx1bN4mAvw585AFUKC mfVGbWQRZqJLHA9b4jS5hi+2wt1am1peW3J9KbULoplIuNPuAbl1cagok53Le18n dBV0OtjGkIw+vRNexkZcq7YVLkhgQTjGbsHG5SSPpJ2GUpsOIPM8sBM53Zj6tDfG MZaxxMCwzwn5Am3aGlYBCMBR3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKxhF5Ki yh7PlkXM+hLPnivjcuBuMB8GA1UdIwQYMBaAFNUgGSqVr8jV8nN02aNMRjPOfaxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUE5Qy9DM0E4MDQwNDNG ODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlOWHljM1RabzB4R004NTly RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFTQVpLcFd2eU5YeWMzVFpvMHhHTTg1OXJFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUE5Qy9DM0E4MDQwNDNGODQxMUVFQjkwMEE5MEZDNEY5QUUwMi8xU0FaS3BXdnlO WHljM1RabzB4R004NTlyRVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAZeio0f3snp8DF21lAQqmHpGhcSnepB7ypIGDAWcl+2SjRGQLZkQNCXdXVSPy /W4iIAi7ji88rEtLUJZpLlM6ojGoZRRPFkWJBf/tnpA3i/71CgcS7nJ8gM0mPaOW OKBauNn+RN/1Dn5fxbibYcxGaTd1M5d38nD1GKG1xhkCNbDNHliehTyRKlM7aOYl Bqdo2v4TmQ9yghz4WPOxvK5WERpSRB2qAStOBG8inwV2X4jJuz5ePW6UeS3xhEDw xO1z0CDgzn3r6kNQKQR8UjENUIdlknnmKAMeda9B3q4Pb3MEI0AWaib4RRTCqzbo zcpYTOHo0MDDqSWID5WS3tPxSg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:20 2026 by rpki-client