$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft File: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json) Hash identifier: JCpyCcBa0q7ZDEAuyWfv5Swqv7PoUGT5qF/7+4ab88o= Subject key identifier: 05:D3:4B:77:17:92:8C:E0:F7:F1:8E:BD:70:9B:F5:39:12:8E:51:58 Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA Certificate issuer: /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Certificate serial: 0EF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft Manifest number: 0ECC Signing time: Tue 24 Mar 2026 17:32:41 +0000 Manifest this update: Tue 24 Mar 2026 17:32:41 +0000 Manifest next update: Tue 31 Mar 2026 17:32:41 +0000 Files and hashes: 1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: QIIUm2mqFbAmVNZPXIrVz6bFfnSPEjn4K+mfMho5W5k=) 2: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=) 3: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: b6uLayPebg8p6MLu9qAwrsBNU9d+4r4KLNPM8snizt4=) 4: AF573166309511EABE9B5934C4F9AE02.roa (hash: NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3827 (0xef3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA Validity Not Before: Mar 24 17:32:41 2026 GMT Not After : Mar 31 17:32:41 2026 GMT Subject: CN=69c2cab9-1858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:12:db:c6:ef:19:94:19:80:87:65:26:ae: 9b:9e:48:c4:d8:b1:5e:61:27:38:35:23:d1:4d:d6: c4:28:96:25:f2:7e:b4:1f:20:51:08:1f:6e:53:b2: fc:a7:8b:cf:75:49:f3:fa:03:ce:d0:a1:56:94:aa: ca:e4:86:ef:56:37:fc:eb:61:49:1f:40:96:15:a2: b5:5f:50:ff:51:ad:00:73:f9:69:39:d1:0c:12:37: b3:bc:e8:d3:b5:52:d8:db:3e:22:8a:6e:50:ea:52: b6:7a:0e:cd:78:37:91:e2:8d:21:e8:2e:a7:e7:16: c1:3f:0b:23:f1:20:9e:1a:8e:c2:eb:70:68:a6:57: 3b:1e:2b:6c:01:36:b3:a9:c6:f1:ee:1e:a4:46:c5: b7:bb:63:09:ea:3d:bd:05:01:f2:57:41:9e:85:e7: b0:72:dd:d5:e9:aa:9c:e8:e6:44:dd:99:e0:45:75: 27:af:56:be:c6:61:7b:57:9e:75:04:2e:77:aa:7d: d3:d6:54:e1:22:c8:d2:68:8f:0a:e0:f5:a2:bf:9b: c9:f0:a8:ee:5d:9b:9d:ec:8c:36:cc:ec:76:d8:47: 7b:51:95:99:48:b9:7a:f3:70:8c:78:98:fc:5f:f6: af:bb:bb:1d:54:de:34:41:3b:54:83:d5:de:51:29: 55:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D3:4B:77:17:92:8C:E0:F7:F1:8E:BD:70:9B:F5:39:12:8E:51:58 X509v3 Authority Key Identifier: keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:af:d3:3f:1a:bc:aa:c0:ef:d0:0d:bb:a6:9b:3a:4c:5b:29: ef:ea:c5:e3:d1:fa:4d:a3:0b:64:3c:9f:2b:35:4b:2f:45:1d: 72:16:0c:3b:e4:5c:a5:87:27:fb:af:c7:be:bf:2c:96:6a:36: 70:0a:56:a2:2f:89:6c:27:0c:c7:ea:f9:12:d9:9e:e6:e0:bb: 70:8c:f9:fa:a8:cb:23:db:bf:e4:a4:42:7b:a4:58:51:74:3a: 1f:d8:a9:e4:10:51:6a:2c:5f:56:7f:85:b8:36:82:3c:f6:a1: 57:9e:40:21:a4:e5:cd:96:0c:73:5b:03:71:55:99:e3:4b:c6: fe:29:ea:24:36:17:b3:4d:b0:81:fc:2b:ba:d5:0f:0d:bb:fd: a2:c6:1c:c9:67:3c:d2:a9:46:6d:54:b5:8a:6e:03:bf:95:f7: cc:40:b9:b5:96:b7:ef:5b:7a:96:a1:63:bc:86:29:4b:0d:42: 30:2e:f1:52:5e:65:fb:af:cb:5a:fc:5a:b4:78:f6:e9:cf:a9: c0:c4:45:4d:44:70:bb:2b:3d:c3:a7:1d:81:39:f4:16:48:c7: fa:10:bd:b2:1f:ea:26:61:73:82:e0:e3:76:5d:3b:09:bf:11: 5f:23:2b:db:ed:f4:1c:40:5b:4e:eb:78:c4:ad:42:6b:b0:d3: ab:bd:54:ca -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4 OEE0QTk5REEwHhcNMjYwMzI0MTczMjQxWhcNMjYwMzMxMTczMjQxWjAYMRYwFAYD VQQDEw02OWMyY2FiOS0xODU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszQS28bvGZQZgIdlJq6bnkjE2LFeYSc4NSPRTdbEKJYl8n60HyBRCB9uU7L8 p4vPdUnz+gPO0KFWlKrK5IbvVjf862FJH0CWFaK1X1D/Ua0Ac/lpOdEMEjezvOjT tVLY2z4iim5Q6lK2eg7NeDeR4o0h6C6n5xbBPwsj8SCeGo7C63Boplc7HitsATaz qcbx7h6kRsW3u2MJ6j29BQHyV0Geheewct3V6aqc6OZE3ZngRXUnr1a+xmF7V551 BC53qn3T1lThIsjSaI8K4PWiv5vJ8KjuXZud7Iw2zOx22Ed7UZWZSLl683CMeJj8 X/avu7sdVN40QTtUg9XeUSlVxQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAXTS3cX kozg9/GOvXCb9TkSjlFYMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2 QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6 MlJJeVVQdTJVeDZJcEttZG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAsa/TPxq8qsDv0A27pps6TFsp7+rF49H6TaMLZDyfKzVLL0UdchYMO+RcpYcn +6/Hvr8slmo2cApWoi+JbCcMx+r5Etme5uC7cIz5+qjLI9u/5KRCe6RYUXQ6H9ip 5BBRaixfVn+FuDaCPPahV55AIaTlzZYMc1sDcVWZ40vG/inqJDYXs02wgfwrutUP Dbv9osYcyWc80qlGbVS1im4Dv5X3zEC5tZa371t6lqFjvIYpSw1CMC7xUl5l+6/L WvxatHj26c+pwMRFTURwuys9w6cdgTn0FkjH+hC9sh/qJmFzguDjdl07Cb8RXyMr 2+30HEBbTut4xK1Ca7DTq71Uyg== -----END CERTIFICATE-----Generated at Thu Mar 26 04:09:16 2026 by rpki-client