$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft File: -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json) Hash identifier: es4UWStuI8BThabouyj1xndZr4zOO/NW2G1b6foswWg= Subject key identifier: 41:38:30:5C:14:BA:AA:A2:F1:61:CA:72:BF:03:82:A4:38:5B:74:ED Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388 Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft Manifest number: 06AA Signing time: Tue 24 Mar 2026 23:34:49 +0000 Manifest this update: Tue 24 Mar 2026 23:34:49 +0000 Manifest next update: Tue 31 Mar 2026 23:34:49 +0000 Files and hashes: 1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: UGHI6WSI1wWIuXxmDDvrLH4vWHKCJpNGy7ZCfUHUofI=) 2: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: ueTxaPk78zjdZo1qLabhrCKtO42F+1HdGQgNXdtwiaQ=) 3: C5C77866584111EE85E40820C4F9AE02.roa (hash: gZq4hO6KlqIzQ0dht+JPwOzELy4HWyKu7Y+1DMZFb3o=) 4: C55784DE584111EE85E40820C4F9AE02.roa (hash: dtbPC1LWkATZlWdm2gMIZVIAO5KQs+qcNNvbOqGnkko=) 5: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: K10RKm2RSVVX5jRTjbz83WeVsyTCfxe5LfA+X5JE7CE=) 6: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1RGEPGDWabAXSvxah2bqU7tFm/fhcCPZyMNrSv04Ww4=) 7: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: Df3ID6kB/M7JFh6AAV2Z24ovoongS5kXo66yU3B/CNw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:34:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388 Validity Not Before: Mar 24 23:34:49 2026 GMT Not After : Mar 31 23:34:49 2026 GMT Subject: CN=69c31f99-a671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:8f:ca:f3:fe:30:63:31:1e:0b:7a:e2:ba: 7b:43:17:14:47:e8:dd:2b:dd:dd:4d:88:de:6f:e2: 14:b5:80:17:62:df:e2:c3:43:49:8c:83:19:77:30: 41:70:92:fa:28:83:e0:69:1b:62:34:d6:a5:0f:22: c0:94:97:59:fd:8f:e6:a0:54:9b:c2:41:f1:fb:af: 45:25:74:b4:d6:dd:7e:a5:ea:e6:bb:d0:7d:66:05: 24:51:a5:dc:f6:b8:db:d8:16:6a:5a:06:ae:ff:2b: aa:49:3e:f6:0b:34:79:29:15:21:4b:51:6b:fd:dd: 47:62:ba:1a:12:9f:2c:50:11:6f:7d:bc:5b:2b:26: aa:02:e9:90:6c:d2:38:48:0e:28:68:ba:e5:0e:9b: d2:43:78:87:2f:ba:2c:dc:f7:d6:9d:6b:22:26:21: 0a:84:84:62:fa:44:c1:81:1f:4b:7a:64:b7:b0:8f: 7e:38:99:36:00:bc:3a:8c:21:aa:82:a4:1b:3e:50: 70:13:12:87:90:fa:33:32:c2:ea:d2:f1:bc:c9:1c: 90:1f:38:28:7a:74:ca:62:52:d9:7e:18:d8:5a:aa: 9a:71:4d:e6:12:12:e8:f8:1b:d3:5a:e6:c6:62:21: 1b:ef:f4:d7:3f:df:88:35:13:1f:7f:5f:3e:d4:d3: d6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:38:30:5C:14:BA:AA:A2:F1:61:CA:72:BF:03:82:A4:38:5B:74:ED X509v3 Authority Key Identifier: keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:55:0d:1d:ac:7f:c5:84:b8:e1:8b:28:52:c5:e5:ed:10: b3:0e:63:f0:bc:3c:bf:cd:36:76:2a:b8:0f:c7:42:e8:ef:35: 9e:c7:72:76:72:a5:04:28:72:56:7e:b2:52:86:55:1e:60:93: 86:7f:32:97:3e:e2:19:5c:94:54:a2:c3:02:08:be:ff:ff:18: e9:d9:52:33:6d:36:32:59:ea:45:d3:ac:c5:bd:09:a2:a8:3d: cd:9f:b0:d8:33:8f:dd:5f:3b:12:f5:b7:10:76:7b:7d:83:ed: b1:99:06:f5:cc:ca:b0:85:21:f1:02:f7:38:d0:93:11:01:92: a6:a2:8a:3b:47:84:fa:09:3c:59:14:cd:e6:cf:61:60:cc:6c: 34:78:76:48:7d:96:74:6e:2b:e6:b6:fb:d9:d4:1f:52:7e:86: 87:7a:fd:39:9e:45:6e:66:4b:9a:0b:88:a2:c5:ea:e6:80:64: a6:9b:c2:4b:75:de:4f:77:ed:cc:35:d1:c9:d7:79:e5:68:83: 54:f4:17:e9:9b:10:2c:6d:27:d3:05:1a:75:73:36:64:ed:2b: 1f:2b:63:07:11:5f:42:15:f8:0c:6e:96:ab:52:7f:22:d5:75: bf:04:68:72:06:ed:5b:e9:78:18:2d:4b:c5:13:18:14:7e:80: 41:5a:2c:e3 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA4MjkxMTAvBgNVBAUTKEY4OTc0MjJFNTAxMDA2RDI2MDFEODVBNTAxNzk1MzI2 QkFGRTczODgwHhcNMjYwMzI0MjMzNDQ5WhcNMjYwMzMxMjMzNDQ5WjAYMRYwFAYD VQQDEw02OWMzMWY5OS1hNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviaPyvP+MGMxHgt64rp7QxcUR+jdK93dTYjeb+IUtYAXYt/iw0NJjIMZdzBB cJL6KIPgaRtiNNalDyLAlJdZ/Y/moFSbwkHx+69FJXS01t1+permu9B9ZgUkUaXc 9rjb2BZqWgau/yuqST72CzR5KRUhS1Fr/d1HYroaEp8sUBFvfbxbKyaqAumQbNI4 SA4oaLrlDpvSQ3iHL7os3PfWnWsiJiEKhIRi+kTBgR9LemS3sI9+OJk2ALw6jCGq gqQbPlBwExKHkPozMsLq0vG8yRyQHzgoenTKYlLZfhjYWqqacU3mEhLo+BvTWubG YiEb7/TXP9+INRMff18+1NPWpQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEE4MFwU uqqi8WHKcr8DgqQ4W3TtMB8GA1UdIwQYMBaAFPiXQi5QEAbSYB2FpQF5Uya6/nOI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDgyOS83NjY3QkVEMDYz QTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0SmdIWVdsQVhsVEpyci1j NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1KZENMbEFRQnRKZ0hZV2xBWGxUSnJyLWM0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDgyOS83NjY3QkVEMDYzQTAxMUVDQUQ4Mjk5MUNDNEY5QUUwMi8tSmRDTGxBUUJ0 SmdIWVdsQVhsVEpyci1jNGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAgctVDR2sf8WEuOGLKFLF5e0Qsw5j8Lw8v802diq4D8dC6O81nsdydnKlBChy Vn6yUoZVHmCThn8ylz7iGVyUVKLDAgi+//8Y6dlSM202MlnqRdOsxb0Joqg9zZ+w 2DOP3V87EvW3EHZ7fYPtsZkG9czKsIUh8QL3ONCTEQGSpqKKO0eE+gk8WRTN5s9h YMxsNHh2SH2WdG4r5rb72dQfUn6Gh3r9OZ5FbmZLmguIosXq5oBkppvCS3XeT3ft zDXRydd55WiDVPQX6ZsQLG0n0wUadXM2ZO0rHytjBxFfQhX4DG6Wq1J/ItV1vwRo cgbtW+l4GC1LxRMYFH6AQVos4w== -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:32 2026 by rpki-client