$ rpki-client -vvf rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft File: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft (raw, json) Hash identifier: 2KxRQOjPyjW6KmyZWaeG9OpI6cJ6jTvBum68yNON2t0= Subject key identifier: EE:E7:B7:90:DE:01:93:3C:F3:8F:CF:49:98:6D:64:B3:35:D9:7C:2E Authority key identifier: FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 Certificate issuer: /CN=A9171064/serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Certificate serial: 0CE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft Manifest number: 0CDE Signing time: Thu 26 Mar 2026 18:11:13 +0000 Manifest this update: Thu 26 Mar 2026 18:11:13 +0000 Manifest next update: Thu 02 Apr 2026 18:11:13 +0000 Files and hashes: 1: _YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl (hash: TxKRehRBromffAnGLkWFeU9UJNaA0HXClA0TvQyY4rc=) 2: A2A3D38A05CE11EA80526530C4F9AE02.roa (hash: nlkFWUzq5OO+pTS3z8k8oaCv56U483SdYeWxCplbsVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3303 (0xce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171064, serialNumber=FD827C026B3967E2A140D4D2314E2B0E9C047430 Validity Not Before: Mar 26 18:11:13 2026 GMT Not After : Apr 2 18:11:13 2026 GMT Subject: CN=69c576c1-20d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5b:5d:2c:30:64:7c:6f:0e:f1:09:e1:91:f2: f3:77:ef:67:a6:4b:79:88:cf:24:3d:86:9a:bd:c1: 18:15:48:af:4d:56:8d:68:05:cf:9f:4e:21:40:7b: cd:40:01:5a:90:31:d9:f5:e0:92:48:5f:ae:bc:e7: ac:8a:ec:37:d9:0a:a2:b6:b3:32:16:90:5f:19:4d: b6:91:4e:30:77:64:39:98:13:af:f9:aa:6f:9a:a3: 3b:ef:12:e5:20:1f:58:b7:b5:59:17:c3:99:bc:8c: d7:30:cc:19:86:22:f6:27:d4:a0:15:1f:c1:9c:f5: dc:b3:43:75:23:8a:68:14:16:c6:db:d6:68:41:92: dc:76:96:9e:cf:47:7a:ae:94:49:0b:92:bb:f6:24: 9f:58:c4:1a:74:89:7f:4b:07:b6:a0:66:ee:6b:c0: 73:7d:7a:f5:55:50:d6:ab:d8:64:59:a8:f0:fb:37: 05:ce:1f:0d:c1:37:95:71:8b:c6:c4:11:d8:3c:aa: 78:dc:a1:77:c6:f9:e5:36:54:a8:6e:db:d2:22:2c: ff:33:15:48:47:76:a0:eb:82:31:69:d6:57:36:5d: ee:06:bd:e7:91:32:ce:7b:ce:6a:96:d3:4f:51:0f: 10:d6:6f:3b:a9:05:e1:73:ec:1d:cd:49:84:20:6c: 19:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E7:B7:90:DE:01:93:3C:F3:8F:CF:49:98:6D:64:B3:35:D9:7C:2E X509v3 Authority Key Identifier: keyid:FD:82:7C:02:6B:39:67:E2:A1:40:D4:D2:31:4E:2B:0E:9C:04:74:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171064/07639620052F11EA8A9E3947C4F9AE02/_YJ8Ams5Z-KhQNTSMU4rDpwEdDA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:2e:1a:cd:b4:55:ed:6d:dd:a4:da:f6:89:db:1f:7a:c3:c3: 5f:a6:ac:c1:a8:ee:56:a2:8a:44:ca:db:f0:2d:c6:59:2b:fc: 0f:3d:15:9a:bd:0c:65:f1:eb:77:c0:cd:cd:1d:82:ce:bc:25: 32:6b:44:db:78:00:26:31:0f:a3:fe:6c:08:ea:a4:4f:b7:86: d1:59:14:2a:5a:97:c3:3f:83:71:fb:e2:b6:3d:94:21:ea:c8: 80:ff:35:60:00:7e:df:45:be:57:9c:f6:d8:44:49:aa:ea:39: a6:e7:0e:fb:f5:5b:51:6b:aa:cc:1c:c1:79:8e:a5:ae:8e:30: e2:9e:f1:bf:e1:0f:33:79:22:4d:7d:08:86:7f:d6:5d:a2:fd: de:9d:4d:47:56:cb:40:af:19:ec:8b:4e:d5:ac:a0:6c:77:4e: 72:ca:ff:fc:21:d1:ae:76:d8:26:e4:fb:73:03:da:ce:14:18: c7:e6:4c:e7:d5:17:05:64:eb:18:77:e7:cc:9b:f2:60:b6:4c: 2e:ab:18:bb:46:bf:e2:18:e6:20:91:90:84:58:3c:bc:af:60: f2:4e:f1:21:36:09:60:cb:71:5f:51:df:cd:9e:db:f4:f2:8b: c7:24:ae:2f:9d:f0:de:53:61:49:66:4b:b6:51:0f:0e:2f:75: fd:46:b4:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEwNjQxMTAvBgNVBAUTKEZEODI3QzAyNkIzOTY3RTJBMTQwRDREMjMxNEUyQjBF OUMwNDc0MzAwHhcNMjYwMzI2MTgxMTEzWhcNMjYwNDAyMTgxMTEzWjAYMRYwFAYD VQQDEw02OWM1NzZjMS0yMGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl1tdLDBkfG8O8QnhkfLzd+9npkt5iM8kPYaavcEYFUivTVaNaAXPn04hQHvN QAFakDHZ9eCSSF+uvOesiuw32QqitrMyFpBfGU22kU4wd2Q5mBOv+apvmqM77xLl IB9Yt7VZF8OZvIzXMMwZhiL2J9SgFR/BnPXcs0N1I4poFBbG29ZoQZLcdpaez0d6 rpRJC5K79iSfWMQadIl/Swe2oGbua8BzfXr1VVDWq9hkWajw+zcFzh8NwTeVcYvG xBHYPKp43KF3xvnlNlSobtvSIiz/MxVIR3ag64IxadZXNl3uBr3nkTLOe85qltNP UQ8Q1m87qQXhc+wdzUmEIGwZUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7nt5De AZM884/PSZhtZLM12XwuMB8GA1UdIwQYMBaAFP2CfAJrOWfioUDU0jFOKw6cBHQw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTA2NC8wNzYzOTYyMDA1 MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVotS2hRTlRTTVU0ckRwd0Vk REEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19ZSjhBbXM1Wi1LaFFOVFNNVTRyRHB3RWREQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTA2NC8wNzYzOTYyMDA1MkYxMUVBOEE5RTM5NDdDNEY5QUUwMi9fWUo4QW1zNVot S2hRTlRTTVU0ckRwd0VkREEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAaS4azbRV7W3dpNr2idsfesPDX6aswajuVqKKRMrb8C3GWSv8Dz0Vmr0MZfHr d8DNzR2CzrwlMmtE23gAJjEPo/5sCOqkT7eG0VkUKlqXwz+Dcfvitj2UIerIgP81 YAB+30W+V5z22ERJquo5pucO+/VbUWuqzBzBeY6lro4w4p7xv+EPM3kiTX0Ihn/W XaL93p1NR1bLQK8Z7ItO1aygbHdOcsr//CHRrnbYJuT7cwPazhQYx+ZM59UXBWTr GHfnzJvyYLZMLqsYu0a/4hjmIJGQhFg8vK9g8k7xITYJYMtxX1HfzZ7b9PKLxySu L53w3lNhSWZLtlEPDi91/Ua0Zg== -----END CERTIFICATE-----Generated at Sat Mar 28 12:02:24 2026 by rpki-client