$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: edsisi3KNC84+4sxmjJtc5tWiRPLofGlLlinhURtydw= Subject key identifier: 41:11:85:28:7A:47:48:03:E8:86:25:E5:D0:B4:77:C6:E7:06:24:86 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 0100 Signing time: Wed 25 Mar 2026 05:22:25 +0000 Manifest this update: Wed 25 Mar 2026 05:22:24 +0000 Manifest next update: Wed 01 Apr 2026 05:22:24 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: 02rSAvQ+BjYR8nN2fRS/vqm94dbr/xck8adfIT0evkU=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: Mbaq1JxQwVcFP87z4eBI+1tbhFSk65AD4tx8mWL3NcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Mar 25 05:22:24 2026 GMT Not After : Apr 1 05:22:24 2026 GMT Subject: CN=69c37110-dc36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:a4:44:96:1b:ee:11:33:fd:ef:68:d7:36: 91:26:ac:0c:45:89:70:4b:a2:28:6b:63:c6:01:aa: 41:66:44:a2:f1:68:dc:01:ed:1a:5a:c7:cf:55:01: 0b:65:10:00:23:c7:b7:d3:45:5c:d1:54:69:84:de: 9f:09:98:93:fd:7d:50:a8:d9:18:a5:52:5b:a8:c8: 42:c3:f5:42:14:ba:e2:8b:b9:79:29:ec:42:80:f1: 0e:d9:f6:18:f0:7d:9b:ae:a8:1a:ae:16:92:05:58: 74:0b:72:ac:2d:a0:27:8b:e5:5a:7c:a9:6e:5d:2b: 51:82:5b:fb:90:d2:cb:63:2d:46:8e:cc:5a:10:06: 6d:60:90:11:32:34:e7:0a:55:cf:ef:0c:b6:12:88: c5:cb:87:d7:1d:db:cb:18:e1:36:1d:9f:70:48:ec: b9:21:d3:f2:be:1e:0c:52:43:24:b5:15:db:b5:17: 17:99:72:ec:06:e3:33:8e:58:fe:03:d1:8f:5a:23: 53:68:27:22:58:f9:8a:1f:d8:89:d8:52:99:a9:e5: a4:e9:64:b1:af:93:17:dc:f3:01:fe:36:7e:1f:9a: 83:ec:c4:5e:d5:ff:64:00:66:a3:e7:23:8f:4f:72: cc:84:3e:7e:63:61:20:b2:c8:77:3c:34:0a:d5:98: d4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:11:85:28:7A:47:48:03:E8:86:25:E5:D0:B4:77:C6:E7:06:24:86 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:b2:d1:57:94:0b:4e:2c:12:31:3c:7b:a3:57:9d:b4:c1:6e: 8e:65:45:2e:31:68:d2:3f:55:b0:67:07:5f:86:5f:09:11:fa: 95:e9:04:ee:e3:13:2c:6e:f4:a6:97:38:ed:28:2d:e7:e9:1f: e1:46:7a:26:43:95:05:5d:f6:25:ef:bb:5f:86:83:9f:f4:f0: ae:c1:f2:8b:69:24:f5:e7:7f:61:0a:7b:e2:45:7e:d8:32:80: da:0d:45:4d:b6:d4:e1:61:05:b2:19:27:a7:20:90:bf:71:b8: 8f:ab:33:02:d4:66:2a:9e:74:60:b1:8a:58:1e:3f:fd:a0:b9: f1:95:ef:2f:a1:24:a1:0b:e6:d9:b7:30:d0:ef:c7:77:4e:27: 29:f5:b3:7e:65:b6:b8:01:08:cf:2f:2c:55:db:d5:5d:6a:71: ee:bd:41:4e:7c:49:b2:47:fe:b1:38:0d:ab:3e:c7:59:c7:27: 9c:bc:39:56:6c:7e:23:fe:33:5d:26:bc:98:dc:18:43:9c:0a: 10:43:7f:9e:7a:e4:88:c4:1d:81:09:f9:20:1c:3a:ab:d5:3f: 5e:4f:e2:d9:f5:38:c2:6a:75:8e:4e:ab:9b:dc:e0:3d:8c:7d: 0d:d3:3c:9d:07:54:16:c5:d6:d5:a4:99:df:88:46:ae:58:1a: 56:b9:6e:92 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFCRjAxMTAvBgNVBAUTKERCM0RGRDg2Q0VCRkVBRUQzQUFGMTVERUFFRTY5NjUy MzQ3NDZBMjkwHhcNMjYwMzI1MDUyMjI0WhcNMjYwNDAxMDUyMjI0WjAYMRYwFAYD VQQDEw02OWMzNzExMC1kYzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnjukRJYb7hEz/e9o1zaRJqwMRYlwS6Ioa2PGAapBZkSi8WjcAe0aWsfPVQEL ZRAAI8e300Vc0VRphN6fCZiT/X1QqNkYpVJbqMhCw/VCFLrii7l5KexCgPEO2fYY 8H2brqgarhaSBVh0C3KsLaAni+VafKluXStRglv7kNLLYy1GjsxaEAZtYJARMjTn ClXP7wy2EojFy4fXHdvLGOE2HZ9wSOy5IdPyvh4MUkMktRXbtRcXmXLsBuMzjlj+ A9GPWiNTaCciWPmKH9iJ2FKZqeWk6WSxr5MX3PMB/jZ+H5qD7MRe1f9kAGaj5yOP T3LMhD5+Y2Egssh3PDQK1ZjU/QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEERhSh6 R0gD6IYl5dC0d8bnBiSGMB8GA1UdIwQYMBaAFNs9/YbOv+rtOq8V3q7mllI0dGop MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUJGMC9BNzhGMUIxMkE0 MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1MDZyeFhlcnVhV1VqUjBh aWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFpay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUJGMC9BNzhGMUIxMkE0MTUxMUVGQTE0RkJEM0ZDNEY5QUUwMi8yejM5aHM2XzZ1 MDZyeFhlcnVhV1VqUjBhaWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJLLRV5QLTiwSMTx7o1edtMFujmVFLjFo0j9VsGcHX4ZfCRH6lekE7uMTLG70 ppc47Sgt5+kf4UZ6JkOVBV32Je+7X4aDn/TwrsHyi2kk9ed/YQp74kV+2DKA2g1F TbbU4WEFshknpyCQv3G4j6szAtRmKp50YLGKWB4//aC58ZXvL6EkoQvm2bcw0O/H d04nKfWzfmW2uAEIzy8sVdvVXWpx7r1BTnxJskf+sTgNqz7HWccnnLw5Vmx+I/4z XSa8mNwYQ5wKEEN/nnrkiMQdgQn5IBw6q9U/Xk/i2fU4wmp1jk6rm9zgPYx9DdM8 nQdUFsXW1aSZ34hGrlgaVrlukg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:41 2026 by rpki-client