$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft File: J7kXbXUBrEb9oBkmur5-vwlfko4.mft (raw, json) Hash identifier: cxYpiBYTskr2kugZ1iYcUdKRMxsmGV7QwcrhqVdUqH8= Subject key identifier: 53:3E:F2:DC:45:07:C5:19:9A:BA:51:64:31:76:53:38:30:64:90:C2 Authority key identifier: 27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E Certificate issuer: /CN=A9171D35/serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Certificate serial: 0F69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft Manifest number: 0F50 Signing time: Tue 24 Mar 2026 17:26:54 +0000 Manifest this update: Tue 24 Mar 2026 17:26:53 +0000 Manifest next update: Tue 31 Mar 2026 17:26:53 +0000 Files and hashes: 1: J7kXbXUBrEb9oBkmur5-vwlfko4.crl (hash: /pkYP8PO28orzShueawLKIdseOiINafSV98E3FCP4DM=) 2: C74924EE159F11EEBCFC135CC4F9AE02.roa (hash: N33b13XY6g27GVjt3CNNQUi+knQ6X/92GcFFFlrfuoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3945 (0xf69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171D35, serialNumber=27B9176D7501AC46FDA01926BABE7EBF095F928E Validity Not Before: Mar 24 17:26:53 2026 GMT Not After : Mar 31 17:26:53 2026 GMT Subject: CN=69c2c95d-807a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:98:d0:2e:c5:56:06:de:c1:c9:77:1b:e2:dc: 2a:db:ad:68:b6:51:0f:8f:60:f2:0b:1e:56:4e:79: bf:0c:12:06:0a:79:92:22:86:7e:ef:c8:b2:63:35: 4c:b6:3f:0d:aa:cc:a5:7c:97:e3:10:09:33:1c:42: ae:fe:ab:0e:98:38:95:8b:4f:70:02:86:d6:b8:c0: 5e:05:89:9d:d5:b4:63:2f:7a:93:c3:ac:3e:e2:d6: f6:92:95:e2:93:a5:a5:29:e8:e0:6e:66:f2:f7:18: 32:fe:c6:e7:4c:49:25:d5:ed:e3:a0:a8:21:29:00: 25:01:dd:0b:91:20:5e:d0:0e:a2:2f:7e:d6:b5:6d: da:93:02:dd:30:7d:fa:c7:70:4c:5c:7f:6e:7f:1d: 76:92:87:2d:bd:88:0a:d1:b9:2f:6f:d0:2e:48:e7: ab:30:5d:4d:9f:8e:ec:2d:d1:e5:c0:e2:90:01:c9: f6:ef:b1:1b:07:f4:e5:25:86:47:b4:e8:4b:1c:c9: 50:94:3b:31:c0:b8:9e:8d:29:57:34:6b:84:45:89: 80:7d:66:dd:c5:67:de:fb:3d:e0:16:57:2a:c1:9b: 2a:e8:be:f9:a9:78:be:67:79:c1:b3:a3:77:fb:6a: e5:a7:dd:4c:00:9f:81:0d:97:53:8f:b2:7b:c3:58: 0d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3E:F2:DC:45:07:C5:19:9A:BA:51:64:31:76:53:38:30:64:90:C2 X509v3 Authority Key Identifier: keyid:27:B9:17:6D:75:01:AC:46:FD:A0:19:26:BA:BE:7E:BF:09:5F:92:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7kXbXUBrEb9oBkmur5-vwlfko4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D35/EA4DCA1C8EDA11E98D206141C4F9AE02/J7kXbXUBrEb9oBkmur5-vwlfko4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2e:5e:8d:dd:24:23:42:6c:d0:49:d5:2a:91:a8:e0:87:fb: cc:fe:46:ab:0e:b5:0f:36:2f:b8:fe:fb:53:e6:5c:4b:95:a1: 95:1e:e4:f5:a6:c6:92:53:4a:83:94:f0:78:87:e0:06:e9:f4: ed:9f:6a:0a:f7:b8:ca:b1:6b:57:f3:cd:9e:38:27:9a:71:27: b2:a6:ba:d5:02:39:aa:a3:30:21:ab:db:85:b2:25:11:8b:4e: 75:50:4c:cb:af:57:6f:30:2f:e6:46:55:52:dc:7f:aa:20:5c: 9d:3d:3d:00:c6:df:46:4a:15:f3:59:60:b6:1e:52:f7:56:7e: 0f:63:ff:51:93:db:f5:76:81:40:fb:41:22:84:58:bf:0f:d5: b7:2a:ae:0f:38:19:be:0d:42:f3:66:74:52:a0:31:e9:bb:f3: ce:60:28:96:c3:5d:16:89:bc:ef:c3:57:6c:2c:f1:4e:77:a9: 99:ff:22:03:a4:b4:fc:70:ee:00:0d:68:16:ff:6a:e4:f6:33: b8:75:86:f0:21:61:e8:f2:eb:d0:27:c7:8b:f0:36:11:30:08: 55:91:9b:b1:a7:07:eb:f5:3f:45:86:d8:0b:0d:63:25:ea:51: f7:5c:a1:d1:12:30:4b:c5:15:3b:c5:ae:65:af:35:44:de:e9: bc:04:c6:77 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICD2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFEMzUxMTAvBgNVBAUTKDI3QjkxNzZENzUwMUFDNDZGREEwMTkyNkJBQkU3RUJG MDk1RjkyOEUwHhcNMjYwMzI0MTcyNjUzWhcNMjYwMzMxMTcyNjUzWjAYMRYwFAYD VQQDEw02OWMyYzk1ZC04MDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65jQLsVWBt7ByXcb4twq261otlEPj2DyCx5WTnm/DBIGCnmSIoZ+78iyYzVM tj8NqsylfJfjEAkzHEKu/qsOmDiVi09wAobWuMBeBYmd1bRjL3qTw6w+4tb2kpXi k6WlKejgbmby9xgy/sbnTEkl1e3joKghKQAlAd0LkSBe0A6iL37WtW3akwLdMH36 x3BMXH9ufx12koctvYgK0bkvb9AuSOerMF1Nn47sLdHlwOKQAcn277EbB/TlJYZH tOhLHMlQlDsxwLiejSlXNGuERYmAfWbdxWfe+z3gFlcqwZsq6L75qXi+Z3nBs6N3 +2rlp91MAJ+BDZdTj7J7w1gNpwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFM+8txF B8UZmrpRZDF2UzgwZJDCMB8GA1UdIwQYMBaAFCe5F211AaxG/aAZJrq+fr8JX5KO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUQzNS9FQTREQ0ExQzhF REExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJFYjlvQmttdXI1LXZ3bGZr bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3a1hiWFVCckViOW9Ca211cjUtdndsZmtvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUQzNS9FQTREQ0ExQzhFREExMUU5OEQyMDYxNDFDNEY5QUUwMi9KN2tYYlhVQnJF YjlvQmttdXI1LXZ3bGZrbzQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJy5ejd0kI0Js0EnVKpGo4If7zP5Gqw61DzYvuP77U+ZcS5WhlR7k9abGklNK g5TweIfgBun07Z9qCve4yrFrV/PNnjgnmnEnsqa61QI5qqMwIavbhbIlEYtOdVBM y69XbzAv5kZVUtx/qiBcnT09AMbfRkoV81lgth5S91Z+D2P/UZPb9XaBQPtBIoRY vw/VtyquDzgZvg1C82Z0UqAx6bvzzmAolsNdFom878NXbCzxTnepmf8iA6S0/HDu AA1oFv9q5PYzuHWG8CFh6PLr0CfHi/A2ETAIVZGbsacH6/U/RYbYCw1jJepR91yh 0RIwS8UVO8WuZa81RN7pvATGdw== -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:13 2026 by rpki-client