$ rpki-client -vvf rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft File: o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft (raw, json) Hash identifier: R6FQNrWvqtWmlSzhXojHGaNG5KVs/MaCBrSGn80TBj4= Subject key identifier: 80:19:09:50:74:CE:63:4B:24:65:65:28:86:75:2B:55:6C:E7:CE:7A Authority key identifier: A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 Certificate issuer: /CN=A9172878/serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Certificate serial: 35AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft Manifest number: 3559 Signing time: Tue 24 Mar 2026 14:32:28 +0000 Manifest this update: Tue 24 Mar 2026 14:32:27 +0000 Manifest next update: Tue 31 Mar 2026 14:32:27 +0000 Files and hashes: 1: o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl (hash: 7X0hpNwUKIH2nnhcZLM6Kwt5MZg8+J3bi3P7NrDQmtk=) 2: C552F48EC80011EAAD578B77C4F9AE02.roa (hash: TeKcCxaqap3oJm98F7GJVG2ccZm/R5/8IqqVguRB94s=) 3: 8D2DEDF4C2A811EBA79A7055C4F9AE02.roa (hash: WEGQ9dGVwS6YPRbOtRBXT7+GFDURLeGGLBdmhlaFUM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13740 (0x35ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172878, serialNumber=A3D00626C2F9B462C5507FF180C36DE9C3399CB2 Validity Not Before: Mar 24 14:32:27 2026 GMT Not After : Mar 31 14:32:27 2026 GMT Subject: CN=69c2a07c-3f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:37:f4:e5:fb:ae:00:93:ab:17:ee:33:8c: 5a:62:52:4e:d1:8a:10:e4:40:91:ac:b1:c8:03:f8: 1c:24:4f:d6:ae:d7:b9:42:54:e7:bc:c1:21:5d:3c: 98:3e:6f:e7:b2:9c:ce:12:1e:ad:00:67:24:88:ed: 54:62:57:e3:79:f0:3f:df:51:10:a6:aa:98:49:c9: 48:49:38:54:2e:2a:8d:ec:96:20:98:88:52:b2:1f: 95:e8:fc:15:aa:fe:22:17:6e:a0:0f:c4:21:c5:b7: 74:8d:a1:bb:34:77:7c:ca:e9:ba:52:b6:c7:31:9a: 43:a0:fe:02:a7:08:aa:1d:0f:dc:1a:bf:c6:ac:d3: 02:db:e9:45:99:ad:76:8c:7b:25:60:80:d1:91:23: 8d:88:9b:69:c7:1a:a7:9e:71:d4:b0:7d:bb:09:c0: cd:23:e2:22:d0:d4:61:d5:e9:06:87:8f:52:f6:ce: 8c:3a:4b:2d:92:e5:14:b5:38:3f:5c:8b:6c:15:a1: 7c:24:e2:eb:66:e5:f6:bd:da:07:46:2a:27:e8:6e: 34:4c:62:18:60:1f:d5:7c:a5:bd:9a:10:e1:6c:df: 19:a8:47:69:e0:d0:e4:c0:17:cb:f0:3f:a9:99:39: 99:aa:90:a2:8a:bd:23:23:5a:c3:57:5f:ad:88:16: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:19:09:50:74:CE:63:4B:24:65:65:28:86:75:2B:55:6C:E7:CE:7A X509v3 Authority Key Identifier: keyid:A3:D0:06:26:C2:F9:B4:62:C5:50:7F:F1:80:C3:6D:E9:C3:39:9C:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172878/4C998A361D8A11E28A1F23E408B02CD2/o9AGJsL5tGLFUH_xgMNt6cM5nLI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:b2:43:68:da:42:29:e4:0e:d7:49:d4:f7:ff:cc:76:78:8c: f7:c0:81:0b:1d:b0:74:4c:31:36:4f:84:8d:2a:6f:20:ba:3a: b3:9d:98:6d:eb:fb:ff:07:75:de:19:e4:c8:92:70:51:33:97: c8:2c:60:5d:e9:ad:f8:7b:2b:3f:f1:78:b2:99:0e:64:61:a8: 6b:a6:f4:ee:b9:85:f0:8d:ae:cf:a5:c7:50:6a:ca:e0:cb:2d: 63:08:16:c9:df:14:35:4d:12:ea:84:84:7f:74:59:dd:f5:7c: e4:2f:ed:3b:27:54:67:0a:9c:7a:aa:cd:fe:c4:a7:3d:b5:ff: 8c:2b:49:44:d3:43:41:14:fe:59:00:60:61:a7:85:f6:9c:98: 56:2d:f0:a2:8c:a4:51:7b:71:4d:0d:c0:6b:e6:c3:a0:95:cc: c5:6f:aa:c0:f6:51:a9:32:72:a7:4e:1a:c8:56:cf:03:b2:e6: 56:6f:90:6b:73:95:95:2b:08:24:76:fb:a8:56:47:c9:7f:85: cd:2d:6b:05:2a:ab:5d:de:44:c4:cd:05:c8:4c:f0:0f:37:be: f9:0d:f4:b3:a9:a3:92:21:5a:9d:95:ae:60:e6:5c:4e:85:01: 6e:28:24:73:83:57:be:a0:15:0e:24:8a:e5:b1:74:10:f0:e7: e4:2b:b1:de -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI4NzgxMTAvBgNVBAUTKEEzRDAwNjI2QzJGOUI0NjJDNTUwN0ZGMTgwQzM2REU5 QzMzOTlDQjIwHhcNMjYwMzI0MTQzMjI3WhcNMjYwMzMxMTQzMjI3WjAYMRYwFAYD VQQDEw02OWMyYTA3Yy0zZjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgA39OX7rgCTqxfuM4xaYlJO0YoQ5ECRrLHIA/gcJE/Wrte5QlTnvMEhXTyY Pm/nspzOEh6tAGckiO1UYlfjefA/31EQpqqYSclISThULiqN7JYgmIhSsh+V6PwV qv4iF26gD8Qhxbd0jaG7NHd8yum6UrbHMZpDoP4CpwiqHQ/cGr/GrNMC2+lFma12 jHslYIDRkSONiJtpxxqnnnHUsH27CcDNI+Ii0NRh1ekGh49S9s6MOkstkuUUtTg/ XItsFaF8JOLrZuX2vdoHRion6G40TGIYYB/VfKW9mhDhbN8ZqEdp4NDkwBfL8D+p mTmZqpCiir0jI1rDV1+tiBZ7LQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIAZCVB0 zmNLJGVlKIZ1K1Vs5856MB8GA1UdIwQYMBaAFKPQBibC+bRixVB/8YDDbenDOZyy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjg3OC80Qzk5OEEzNjFE OEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRHTEZVSF94Z01OdDZjTTVu TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL285QUdKc0w1dEdMRlVIX3hnTU50NmNNNW5MSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mjg3OC80Qzk5OEEzNjFEOEExMUUyOEExRjIzRTQwOEIwMkNEMi9vOUFHSnNMNXRH TEZVSF94Z01OdDZjTTVuTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAErJDaNpCKeQO10nU9//MdniM98CBCx2wdEwxNk+EjSpvILo6s52Ybev7/wd1 3hnkyJJwUTOXyCxgXemt+HsrP/F4spkOZGGoa6b07rmF8I2uz6XHUGrK4MstYwgW yd8UNU0S6oSEf3RZ3fV85C/tOydUZwqceqrN/sSnPbX/jCtJRNNDQRT+WQBgYaeF 9pyYVi3wooykUXtxTQ3Aa+bDoJXMxW+qwPZRqTJyp04ayFbPA7LmVm+Qa3OVlSsI JHb7qFZHyX+FzS1rBSqrXd5ExM0FyEzwDze++Q30s6mjkiFanZWuYOZcToUBbigk c4NXvqAVDiSK5bF0EPDn5Cux3g== -----END CERTIFICATE-----Generated at Thu Mar 26 00:36:59 2026 by rpki-client