$ rpki-client -vvf rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft File: sDUqu0PwqFVkm512GmVcP8YPbmM.mft (raw, json) Hash identifier: 2NFIto4/8JBUFRT7e0UOFsx/wOXEnsdEUqoKBrNleTY= Subject key identifier: 89:8E:6B:91:53:25:35:FE:36:99:63:55:73:0A:C6:1E:AC:AE:2E:AC Authority key identifier: B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 Certificate issuer: /CN=A9176DFC/serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Certificate serial: 0209 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft Manifest number: 01FE Signing time: Fri 27 Mar 2026 02:39:19 +0000 Manifest this update: Fri 27 Mar 2026 02:39:19 +0000 Manifest next update: Fri 03 Apr 2026 02:39:19 +0000 Files and hashes: 1: sDUqu0PwqFVkm512GmVcP8YPbmM.crl (hash: h6sp+TTuXeuCJoESYfBK6j5/1NecpIwTHVWsy2iPtDg=) 2: 230A1090248C11EEA9EE1935C4F9AE02.roa (hash: m2hk6wUAtlL5ptBXdwMclZPFoA2N1StKSEsLHKrorak=) 3: 7BFE665EE17F11EF9536DC48C4F9AE02.roa (hash: lbzUGxCxVXNgaorxa3WAftNPLQlIRU8KXF9/ol/bmFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 02:39:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 521 (0x209) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176DFC, serialNumber=B0352ABB43F0A855649B9D761A655C3FC60F6E63 Validity Not Before: Mar 27 02:39:19 2026 GMT Not After : Apr 3 02:39:19 2026 GMT Subject: CN=69c5edd7-ba1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:a1:16:47:ed:23:cd:9e:0f:75:f2:db:89: c3:02:fc:1b:88:06:f8:0a:10:0d:5e:a4:fc:1c:c2: f2:01:ec:ce:21:cf:95:36:5c:c3:60:17:ac:b0:d8: e1:ec:ad:a6:18:55:4c:51:90:f8:e1:af:4c:4d:9f: b8:e1:0e:60:d5:7c:59:b3:37:00:f0:d3:2e:39:b0: 83:08:2a:c1:a7:99:46:7c:d5:e3:97:ee:d4:9a:3b: 0f:65:51:9b:fa:14:27:6a:cd:02:db:f4:fd:93:41: 91:1b:c9:4d:03:e4:d2:54:9a:44:55:9f:28:aa:a8: e1:85:de:54:04:ea:2d:6b:a9:b5:c4:49:46:ba:c8: f4:28:27:5d:a7:a4:07:e7:e2:a7:67:e3:76:21:39: aa:e4:7a:58:44:bd:70:1e:34:c8:12:ae:6e:72:33: 82:d9:75:1f:d1:1f:f0:fe:36:48:a4:07:e7:57:68: a5:77:d6:2e:b7:07:ca:20:d6:82:d2:0a:46:7c:d3: 59:d3:eb:41:2b:1c:c9:2c:ac:df:a9:e2:72:c8:f1: 04:c0:0e:22:51:3a:ff:c6:d8:a2:f9:84:ce:6c:79: bf:26:c1:ae:28:7b:7d:78:cc:42:01:39:c9:3e:58: 7e:a9:c4:c3:3f:35:af:1d:0a:0e:c5:29:2f:ef:c5: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8E:6B:91:53:25:35:FE:36:99:63:55:73:0A:C6:1E:AC:AE:2E:AC X509v3 Authority Key Identifier: keyid:B0:35:2A:BB:43:F0:A8:55:64:9B:9D:76:1A:65:5C:3F:C6:0F:6E:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sDUqu0PwqFVkm512GmVcP8YPbmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176DFC/BE40C136248B11EEA34F6F34C4F9AE02/sDUqu0PwqFVkm512GmVcP8YPbmM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a3:75:30:22:d5:63:2c:aa:17:42:3d:3c:85:84:fa:e7:3b: d2:55:95:69:c5:1c:0d:d5:38:b7:6c:9e:b6:98:33:8b:f2:a2: cb:71:3f:3f:e5:51:30:0d:3a:b2:e9:49:c2:74:2b:47:b7:d3: a0:cd:94:95:6e:40:33:5e:42:e6:7b:08:c6:01:f8:7f:50:e9: 11:f3:63:77:c2:fd:d6:04:3b:22:2f:d1:79:a1:6a:07:62:78: a5:79:26:df:ae:f4:09:e3:6b:8c:0b:be:c3:1f:46:77:64:72: 04:86:14:50:be:8b:8e:1e:90:58:38:d1:b2:8b:58:c6:d2:8a: 8a:4d:b3:60:e9:8a:b1:30:0d:39:2d:91:d2:e2:9f:26:fe:c2: a6:9a:b7:ce:bc:62:40:c1:90:c6:e4:35:6e:49:c4:f1:eb:f6: 34:e9:c0:9b:0f:10:0d:ed:6a:04:ad:fa:28:e6:a8:70:cc:8a: 65:9e:f5:6a:bd:76:64:dc:b5:c6:3e:1d:09:a3:07:1c:46:c7: b6:73:37:9f:78:d3:3d:41:74:d0:fe:ac:09:f7:e5:70:0c:9d: ec:ab:c2:b4:aa:47:83:89:91:d7:1c:7d:0e:4c:53:88:e7:e9: a9:b3:6d:9b:21:e8:53:c7:5e:f0:60:df:00:11:b0:bd:93:ab: 13:8d:f3:1c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZERkMxMTAvBgNVBAUTKEIwMzUyQUJCNDNGMEE4NTU2NDlCOUQ3NjFBNjU1QzNG QzYwRjZFNjMwHhcNMjYwMzI3MDIzOTE5WhcNMjYwNDAzMDIzOTE5WjAYMRYwFAYD VQQDEw02OWM1ZWRkNy1iYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wChFkftI82eD3Xy24nDAvwbiAb4ChANXqT8HMLyAezOIc+VNlzDYBessNjh 7K2mGFVMUZD44a9MTZ+44Q5g1XxZszcA8NMuObCDCCrBp5lGfNXjl+7UmjsPZVGb +hQnas0C2/T9k0GRG8lNA+TSVJpEVZ8oqqjhhd5UBOota6m1xElGusj0KCddp6QH 5+KnZ+N2ITmq5HpYRL1wHjTIEq5ucjOC2XUf0R/w/jZIpAfnV2ild9YutwfKINaC 0gpGfNNZ0+tBKxzJLKzfqeJyyPEEwA4iUTr/xtii+YTObHm/JsGuKHt9eMxCATnJ Plh+qcTDPzWvHQoOxSkv78Vs4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFImOa5FT JTX+NpljVXMKxh6sri6sMB8GA1UdIwQYMBaAFLA1KrtD8KhVZJuddhplXD/GD25j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkRGQy9CRTQwQzEzNjI0 OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FGVmttNTEyR21WY1A4WVBi bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NEVXF1MFB3cUZWa201MTJHbVZjUDhZUGJtTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkRGQy9CRTQwQzEzNjI0OEIxMUVFQTM0RjZGMzRDNEY5QUUwMi9zRFVxdTBQd3FG VmttNTEyR21WY1A4WVBibU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbKN1MCLVYyyqF0I9PIWE+uc70lWVacUcDdU4t2yetpgzi/Kiy3E/P+VRMA06 sulJwnQrR7fToM2UlW5AM15C5nsIxgH4f1DpEfNjd8L91gQ7Ii/ReaFqB2J4pXkm 3670CeNrjAu+wx9Gd2RyBIYUUL6Ljh6QWDjRsotYxtKKik2zYOmKsTANOS2R0uKf Jv7Cppq3zrxiQMGQxuQ1bknE8ev2NOnAmw8QDe1qBK36KOaocMyKZZ71ar12ZNy1 xj4dCaMHHEbHtnM3n3jTPUF00P6sCfflcAyd7KvCtKpHg4mR1xx9DkxTiOfpqbNt myHoU8de8GDfABGwvZOrE43zHA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:42:23 2026 by rpki-client