$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft File: cnDzQpmiHqWwx27T1-suB7tnI_c.mft (raw, json) Hash identifier: x6go6WoNgpWTz6j3f26/7IflhTpiBqs8rBFJmr+ngz4= Subject key identifier: 71:7C:64:C2:48:BF:29:F4:2B:B9:A4:D8:C3:E9:93:20:7B:3D:FE:38 Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 Certificate issuer: /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft Manifest number: 0114 Signing time: Wed 25 Mar 2026 05:11:09 +0000 Manifest this update: Wed 25 Mar 2026 05:11:09 +0000 Manifest next update: Wed 01 Apr 2026 05:11:09 +0000 Files and hashes: 1: cnDzQpmiHqWwx27T1-suB7tnI_c.crl (hash: AUvjx79IZt87YjTtdzRugpams3frf+7mrbYxaHjkK0Y=) 2: 24DBC31AB1BA11F080D32309C4F9AE02.roa (hash: p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=) 3: C4C01E3800D111F19FE1BBA3726F56BC.roa (hash: 7TdxN5pwG9InxHjLBF8NeXCwHbUoryPl86+yQHm4dE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7 Validity Not Before: Mar 25 05:11:09 2026 GMT Not After : Apr 1 05:11:09 2026 GMT Subject: CN=69c36e6d-f0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:a2:80:72:af:e4:fa:40:b5:1d:55:9c:27: b0:19:0b:ec:50:b7:52:d3:83:6d:f3:df:3d:33:34: d1:c7:2d:21:80:51:ef:f7:73:2a:69:ef:4d:6e:fe: 52:e2:59:3e:bb:93:19:d1:37:b2:89:c3:dd:f2:5e: a9:dd:da:08:a0:ae:bf:88:a9:11:0c:2d:64:71:d4: d9:83:66:33:c2:29:bf:d5:37:15:ec:05:18:f6:3f: cc:39:a3:e9:a9:b5:87:99:6d:05:63:24:fa:92:b3: 7a:28:20:3c:c8:1e:16:71:78:4a:00:24:f0:1c:d0: bb:b1:ac:cd:96:6a:a4:c7:eb:cf:60:d9:4b:c1:6a: a7:a6:a3:c5:c0:59:fb:2e:78:c2:ac:7e:ef:f2:7d: 8c:16:3d:5b:d4:1d:50:7f:d5:bc:21:cd:95:4d:ad: 4b:ea:f2:3f:9b:ac:41:28:ac:72:08:cf:1c:b0:db: ba:59:ea:11:48:c7:56:a1:5a:46:ff:59:b3:47:05: 3b:ea:87:4c:57:6f:fb:4f:2c:ef:17:b0:e7:3a:e8: 3a:50:68:06:35:a9:9c:57:a4:13:78:0a:bd:df:18: e9:21:25:76:56:f2:9a:72:34:bb:c2:f9:4e:6e:df: b9:0e:e1:2b:c5:07:77:9b:98:1d:e9:a1:08:4e:e5: 72:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7C:64:C2:48:BF:29:F4:2B:B9:A4:D8:C3:E9:93:20:7B:3D:FE:38 X509v3 Authority Key Identifier: keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6d:13:e0:12:20:f3:67:88:9b:3f:18:04:f2:f1:28:38:30: 5b:98:08:d6:43:99:d3:37:8f:ec:c9:87:fb:2c:64:a7:9c:50: 19:57:13:0a:45:54:f4:15:be:d7:9c:95:62:aa:8a:a9:da:c6: ba:94:ab:f4:a1:d3:47:78:c7:77:0b:51:a3:97:52:0a:fb:4f: 33:5d:8a:1f:c9:5d:99:55:aa:fa:8e:07:49:c2:c9:1b:22:42: b2:ab:be:21:1f:ee:53:ea:49:36:73:58:2a:bf:cb:e7:3c:23: 5e:73:22:86:19:a5:75:a8:ce:30:f2:28:4a:72:14:6a:c5:99: 36:4f:c1:21:ba:e3:47:fb:69:2b:cd:24:b2:56:d9:ce:fe:73: 64:82:90:0f:52:a3:dc:8f:55:11:6c:7e:2d:0b:5b:ef:25:f4: fd:f8:b8:77:98:10:cd:32:3e:7e:c0:61:31:44:9a:38:46:1b: 05:bc:19:4b:a4:9b:27:c8:04:bf:f7:0d:dc:fe:01:a0:8c:2f: 80:bd:c1:62:d4:86:06:ab:e0:63:1b:99:57:47:48:0d:8d:49: e3:68:72:39:1c:56:20:c5:6e:a0:55:a0:87:9f:ea:a7:9d:72: 79:40:fa:6c:d5:05:d0:a9:8c:04:b7:fa:49:08:81:74:09:f0: b7:ac:1a:0e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlFQUUxMTAvBgNVBAUTKDcyNzBGMzQyOTlBMjFFQTVCMEM3NkVEM0Q3RUIyRTA3 QkI2NzIzRjcwHhcNMjYwMzI1MDUxMTA5WhcNMjYwNDAxMDUxMTA5WjAYMRYwFAYD VQQDEw02OWMzNmU2ZC1mMGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSqigHKv5PpAtR1VnCewGQvsULdS04Nt8989MzTRxy0hgFHv93Mqae9Nbv5S 4lk+u5MZ0TeyicPd8l6p3doIoK6/iKkRDC1kcdTZg2Yzwim/1TcV7AUY9j/MOaPp qbWHmW0FYyT6krN6KCA8yB4WcXhKACTwHNC7sazNlmqkx+vPYNlLwWqnpqPFwFn7 LnjCrH7v8n2MFj1b1B1Qf9W8Ic2VTa1L6vI/m6xBKKxyCM8csNu6WeoRSMdWoVpG /1mzRwU76odMV2/7TyzvF7DnOug6UGgGNamcV6QTeAq93xjpISV2VvKacjS7wvlO bt+5DuErxQd3m5gd6aEITuVyPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHF8ZMJI vyn0K7mk2MPpkyB7Pf44MB8GA1UdIwQYMBaAFHJw80KZoh6lsMdu09frLge7ZyP3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUVBRS9BRTAyODA1NjhE MEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhxV3d4MjdUMS1zdUI3dG5J X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuRHpRcG1pSHFXd3gyN1QxLXN1Qjd0bklfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUVBRS9BRTAyODA1NjhEMEUxMUVGQThGRTkzNzFDNEY5QUUwMi9jbkR6UXBtaUhx V3d4MjdUMS1zdUI3dG5JX2MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAf20T4BIg82eImz8YBPLxKDgwW5gI1kOZ0zeP7MmH+yxkp5xQGVcTCkVU9BW+ 15yVYqqKqdrGupSr9KHTR3jHdwtRo5dSCvtPM12KH8ldmVWq+o4HScLJGyJCsqu+ IR/uU+pJNnNYKr/L5zwjXnMihhmldajOMPIoSnIUasWZNk/BIbrjR/tpK80kslbZ zv5zZIKQD1Kj3I9VEWx+LQtb7yX0/fi4d5gQzTI+fsBhMUSaOEYbBbwZS6SbJ8gE v/cN3P4BoIwvgL3BYtSGBqvgYxuZV0dIDY1J42hyORxWIMVuoFWgh5/qp51yeUD6 bNUF0KmMBLf6SQiBdAnwt6waDg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:10:35 2026 by rpki-client