$ rpki-client -vvf rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft File: kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft (raw, json) Hash identifier: apWXM+xYObEZwmM+/lq60wRP7pEUEEjYwPt4wy26CC0= Subject key identifier: 5E:23:21:17:DD:DC:F6:B3:FF:AD:55:06:03:2D:8C:01:51:C0:AA:67 Authority key identifier: 90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 Certificate issuer: /CN=A9181EAA/serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Certificate serial: 0A95 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft Manifest number: 0A7F Signing time: Tue 24 Mar 2026 16:02:10 +0000 Manifest this update: Tue 24 Mar 2026 16:02:10 +0000 Manifest next update: Tue 31 Mar 2026 16:02:10 +0000 Files and hashes: 1: kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl (hash: CMj4uOvC3faA2OiOWBc4fbIL5y8RPQQmAhyHY17Hqo8=) 2: 24F4E436A10211EABCED8740C4F9AE02.roa (hash: hn18JZ2Pgz3ZiW7c+VLyxV/L8S6CymPlAeocWGjlF5s=) 3: C32E05EEA10011EAA9C71D3AC4F9AE02.roa (hash: hWqJvrXEvhGgOQ+/93XwLBgBWmguHUoLhWu4DnVR4Hc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2709 (0xa95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181EAA, serialNumber=90F53064D048C0CCF8BCD8F898C066A13174BFA7 Validity Not Before: Mar 24 16:02:10 2026 GMT Not After : Mar 31 16:02:10 2026 GMT Subject: CN=69c2b582-cd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:68:f9:96:ff:c2:7f:98:4f:14:ea:c5:27: 46:bd:fe:77:79:70:5a:b4:2b:61:73:af:cd:3b:19: 97:db:57:4e:b7:ca:44:c4:fd:ff:f8:30:25:29:b4: 3c:16:01:5b:f8:06:8c:65:d7:06:1b:a0:c9:af:fc: be:1a:77:40:c2:3c:2c:5e:af:4c:10:d0:69:36:5b: 9c:bf:54:24:c7:ee:e8:12:e9:74:ac:ad:99:bc:36: bf:8d:a8:e6:03:a3:6f:9f:c4:7a:34:5f:56:42:c3: e4:42:dd:ee:4f:48:21:7b:9b:5b:3a:c6:97:fd:19: 52:ce:78:fa:67:d5:1e:a7:64:a9:8a:4f:75:d3:06: 17:a6:a2:2e:de:ab:56:66:92:f3:bc:fc:a1:c1:d0: c6:65:9d:63:d3:6a:f3:21:f1:b0:ca:96:80:18:75: 1c:55:f4:44:60:37:2e:18:43:df:0a:92:68:02:1f: c5:97:af:fa:6f:85:86:69:e1:83:c1:f8:97:af:b4: da:22:1f:90:93:e2:23:46:ea:61:32:ce:d4:28:02: 0e:d0:90:95:32:ad:e6:fe:18:00:a8:b7:09:2d:01: 16:9e:04:0a:15:47:80:16:dc:51:66:c3:a9:71:0c: 36:ee:9e:28:7a:14:d0:df:03:d9:26:ca:6f:1f:a4: c4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:23:21:17:DD:DC:F6:B3:FF:AD:55:06:03:2D:8C:01:51:C0:AA:67 X509v3 Authority Key Identifier: keyid:90:F5:30:64:D0:48:C0:CC:F8:BC:D8:F8:98:C0:66:A1:31:74:BF:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kPUwZNBIwMz4vNj4mMBmoTF0v6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181EAA/077FCDB47ED211EA9EB8D579C4F9AE02/kPUwZNBIwMz4vNj4mMBmoTF0v6c.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:25:71:7a:cc:74:83:3d:16:63:93:e6:54:06:a8:e0:af:f5: 0a:bb:bc:63:f9:e3:85:9d:41:7c:07:a0:a9:c1:72:15:8b:33: b1:83:d1:01:ad:a3:49:e0:ac:cc:57:c1:9f:bd:13:f1:3c:d9: b3:01:5a:2e:cb:4b:49:11:42:76:80:46:7b:4b:20:78:70:9b: 13:8b:44:bd:51:03:e6:30:27:73:df:0e:80:73:78:0b:9a:e1: 7a:dc:12:2e:eb:6d:f4:2e:65:cc:c7:d3:53:fe:76:c6:93:bf: 3e:56:3a:b8:00:14:81:c4:f9:b3:34:a9:61:01:47:8c:a8:8d: c1:b0:e1:e8:af:d0:b1:cd:8e:36:ef:5f:40:06:61:ed:e7:54: b1:93:f1:20:86:10:9c:cb:b6:f2:a0:80:bc:ab:9f:1d:3c:c4: 21:b9:cf:eb:95:ea:1d:09:68:f0:d8:aa:9c:58:b4:66:b9:d3: 0b:17:30:64:63:8c:dc:7d:45:92:3b:5c:7f:43:85:8d:56:eb: a2:32:dc:54:91:56:e0:ce:c1:87:35:02:53:46:6c:ef:f0:ff: 06:15:93:99:22:d4:a2:77:f0:20:fa:11:72:7f:ed:a2:3f:f7: 7b:6f:ce:87:dd:54:91:fa:02:f1:73:30:5f:e0:ef:6a:86:81: e9:84:8c:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODFFQUExMTAvBgNVBAUTKDkwRjUzMDY0RDA0OEMwQ0NGOEJDRDhGODk4QzA2NkEx MzE3NEJGQTcwHhcNMjYwMzI0MTYwMjEwWhcNMjYwMzMxMTYwMjEwWjAYMRYwFAYD VQQDEw02OWMyYjU4Mi1jZDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyOFo+Zb/wn+YTxTqxSdGvf53eXBatCthc6/NOxmX21dOt8pExP3/+DAlKbQ8 FgFb+AaMZdcGG6DJr/y+GndAwjwsXq9MENBpNlucv1Qkx+7oEul0rK2ZvDa/jajm A6Nvn8R6NF9WQsPkQt3uT0ghe5tbOsaX/RlSznj6Z9Uep2Spik910wYXpqIu3qtW ZpLzvPyhwdDGZZ1j02rzIfGwypaAGHUcVfREYDcuGEPfCpJoAh/Fl6/6b4WGaeGD wfiXr7TaIh+Qk+IjRuphMs7UKAIO0JCVMq3m/hgAqLcJLQEWngQKFUeAFtxRZsOp cQw27p4oehTQ3wPZJspvH6TEywIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF4jIRfd 3Paz/61VBgMtjAFRwKpnMB8GA1UdIwQYMBaAFJD1MGTQSMDM+LzY+JjAZqExdL+n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MUVBQS8wNzdGQ0RCNDdF RDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdNejR2Tmo0bU1CbW9URjB2 NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2tQVXdaTkJJd016NHZOajRtTUJtb1RGMHY2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MUVBQS8wNzdGQ0RCNDdFRDIxMUVBOUVCOEQ1NzlDNEY5QUUwMi9rUFV3Wk5CSXdN ejR2Tmo0bU1CbW9URjB2NmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACCVxesx0gz0WY5PmVAao4K/1Cru8Y/njhZ1BfAegqcFyFYszsYPRAa2jSeCs zFfBn70T8TzZswFaLstLSRFCdoBGe0sgeHCbE4tEvVED5jAnc98OgHN4C5rhetwS Lutt9C5lzMfTU/52xpO/PlY6uAAUgcT5szSpYQFHjKiNwbDh6K/Qsc2ONu9fQAZh 7edUsZPxIIYQnMu28qCAvKufHTzEIbnP65XqHQlo8NiqnFi0ZrnTCxcwZGOM3H1F kjtcf0OFjVbrojLcVJFW4M7BhzUCU0Zs7/D/BhWTmSLUonfwIPoRcn/toj/3e2/O h91UkfoC8XMwX+DvaoaB6YSMEw== -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:09 2026 by rpki-client