$ rpki-client -vvf rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft File: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft (raw, json) Hash identifier: eu1Ui+fFLJHcxpKDcB9cZBzROTejWtlLyHcKs10JxX8= Subject key identifier: 2E:E8:E9:3D:04:25:F7:0F:33:89:7A:9F:AA:79:44:AE:9B:E7:C0:3A Authority key identifier: F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D Certificate issuer: /CN=A91852BA/serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft Manifest number: 05A2 Signing time: Tue 24 Mar 2026 22:52:39 +0000 Manifest this update: Tue 24 Mar 2026 22:52:39 +0000 Manifest next update: Tue 31 Mar 2026 22:52:39 +0000 Files and hashes: 1: 9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl (hash: qqr5SoqgemAPuCs232QTVb/DdgbjG8L4WPqIS/F45ys=) 2: 17679A100BCE11EC85811A0DC4F9AE02.roa (hash: SfVrLwu0/hb9g42RiXp5yjlYQFRmDAk0DOmeUwdGOYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852BA, serialNumber=F66964F99BC88D37761D389815D3C9E9D0A17A4D Validity Not Before: Mar 24 22:52:39 2026 GMT Not After : Mar 31 22:52:39 2026 GMT Subject: CN=69c315b7-fc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b9:e3:72:4a:f1:5c:7a:cf:51:02:88:04:81: d5:49:95:89:0f:b6:dc:dd:9e:8e:4d:29:44:c9:59: 84:3b:8a:b8:fb:4e:35:ac:37:b7:11:4d:2d:13:c4: 93:bd:61:18:fa:3e:5b:ea:30:d0:cf:da:4c:d0:f8: 7e:1d:36:30:62:b6:59:04:46:93:e4:64:a0:ef:0c: 35:83:9d:fb:44:75:8d:2c:33:09:70:73:d2:82:31: af:8d:46:6c:5f:03:8c:6e:16:72:69:b0:37:20:0b: fb:7b:cc:ad:11:a7:0f:1f:36:85:e6:5d:55:1b:ab: a9:e5:8a:34:38:ef:b6:2e:f2:24:a6:22:e9:da:eb: 52:93:19:c7:4b:e4:3b:de:b1:59:c7:77:35:a5:b4: 39:f8:53:8d:06:52:ff:74:83:46:d6:92:38:44:f4: f0:c8:4d:4b:30:71:a4:e9:f2:7d:92:8b:17:1a:60: 6b:23:5f:1a:85:2c:47:5d:ed:7f:85:5c:69:35:52: ce:2a:fd:e4:c2:26:9f:58:42:f7:25:1a:e3:06:a5: 84:da:57:d5:02:58:84:43:fe:a3:5e:13:a2:2f:6a: 30:a1:d3:85:91:97:6f:1e:f4:6b:dc:f9:e8:07:79: fb:07:3c:47:cc:9b:c5:4a:8f:66:e0:3d:41:3a:d9: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:E9:3D:04:25:F7:0F:33:89:7A:9F:AA:79:44:AE:9B:E7:C0:3A X509v3 Authority Key Identifier: keyid:F6:69:64:F9:9B:C8:8D:37:76:1D:38:98:15:D3:C9:E9:D0:A1:7A:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9mlk-ZvIjTd2HTiYFdPJ6dChek0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852BA/856517C00BCB11ECBD9C200BC4F9AE02/9mlk-ZvIjTd2HTiYFdPJ6dChek0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:43:c8:82:f9:5d:e3:2a:d3:41:fe:14:84:cb:a4:d7:b9:71: b8:0b:39:1b:1a:92:bc:d1:e3:f9:f0:b4:83:6d:fc:b0:c6:f6: 30:0c:c5:64:02:84:1c:63:32:3c:89:12:58:fd:7c:71:d1:77: fa:ca:36:3b:03:3f:5c:34:12:05:52:a2:7b:e9:19:61:03:7c: 13:e0:4c:cc:24:f3:00:6b:52:fc:60:8c:6b:95:35:f6:ea:42: 22:b1:02:05:88:30:5c:12:8b:15:9f:da:c8:c6:6a:c2:39:cf: ee:48:04:4c:1d:b6:07:4f:4e:04:0b:cf:f9:01:38:83:1f:91: 13:63:e1:cb:00:74:bc:ca:94:72:ca:0f:5f:ef:4c:18:92:80: 77:b5:5b:f8:7c:36:71:12:b2:6e:14:dc:03:4a:b7:09:4d:7f: bf:ac:70:4a:8d:ef:bd:42:09:41:1c:8c:c1:e1:0b:98:86:31: 57:38:fe:e0:eb:90:6f:9c:44:c9:2e:9f:5e:ba:38:81:4a:8e: 79:b7:64:9a:e4:fe:c0:04:fd:d7:bd:5d:83:31:96:b6:ca:01: 6a:73:ee:4f:e8:df:b1:b6:6e:28:8f:a5:a3:13:3c:7d:2e:dd: 4a:f8:f1:91:19:97:3f:a9:d2:10:49:62:0d:ea:aa:c8:cc:bf: 45:66:e7:98 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQkExMTAvBgNVBAUTKEY2Njk2NEY5OUJDODhEMzc3NjFEMzg5ODE1RDNDOUU5 RDBBMTdBNEQwHhcNMjYwMzI0MjI1MjM5WhcNMjYwMzMxMjI1MjM5WjAYMRYwFAYD VQQDEw02OWMzMTViNy1mYzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07njckrxXHrPUQKIBIHVSZWJD7bc3Z6OTSlEyVmEO4q4+041rDe3EU0tE8ST vWEY+j5b6jDQz9pM0Ph+HTYwYrZZBEaT5GSg7ww1g537RHWNLDMJcHPSgjGvjUZs XwOMbhZyabA3IAv7e8ytEacPHzaF5l1VG6up5Yo0OO+2LvIkpiLp2utSkxnHS+Q7 3rFZx3c1pbQ5+FONBlL/dING1pI4RPTwyE1LMHGk6fJ9kosXGmBrI18ahSxHXe1/ hVxpNVLOKv3kwiafWEL3JRrjBqWE2lfVAliEQ/6jXhOiL2owodOFkZdvHvRr3Pno B3n7BzxHzJvFSo9m4D1BOtk8HwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC7o6T0E JfcPM4l6n6p5RK6b58A6MB8GA1UdIwQYMBaAFPZpZPmbyI03dh04mBXTyenQoXpN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJCQS84NTY1MTdDMDBC Q0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpUZDJIVGlZRmRQSjZkQ2hl azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzltbGstWnZJalRkMkhUaVlGZFBKNmRDaGVrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJCQS84NTY1MTdDMDBCQ0IxMUVDQkQ5QzIwMEJDNEY5QUUwMi85bWxrLVp2SWpU ZDJIVGlZRmRQSjZkQ2hlazAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAB0PIgvld4yrTQf4UhMuk17lxuAs5GxqSvNHj+fC0g238sMb2MAzFZAKEHGMy PIkSWP18cdF3+so2OwM/XDQSBVKie+kZYQN8E+BMzCTzAGtS/GCMa5U19upCIrEC BYgwXBKLFZ/ayMZqwjnP7kgETB22B09OBAvP+QE4gx+RE2PhywB0vMqUcsoPX+9M GJKAd7Vb+Hw2cRKybhTcA0q3CU1/v6xwSo3vvUIJQRyMweELmIYxVzj+4OuQb5xE yS6fXro4gUqOebdkmuT+wAT9171dgzGWtsoBanPuT+jfsbZuKI+loxM8fS7dSvjx kRmXP6nSEEliDeqqyMy/RWbnmA== -----END CERTIFICATE-----Generated at Thu Mar 26 05:32:28 2026 by rpki-client