$ rpki-client -vvf rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft File: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft (raw, json) Hash identifier: QrH4YhksjAxvLSw4B84MT5t/wTWYbhFZFgV5Uycs2tE= Subject key identifier: 2C:72:9D:CF:35:93:08:1A:3E:62:85:AE:53:E1:61:83:B9:52:FD:07 Authority key identifier: 0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F Certificate issuer: /CN=A9186883/serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft Manifest number: 01D4 Signing time: Wed 25 Mar 2026 02:54:10 +0000 Manifest this update: Wed 25 Mar 2026 02:54:09 +0000 Manifest next update: Wed 01 Apr 2026 02:54:09 +0000 Files and hashes: 1: D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl (hash: H5Pzy4tWesqXybZ8CeA+RW7gfp6G8tV62wP/oQM8BIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186883, serialNumber=0FD70E78A10E0918EF1C9DD82AE2E9FDC35AA49F Validity Not Before: Mar 25 02:54:09 2026 GMT Not After : Apr 1 02:54:09 2026 GMT Subject: CN=69c34e52-8dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0b:c4:45:87:0e:5d:f3:5b:77:b2:01:33:7c: 84:2a:e0:06:5e:d2:84:10:ce:15:36:fa:37:ab:d0: 18:73:52:01:50:f2:da:35:d9:ef:a3:73:5f:6b:87: 3c:35:60:53:be:21:3e:8d:01:a4:d1:4b:cb:7f:d9: 48:87:c2:47:78:49:fd:8f:d8:87:46:0e:b2:0e:88: b3:12:40:56:ee:0e:42:d6:2d:6c:e1:d3:14:26:f9: 9a:22:2f:42:b2:77:46:2b:b8:c5:a0:25:8d:1f:b2: aa:80:f7:26:76:ad:44:38:32:45:69:52:80:f0:05: 27:4f:76:b6:a5:83:5e:7b:7a:0b:a7:32:57:35:ab: f0:c6:18:7e:e9:2e:c5:0a:a4:07:69:b7:46:26:ef: 6e:1a:58:c5:a5:61:95:71:0b:1c:70:57:f1:87:db: 8b:93:b5:a0:55:d7:7c:2c:f9:8a:57:ba:d4:2f:3c: d4:e5:aa:bb:e6:45:2f:15:26:36:0c:62:54:b8:2a: 21:ab:ec:ab:02:dd:40:69:f5:27:76:d9:7f:c1:07: 4f:e5:44:64:39:3b:c0:60:15:18:36:46:2b:59:b2: fb:89:f9:5d:43:ee:a7:eb:03:fe:8e:55:05:d1:12: 53:a6:11:9b:4f:b3:65:5e:3d:f4:42:c8:6b:d8:26: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:72:9D:CF:35:93:08:1A:3E:62:85:AE:53:E1:61:83:B9:52:FD:07 X509v3 Authority Key Identifier: keyid:0F:D7:0E:78:A1:0E:09:18:EF:1C:9D:D8:2A:E2:E9:FD:C3:5A:A4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186883/B12228465C5311EE951E9D58C4F9AE02/D9cOeKEOCRjvHJ3YKuLp_cNapJ8.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:9e:c3:2f:43:df:d2:67:57:d9:4c:c6:c7:ae:85:54:40:bf: b1:01:ea:73:60:9d:dd:75:91:dc:53:9b:e2:ee:26:a8:2d:7b: 63:56:44:f7:46:eb:b1:db:34:5e:fb:88:27:ed:08:ac:ea:1b: b1:a9:78:83:41:44:e4:5a:42:71:5e:39:3f:53:58:43:ec:5e: fb:33:d5:a3:46:93:9f:30:77:6f:80:cf:86:68:49:0b:49:a8: f8:a9:08:64:9c:fb:27:0f:74:c0:7b:d3:d9:38:43:d7:c0:51: 30:6d:cc:43:f1:5a:b6:a9:b8:fe:00:99:dd:96:db:20:ab:c3: 7e:4e:b5:3f:42:90:2e:f9:13:bf:a7:65:b5:71:d2:63:16:1b: af:b1:3b:00:2d:5d:f6:6c:e7:e4:c2:d1:be:21:91:b8:50:bd: 4c:ca:d0:cb:f6:5e:ef:d2:ab:88:82:08:ae:23:bd:00:00:65: 8d:80:32:28:df:53:19:d6:64:81:2b:32:63:ca:a0:ee:cd:58: 77:4a:83:cf:fa:80:e4:ad:80:63:6a:46:39:96:d3:4f:14:f6: 6c:37:68:92:77:55:4f:0d:c4:65:69:49:70:69:44:c9:be:85: 08:e5:a9:08:0c:22:51:0d:d4:81:28:38:e2:82:99:10:e1:7c: 54:ff:58:5a -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4ODMxMTAvBgNVBAUTKDBGRDcwRTc4QTEwRTA5MThFRjFDOUREODJBRTJFOUZE QzM1QUE0OUYwHhcNMjYwMzI1MDI1NDA5WhcNMjYwNDAxMDI1NDA5WjAYMRYwFAYD VQQDEw02OWMzNGU1Mi04ZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gvERYcOXfNbd7IBM3yEKuAGXtKEEM4VNvo3q9AYc1IBUPLaNdnvo3Nfa4c8 NWBTviE+jQGk0UvLf9lIh8JHeEn9j9iHRg6yDoizEkBW7g5C1i1s4dMUJvmaIi9C sndGK7jFoCWNH7KqgPcmdq1EODJFaVKA8AUnT3a2pYNee3oLpzJXNavwxhh+6S7F CqQHabdGJu9uGljFpWGVcQsccFfxh9uLk7WgVdd8LPmKV7rULzzU5aq75kUvFSY2 DGJUuCohq+yrAt1AafUndtl/wQdP5URkOTvAYBUYNkYrWbL7ifldQ+6n6wP+jlUF 0RJTphGbT7NlXj30Qshr2CYJwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCxync81 kwgaPmKFrlPhYYO5Uv0HMB8GA1UdIwQYMBaAFA/XDnihDgkY7xyd2Cri6f3DWqSf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Njg4My9CMTIyMjg0NjVD NTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NSanZISjNZS3VMcF9jTmFw SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5Y09lS0VPQ1JqdkhKM1lLdUxwX2NOYXBKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Njg4My9CMTIyMjg0NjVDNTMxMUVFOTUxRTlENThDNEY5QUUwMi9EOWNPZUtFT0NS anZISjNZS3VMcF9jTmFwSjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAPZ7DL0Pf0mdX2UzGx66FVEC/sQHqc2Cd3XWR3FOb4u4mqC17Y1ZE90brsds0 XvuIJ+0IrOobsal4g0FE5FpCcV45P1NYQ+xe+zPVo0aTnzB3b4DPhmhJC0mo+KkI ZJz7Jw90wHvT2ThD18BRMG3MQ/Fatqm4/gCZ3ZbbIKvDfk61P0KQLvkTv6dltXHS YxYbr7E7AC1d9mzn5MLRviGRuFC9TMrQy/Ze79KriIIIriO9AABljYAyKN9TGdZk gSsyY8qg7s1Yd0qDz/qA5K2AY2pGOZbTTxT2bDdokndVTw3EZWlJcGlEyb6FCOWp CAwiUQ3UgSg44oKZEOF8VP9YWg== -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:59 2026 by rpki-client