$ rpki-client -vvf rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft File: 0xLuUOZR-vA5aO306gARSeWV_A4.mft (raw, json) Hash identifier: GThXLkenuI1iVMyVbvENtINo73V4cO5cL+Du0vZJT+A= Subject key identifier: 51:DB:C0:B5:52:94:52:DB:A0:C7:4F:28:F5:87:27:2F:50:63:51:CD Authority key identifier: D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E Certificate issuer: /CN=A9187347/serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft Manifest number: 16 Signing time: Wed 25 Mar 2026 08:12:51 +0000 Manifest this update: Wed 25 Mar 2026 08:12:50 +0000 Manifest next update: Wed 01 Apr 2026 08:12:50 +0000 Files and hashes: 1: 0xLuUOZR-vA5aO306gARSeWV_A4.crl (hash: XqKID/yWiAxnqHQTNq5NWxwpx6FTDVpc+M9pDyXId0k=) 2: 8C5B4E020E3F11F18FED49E9183D8C67.roa (hash: Hz/ArrYvezX4EXJ8DDY9ijBLJGuFrjsekFb24N7uhk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187347, serialNumber=D312EE50E651FAF03968EDF4EA001149E595FC0E Validity Not Before: Mar 25 08:12:50 2026 GMT Not After : Apr 1 08:12:50 2026 GMT Subject: CN=69c39903-9d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:c6:9c:22:04:76:9b:bd:c0:55:82:1d:c4: 87:e0:9c:10:16:c1:a9:8f:64:25:5b:fc:41:03:38: c2:cc:55:53:2b:cf:b6:3d:ff:e7:41:1c:cb:39:de: d4:c3:34:99:93:6d:fd:17:4d:99:25:5a:a8:3c:03: d3:6f:b7:62:d4:01:d3:8e:53:88:a0:86:eb:5b:86: a6:37:e8:40:66:d3:0c:c2:c8:89:29:a7:2c:b9:60: d0:c5:3f:70:b1:eb:17:f9:3f:c5:4d:b8:07:ce:5c: 8b:c1:23:2c:97:9a:e9:cc:1b:b1:8e:1f:e7:83:11: b4:2b:f4:4a:b1:d5:6f:81:7d:0b:eb:64:bb:bd:1f: e4:f9:20:27:96:20:bf:15:b6:19:79:5c:ca:db:dc: 78:21:57:60:45:7b:b8:1a:67:7e:d7:16:36:b9:c0: f6:6b:60:cc:44:7d:68:04:74:a4:28:e7:ba:d9:47: 31:b7:74:a7:0d:2c:cd:ca:c2:d1:64:b4:0a:de:ed: e8:91:80:fc:c9:9c:9d:0e:df:39:aa:db:c5:07:b4: 88:6d:84:f5:3e:cd:b0:53:b5:3a:6f:96:03:b1:eb: b1:c9:14:c2:2a:6a:74:14:1b:0c:99:59:fc:07:b7: 5e:f8:9e:a3:21:14:30:41:fc:ed:8d:a0:96:d1:a1: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:C0:B5:52:94:52:DB:A0:C7:4F:28:F5:87:27:2F:50:63:51:CD X509v3 Authority Key Identifier: keyid:D3:12:EE:50:E6:51:FA:F0:39:68:ED:F4:EA:00:11:49:E5:95:FC:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0xLuUOZR-vA5aO306gARSeWV_A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187347/4A9372F60E3F11F1B2CCDB73183D8C67/0xLuUOZR-vA5aO306gARSeWV_A4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:34:fe:b8:90:ac:84:9e:e7:0d:a0:94:09:5b:ca:c4:b4:a0: 3c:95:55:1f:11:d5:de:31:de:f7:18:6a:4a:fd:9b:95:2f:d4: 25:d8:45:db:28:cb:f0:03:99:81:6f:28:04:e5:32:c2:8d:1e: 5b:f1:0c:3b:b0:98:02:14:1e:64:87:f3:f6:e2:c0:61:78:cd: a7:6b:d7:52:1c:d4:c9:7c:27:8a:df:02:c0:ed:d0:0c:ad:ec: c7:eb:91:89:f2:77:c5:b3:8c:68:37:ef:bc:ce:82:85:76:b2: d5:bb:65:9a:14:5d:05:39:0b:3a:d1:b5:64:15:b0:e5:1d:35: fa:f7:aa:71:19:ba:30:da:87:fe:56:62:b4:03:5a:c2:bd:a0: 10:29:da:ec:c3:6e:e4:55:d4:9a:07:56:2e:e0:b9:95:0e:10: 77:04:09:47:bc:75:56:31:70:63:be:5e:26:b4:09:ed:67:b8: 4b:b0:c7:82:76:6b:c3:76:c8:73:b9:4b:9c:68:bb:09:96:13: d5:c8:2d:23:19:77:e7:a3:12:6a:fa:0b:8f:f5:f9:c2:97:13: 0a:21:8f:4f:c2:63:1f:6e:d5:c0:3a:b0:17:71:d0:2c:57:a9: 8b:36:11:5e:db:e7:9d:c5:8c:81:27:56:09:37:05:8e:5b:08: b1:56:27:b2 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NzM0NzExMC8GA1UEBRMoRDMxMkVFNTBFNjUxRkFGMDM5NjhFREY0RUEwMDExNDlF NTk1RkMwRTAeFw0yNjAzMjUwODEyNTBaFw0yNjA0MDEwODEyNTBaMBgxFjAUBgNV BAMTDTY5YzM5OTAzLTlkNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4w8acIgR2m73AVYIdxIfgnBAWwamPZCVb/EEDOMLMVVMrz7Y9/+dBHMs53tTD NJmTbf0XTZklWqg8A9Nvt2LUAdOOU4ighutbhqY36EBm0wzCyIkppyy5YNDFP3Cx 6xf5P8VNuAfOXIvBIyyXmunMG7GOH+eDEbQr9Eqx1W+BfQvrZLu9H+T5ICeWIL8V thl5XMrb3HghV2BFe7gaZ37XFja5wPZrYMxEfWgEdKQo57rZRzG3dKcNLM3KwtFk tAre7eiRgPzJnJ0O3zmq28UHtIhthPU+zbBTtTpvlgOx67HJFMIqanQUGwyZWfwH t174nqMhFDBB/O2NoJbRoRG3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUUdvAtVKU Utugx08o9YcnL1BjUc0wHwYDVR0jBBgwFoAU0xLuUOZR+vA5aO306gARSeWV/A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3MzQ3LzRBOTM3MkY2MEUz RjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZBNWFPMzA2Z0FSU2VXVl9B NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMHhMdVVPWlItdkE1YU8zMDZnQVJTZVdWX0E0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 MzQ3LzRBOTM3MkY2MEUzRjExRjFCMkNDREI3MzE4M0Q4QzY3LzB4THVVT1pSLXZB NWFPMzA2Z0FSU2VXVl9BNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAJNP64kKyEnucNoJQJW8rEtKA8lVUfEdXeMd73GGpK/ZuVL9Ql2EXbKMvwA5mB bygE5TLCjR5b8Qw7sJgCFB5kh/P24sBheM2na9dSHNTJfCeK3wLA7dAMrezH65GJ 8nfFs4xoN++8zoKFdrLVu2WaFF0FOQs60bVkFbDlHTX696pxGbow2of+VmK0A1rC vaAQKdrsw27kVdSaB1Yu4LmVDhB3BAlHvHVWMXBjvl4mtAntZ7hLsMeCdmvDdshz uUucaLsJlhPVyC0jGXfnoxJq+guP9fnClxMKIY9PwmMfbtXAOrAXcdAsV6mLNhFe 2+edxYyBJ1YJNwWOWwixViey -----END CERTIFICATE-----Generated at Thu Mar 26 09:33:39 2026 by rpki-client