$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: f1Fqyn2Nro4rZQT2odLe6De4aBRu6qYJESKrL7TIZKI= Subject key identifier: 47:1B:F7:9D:09:70:46:1A:27:57:D2:3D:EA:24:BC:56:79:ED:CB:43 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D37 Signing time: Tue 24 Mar 2026 17:55:33 +0000 Manifest this update: Tue 24 Mar 2026 17:55:33 +0000 Manifest next update: Tue 31 Mar 2026 17:55:33 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: 0KDLbjK2US2shz0exzwVhfRpmbzrob6TEYR1DPoK0NQ=) 2: 4AD97410632C11EE96048122C4F9AE02.roa (hash: P6QJDerhi+lWqONjj1JCvPgAfIfcAnZgSWhjyXSzjnM=) 3: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: sjwfe8XhFk6Jxj+5OnQzDtWQba/qtTmypv4cLyvI+GI=) 4: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: B8R1G5OUtPVlyi8UDUFhRxyGS4o93u26WgDd9Jne+9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:55:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3416 (0xd58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Mar 24 17:55:33 2026 GMT Not After : Mar 31 17:55:33 2026 GMT Subject: CN=69c2d015-866e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:00:64:a8:b2:ae:f5:9c:04:a3:98:6b:7b: ee:60:9d:1e:e4:ad:78:97:73:b5:54:b5:68:2c:eb: 86:72:09:83:a6:89:d4:ee:a5:95:9d:af:c5:25:01: db:22:9b:9e:7e:75:27:52:a5:71:ec:81:d9:fe:b2: a1:a0:e8:8e:fa:46:4c:f5:81:ab:7e:c8:92:16:c5: 7b:af:00:c4:14:09:e6:3a:8b:c7:93:7a:52:86:06: 69:98:65:ce:c8:29:b6:32:ec:26:50:51:31:18:e5: 08:2a:19:fc:31:9e:26:84:6c:b8:7f:57:fe:ea:65: 09:ad:41:46:b6:64:8e:d8:31:fd:51:a7:02:dc:15: b8:aa:96:82:ae:6c:89:a0:c3:f5:b5:11:08:02:1c: ac:c7:83:11:50:d0:57:8c:53:05:74:84:a1:e0:51: 75:52:55:56:d1:23:8e:84:08:9a:8c:30:58:fd:59: 68:38:af:55:39:ff:70:86:77:69:12:59:94:11:27: 66:59:61:aa:be:43:3c:8c:6b:86:3f:9b:ae:a5:ab: 3b:3c:a7:c6:ac:6e:57:b0:29:10:9b:89:55:9e:28: b5:10:ea:81:73:ef:79:a0:69:63:a8:5c:d7:d8:9f: 0a:eb:69:92:59:ef:7c:c2:89:23:ee:98:97:45:1d: e9:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1B:F7:9D:09:70:46:1A:27:57:D2:3D:EA:24:BC:56:79:ED:CB:43 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:fb:64:21:52:cb:5a:74:24:09:2b:ca:8d:ae:be:b1:46:a7: b9:4c:30:5b:27:51:9e:cc:15:95:48:cd:22:9e:9d:ee:c5:f3: 51:bc:68:d3:22:41:99:fe:0d:9e:4f:df:1b:16:eb:9b:c1:68: f3:ef:cf:cf:13:51:a2:fb:71:24:23:bb:4a:0c:65:17:d9:6a: a2:88:29:a6:e5:26:4f:89:2d:95:2b:49:59:52:17:44:a9:a9: 8f:c5:ce:4d:78:a4:7d:1f:ca:c9:8d:56:2f:c7:01:64:22:e0: 05:5f:ce:b9:86:d4:40:e2:e7:e4:88:15:d3:27:59:7e:55:17: 86:0d:ae:59:15:81:21:2c:46:80:99:e8:50:9c:8b:9d:84:46: 59:17:95:60:7c:50:b5:ee:3b:da:d0:68:33:11:6e:7e:a3:02: 37:73:3c:80:f0:d0:8e:76:4a:06:0e:af:20:b0:10:22:3a:90: 49:6b:b8:48:1e:85:68:ee:38:b6:1b:66:96:c5:7d:01:c6:ae: 3e:eb:8b:6c:c5:45:c3:b1:82:53:78:3c:03:88:cf:e5:63:09: fc:74:f6:40:0e:7b:b9:53:3d:21:18:f9:df:46:f8:f1:4f:ef: a4:41:23:e5:f3:47:ff:14:f0:8e:fa:d5:f0:4d:35:04:3a:18: a4:7f:1a:db -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwMzI0MTc1NTMzWhcNMjYwMzMxMTc1NTMzWjAYMRYwFAYD VQQDEw02OWMyZDAxNS04NjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAivoAZKiyrvWcBKOYa3vuYJ0e5K14l3O1VLVoLOuGcgmDponU7qWVna/FJQHb IpuefnUnUqVx7IHZ/rKhoOiO+kZM9YGrfsiSFsV7rwDEFAnmOovHk3pShgZpmGXO yCm2MuwmUFExGOUIKhn8MZ4mhGy4f1f+6mUJrUFGtmSO2DH9UacC3BW4qpaCrmyJ oMP1tREIAhysx4MRUNBXjFMFdISh4FF1UlVW0SOOhAiajDBY/VloOK9VOf9whndp ElmUESdmWWGqvkM8jGuGP5uupas7PKfGrG5XsCkQm4lVnii1EOqBc+95oGljqFzX 2J8K62mSWe98wokj7piXRR3pvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEcb950J cEYaJ1fSPeokvFZ57ctDMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEABvtkIVLLWnQkCSvKja6+sUanuUwwWydRnswVlUjNIp6d7sXzUbxo0yJBmf4N nk/fGxbrm8Fo8+/PzxNRovtxJCO7SgxlF9lqoogppuUmT4ktlStJWVIXRKmpj8XO TXikfR/KyY1WL8cBZCLgBV/OuYbUQOLn5IgV0ydZflUXhg2uWRWBISxGgJnoUJyL nYRGWReVYHxQte472tBoMxFufqMCN3M8gPDQjnZKBg6vILAQIjqQSWu4SB6FaO44 thtmlsV9AcauPuuLbMVFw7GCU3g8A4jP5WMJ/HT2QA57uVM9IRj530b48U/vpEEj 5fNH/xTwjvrV8E01BDoYpH8a2w== -----END CERTIFICATE-----Generated at Thu Mar 26 00:54:50 2026 by rpki-client