$ rpki-client -vvf rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft File: rDzLekAZEcjlFT8wFmpUyacWP3s.mft (raw, json) Hash identifier: yX3it+MEMiHQd0IPHy1QeeFpEyssebeFkvLMmofdn7o= Subject key identifier: 17:57:AA:05:37:D4:7F:70:20:7C:29:46:0B:C8:ED:FA:8D:C7:BE:D8 Authority key identifier: AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B Certificate issuer: /CN=A9189337/serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft Manifest number: 57 Signing time: Wed 25 Mar 2026 07:20:34 +0000 Manifest this update: Wed 25 Mar 2026 07:20:34 +0000 Manifest next update: Wed 01 Apr 2026 07:20:34 +0000 Files and hashes: 1: rDzLekAZEcjlFT8wFmpUyacWP3s.crl (hash: gCctxAUNz5CYfAuno9loUEh8WWTZzr4QUQkWHRfbIcM=) 2: 97B6FD12A81611F0BBD11A74C4F9AE02.roa (hash: +o1CGO8tcRdORT+HUDRB+r7Vejjj6YH1/8uUwSB82zw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189337, serialNumber=AC3CCB7A401911C8E5153F30166A54C9A7163F7B Validity Not Before: Mar 25 07:20:34 2026 GMT Not After : Apr 1 07:20:34 2026 GMT Subject: CN=69c38cc2-cfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e3:7e:b1:00:76:0c:b5:00:19:97:c4:3e:d4: 98:9d:ff:2f:18:91:90:3a:47:70:a9:48:fd:7d:85: b8:ca:fe:68:44:60:63:09:36:70:1e:4e:1e:1a:f2: ab:11:97:62:01:70:e2:9b:15:bc:a7:c9:4c:2a:b1: e7:71:06:a4:51:81:55:17:96:e2:b9:b9:10:24:c0: b9:c4:70:3d:85:43:12:ae:ac:1c:b7:60:94:fd:6b: 88:4e:66:27:1a:a3:a5:f5:70:26:8a:12:69:0f:e2: cd:09:31:24:36:df:64:eb:d7:e6:99:3a:59:39:57: c0:cf:29:d9:52:9e:99:cf:6b:8f:65:ea:f7:36:69: 46:44:b9:92:d0:71:be:b1:2f:08:b1:8a:ad:d2:2d: e4:59:52:47:ef:d4:b3:9b:38:b7:5c:e7:ca:4a:ac: 8b:77:75:67:39:8a:f8:ec:d3:7d:62:f5:6c:9f:61: cb:6b:1f:cb:90:9a:e9:70:de:fd:9d:0a:27:71:3d: 2c:da:b0:bd:3d:b7:23:ec:6a:dc:a3:4c:d0:c0:bb: e9:f6:78:1d:1b:b9:2c:55:a0:c2:f8:e2:a9:5c:ec: 35:d5:96:8c:1b:a1:b9:1d:fd:7e:3a:8b:23:09:69: 72:2e:4a:50:80:7b:70:41:fd:31:8c:0e:2f:e5:2d: da:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:AA:05:37:D4:7F:70:20:7C:29:46:0B:C8:ED:FA:8D:C7:BE:D8 X509v3 Authority Key Identifier: keyid:AC:3C:CB:7A:40:19:11:C8:E5:15:3F:30:16:6A:54:C9:A7:16:3F:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rDzLekAZEcjlFT8wFmpUyacWP3s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189337/3E09F0E4A81611F08498AE70C4F9AE02/rDzLekAZEcjlFT8wFmpUyacWP3s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:7a:5d:bd:17:38:1e:33:e3:8a:0d:12:dc:40:b0:32:6d:0d: 98:8a:79:92:53:8f:94:26:21:64:f1:6c:5e:5e:4a:ae:3b:ea: 3b:af:6e:67:4d:74:9d:84:43:13:e7:73:10:b3:08:0a:9b:c8: b3:32:3e:5e:92:d0:1e:89:b2:78:c1:61:4c:48:60:1f:7c:c4: e2:62:8b:c0:d9:70:f1:f2:3c:82:da:e5:a1:e4:31:c0:17:65: a8:11:7e:15:dc:af:d0:86:ea:6a:be:5f:47:a0:71:33:ec:ff: 91:ec:69:51:66:e6:0b:04:00:6f:7b:1b:0c:8f:46:af:89:9d: d8:90:69:31:a7:04:d5:f5:a8:5c:ac:3c:c7:39:ca:b8:74:5f: af:3c:f6:0a:10:b2:e4:7c:71:b9:b2:74:73:82:d5:45:93:aa: 36:90:1d:d5:b0:ed:80:9a:11:3f:9d:12:09:d7:bd:d3:b1:63: 29:13:c7:be:d4:92:23:8c:db:9a:8b:c9:7d:d4:29:03:1a:cc: 46:5b:a4:a1:fb:1f:7c:cb:9a:76:c9:d1:8e:45:d8:8e:f0:d8: b5:db:97:3c:71:d1:b4:7a:f6:97:a8:1f:ca:75:16:31:a5:d2: 02:16:90:5b:bc:fc:a8:ea:96:20:3b:90:cb:0a:9b:1e:a3:83: 9f:ee:9b:ef -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTMzNzExMC8GA1UEBRMoQUMzQ0NCN0E0MDE5MTFDOEU1MTUzRjMwMTY2QTU0QzlB NzE2M0Y3QjAeFw0yNjAzMjUwNzIwMzRaFw0yNjA0MDEwNzIwMzRaMBgxFjAUBgNV BAMTDTY5YzM4Y2MyLWNmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb436xAHYMtQAZl8Q+1Jid/y8YkZA6R3CpSP19hbjK/mhEYGMJNnAeTh4a8qsR l2IBcOKbFbynyUwqsedxBqRRgVUXluK5uRAkwLnEcD2FQxKurBy3YJT9a4hOZica o6X1cCaKEmkP4s0JMSQ232Tr1+aZOlk5V8DPKdlSnpnPa49l6vc2aUZEuZLQcb6x Lwixiq3SLeRZUkfv1LObOLdc58pKrIt3dWc5ivjs031i9WyfYctrH8uQmulw3v2d CidxPSzasL09tyPsatyjTNDAu+n2eB0buSxVoML44qlc7DXVlowbobkd/X46iyMJ aXIuSlCAe3BB/TGMDi/lLdrHAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUF1eqBTfU f3AgfClGC8jt+o3HvtgwHwYDVR0jBBgwFoAUrDzLekAZEcjlFT8wFmpUyacWP3sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5MzM3LzNFMDlGMEU0QTgx NjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNqbEZUOHdGbXBVeWFjV1Az cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvckR6TGVrQVpFY2psRlQ4d0ZtcFV5YWNXUDNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 MzM3LzNFMDlGMEU0QTgxNjExRjA4NDk4QUU3MEM0RjlBRTAyL3JEekxla0FaRWNq bEZUOHdGbXBVeWFjV1Azcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBZel29FzgeM+OKDRLcQLAybQ2YinmSU4+UJiFk8WxeXkquO+o7r25nTXSdhEMT 53MQswgKm8izMj5ektAeibJ4wWFMSGAffMTiYovA2XDx8jyC2uWh5DHAF2WoEX4V 3K/Qhupqvl9HoHEz7P+R7GlRZuYLBABvexsMj0aviZ3YkGkxpwTV9ahcrDzHOcq4 dF+vPPYKELLkfHG5snRzgtVFk6o2kB3VsO2AmhE/nRIJ173TsWMpE8e+1JIjjNua i8l91CkDGsxGW6Sh+x98y5p2ydGORdiO8Ni125c8cdG0evaXqB/KdRYxpdICFpBb vPyo6pYgO5DLCpseo4Of7pvv -----END CERTIFICATE-----Generated at Thu Mar 26 18:31:25 2026 by rpki-client