$ rpki-client -vvf rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft File: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft (raw, json) Hash identifier: DRzJx1Y/CoGKjENd6444XBeYx4hdXZGfLflbydcK2Fs= Subject key identifier: 5A:43:00:06:D2:0E:E1:4F:2D:E3:0A:22:BE:78:74:8F:24:1E:B2:36 Authority key identifier: 15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 Certificate issuer: /CN=A9189BB3/serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Certificate serial: 0631 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft Manifest number: 0621 Signing time: Tue 24 Mar 2026 22:33:59 +0000 Manifest this update: Tue 24 Mar 2026 22:33:58 +0000 Manifest next update: Tue 31 Mar 2026 22:33:58 +0000 Files and hashes: 1: FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl (hash: iGD9kl2ZgDfpcUGJ31fPjA7AEpEK7VtqslOSpHcxccs=) 2: AB532852B38911ED825BDC70C4F9AE02.roa (hash: RCoE8bQ2xQx3+6AG70lWii6WPBaMur94b8A3cmNzGaY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 22:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1585 (0x631) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189BB3, serialNumber=1528F63D28F3E1366902C6B64AF5866CCBA8DAC4 Validity Not Before: Mar 24 22:33:58 2026 GMT Not After : Mar 31 22:33:58 2026 GMT Subject: CN=69c31157-c27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:c6:91:46:63:68:b1:d3:9d:69:fa:59:64: 46:f9:af:27:92:0c:10:c7:a8:85:9c:9d:36:3a:5b: 8b:e1:6c:af:00:68:1e:30:ea:39:94:49:53:77:cd: 6d:5c:b0:f6:53:1c:3e:31:3d:42:c7:fd:88:56:b4: 58:d6:f6:f0:8a:07:0a:03:4f:7d:13:0b:35:36:61: 48:a3:e2:a1:56:ec:12:c0:37:0d:26:7f:77:1e:aa: 2b:cb:39:89:31:d2:8b:a9:37:06:ba:b3:53:76:2b: 44:7c:a7:1f:3d:65:1e:39:32:52:fe:de:86:71:59: 32:0e:ec:4e:c4:bf:35:69:71:ca:e7:f8:ee:d1:5a: bf:b4:20:66:9c:a7:77:37:f8:8e:09:ec:7e:69:0d: 1e:39:12:6a:88:c2:e4:d3:ef:5d:9a:97:cf:09:33: 70:71:3c:01:96:ea:80:d2:81:6a:fb:ee:29:7c:5c: 51:8e:6a:32:6b:5c:58:a8:74:7e:49:11:10:f5:08: 4a:98:30:e1:99:5c:38:74:ac:7c:34:91:bf:14:2d: 59:aa:1c:46:64:45:31:f6:22:a2:bc:88:b7:e6:d7: 6c:a2:43:bd:64:c4:9f:e3:a8:d5:f3:b0:42:da:d5: 4f:f7:71:6c:9c:b3:46:15:7b:dc:93:9b:59:a0:90: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:43:00:06:D2:0E:E1:4F:2D:E3:0A:22:BE:78:74:8F:24:1E:B2:36 X509v3 Authority Key Identifier: keyid:15:28:F6:3D:28:F3:E1:36:69:02:C6:B6:4A:F5:86:6C:CB:A8:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189BB3/A4478674DFCE11EB959B501FC4F9AE02/FSj2PSjz4TZpAsa2SvWGbMuo2sQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:39:67:45:fc:0c:70:57:ca:12:be:98:70:5c:81:85:44:6b: e8:6b:24:e5:76:9a:13:10:81:eb:96:e9:70:77:21:16:b0:aa: a7:91:b9:c1:d4:f0:0a:77:b4:20:b5:3e:12:01:d8:5d:db:b7: 26:6c:9e:a1:ac:a6:a8:57:a2:17:c3:98:ec:65:5a:11:56:b3: 7f:6a:72:0d:9b:67:a1:0c:db:5b:dc:3f:f0:48:03:05:41:28: a8:a5:aa:ac:3d:49:84:42:7a:40:74:68:30:31:6f:44:d8:50: 73:bc:0c:ed:64:58:52:09:97:49:4a:21:cb:a9:e7:5c:84:15: a8:ec:03:3c:fe:5d:62:49:86:ca:19:64:af:c1:fa:93:48:fc: ed:ba:9c:ac:05:46:3c:ea:1b:80:da:a6:52:35:8c:29:13:b6: bd:73:1f:ed:fa:77:fb:34:05:f6:8e:01:37:42:91:71:5c:2c: 8f:14:2b:9d:7e:65:7a:1d:2b:24:3b:11:5a:29:ad:e8:53:a7: 77:44:22:df:51:46:63:09:5c:56:2e:30:36:53:0a:30:b7:47: 42:18:47:f5:55:f5:51:39:88:49:7c:a8:96:a6:8a:b1:37:dd: 51:21:90:9e:c5:e4:bf:be:40:18:9d:ae:6b:88:12:2c:f2:aa: ee:87:38:27 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODlCQjMxMTAvBgNVBAUTKDE1MjhGNjNEMjhGM0UxMzY2OTAyQzZCNjRBRjU4NjZD Q0JBOERBQzQwHhcNMjYwMzI0MjIzMzU4WhcNMjYwMzMxMjIzMzU4WjAYMRYwFAYD VQQDEw02OWMzMTE1Ny1jMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscLGkUZjaLHTnWn6WWRG+a8nkgwQx6iFnJ02OluL4WyvAGgeMOo5lElTd81t XLD2Uxw+MT1Cx/2IVrRY1vbwigcKA099Ews1NmFIo+KhVuwSwDcNJn93HqoryzmJ MdKLqTcGurNTditEfKcfPWUeOTJS/t6GcVkyDuxOxL81aXHK5/ju0Vq/tCBmnKd3 N/iOCex+aQ0eORJqiMLk0+9dmpfPCTNwcTwBluqA0oFq++4pfFxRjmoya1xYqHR+ SREQ9QhKmDDhmVw4dKx8NJG/FC1ZqhxGZEUx9iKivIi35tdsokO9ZMSf46jV87BC 2tVP93FsnLNGFXvck5tZoJCClwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFpDAAbS DuFPLeMKIr54dI8kHrI2MB8GA1UdIwQYMBaAFBUo9j0o8+E2aQLGtkr1hmzLqNrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OUJCMy9BNDQ3ODY3NERG Q0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRUWnBBc2EyU3ZXR2JNdW8y c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTajJQU2p6NFRacEFzYTJTdldHYk11bzJzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OUJCMy9BNDQ3ODY3NERGQ0UxMUVCOTU5QjUwMUZDNEY5QUUwMi9GU2oyUFNqejRU WnBBc2EyU3ZXR2JNdW8yc1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAYzlnRfwMcFfKEr6YcFyBhURr6Gsk5XaaExCB65bpcHchFrCqp5G5wdTwCne0 ILU+EgHYXdu3JmyeoaymqFeiF8OY7GVaEVazf2pyDZtnoQzbW9w/8EgDBUEoqKWq rD1JhEJ6QHRoMDFvRNhQc7wM7WRYUgmXSUohy6nnXIQVqOwDPP5dYkmGyhlkr8H6 k0j87bqcrAVGPOobgNqmUjWMKRO2vXMf7fp3+zQF9o4BN0KRcVwsjxQrnX5leh0r JDsRWimt6FOnd0Qi31FGYwlcVi4wNlMKMLdHQhhH9VX1UTmISXyolqaKsTfdUSGQ nsXkv75AGJ2ua4gSLPKq7oc4Jw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:13 2026 by rpki-client