$ rpki-client -vvf rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft File: _2UQNIiSuqqxtzMf9wTDQbiaGHY.mft (raw, json) Hash identifier: V2oEYFF+pWnI1FZp1EM3x8Mrs0eQCYm+pDhG+wmhyWY= Subject key identifier: 6F:9F:F5:D4:6A:55:99:AF:6C:FC:8B:69:51:A3:4D:3E:1F:3B:AA:84 Authority key identifier: FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76 Certificate issuer: /CN=A9189C03/serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft Manifest number: 1E Signing time: Wed 25 Mar 2026 08:04:36 +0000 Manifest this update: Wed 25 Mar 2026 08:04:36 +0000 Manifest next update: Wed 01 Apr 2026 08:04:36 +0000 Files and hashes: 1: _2UQNIiSuqqxtzMf9wTDQbiaGHY.crl (hash: MiUzmKy0rjGdEQf7ujuPmOL8jU2OiAiSFqAaQbuCfc0=) 2: C0B4841002B011F19551BA913E3D8C67.roa (hash: mlBDMtNCdtUEDeCgXegQmevuYhexij5GGyJcwWWK/bM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189C03, serialNumber=FF6510348892BAAAB1B7331FF704C341B89A1876 Validity Not Before: Mar 25 08:04:36 2026 GMT Not After : Apr 1 08:04:36 2026 GMT Subject: CN=69c39714-81bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:07:ea:e2:0c:73:59:63:5a:cd:fa:9a:8b: df:d4:7f:9c:bd:75:a0:7b:0c:e7:f5:c0:b3:c7:dc: 97:0a:3c:27:e6:42:4a:47:56:f3:f4:06:a7:15:f9: 94:31:ac:17:fb:e6:ae:e4:b1:a8:3c:5a:c7:0f:dd: 95:39:76:ff:6c:cd:98:10:c0:07:b5:06:cb:11:86: 82:b4:88:ca:ee:ec:c0:7d:a9:0b:ff:e6:5f:3e:17: 4f:44:5d:c5:c2:b9:19:01:c0:5b:e3:4d:70:b1:3e: b7:76:10:da:ad:e0:dc:d1:13:8b:df:a1:90:85:78: 8d:5c:9b:db:d9:bd:0e:40:8b:51:38:11:ae:b8:e1: 87:13:42:f8:99:ed:9b:f1:25:0c:0f:3e:5b:1b:e8: 58:63:54:95:62:e9:4d:10:08:0a:5c:29:1f:b9:ae: 72:0b:63:ab:eb:30:15:8d:74:f3:db:11:de:ae:ae: b2:d2:19:4e:95:a1:09:9b:e5:da:f1:80:6e:30:1f: b8:07:93:1a:36:63:37:56:e8:46:b9:5c:81:ba:0c: 9a:97:ec:c2:7c:0e:c8:f0:9b:e3:e8:57:81:a9:e9: 62:e6:6c:84:d3:80:e5:9e:31:13:59:d5:37:b7:1a: dc:9b:1b:7a:a0:af:1e:68:44:21:68:29:a2:86:a7: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9F:F5:D4:6A:55:99:AF:6C:FC:8B:69:51:A3:4D:3E:1F:3B:AA:84 X509v3 Authority Key Identifier: keyid:FF:65:10:34:88:92:BA:AA:B1:B7:33:1F:F7:04:C3:41:B8:9A:18:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_2UQNIiSuqqxtzMf9wTDQbiaGHY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189C03/DB691D0A016811F180E38FD3596F56BC/_2UQNIiSuqqxtzMf9wTDQbiaGHY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:48:67:90:33:61:15:5f:da:06:17:86:36:8a:ac:91:fc:43: 2a:1a:44:2b:87:3c:9d:08:a5:ef:9e:13:07:54:bd:cf:04:39: 22:af:1a:05:29:26:06:c2:c5:b7:84:d5:0d:ed:fa:01:b3:30: 15:3f:ac:75:fb:09:d1:c6:a7:03:db:bb:26:d0:f0:2d:5a:23: 75:ce:2a:ca:71:51:34:67:cd:6c:b8:ea:df:89:31:ac:64:32: e7:c4:3b:5d:5d:8d:27:53:ca:b7:a3:f2:a5:ab:16:38:65:9d: b5:a8:18:3c:b9:87:72:3c:95:44:97:e3:24:3e:c1:07:93:d2: 96:e3:f1:3b:36:ea:95:d9:dd:41:2a:07:1b:8e:ff:98:50:64: 8f:6f:54:12:88:ff:cb:7e:e7:c4:ed:77:1b:2e:f9:4b:00:66: f0:49:c0:3c:7d:c6:8e:63:00:9c:a9:d5:6f:34:b3:4f:5f:b9: 85:f5:d6:16:0c:78:42:67:1e:9e:81:c2:da:1e:69:30:9c:09: 1a:05:e8:50:53:33:ba:25:c9:26:e8:66:30:ea:39:a4:59:16: fc:aa:5e:e2:88:4e:45:20:52:f9:a4:f0:8f:e0:fb:0e:c9:cf: 27:1f:98:5e:eb:b7:39:2e:ac:2e:8f:f8:a6:cf:13:36:ed:42: 35:98:79:4f -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUMwMzExMC8GA1UEBRMoRkY2NTEwMzQ4ODkyQkFBQUIxQjczMzFGRjcwNEMzNDFC ODlBMTg3NjAeFw0yNjAzMjUwODA0MzZaFw0yNjA0MDEwODA0MzZaMBgxFjAUBgNV BAMTDTY5YzM5NzE0LTgxYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrqAfq4gxzWWNazfqai9/Uf5y9daB7DOf1wLPH3JcKPCfmQkpHVvP0BqcV+ZQx rBf75q7ksag8WscP3ZU5dv9szZgQwAe1BssRhoK0iMru7MB9qQv/5l8+F09EXcXC uRkBwFvjTXCxPrd2ENqt4NzRE4vfoZCFeI1cm9vZvQ5Ai1E4Ea644YcTQviZ7Zvx JQwPPlsb6FhjVJVi6U0QCApcKR+5rnILY6vrMBWNdPPbEd6urrLSGU6VoQmb5drx gG4wH7gHkxo2YzdW6Ea5XIG6DJqX7MJ8Dsjwm+PoV4Gp6WLmbITTgOWeMRNZ1Te3 GtybG3qgrx5oRCFoKaKGpw3VAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUb5/11GpV ma9s/ItpUaNNPh87qoQwHwYDVR0jBBgwFoAU/2UQNIiSuqqxtzMf9wTDQbiaGHYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QzAzL0RCNjkxRDBBMDE2 ODExRjE4MEUzOEZEMzU5NkY1NkJDL18yVVFOSWlTdXFxeHR6TWY5d1REUWJpYUdI WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvXzJVUU5JaVN1cXF4dHpNZjl3VERRYmlhR0hZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QzAzL0RCNjkxRDBBMDE2ODExRjE4MEUzOEZEMzU5NkY1NkJDL18yVVFOSWlTdXFx eHR6TWY5d1REUWJpYUdIWS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAzSGeQM2EVX9oGF4Y2iqyR/EMqGkQrhzydCKXvnhMHVL3PBDkirxoFKSYGwsW3 hNUN7foBszAVP6x1+wnRxqcD27sm0PAtWiN1zirKcVE0Z81suOrfiTGsZDLnxDtd XY0nU8q3o/KlqxY4ZZ21qBg8uYdyPJVEl+MkPsEHk9KW4/E7NuqV2d1BKgcbjv+Y UGSPb1QSiP/LfufE7XcbLvlLAGbwScA8fcaOYwCcqdVvNLNPX7mF9dYWDHhCZx6e gcLaHmkwnAkaBehQUzO6Jckm6GYw6jmkWRb8ql7iiE5FIFL5pPCP4PsOyc8nH5he 67c5Lqwuj/imzxM27UI1mHlP -----END CERTIFICATE-----Generated at Thu Mar 26 15:25:57 2026 by rpki-client