$ rpki-client -vvf rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft File: rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft (raw, json) Hash identifier: DEfa+X4nQ6ZtM+X3PDnQT258hJBdoZf46oFBOEs1BAc= Subject key identifier: 70:10:AC:AA:C5:6B:7B:DA:8B:BF:1A:98:41:AE:35:D6:97:AD:72:4E Authority key identifier: AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 Certificate issuer: /CN=A9191A09/serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Certificate serial: 35CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft Manifest number: 357A Signing time: Thu 26 Mar 2026 14:44:01 +0000 Manifest this update: Thu 26 Mar 2026 14:44:00 +0000 Manifest next update: Thu 02 Apr 2026 14:44:00 +0000 Files and hashes: 1: rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl (hash: RvjjMPOQRTS11qUxChSv2piN77ZJ25f0Ke0CbIwl/+Y=) 2: F8A618E05E3511F0ACCE4C26C4F9AE02.roa (hash: YNlGAXVG6Otxz1oTc91JGnEKWMVhDfGSlJsoaRX0wMo=) 3: FF64D6AAD4BB11ECBE4E9E71C4F9AE02.roa (hash: mOn42WnRE+/Mos3ahI73htZV2BdO/yRo2Jrd4NQohQc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13774 (0x35ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191A09, serialNumber=ACF2C8D0DCFBA74516B33CEBE26AE14F8B067C80 Validity Not Before: Mar 26 14:44:00 2026 GMT Not After : Apr 2 14:44:00 2026 GMT Subject: CN=69c54631-5982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:ad:5b:8e:e9:a5:08:06:b8:96:6c:28:8a: 4b:31:ba:b0:54:dc:e4:60:b2:60:8e:9c:c0:ef:9b: 4a:d1:c2:ae:b3:64:33:ba:1c:23:2d:c0:c5:a6:76: 21:72:8b:04:9c:7a:78:44:4f:78:c0:12:f3:a7:a3: f4:31:60:05:08:4a:4f:d0:ec:04:a7:eb:9c:1c:72: b2:21:60:68:38:29:e2:7a:35:11:d1:a0:b7:d9:23: cc:3d:75:cd:0a:6b:6d:f4:48:c5:3f:1e:df:9f:ec: 9b:cf:a7:e8:ae:90:50:e0:01:43:8f:c3:ec:f9:c8: 3d:75:6f:ad:4a:d2:20:d8:d0:f3:a2:a8:15:0f:c3: 74:53:45:8a:30:03:8e:09:f9:d4:d3:a7:be:1d:9e: a3:02:8c:38:b6:93:12:f1:b7:18:38:41:cc:f2:d3: a5:74:a2:c2:b4:63:3d:66:f4:bf:25:63:c6:a1:ef: 32:bc:98:92:28:b9:91:6d:33:f1:60:31:f5:9a:4f: dd:ec:86:d2:a6:04:c1:e0:97:50:cd:da:e7:5e:08: ba:4e:af:cf:12:d5:b3:3d:42:a1:94:f3:62:34:99: 19:d1:a0:9f:83:d2:50:73:eb:67:fd:99:1f:cf:fc: 53:4a:4b:51:b3:57:d8:ab:dc:68:3f:58:e3:fe:f8: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:AC:AA:C5:6B:7B:DA:8B:BF:1A:98:41:AE:35:D6:97:AD:72:4E X509v3 Authority Key Identifier: keyid:AC:F2:C8:D0:DC:FB:A7:45:16:B3:3C:EB:E2:6A:E1:4F:8B:06:7C:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191A09/4ACFF3601D9011E2B87CF2EF08B02CD2/rPLI0Nz7p0UWszzr4mrhT4sGfIA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a7:d8:1f:f3:cd:13:43:42:b5:d3:74:19:ab:4b:cc:a1:2b: 08:75:7e:a4:52:d9:4e:49:67:49:0b:7d:3a:5c:7d:35:12:e8: 45:73:43:af:60:5e:ec:c0:89:03:3e:4d:8e:c9:20:4c:ea:10: b3:ff:30:59:90:85:d8:23:a6:fe:88:1f:ff:42:b5:81:5b:30: 1e:13:95:fb:4e:6d:e9:1e:73:7b:49:2a:27:b2:eb:3e:82:2f: 13:3f:7b:91:79:29:67:4b:13:e9:1a:f8:86:88:57:75:54:17: dd:9b:f6:92:29:84:1b:9a:50:65:5a:48:c7:2b:3c:3e:93:aa: c4:6c:e1:05:9b:ce:85:88:89:15:08:ce:dd:66:4d:fb:c8:d1: ab:f8:ff:35:a2:dd:f9:bb:d9:de:23:0e:66:09:90:3f:ad:01: 11:ad:c2:2c:56:df:7b:72:3c:99:a9:a9:da:d7:83:6d:3a:7b: 6b:ab:e4:89:8b:c9:2a:40:9e:5a:4e:4d:dd:1c:9f:f9:fb:16: 16:19:6d:7b:16:cc:d8:1b:fe:79:a4:16:3e:d0:29:e2:5c:21: ef:c9:4f:ef:57:ff:96:cf:7b:d5:1d:d1:35:a4:71:69:d6:4b: 1f:49:71:13:fe:0c:d8:43:75:e4:6c:7e:c8:17:22:f0:48:41: c6:37:2d:21 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICNc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFBMDkxMTAvBgNVBAUTKEFDRjJDOEQwRENGQkE3NDUxNkIzM0NFQkUyNkFFMTRG OEIwNjdDODAwHhcNMjYwMzI2MTQ0NDAwWhcNMjYwNDAyMTQ0NDAwWjAYMRYwFAYD VQQDEw02OWM1NDYzMS01OTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKKtW47ppQgGuJZsKIpLMbqwVNzkYLJgjpzA75tK0cKus2QzuhwjLcDFpnYh cosEnHp4RE94wBLzp6P0MWAFCEpP0OwEp+ucHHKyIWBoOCniejUR0aC32SPMPXXN Cmtt9EjFPx7fn+ybz6forpBQ4AFDj8Ps+cg9dW+tStIg2NDzoqgVD8N0U0WKMAOO CfnU06e+HZ6jAow4tpMS8bcYOEHM8tOldKLCtGM9ZvS/JWPGoe8yvJiSKLmRbTPx YDH1mk/d7IbSpgTB4JdQzdrnXgi6Tq/PEtWzPUKhlPNiNJkZ0aCfg9JQc+tn/Zkf z/xTSktRs1fYq9xoP1jj/vhwOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHAQrKrF a3vai78amEGuNdaXrXJOMB8GA1UdIwQYMBaAFKzyyNDc+6dFFrM86+Jq4U+LBnyA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUEwOS80QUNGRjM2MDFE OTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3AwVVdzenpyNG1yaFQ0c0dm SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQTEkwTno3cDBVV3N6enI0bXJoVDRzR2ZJQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUEwOS80QUNGRjM2MDFEOTAxMUUyQjg3Q0YyRUYwOEIwMkNEMi9yUExJME56N3Aw VVdzenpyNG1yaFQ0c0dmSUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbqfYH/PNE0NCtdN0GatLzKErCHV+pFLZTklnSQt9Olx9NRLoRXNDr2Be7MCJ Az5NjskgTOoQs/8wWZCF2COm/ogf/0K1gVswHhOV+05t6R5ze0kqJ7LrPoIvEz97 kXkpZ0sT6Rr4hohXdVQX3Zv2kimEG5pQZVpIxys8PpOqxGzhBZvOhYiJFQjO3WZN +8jRq/j/NaLd+bvZ3iMOZgmQP60BEa3CLFbfe3I8mamp2teDbTp7a6vkiYvJKkCe Wk5N3Ryf+fsWFhltexbM2Bv+eaQWPtAp4lwh78lP71f/ls971R3RNaRxadZLH0lx E/4M2EN15Gx+yBci8EhBxjctIQ== -----END CERTIFICATE-----Generated at Sat Mar 28 10:39:40 2026 by rpki-client