$ rpki-client -vvf rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft File: M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft (raw, json) Hash identifier: pdpAPvuJxhPmzTwpLfrC+0a0Rya9ilvPBaafJvr12lY= Subject key identifier: 25:41:B0:BA:08:C8:41:97:D6:FA:52:EF:2C:2C:BA:E0:4B:D3:B1:93 Authority key identifier: 33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 Certificate issuer: /CN=A9191E08/serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Certificate serial: 03E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft Manifest number: 03D4 Signing time: Wed 25 Mar 2026 00:16:43 +0000 Manifest this update: Wed 25 Mar 2026 00:16:42 +0000 Manifest next update: Wed 01 Apr 2026 00:16:42 +0000 Files and hashes: 1: M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl (hash: CGuzGe2PNzgs1g0O7FG/WW89UH9z5BoMPgOZ8hZB+IE=) 2: 249BA23C364D11F0AECC3986C4F9AE02.roa (hash: znuT/lx1cVo1Y53YyyfaSdImgaQ4zBt/+bOXogW6iF0=) 3: 25687A64364D11F0AECC3986C4F9AE02.roa (hash: TWN/2cVZRi9uapuQsJLFYt79FGpaZGSlGK7OEP/EpgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191E08, serialNumber=33B6953295801038F017FA65D470781A5CC772C0 Validity Not Before: Mar 25 00:16:42 2026 GMT Not After : Apr 1 00:16:42 2026 GMT Subject: CN=69c3296b-cc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9c:1a:ba:6b:d6:ce:ff:b0:5a:a7:37:61:ba: 80:77:a9:0c:4b:7e:03:68:7e:96:12:24:1f:67:f5: c9:ff:85:cd:9d:26:38:7b:7b:c2:a5:ac:91:2c:a5: 93:9f:87:ab:6d:19:df:61:02:09:ec:6f:60:aa:ff: 5e:ac:56:7e:a7:e2:f5:1e:2c:18:3f:a8:2d:c1:27: 57:2f:7c:e5:f8:ae:8c:ba:a6:85:b6:6a:f8:53:58: fa:79:d3:ce:44:96:1e:a7:0c:64:30:d1:c7:a8:83: e5:b1:86:cd:e7:dd:63:2b:0b:bf:52:8d:ff:08:4a: b7:6b:d4:9a:ce:00:54:f6:5c:39:35:7b:a3:5d:79: 74:4e:bd:39:c6:29:5b:92:ab:b3:7e:17:82:a8:c8: 4d:65:2b:db:e1:3e:e9:d0:ec:86:a9:c1:51:1c:a9: 1e:ec:d2:67:f3:2b:bd:be:46:be:fb:bd:54:32:95: a3:0f:d2:98:e2:90:48:9c:03:a5:1d:64:0e:c2:f3: 4b:98:20:c8:0f:3d:b3:f2:85:e2:ba:ae:3b:4c:10: bb:44:5e:18:e4:22:de:8b:91:f2:9a:25:89:2c:fe: 60:e3:e4:d6:ea:6e:9b:6b:54:49:a4:45:cb:c5:e7: f7:cd:f3:6f:61:92:5e:15:c5:d6:c4:c3:5f:a1:ac: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:41:B0:BA:08:C8:41:97:D6:FA:52:EF:2C:2C:BA:E0:4B:D3:B1:93 X509v3 Authority Key Identifier: keyid:33:B6:95:32:95:80:10:38:F0:17:FA:65:D4:70:78:1A:5C:C7:72:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M7aVMpWAEDjwF_pl1HB4GlzHcsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191E08/9EC631ECC60911ECB460EC57C4F9AE02/M7aVMpWAEDjwF_pl1HB4GlzHcsA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c2:23:de:35:75:f0:ab:94:df:6b:90:c2:59:32:b6:84:e3: db:9d:f3:f6:ba:0c:a9:44:57:63:79:04:aa:0f:be:2b:28:bd: e4:72:8c:27:a8:6e:b4:d8:75:d1:95:a0:10:10:3e:67:14:16: 03:b2:98:43:2c:19:9d:00:a9:5f:e9:f8:18:e4:1d:0e:40:dd: 75:0f:52:5c:79:da:30:92:65:d4:38:0c:47:6a:4c:39:95:76: 70:36:b6:56:5b:5d:58:7b:09:97:de:4f:c4:79:b7:9f:97:b0: 3b:d6:48:cd:be:2d:20:ca:89:a1:6a:d4:fa:7d:50:84:4c:75: b9:e6:f7:61:a2:74:65:6a:25:a9:b5:3a:a3:b9:4e:b8:23:4d: f9:cb:ef:a2:e0:69:b5:de:ac:9d:d1:9e:31:a9:2a:ff:0a:f7: 12:b1:78:5b:b9:36:5a:5c:56:da:15:56:d4:40:ce:47:ec:ad: d9:67:8d:a8:5e:e8:87:48:5c:cc:31:5f:30:6c:fc:24:9b:6e: f2:f1:31:75:fa:1c:84:46:68:fa:53:42:ca:2e:c6:34:88:78: 70:12:01:c9:b1:a9:a6:9c:c3:d0:ab:55:1a:76:f0:2d:5d:1c: 95:84:f8:5d:bb:f2:cc:20:4d:20:3f:0d:a9:0a:1c:4f:a7:f0: 74:a3:77:66 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFFMDgxMTAvBgNVBAUTKDMzQjY5NTMyOTU4MDEwMzhGMDE3RkE2NUQ0NzA3ODFB NUNDNzcyQzAwHhcNMjYwMzI1MDAxNjQyWhcNMjYwNDAxMDAxNjQyWjAYMRYwFAYD VQQDEw02OWMzMjk2Yi1jYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJwaumvWzv+wWqc3YbqAd6kMS34DaH6WEiQfZ/XJ/4XNnSY4e3vCpayRLKWT n4erbRnfYQIJ7G9gqv9erFZ+p+L1HiwYP6gtwSdXL3zl+K6MuqaFtmr4U1j6edPO RJYepwxkMNHHqIPlsYbN591jKwu/Uo3/CEq3a9SazgBU9lw5NXujXXl0Tr05xilb kquzfheCqMhNZSvb4T7p0OyGqcFRHKke7NJn8yu9vka++71UMpWjD9KY4pBInAOl HWQOwvNLmCDIDz2z8oXiuq47TBC7RF4Y5CLei5HymiWJLP5g4+TW6m6ba1RJpEXL xef3zfNvYZJeFcXWxMNfoay40wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCVBsLoI yEGX1vpS7ywsuuBL07GTMB8GA1UdIwQYMBaAFDO2lTKVgBA48Bf6ZdRweBpcx3LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUUwOC85RUM2MzFFQ0M2 MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVEandGX3BsMUhCNEdsekhj c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL003YVZNcFdBRURqd0ZfcGwxSEI0R2x6SGNzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUUwOC85RUM2MzFFQ0M2MDkxMUVDQjQ2MEVDNTdDNEY5QUUwMi9NN2FWTXBXQUVE andGX3BsMUhCNEdsekhjc0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAn8Ij3jV18KuU32uQwlkytoTj253z9roMqURXY3kEqg++Kyi95HKMJ6hutNh1 0ZWgEBA+ZxQWA7KYQywZnQCpX+n4GOQdDkDddQ9SXHnaMJJl1DgMR2pMOZV2cDa2 VltdWHsJl95PxHm3n5ewO9ZIzb4tIMqJoWrU+n1QhEx1ueb3YaJ0ZWolqbU6o7lO uCNN+cvvouBptd6sndGeMakq/wr3ErF4W7k2WlxW2hVW1EDOR+yt2WeNqF7oh0hc zDFfMGz8JJtu8vExdfochEZo+lNCyi7GNIh4cBIBybGpppzD0KtVGnbwLV0clYT4 XbvyzCBNID8NqQocT6fwdKN3Zg== -----END CERTIFICATE-----Generated at Thu Mar 26 02:00:48 2026 by rpki-client