$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft File: l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft (raw, json) Hash identifier: /52UpPoeTmLksgL1eOXDxfVC74U9xg3Dmz1lpIynLi0= Subject key identifier: FB:7D:53:D5:DB:90:E1:AB:F7:9C:AF:E4:12:8A:2E:C2:C0:1A:46:B4 Authority key identifier: 97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA Certificate issuer: /CN=A9194AF5/serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Certificate serial: 01AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft Manifest number: 01A2 Signing time: Wed 25 Mar 2026 03:27:04 +0000 Manifest this update: Wed 25 Mar 2026 03:27:04 +0000 Manifest next update: Wed 01 Apr 2026 03:27:04 +0000 Files and hashes: 1: l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl (hash: iY1BAuByDZP29KJpz2MyllID1XMujnDXK9I6BLrSMaM=) 2: 6534CB6AA60711EFA9497E10C4F9AE02.roa (hash: +LlWfDPiKDdUCs+xHkkWz7phXd+8+cijStN/OwLrfmY=) 3: BC87CB52AB5711EEBC6EBB3FC4F9AE02.roa (hash: QyH6dxXjokhnXxiQxLvd1TdbejtHEOfwUUHqYEjI6K8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 427 (0x1ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AF5, serialNumber=97D11AE212CB213DF9652F5BB6248E40CE0C29FA Validity Not Before: Mar 25 03:27:04 2026 GMT Not After : Apr 1 03:27:04 2026 GMT Subject: CN=69c35608-b84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4d:8b:c3:8d:a2:e8:ed:be:f3:68:9a:b7:f2: 22:cd:1f:3c:2c:62:33:2b:87:99:78:b1:0e:66:3a: c1:d9:9d:a1:16:57:2e:17:10:30:d0:70:ff:e3:df: 7a:17:15:5b:5c:39:67:e7:96:7f:78:eb:9a:64:47: 1c:34:98:b5:1b:61:dd:1b:21:76:65:09:df:b9:32: 02:6f:6f:75:a5:54:0a:10:ea:a0:0d:4d:53:59:37: aa:d5:58:b6:27:80:43:11:72:3c:ec:8a:3b:43:2b: 62:62:b1:95:5f:a5:bc:c8:98:9b:d1:f0:86:02:b3: 21:96:ec:9f:10:58:b5:80:da:6a:bc:5f:39:b5:09: 91:cb:6a:59:f2:2c:22:04:8f:91:ab:76:89:46:74: 9a:f2:f9:79:02:14:4c:83:fb:2f:c8:0a:9f:6b:8d: 2a:ca:2a:38:bb:92:40:c3:22:e1:21:d5:87:da:0b: 21:da:28:9b:93:17:02:6d:3f:1e:2d:84:a6:f7:ba: 2f:01:b6:82:93:ec:7f:57:37:8a:66:4b:65:b8:c8: f9:48:68:a1:03:b4:df:21:e6:80:9e:cc:ed:bc:90: 53:a3:09:33:93:19:9f:1f:31:b5:8f:61:1f:20:3f: a4:79:3c:81:03:a4:c3:41:90:17:3f:3b:7d:f5:23: 06:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7D:53:D5:DB:90:E1:AB:F7:9C:AF:E4:12:8A:2E:C2:C0:1A:46:B4 X509v3 Authority Key Identifier: keyid:97:D1:1A:E2:12:CB:21:3D:F9:65:2F:5B:B6:24:8E:40:CE:0C:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9Ea4hLLIT35ZS9btiSOQM4MKfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AF5/1B1C2466AB5711EE818A283EC4F9AE02/l9Ea4hLLIT35ZS9btiSOQM4MKfo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c9:15:c0:93:6a:14:66:d7:72:0f:d8:66:b4:c2:3f:fb:e2: 4b:66:f7:73:2a:45:77:17:2f:a5:58:bc:19:f5:6d:3e:73:b1: fe:fe:07:4b:b5:20:3c:1d:15:d9:a6:98:73:c6:15:0e:a9:b0: e2:7f:d3:00:6b:1a:b4:7e:92:cc:d6:72:8b:c7:5b:a5:34:63: 7a:8a:67:55:ea:5d:13:ee:2e:55:2e:0d:41:b7:e0:53:44:1c: e9:eb:3a:dd:7d:17:85:fe:19:df:1e:1d:bf:20:05:f6:8c:6e: 31:83:8d:5b:6f:2a:ab:b3:95:75:35:65:5a:85:66:12:ec:ba: 7a:18:81:c4:86:62:ea:46:22:20:15:6b:f9:1a:6e:66:90:4e: 49:73:7d:e3:3d:84:d9:93:d6:5b:e9:b0:94:ca:85:0c:6f:11: 19:ac:0b:db:13:10:3e:b3:0f:f7:ce:ce:1c:24:2b:93:73:ea: a6:b2:fc:0c:d9:55:30:92:1e:62:50:42:ca:03:5f:64:72:f9: e5:17:20:25:b6:fe:a1:74:b6:9a:e1:63:31:24:92:25:0a:75: 3b:d6:a4:80:f3:8f:ca:0d:22:cc:06:39:41:44:48:d1:6e:dc: 0f:1d:b6:92:c5:e9:64:a9:b5:5f:de:2f:fa:9d:16:be:eb:89: 7a:0c:03:51 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRjUxMTAvBgNVBAUTKDk3RDExQUUyMTJDQjIxM0RGOTY1MkY1QkI2MjQ4RTQw Q0UwQzI5RkEwHhcNMjYwMzI1MDMyNzA0WhcNMjYwNDAxMDMyNzA0WjAYMRYwFAYD VQQDEw02OWMzNTYwOC1iODRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2E2Lw42i6O2+82iat/IizR88LGIzK4eZeLEOZjrB2Z2hFlcuFxAw0HD/4996 FxVbXDln55Z/eOuaZEccNJi1G2HdGyF2ZQnfuTICb291pVQKEOqgDU1TWTeq1Vi2 J4BDEXI87Io7QytiYrGVX6W8yJib0fCGArMhluyfEFi1gNpqvF85tQmRy2pZ8iwi BI+Rq3aJRnSa8vl5AhRMg/svyAqfa40qyio4u5JAwyLhIdWH2gsh2iibkxcCbT8e LYSm97ovAbaCk+x/VzeKZktluMj5SGihA7TfIeaAnsztvJBTowkzkxmfHzG1j2Ef ID+keTyBA6TDQZAXPzt99SMGBQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPt9U9Xb kOGr95yv5BKKLsLAGka0MB8GA1UdIwQYMBaAFJfRGuISyyE9+WUvW7YkjkDODCn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFGNS8xQjFDMjQ2NkFC NTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElUMzVaUzlidGlTT1FNNE1L Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5RWE0aExMSVQzNVpTOWJ0aVNPUU00TUtmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEFGNS8xQjFDMjQ2NkFCNTcxMUVFODE4QTI4M0VDNEY5QUUwMi9sOUVhNGhMTElU MzVaUzlidGlTT1FNNE1LZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAW8kVwJNqFGbXcg/YZrTCP/viS2b3cypFdxcvpVi8GfVtPnOx/v4HS7UgPB0V 2aaYc8YVDqmw4n/TAGsatH6SzNZyi8dbpTRjeopnVepdE+4uVS4NQbfgU0Qc6es6 3X0Xhf4Z3x4dvyAF9oxuMYONW28qq7OVdTVlWoVmEuy6ehiBxIZi6kYiIBVr+Rpu ZpBOSXN94z2E2ZPWW+mwlMqFDG8RGawL2xMQPrMP987OHCQrk3PqprL8DNlVMJIe YlBCygNfZHL55RcgJbb+oXS2muFjMSSSJQp1O9akgPOPyg0izAY5QURI0W7cDx22 ksXpZKm1X94v+p0WvuuJegwDUQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:44 2026 by rpki-client