$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft File: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft (raw, json) Hash identifier: zP4gR0TX40QgOSHBVtJCks2R6Om4b7b+mhw7vY0aUhM= Subject key identifier: 34:28:52:5F:A9:CD:8B:15:F4:4A:3D:03:E7:E7:4B:08:15:F4:3E:BC Authority key identifier: AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A Certificate issuer: /CN=A9196DCA/serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft Manifest number: EA Signing time: Wed 25 Mar 2026 05:39:05 +0000 Manifest this update: Wed 25 Mar 2026 05:39:05 +0000 Manifest next update: Wed 01 Apr 2026 05:39:05 +0000 Files and hashes: 1: rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl (hash: NAKnroT2rWHE9bLEBJ0sm3poPXRSetqdGd1zwEgXWXU=) 2: E39AF9C6CB3611EFAE3C1A10C4F9AE02.roa (hash: hdlYLSviqdsjiISi2RWRWAEZ34QocD0U9ocvGaJFxhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DCA, serialNumber=AE73B70548FF422ED02D59D1CA25793A05E9E42A Validity Not Before: Mar 25 05:39:05 2026 GMT Not After : Apr 1 05:39:05 2026 GMT Subject: CN=69c374f9-ada0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ca:02:11:06:b8:83:9a:5e:70:47:d1:dd:99: d8:54:8b:2e:29:2f:0c:25:34:26:df:5b:51:6b:29: 9f:48:b3:3f:ae:67:e1:6d:55:02:13:53:30:33:0b: a0:8e:ff:9b:4f:56:3a:cb:db:a1:aa:bc:97:fd:30: 7d:63:a7:9f:35:89:f7:69:c5:69:0d:08:f8:56:eb: a6:e4:31:f3:78:ae:fa:41:03:d8:bb:c8:2e:ed:3a: 08:2c:30:7e:93:d8:dc:c8:32:a2:5b:d0:16:30:bd: 0e:6c:f7:7b:fe:72:f1:5e:b4:a6:d8:c4:db:76:48: 40:d4:0d:f7:e0:29:10:93:fc:fd:9c:af:4d:06:bf: 0f:09:5e:58:2f:e6:ea:a6:51:fe:f0:9d:a2:12:62: 95:79:5a:fa:18:17:14:41:be:5d:98:c5:a1:68:df: ac:7e:eb:3b:4f:aa:81:01:e5:cc:c6:6c:f3:bc:a8: 4f:d8:ad:3e:d0:c6:3b:2f:5d:fc:2b:65:b3:42:a2: b1:72:2b:5b:55:39:cb:9d:8d:bc:43:f9:ca:c2:f8: 55:b7:ef:69:76:e8:1a:da:3a:8f:c8:b2:b5:57:7d: 38:4c:87:5a:26:1d:26:ee:6b:e6:f1:ae:b8:7f:ce: e5:94:1f:fa:bc:18:c5:de:47:84:93:d1:af:a4:69: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:52:5F:A9:CD:8B:15:F4:4A:3D:03:E7:E7:4B:08:15:F4:3E:BC X509v3 Authority Key Identifier: keyid:AE:73:B7:05:48:FF:42:2E:D0:2D:59:D1:CA:25:79:3A:05:E9:E4:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DCA/50109876CB1F11EFB7AC2786C4F9AE02/rnO3BUj_Qi7QLVnRyiV5OgXp5Co.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:7d:a1:23:18:0c:04:b6:de:df:7f:14:9c:52:37:61:28:4e: 08:f0:86:1c:ef:28:49:5e:cb:f4:18:f2:7f:aa:3d:ca:d9:5f: bd:d6:fe:d8:c4:ba:57:04:c1:6f:ad:ab:b9:35:21:a9:59:c0: 70:0c:2b:ca:5b:92:cd:5b:a3:15:54:b7:2c:30:52:6b:57:4a: eb:50:bc:38:77:1d:d7:a6:b6:5b:b4:d5:f2:6f:df:a3:40:2f: 0c:21:4d:2d:ed:63:76:af:cf:56:d3:7c:e1:01:e0:33:ad:4c: 5b:69:59:26:ce:55:db:3e:a7:1a:bd:41:d4:3e:4c:70:f4:a8: bf:0c:05:8c:df:a1:5d:48:08:2b:81:d2:62:81:f3:af:2c:33: 8e:7a:6b:9c:e3:ac:65:1c:24:55:04:71:5f:10:28:30:e7:58: 45:32:c2:66:2e:21:75:4e:7d:bc:d0:37:88:4c:b5:aa:d7:3f: a8:f6:dc:6b:ba:2a:13:57:ae:f3:ba:7f:ea:29:7b:01:ca:ea: e7:10:c2:21:10:9e:ab:f1:d3:af:c6:3e:af:3e:cc:b1:47:96: 17:86:07:be:9f:48:76:46:fe:29:19:a6:e5:a9:ba:5b:bc:08: 19:84:6c:3c:92:69:e0:b6:d2:d5:f0:13:f4:60:65:ad:1c:18: 23:47:7c:13 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEQ0ExMTAvBgNVBAUTKEFFNzNCNzA1NDhGRjQyMkVEMDJENTlEMUNBMjU3OTNB MDVFOUU0MkEwHhcNMjYwMzI1MDUzOTA1WhcNMjYwNDAxMDUzOTA1WjAYMRYwFAYD VQQDEw02OWMzNzRmOS1hZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmsoCEQa4g5pecEfR3ZnYVIsuKS8MJTQm31tRaymfSLM/rmfhbVUCE1MwMwug jv+bT1Y6y9uhqryX/TB9Y6efNYn3acVpDQj4Vuum5DHzeK76QQPYu8gu7ToILDB+ k9jcyDKiW9AWML0ObPd7/nLxXrSm2MTbdkhA1A334CkQk/z9nK9NBr8PCV5YL+bq plH+8J2iEmKVeVr6GBcUQb5dmMWhaN+sfus7T6qBAeXMxmzzvKhP2K0+0MY7L138 K2WzQqKxcitbVTnLnY28Q/nKwvhVt+9pduga2jqPyLK1V304TIdaJh0m7mvm8a64 f87llB/6vBjF3keEk9GvpGmmqwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDQoUl+p zYsV9Eo9A+fnSwgV9D68MB8GA1UdIwQYMBaAFK5ztwVI/0Iu0C1Z0coleToF6eQq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRDQS81MDEwOTg3NkNC MUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1FpN1FMVm5SeWlWNU9nWHA1 Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JuTzNCVWpfUWk3UUxWblJ5aVY1T2dYcDVDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRDQS81MDEwOTg3NkNCMUYxMUVGQjdBQzI3ODZDNEY5QUUwMi9ybk8zQlVqX1Fp N1FMVm5SeWlWNU9nWHA1Q28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAEn2hIxgMBLbe338UnFI3YShOCPCGHO8oSV7L9Bjyf6o9ytlfvdb+2MS6VwTB b62ruTUhqVnAcAwryluSzVujFVS3LDBSa1dK61C8OHcd16a2W7TV8m/fo0AvDCFN Le1jdq/PVtN84QHgM61MW2lZJs5V2z6nGr1B1D5McPSovwwFjN+hXUgIK4HSYoHz rywzjnprnOOsZRwkVQRxXxAoMOdYRTLCZi4hdU59vNA3iEy1qtc/qPbca7oqE1eu 87p/6il7Acrq5xDCIRCeq/HTr8Y+rz7MsUeWF4YHvp9Idkb+KRmm5am6W7wIGYRs PJJp4LbS1fAT9GBlrRwYI0d8Ew== -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:13 2026 by rpki-client