$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft File: ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft (raw, json) Hash identifier: Zyd0qou/tdZsORQ3y8eSoMyUtIShMgbA2bwckMfOJFQ= Subject key identifier: 0B:2D:0A:7A:0C:DE:77:B3:17:61:2F:33:EE:64:68:AD:B2:11:F9:1F Authority key identifier: 6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A Certificate issuer: /CN=A9199BDF/serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Certificate serial: 101B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft Manifest number: 0FFC Signing time: Tue 24 Mar 2026 17:22:32 +0000 Manifest this update: Tue 24 Mar 2026 17:22:32 +0000 Manifest next update: Tue 31 Mar 2026 17:22:32 +0000 Files and hashes: 1: ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl (hash: XUY6nMAlLwSp2oUyK2iYZe7Y2fWep3FoAxrNu2Ub0KQ=) 2: B0604836C95A11F0930CD216C4F9AE02.roa (hash: EnZs3mTC0q1qED5zDn4PS3o4858HJMq03DhNGu6sIpU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4123 (0x101b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BDF, serialNumber=6A4F43110050F0681964D858F9144E052BB8899A Validity Not Before: Mar 24 17:22:32 2026 GMT Not After : Mar 31 17:22:32 2026 GMT Subject: CN=69c2c858-35d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:17:d2:d8:b7:47:d7:da:a5:5f:26:64:1e:38: 7f:b3:17:c2:8f:15:c7:9a:69:77:e1:e9:51:49:4b: a3:1d:63:de:19:12:0e:4a:c5:e8:cb:1b:16:d1:0e: 3c:e2:62:2f:0d:fa:59:fc:e1:27:d7:54:fc:0d:4c: 45:64:6b:d7:2c:c4:3e:b2:9f:28:d9:07:3a:b8:ea: 61:5d:70:02:75:c7:58:4a:54:4e:42:95:06:5b:c9: 86:35:d4:20:fd:e5:1b:29:35:59:a0:94:39:95:88: 05:d0:69:df:f3:6f:f7:11:3a:26:f3:a5:75:99:51: 9d:95:ae:aa:79:3d:4e:6d:22:23:cb:9a:59:9e:99: f8:41:66:2f:73:f3:6e:75:a2:d0:98:d2:69:cb:46: 94:3c:97:ca:30:70:95:05:c3:51:a6:8c:9a:9b:9b: 6d:1f:10:bc:14:34:c0:8d:1a:87:6a:26:d6:68:b3: d9:56:f6:d4:4b:98:07:d2:df:6d:2e:89:cd:96:b1: 8a:ca:29:d2:7e:2d:6b:72:af:eb:59:e8:84:8d:da: 29:09:9b:54:98:5b:36:b4:9f:4c:1c:46:b2:5e:ad: 66:81:1a:48:dd:d9:56:73:44:4d:fa:e5:d7:bf:77: a7:f6:3e:be:12:e0:89:89:dd:b3:d5:1c:b0:11:74: 7e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2D:0A:7A:0C:DE:77:B3:17:61:2F:33:EE:64:68:AD:B2:11:F9:1F X509v3 Authority Key Identifier: keyid:6A:4F:43:11:00:50:F0:68:19:64:D8:58:F9:14:4E:05:2B:B8:89:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak9DEQBQ8GgZZNhY-RROBSu4iZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BDF/E70E0A98709311E980BD7C3DC4F9AE02/ak9DEQBQ8GgZZNhY-RROBSu4iZo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:2b:80:00:7e:f8:75:7c:bc:85:f6:7e:bd:1f:1a:fc:4f: 11:36:03:96:a7:7e:41:a4:53:16:44:a9:60:b4:b7:85:02:f8: 1a:a7:95:c7:2a:c9:c0:83:91:33:a6:b2:06:10:72:ea:37:06: a0:e8:04:6f:d3:44:cd:65:52:e8:bf:3e:61:45:5d:f4:5c:eb: 24:9b:d4:3f:a3:76:ba:44:d8:df:ce:94:36:c9:e4:47:28:e3: 70:48:31:61:ba:97:44:33:c5:66:9c:0e:41:35:5a:0f:8c:21: ba:40:58:89:58:5b:b0:7d:e8:62:af:dd:ee:fd:25:84:c8:33: df:f2:2d:c8:4d:7f:eb:b1:d6:61:3c:af:d2:67:1e:92:15:71: 23:26:e7:7c:b7:bd:76:af:3a:2e:f2:4a:11:59:67:04:2d:9b: 60:e0:33:95:d2:3e:df:18:6b:7d:a5:b2:bc:be:e9:93:99:bb: 1a:ef:5a:49:2d:97:75:97:e0:67:6e:2a:c5:eb:64:a2:fb:2d: 3a:e3:ed:8b:d8:83:4b:8e:5d:6b:d7:35:d1:e7:cf:d3:10:eb: bc:92:d3:50:72:39:2e:2c:cc:ea:ca:e3:ac:49:f0:70:d9:f6: 9a:c8:5d:88:df:ca:6e:2e:5c:f4:7b:2f:f2:5a:73:0c:e1:84: 59:bc:6c:03 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICEBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCREYxMTAvBgNVBAUTKDZBNEY0MzExMDA1MEYwNjgxOTY0RDg1OEY5MTQ0RTA1 MkJCODg5OUEwHhcNMjYwMzI0MTcyMjMyWhcNMjYwMzMxMTcyMjMyWjAYMRYwFAYD VQQDEw02OWMyYzg1OC0zNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnhfS2LdH19qlXyZkHjh/sxfCjxXHmml34elRSUujHWPeGRIOSsXoyxsW0Q48 4mIvDfpZ/OEn11T8DUxFZGvXLMQ+sp8o2Qc6uOphXXACdcdYSlROQpUGW8mGNdQg /eUbKTVZoJQ5lYgF0Gnf82/3ETom86V1mVGdla6qeT1ObSIjy5pZnpn4QWYvc/Nu daLQmNJpy0aUPJfKMHCVBcNRpoyam5ttHxC8FDTAjRqHaibWaLPZVvbUS5gH0t9t LonNlrGKyinSfi1rcq/rWeiEjdopCZtUmFs2tJ9MHEayXq1mgRpI3dlWc0RN+uXX v3en9j6+EuCJid2z1RywEXR+VQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAstCnoM 3nezF2EvM+5kaK2yEfkfMB8GA1UdIwQYMBaAFGpPQxEAUPBoGWTYWPkUTgUruIma MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJERi9FNzBFMEE5ODcw OTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThHZ1paTmhZLVJST0JTdTRp Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FrOURFUUJROEdnWlpOaFktUlJPQlN1NGlaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJERi9FNzBFMEE5ODcwOTMxMUU5ODBCRDdDM0RDNEY5QUUwMi9hazlERVFCUThH Z1paTmhZLVJST0JTdTRpWm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAKvcrgAB++HV8vIX2fr0fGvxPETYDlqd+QaRTFkSpYLS3hQL4GqeVxyrJwIOR M6ayBhBy6jcGoOgEb9NEzWVS6L8+YUVd9FzrJJvUP6N2ukTY386UNsnkRyjjcEgx YbqXRDPFZpwOQTVaD4whukBYiVhbsH3oYq/d7v0lhMgz3/ItyE1/67HWYTyv0mce khVxIybnfLe9dq86LvJKEVlnBC2bYOAzldI+3xhrfaWyvL7pk5m7Gu9aSS2XdZfg Z24qxetkovstOuPti9iDS45da9c10efP0xDrvJLTUHI5LizM6srjrEnwcNn2mshd iN/Kbi5c9Hsv8lpzDOGEWbxsAw== -----END CERTIFICATE-----Generated at Thu Mar 26 00:35:56 2026 by rpki-client