$ rpki-client -vvf rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft File: u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft (raw, json) Hash identifier: WOIxLzhzLmongCLj9RDkmQdMOIaEd40hWcUEmwBOazs= Subject key identifier: A6:FA:45:D6:34:11:96:9F:85:19:82:05:A3:93:B5:3F:70:C4:9C:D9 Authority key identifier: BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 Certificate issuer: /CN=A919B824/serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Certificate serial: 09AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft Manifest number: 09A1 Signing time: Tue 24 Mar 2026 19:44:58 +0000 Manifest this update: Tue 24 Mar 2026 19:44:57 +0000 Manifest next update: Tue 31 Mar 2026 19:44:57 +0000 Files and hashes: 1: u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl (hash: lSuEdlpyI9xFshQHzdn15gQYjZFxTTm1zuozmyp7Vsg=) 2: EEC7D1CAA6C911EA8079FD17C4F9AE02.roa (hash: QiTuGvny7kwZa0r7xsMS35Li4xGVKVdjf+tEuUZn0Sk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:44:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2474 (0x9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B824, serialNumber=BBDB7BD0B8E9656E71E1994E19618745708FCEF1 Validity Not Before: Mar 24 19:44:57 2026 GMT Not After : Mar 31 19:44:57 2026 GMT Subject: CN=69c2e9ba-a50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:27:55:b7:7a:a3:be:b3:85:ff:b2:55:a9:a5: 11:af:75:c7:d3:f6:8d:d9:21:0b:60:9d:8d:a8:c4: 30:4c:e8:2f:30:4a:74:1b:b9:a6:b9:8d:98:34:48: 36:19:7d:81:fa:3f:1a:75:7f:e1:53:06:90:ef:28: 95:d4:e8:a0:9d:dd:c9:95:d2:71:89:9a:09:97:fc: ae:95:ad:ff:55:1e:6c:9b:86:92:9d:bc:f0:3f:60: 12:c4:f7:b2:12:18:d7:f2:d7:62:12:9f:dd:5b:60: 6c:dc:93:56:39:12:0f:ac:85:ef:8e:4f:ed:64:f6: f3:37:1b:b7:81:c9:61:f1:41:86:c8:df:5b:82:23: 3d:f6:35:50:eb:10:48:a5:ef:3c:65:e3:79:f2:15: a3:5f:4a:e7:f5:9a:29:0f:23:45:47:6c:a6:d7:1f: 25:f9:fa:2b:27:13:f8:58:88:5f:1f:ca:b1:f1:de: b7:33:3f:1c:0c:fc:8e:2a:69:ba:16:d9:ae:09:c7: 3b:a2:d9:04:c7:08:ee:04:d7:26:58:76:33:67:ca: 73:c0:e8:0a:52:56:eb:e0:6c:2a:3e:d1:57:d1:29: 77:da:04:dd:f5:2d:49:23:db:1b:fd:c8:24:ab:3c: 72:a0:87:43:c0:88:40:95:74:10:50:08:82:ad:a4: d1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FA:45:D6:34:11:96:9F:85:19:82:05:A3:93:B5:3F:70:C4:9C:D9 X509v3 Authority Key Identifier: keyid:BB:DB:7B:D0:B8:E9:65:6E:71:E1:99:4E:19:61:87:45:70:8F:CE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u9t70LjpZW5x4ZlOGWGHRXCPzvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B824/734BAD16A6C711EABD305010C4F9AE02/u9t70LjpZW5x4ZlOGWGHRXCPzvE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:ee:68:7f:44:9f:c6:06:34:8e:a2:f8:82:56:12:97:29:88: 01:df:ab:4f:c7:fc:9a:57:7b:d2:72:bf:26:d7:a6:84:34:2f: 50:c0:d2:b2:c8:00:12:8d:f1:8e:27:b5:a2:b9:3f:0e:e3:9b: 5d:5f:4b:45:0d:c9:ea:2c:db:89:c5:a9:4e:fe:af:1e:b8:f6: b3:64:2e:d3:4a:1d:05:82:75:e1:54:aa:b3:c5:27:d3:e4:a0: ac:ef:10:e2:03:fe:98:34:7b:7c:7d:74:95:9d:a1:3e:27:7d: c9:c9:55:06:69:9a:a3:27:85:3c:16:c3:43:3a:1f:08:04:7f: 28:fd:79:23:90:7d:ee:d0:4a:25:c5:c4:05:ee:28:85:d1:65: fe:aa:cc:ae:b8:b7:8b:3a:90:88:a1:90:7d:e3:f9:7c:70:3d: f3:ca:06:5a:63:25:08:68:6e:92:b5:c7:af:78:b9:f6:06:7c: e6:eb:5e:ff:2b:74:e7:44:d8:91:65:f9:e1:c7:1b:e1:34:02: 6f:2c:ca:ab:c3:7d:05:03:4a:bb:47:d6:03:8b:1b:d8:d7:0e: 97:41:43:e7:6b:87:73:8d:7a:64:69:f4:1d:10:7c:34:93:7a: 43:ad:97:7c:b6:0b:80:67:56:df:02:a7:cd:42:35:72:ef:99: 53:9e:ec:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI4MjQxMTAvBgNVBAUTKEJCREI3QkQwQjhFOTY1NkU3MUUxOTk0RTE5NjE4NzQ1 NzA4RkNFRjEwHhcNMjYwMzI0MTk0NDU3WhcNMjYwMzMxMTk0NDU3WjAYMRYwFAYD VQQDEw02OWMyZTliYS1hNTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ydVt3qjvrOF/7JVqaURr3XH0/aN2SELYJ2NqMQwTOgvMEp0G7mmuY2YNEg2 GX2B+j8adX/hUwaQ7yiV1Oignd3JldJxiZoJl/yula3/VR5sm4aSnbzwP2ASxPey EhjX8tdiEp/dW2Bs3JNWORIPrIXvjk/tZPbzNxu3gclh8UGGyN9bgiM99jVQ6xBI pe88ZeN58hWjX0rn9ZopDyNFR2ym1x8l+forJxP4WIhfH8qx8d63Mz8cDPyOKmm6 FtmuCcc7otkExwjuBNcmWHYzZ8pzwOgKUlbr4GwqPtFX0Sl32gTd9S1JI9sb/cgk qzxyoIdDwIhAlXQQUAiCraTRrwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKb6RdY0 EZafhRmCBaOTtT9wxJzZMB8GA1UdIwQYMBaAFLvbe9C46WVuceGZThlhh0Vwj87x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjgyNC83MzRCQUQxNkE2 QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpXNXg0WmxPR1dHSFJYQ1B6 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U5dDcwTGpwWlc1eDRabE9HV0dIUlhDUHp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjgyNC83MzRCQUQxNkE2QzcxMUVBQkQzMDUwMTBDNEY5QUUwMi91OXQ3MExqcFpX NXg0WmxPR1dHSFJYQ1B6dkUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAiO5of0SfxgY0jqL4glYSlymIAd+rT8f8mld70nK/JtemhDQvUMDSssgAEo3x jie1ork/DuObXV9LRQ3J6izbicWpTv6vHrj2s2Qu00odBYJ14VSqs8Un0+SgrO8Q 4gP+mDR7fH10lZ2hPid9yclVBmmaoyeFPBbDQzofCAR/KP15I5B97tBKJcXEBe4o hdFl/qrMrri3izqQiKGQfeP5fHA988oGWmMlCGhukrXHr3i59gZ85ute/yt050TY kWX54ccb4TQCbyzKq8N9BQNKu0fWA4sb2NcOl0FD52uHc416ZGn0HRB8NJN6Q62X fLYLgGdW3wKnzUI1cu+ZU57sRQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:24 2026 by rpki-client