$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft File: w9zZWnJK1uO5h0xuTWs5684ULNQ.mft (raw, json) Hash identifier: PToEAumle3770MVZot3jyKZwsWkNqilv723fCsvv5jU= Subject key identifier: 37:56:32:D8:64:79:6A:49:27:C9:B1:0D:60:18:EB:03:87:12:54:8B Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft Manifest number: 99 Signing time: Wed 25 Mar 2026 06:39:35 +0000 Manifest this update: Wed 25 Mar 2026 06:39:35 +0000 Manifest next update: Wed 01 Apr 2026 06:39:35 +0000 Files and hashes: 1: w9zZWnJK1uO5h0xuTWs5684ULNQ.crl (hash: NAzrjCw0sKAuDotNAlyddR9wSmS8LNVkNrkRNVlUQqY=) 2: CE3975C845C811F0A78A100DC4F9AE02.roa (hash: azH5Q9viXquY/moxc/UZ4RwNqYyQHdR8aAwu/HmXV5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Mar 25 06:39:35 2026 GMT Not After : Apr 1 06:39:35 2026 GMT Subject: CN=69c38327-4c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8e:ba:08:07:19:20:9a:71:1f:9f:07:04:5f: 74:04:ee:50:63:83:4b:5f:24:bc:54:e2:ca:76:5e: 0d:d8:ca:81:ff:d8:7f:02:e3:9f:c6:19:d7:f5:d5: 62:d4:c9:c6:7f:7d:d5:37:45:58:f4:ae:68:ab:17: 44:f2:ef:9b:bd:af:43:18:79:72:83:c8:9a:99:cf: 66:9d:53:ca:b3:a0:f1:28:2e:2f:58:aa:42:16:53: 22:7a:a4:f0:2d:c3:f7:7f:70:db:2f:5e:bc:26:26: 2c:1e:e7:a0:99:57:23:b6:17:26:f2:5e:f0:cd:8a: c9:b8:66:69:66:d2:41:a8:91:24:a5:e1:1d:d0:06: 08:a5:b6:a2:3b:c6:18:ff:f0:9d:77:a8:47:a2:a2: 60:a9:88:25:26:f4:a1:5a:0f:cb:a4:ab:9a:a2:d3: bc:bf:49:e8:cd:b2:66:b8:92:b3:5a:26:89:9b:35: 34:06:68:09:c7:8f:e3:bf:79:83:a9:4e:e6:45:8d: 22:8d:cf:58:67:ad:c6:56:e0:17:6f:37:c6:06:a0: 1f:ee:47:f2:2a:1f:dc:1e:b7:2b:4e:95:71:be:85: 7f:e1:e6:0a:7e:42:d5:c9:e4:60:61:e7:4f:fb:81: af:b2:fe:2e:0b:f7:55:c7:26:fe:9d:4a:d2:7c:5a: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:56:32:D8:64:79:6A:49:27:C9:B1:0D:60:18:EB:03:87:12:54:8B X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:67:16:bb:ca:df:a6:90:a3:d0:86:df:48:37:31:e2:ad:5d: cf:c3:f8:bc:46:0b:2f:d3:0e:73:61:2c:ed:b2:6c:5f:9a:f9: 0a:b4:2a:9f:81:43:60:b0:32:b7:a3:9c:65:a8:21:14:53:31: c9:38:87:46:9a:38:2f:63:ee:67:f3:f0:db:0a:d1:c1:f6:c7: 53:c1:ab:73:ff:ee:b2:a4:28:1a:20:43:0d:ee:46:51:3d:69: e0:95:d3:97:4d:e7:c0:3c:2f:6f:92:73:72:41:96:a3:9a:4a: d4:fb:27:7f:80:e1:9c:15:b2:b9:bc:36:ed:b5:e5:a0:91:81: a8:41:c1:de:4f:ef:8e:79:57:40:e5:d3:19:cf:7f:ea:01:87: f6:82:bc:85:94:72:d8:6e:ae:cb:76:8d:7b:b3:2c:20:52:e3: b3:c7:0f:a0:39:af:ad:43:2e:2c:c2:e6:9e:31:e2:00:a3:81: d7:64:8e:51:e5:60:db:a4:9d:35:21:6a:26:d7:ed:fa:17:08: 0d:7e:9e:c1:d3:0d:df:99:b7:a8:47:3e:e1:c8:b1:e3:18:30: aa:99:73:7c:d3:81:bc:fd:6f:86:5e:34:ce:e7:d8:47:3d:87: f3:a5:a8:46:57:63:66:9c:0f:e4:aa:fd:5f:3d:29:33:98:4a: 8e:11:6c:1b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUZCOUExMTAvBgNVBAUTKEMzRENEOTVBNzI0QUQ2RTNCOTg3NEM2RTRENkIzOUVC Q0UxNDJDRDQwHhcNMjYwMzI1MDYzOTM1WhcNMjYwNDAxMDYzOTM1WjAYMRYwFAYD VQQDEw02OWMzODMyNy00YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzo66CAcZIJpxH58HBF90BO5QY4NLXyS8VOLKdl4N2MqB/9h/AuOfxhnX9dVi 1MnGf33VN0VY9K5oqxdE8u+bva9DGHlyg8iamc9mnVPKs6DxKC4vWKpCFlMieqTw LcP3f3DbL168JiYsHuegmVcjthcm8l7wzYrJuGZpZtJBqJEkpeEd0AYIpbaiO8YY //Cdd6hHoqJgqYglJvShWg/LpKuaotO8v0nozbJmuJKzWiaJmzU0BmgJx4/jv3mD qU7mRY0ijc9YZ63GVuAXbzfGBqAf7kfyKh/cHrcrTpVxvoV/4eYKfkLVyeRgYedP +4Gvsv4uC/dVxyb+nUrSfFqTgQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDdWMthk eWpJJ8mxDWAY6wOHElSLMB8GA1UdIwQYMBaAFMPc2VpyStbjuYdMbk1rOevOFCzU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkI5QS8yMjdBQzQ4NjQ1 QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1TzVoMHh1VFdzNTY4NFVM TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI5QS8yMjdBQzQ4NjQ1QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi93OXpaV25KSzF1 TzVoMHh1VFdzNTY4NFVMTlEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAbmcWu8rfppCj0IbfSDcx4q1dz8P4vEYLL9MOc2Es7bJsX5r5CrQqn4FDYLAy t6OcZaghFFMxyTiHRpo4L2PuZ/Pw2wrRwfbHU8Grc//usqQoGiBDDe5GUT1p4JXT l03nwDwvb5JzckGWo5pK1Psnf4DhnBWyubw27bXloJGBqEHB3k/vjnlXQOXTGc9/ 6gGH9oK8hZRy2G6uy3aNe7MsIFLjs8cPoDmvrUMuLMLmnjHiAKOB12SOUeVg26Sd NSFqJtft+hcIDX6ewdMN35m3qEc+4cix4xgwqplzfNOBvP1vhl40zufYRz2H86Wo RldjZpwP5Kr9Xz0pM5hKjhFsGw== -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:56 2026 by rpki-client