$ rpki-client -vvf rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft File: P9OJWVL9hJqXvBEkdJUChMaGhkU.mft (raw, json) Hash identifier: oOI7Tx8dzhwpccx8mOyrx9mx7Pzbl5uaeCRxem5aZTE= Subject key identifier: F5:98:B7:04:B2:CD:32:FF:54:5C:24:E4:1B:94:41:BB:11:D7:1B:E5 Authority key identifier: 3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 Certificate issuer: /CN=A91C609A/serialNumber=3FD3895952FD849A97BC112474950284C6868645 Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft Manifest number: 0857 Signing time: Tue 24 Mar 2026 20:32:26 +0000 Manifest this update: Tue 24 Mar 2026 20:32:25 +0000 Manifest next update: Tue 31 Mar 2026 20:32:25 +0000 Files and hashes: 1: P9OJWVL9hJqXvBEkdJUChMaGhkU.crl (hash: zRp2sl/hFlSwTcj3gnj6BfyVvdo+mekSbwdjGa19O5I=) 2: A84FB264FD7011EAA1DF3534C4F9AE02.roa (hash: amf5yXNl2Dgr3AOxZkSrfGo/rK5Q2TPmeviiMZD4ZqE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C609A, serialNumber=3FD3895952FD849A97BC112474950284C6868645 Validity Not Before: Mar 24 20:32:25 2026 GMT Not After : Mar 31 20:32:25 2026 GMT Subject: CN=69c2f4d9-5060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:86:2c:3c:08:46:8b:fa:58:f8:69:5f:cd:1b: 68:9e:72:9b:35:60:c8:31:eb:d3:a4:d5:2f:a1:43: 93:dd:18:3e:7b:f1:15:36:9d:3f:fe:5c:28:00:54: 4b:70:3a:58:6a:87:4a:e7:00:97:24:f7:6f:10:78: 20:de:5a:7d:d1:aa:38:f4:48:71:a6:79:30:1b:dc: 83:e2:db:1b:43:2d:98:95:7b:05:d8:c6:33:48:0c: 26:48:b4:3f:b3:a1:13:21:da:1a:b2:bc:da:dc:a9: f1:42:ed:9a:20:ac:6c:a9:40:dd:96:92:30:2a:8b: 9e:1e:da:cb:36:a0:ff:8e:31:38:50:82:5a:10:6a: 83:7b:ea:aa:12:02:5c:8c:b4:6c:60:29:55:5e:97: 4b:ad:87:28:c7:c7:f8:b1:a6:3d:83:c6:8b:0e:79: 8c:56:b8:8a:a9:36:3d:20:eb:b4:ed:88:0e:6d:dc: 49:27:e8:90:89:d6:f6:26:84:0c:14:cd:80:a0:23: bc:1f:cf:f7:73:7e:c5:1b:06:03:fa:53:c7:3f:c6: 04:cf:78:51:2b:b7:57:34:13:87:6c:3a:ba:7c:28: 0d:cd:7b:b3:e5:8e:4f:01:3a:7a:80:f7:d0:ce:2a: a1:d4:6a:f6:05:51:3e:ec:a5:ed:91:dd:35:3f:e0: 59:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:98:B7:04:B2:CD:32:FF:54:5C:24:E4:1B:94:41:BB:11:D7:1B:E5 X509v3 Authority Key Identifier: keyid:3F:D3:89:59:52:FD:84:9A:97:BC:11:24:74:95:02:84:C6:86:86:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P9OJWVL9hJqXvBEkdJUChMaGhkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C609A/A37AE926FD6F11EA8E815E33C4F9AE02/P9OJWVL9hJqXvBEkdJUChMaGhkU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:d6:f3:82:4a:d8:13:6e:48:40:3c:5d:ed:38:af:ae:fa:71: 4f:fd:e6:b8:4d:7c:a7:5c:e7:cc:7d:19:fd:87:d3:66:ef:ac: 8c:dd:37:a8:09:d2:d2:d9:af:16:50:14:6e:b5:b3:0f:32:b3: 25:a5:0b:f6:1f:c4:02:db:15:62:34:95:d7:11:2d:48:ea:0e: bb:5e:d7:79:d9:4e:18:33:9a:17:8b:ed:02:5e:54:fe:a0:f8: 3a:26:3e:30:5d:27:6f:08:39:f0:67:2b:81:bb:4c:98:18:63: 38:78:7e:b8:e8:4b:fe:6a:96:a6:d4:99:55:64:27:ab:9a:28: db:ae:9b:5c:f7:e0:4c:9e:76:2c:cf:45:49:21:b5:43:67:be: 97:4d:63:b9:53:6c:0b:e9:27:f7:e2:b3:67:21:b8:0f:b3:98: 3b:ff:39:a2:3b:c4:18:74:a1:17:25:79:4e:83:54:e0:5b:a5: da:d9:50:84:4c:12:1e:38:94:f1:e2:35:de:60:08:26:cc:c3: a7:a1:a3:6d:8d:47:bd:7d:d0:e7:f8:99:9b:44:05:45:64:38: ad:86:4f:6c:74:f4:1a:4b:96:d1:e2:d9:ff:bd:96:df:87:79: 46:5b:44:15:e4:76:22:40:16:0e:a9:27:5e:33:47:b3:45:ab: cb:58:66:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwOUExMTAvBgNVBAUTKDNGRDM4OTU5NTJGRDg0OUE5N0JDMTEyNDc0OTUwMjg0 QzY4Njg2NDUwHhcNMjYwMzI0MjAzMjI1WhcNMjYwMzMxMjAzMjI1WjAYMRYwFAYD VQQDEw02OWMyZjRkOS01MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIYsPAhGi/pY+GlfzRtonnKbNWDIMevTpNUvoUOT3Rg+e/EVNp0//lwoAFRL cDpYaodK5wCXJPdvEHgg3lp90ao49EhxpnkwG9yD4tsbQy2YlXsF2MYzSAwmSLQ/ s6ETIdoasrza3KnxQu2aIKxsqUDdlpIwKoueHtrLNqD/jjE4UIJaEGqDe+qqEgJc jLRsYClVXpdLrYcox8f4saY9g8aLDnmMVriKqTY9IOu07YgObdxJJ+iQidb2JoQM FM2AoCO8H8/3c37FGwYD+lPHP8YEz3hRK7dXNBOHbDq6fCgNzXuz5Y5PATp6gPfQ ziqh1Gr2BVE+7KXtkd01P+BZmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPWYtwSy zTL/VFwk5BuUQbsR1xvlMB8GA1UdIwQYMBaAFD/TiVlS/YSal7wRJHSVAoTGhoZF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA5QS9BMzdBRTkyNkZE NkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhKcVh2QkVrZEpVQ2hNYUdo a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A5T0pXVkw5aEpxWHZCRWtkSlVDaE1hR2hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjA5QS9BMzdBRTkyNkZENkYxMUVBOEU4MTVFMzNDNEY5QUUwMi9QOU9KV1ZMOWhK cVh2QkVrZEpVQ2hNYUdoa1UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVNbzgkrYE25IQDxd7TivrvpxT/3muE18p1znzH0Z/YfTZu+sjN03qAnS0tmv FlAUbrWzDzKzJaUL9h/EAtsVYjSV1xEtSOoOu17XedlOGDOaF4vtAl5U/qD4OiY+ MF0nbwg58GcrgbtMmBhjOHh+uOhL/mqWptSZVWQnq5oo266bXPfgTJ52LM9FSSG1 Q2e+l01juVNsC+kn9+KzZyG4D7OYO/85ojvEGHShFyV5ToNU4Ful2tlQhEwSHjiU 8eI13mAIJszDp6GjbY1HvX3Q5/iZm0QFRWQ4rYZPbHT0GkuW0eLZ/72W34d5RltE FeR2IkAWDqknXjNHs0Wry1hmMg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:26:35 2026 by rpki-client