$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft File: x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft (raw, json) Hash identifier: 9lc/lqB5WZZtxmvk9N1Rm/CU70IxT+gn8uySgW75BoQ= Subject key identifier: 4C:5D:F8:96:F8:CB:21:8B:A6:4F:B8:C4:6A:B8:53:05:BC:F2:4D:B6 Authority key identifier: C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD Certificate issuer: /CN=A91D8BB1/serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft Manifest number: 9C Signing time: Wed 25 Mar 2026 06:36:27 +0000 Manifest this update: Wed 25 Mar 2026 06:36:26 +0000 Manifest next update: Wed 01 Apr 2026 06:36:26 +0000 Files and hashes: 1: x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl (hash: rSlCzn86QWKyL1zs2Gx5Qhs0suKWyRbi8c2xrr5gC2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:36:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8BB1, serialNumber=C7F02837D245CB8FABCD4741CFA2B4A5A2F73EAD Validity Not Before: Mar 25 06:36:26 2026 GMT Not After : Apr 1 06:36:26 2026 GMT Subject: CN=69c3826a-5633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fc:88:7a:30:b6:a8:24:70:60:67:46:bb:b8: 15:5d:35:c9:31:63:28:e1:48:f5:de:c5:4f:74:0d: 36:f6:da:1d:89:8b:f6:99:dd:1f:04:e8:ac:d4:66: 3f:3f:de:85:5e:b1:38:f9:7c:95:88:3a:7b:ae:67: 22:f3:5a:5b:7b:61:a6:bc:e3:49:c5:82:7f:84:02: d4:ec:77:00:84:a9:e3:01:5a:93:f2:4d:4a:58:44: 22:00:fe:4f:3b:8e:5c:44:d0:3b:c3:d2:51:66:3c: 92:cd:a9:76:ce:21:fe:cb:ee:ac:7d:d9:92:73:23: cf:bc:86:16:eb:c1:9f:4c:d4:90:98:8a:f6:a4:da: ea:13:b4:ae:7d:e9:4a:f7:d3:02:a4:f1:25:70:a9: e1:b2:e3:1e:bc:76:04:b4:ee:8b:32:62:46:1c:93: 64:9c:63:0a:59:9a:39:03:af:68:a0:67:03:8a:7c: cb:da:ac:70:9a:bd:87:39:ba:62:bf:62:51:f7:45: 56:0c:81:c1:26:65:87:01:04:33:c1:5f:e0:6d:94: b5:63:fe:f3:80:65:74:25:c4:5a:2e:7d:8c:5e:18: 29:23:da:2c:75:28:47:34:22:22:99:bb:e2:87:cb: 1f:b4:8a:0a:40:34:2e:17:01:4d:7e:00:63:bd:ce: 83:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5D:F8:96:F8:CB:21:8B:A6:4F:B8:C4:6A:B8:53:05:BC:F2:4D:B6 X509v3 Authority Key Identifier: keyid:C7:F0:28:37:D2:45:CB:8F:AB:CD:47:41:CF:A2:B4:A5:A2:F7:3E:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x_AoN9JFy4-rzUdBz6K0paL3Pq0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/5AD769B03D2511F080C48955C4F9AE02/x_AoN9JFy4-rzUdBz6K0paL3Pq0.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:0f:28:4d:dc:0a:22:60:d9:cd:37:62:ce:93:50:44:96:4e: 3d:6f:bb:e7:50:aa:09:f4:24:a5:28:00:29:df:c6:5a:6b:1f: a5:12:ba:27:d8:26:a6:25:cb:2b:fe:b4:67:2b:f2:aa:f9:2a: 55:01:83:ef:1d:20:f2:36:89:4c:e3:ac:90:33:39:4d:22:f6: b0:50:74:58:d9:73:e3:e1:a6:82:2a:91:b3:58:3d:e2:b8:59: b4:30:6e:2b:26:ef:95:37:ae:cc:05:c4:91:e2:d3:7e:f0:d2: 22:4b:74:ed:75:67:e5:09:3e:79:bd:6f:c7:fe:93:ce:42:db: 1a:ac:31:90:0d:fb:9a:93:77:e7:98:eb:64:1a:05:04:e2:0b: 7b:b8:e2:bd:d8:ee:b7:56:fd:8c:b3:01:84:fe:7c:59:81:49: d1:67:de:82:5c:7a:93:d1:cd:19:6a:c5:f0:d2:90:55:47:23: 48:8c:9f:ef:93:48:a1:40:24:d6:55:e0:50:13:3b:ae:f5:c3: b2:dd:64:66:de:79:b2:96:89:02:98:e5:59:a9:b0:25:70:a8: 00:cb:37:dd:25:49:bf:94:97:81:bf:dd:4b:68:1c:ff:fb:5c: 8f:c9:69:d9:51:0f:b4:36:5b:aa:2d:42:ae:f2:7c:30:30:af: 24:9c:ef:fb -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhCQjExMTAvBgNVBAUTKEM3RjAyODM3RDI0NUNCOEZBQkNENDc0MUNGQTJCNEE1 QTJGNzNFQUQwHhcNMjYwMzI1MDYzNjI2WhcNMjYwNDAxMDYzNjI2WjAYMRYwFAYD VQQDEw02OWMzODI2YS01NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvyIejC2qCRwYGdGu7gVXTXJMWMo4Uj13sVPdA029todiYv2md0fBOis1GY/ P96FXrE4+XyViDp7rmci81pbe2GmvONJxYJ/hALU7HcAhKnjAVqT8k1KWEQiAP5P O45cRNA7w9JRZjySzal2ziH+y+6sfdmScyPPvIYW68GfTNSQmIr2pNrqE7SufelK 99MCpPElcKnhsuMevHYEtO6LMmJGHJNknGMKWZo5A69ooGcDinzL2qxwmr2HObpi v2JR90VWDIHBJmWHAQQzwV/gbZS1Y/7zgGV0JcRaLn2MXhgpI9osdShHNCIimbvi h8sftIoKQDQuFwFNfgBjvc6D5wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFExd+Jb4 yyGLpk+4xGq4UwW88k22MB8GA1UdIwQYMBaAFMfwKDfSRcuPq81HQc+itKWi9z6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEJCMS81QUQ3NjlCMDNE MjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0LXJ6VWRCejZLMHBhTDNQ cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hfQW9OOUpGeTQtcnpVZEJ6NkswcGFMM1BxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEJCMS81QUQ3NjlCMDNEMjUxMUYwODBDNDg5NTVDNEY5QUUwMi94X0FvTjlKRnk0 LXJ6VWRCejZLMHBhTDNQcTAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlw8oTdwKImDZzTdizpNQRJZOPW+751CqCfQkpSgAKd/GWmsfpRK6J9gmpiXL K/60ZyvyqvkqVQGD7x0g8jaJTOOskDM5TSL2sFB0WNlz4+GmgiqRs1g94rhZtDBu KybvlTeuzAXEkeLTfvDSIkt07XVn5Qk+eb1vx/6TzkLbGqwxkA37mpN355jrZBoF BOILe7jivdjut1b9jLMBhP58WYFJ0Wfeglx6k9HNGWrF8NKQVUcjSIyf75NIoUAk 1lXgUBM7rvXDst1kZt55spaJApjlWamwJXCoAMs33SVJv5SXgb/dS2gc//tcj8lp 2VEPtDZbqi1CrvJ8MDCvJJzv+w== -----END CERTIFICATE-----Generated at Fri Mar 27 01:59:01 2026 by rpki-client