$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft File: T-09NyGnirIEhs2vNKOuaRfYfL4.mft (raw, json) Hash identifier: UEiAekutSUrr6eThb6vNow81kjbAGdI5EFkiNlOIqB4= Subject key identifier: 6D:F4:70:06:E3:AB:D9:0D:79:5A:E0:68:AC:16:71:F7:72:45:B3:45 Authority key identifier: 4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE Certificate issuer: /CN=A91D8F57/serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Certificate serial: 0D19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft Manifest number: 0D03 Signing time: Tue 24 Mar 2026 17:57:45 +0000 Manifest this update: Tue 24 Mar 2026 17:57:45 +0000 Manifest next update: Tue 31 Mar 2026 17:57:45 +0000 Files and hashes: 1: T-09NyGnirIEhs2vNKOuaRfYfL4.crl (hash: BTIz0R/GK0YKV3Yl9jYIfXiqJGpIgCtuDz+vwGVur80=) 2: 21997AB0FEBC11E9B0463650C4F9AE02.roa (hash: JwOjYA/Jw9dwtNja6OhiUESlnckDLqCGhIODnzf58NE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3353 (0xd19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8F57, serialNumber=4FED3D3721A78AB20486CDAF34A3AE6917D87CBE Validity Not Before: Mar 24 17:57:45 2026 GMT Not After : Mar 31 17:57:45 2026 GMT Subject: CN=69c2d099-4cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:d7:83:19:68:8c:ab:18:c4:96:e3:07:ed:ec: 61:35:2d:72:5a:8f:b5:66:bb:3e:e6:28:a5:af:76: 49:45:2d:85:9f:85:49:15:7e:91:e9:ea:79:ca:2d: 06:3d:22:2f:ea:21:49:6e:54:65:77:8d:21:a2:4a: c0:d1:9b:f7:0d:89:19:2b:64:52:d9:1c:1a:06:97: 17:47:26:a2:70:3e:ec:dd:ab:87:88:b4:c4:37:d2: 9f:dd:68:f5:ef:f8:72:3f:e4:6c:93:ed:aa:2f:da: 35:17:14:44:ef:30:ab:d6:f8:a6:b3:e6:e4:a7:d8: b6:db:ac:96:5b:c5:2a:45:cb:37:1b:80:c7:a4:2f: f1:5e:02:91:71:d7:09:96:e2:82:82:49:25:d1:82: 6e:64:1e:aa:2f:77:4d:7c:bf:51:07:eb:d5:4b:12: 34:6c:ad:d7:d7:8b:70:78:b1:04:65:96:67:48:bb: 9a:b2:18:8e:1d:9c:c1:d2:f8:50:9a:d5:b9:8a:90: c4:fa:e6:d1:1e:e0:3c:e4:a5:d8:70:43:5e:65:eb: 6f:f0:6e:35:91:41:e8:f1:e7:37:e4:24:b1:e4:d5: 5b:e7:37:35:b4:75:e9:30:f0:72:18:53:87:76:91: b8:ff:1d:2d:63:48:f6:ab:06:ff:d7:b5:fa:c5:66: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:70:06:E3:AB:D9:0D:79:5A:E0:68:AC:16:71:F7:72:45:B3:45 X509v3 Authority Key Identifier: keyid:4F:ED:3D:37:21:A7:8A:B2:04:86:CD:AF:34:A3:AE:69:17:D8:7C:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T-09NyGnirIEhs2vNKOuaRfYfL4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8F57/4C59F966FEBA11E99ED9824CC4F9AE02/T-09NyGnirIEhs2vNKOuaRfYfL4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:2c:76:88:7f:eb:c0:58:d8:c6:7b:7e:2c:f0:f6:30:24:b2: 81:3d:ad:e3:fc:b9:4c:51:b4:73:72:85:ee:03:e9:c5:8c:2d: b2:37:a2:75:f4:ae:4b:93:41:41:be:bf:c5:48:cc:7c:c8:c1: 2a:fd:6d:ca:95:39:0a:80:20:9b:a7:02:6a:89:db:2a:11:45: 11:ab:b3:55:83:89:bc:9d:96:ef:b5:dc:05:a0:f7:2c:39:a2: 38:e7:b2:19:56:2d:0e:30:99:32:6a:d8:47:7f:4c:79:ab:64: 85:bc:4d:45:8e:4a:fe:ac:9b:50:d9:98:60:e4:23:15:e5:17: 5d:60:0a:a2:1d:a9:ad:b1:fa:cc:91:e0:56:e0:56:f8:b0:86: 7c:a7:24:cb:bf:9a:26:54:09:d5:d7:47:95:56:cd:3d:97:a8: 2a:6b:c2:3f:94:d9:77:53:b7:fd:94:49:72:dd:78:0f:a3:83: 07:fa:dd:cc:32:80:f0:d3:c2:5b:60:81:63:18:0a:67:08:3a: 5e:0b:61:ce:a5:b8:8d:06:5a:8e:ec:bf:38:d2:15:d8:f8:6e: 88:15:c8:f4:2b:2b:ad:26:87:5e:94:3a:08:99:5e:8d:67:6c: 41:d6:50:81:53:9f:9e:6d:07:95:44:2b:bd:14:13:f6:98:5b: 41:f7:4e:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhGNTcxMTAvBgNVBAUTKDRGRUQzRDM3MjFBNzhBQjIwNDg2Q0RBRjM0QTNBRTY5 MTdEODdDQkUwHhcNMjYwMzI0MTc1NzQ1WhcNMjYwMzMxMTc1NzQ1WjAYMRYwFAYD VQQDEw02OWMyZDA5OS00Y2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/NeDGWiMqxjEluMH7exhNS1yWo+1Zrs+5iilr3ZJRS2Fn4VJFX6R6ep5yi0G PSIv6iFJblRld40hokrA0Zv3DYkZK2RS2RwaBpcXRyaicD7s3auHiLTEN9Kf3Wj1 7/hyP+Rsk+2qL9o1FxRE7zCr1vims+bkp9i226yWW8UqRcs3G4DHpC/xXgKRcdcJ luKCgkkl0YJuZB6qL3dNfL9RB+vVSxI0bK3X14tweLEEZZZnSLuashiOHZzB0vhQ mtW5ipDE+ubRHuA85KXYcENeZetv8G41kUHo8ec35CSx5NVb5zc1tHXpMPByGFOH dpG4/x0tY0j2qwb/17X6xWbbswIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG30cAbj q9kNeVrgaKwWcfdyRbNFMB8GA1UdIwQYMBaAFE/tPTchp4qyBIbNrzSjrmkX2Hy+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEY1Ny80QzU5Rjk2NkZF QkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmlySUVoczJ2TktPdWFSZllm TDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1QtMDlOeUduaXJJRWhzMnZOS091YVJmWWZMNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEY1Ny80QzU5Rjk2NkZFQkExMUU5OUVEOTgyNENDNEY5QUUwMi9ULTA5TnlHbmly SUVoczJ2TktPdWFSZllmTDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAzSx2iH/rwFjYxnt+LPD2MCSygT2t4/y5TFG0c3KF7gPpxYwtsjeidfSuS5NB Qb6/xUjMfMjBKv1typU5CoAgm6cCaonbKhFFEauzVYOJvJ2W77XcBaD3LDmiOOey GVYtDjCZMmrYR39MeatkhbxNRY5K/qybUNmYYOQjFeUXXWAKoh2prbH6zJHgVuBW +LCGfKcky7+aJlQJ1ddHlVbNPZeoKmvCP5TZd1O3/ZRJct14D6ODB/rdzDKA8NPC W2CBYxgKZwg6XgthzqW4jQZajuy/ONIV2PhuiBXI9CsrrSaHXpQ6CJlejWdsQdZQ gVOfnm0HlUQrvRQT9phbQfdO5Q== -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:49 2026 by rpki-client