$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft File: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft (raw, json) Hash identifier: lvfCrCge2Y2QUHT7TKtTxXi57XTx0K3vlPQd0obQ5E8= Subject key identifier: C5:D1:3C:B8:DD:B2:9B:39:B3:EB:85:C9:0C:03:A5:96:55:E1:F7:3E Authority key identifier: 3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E Certificate issuer: /CN=A91DD3FB/serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Certificate serial: 084C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft Manifest number: 0844 Signing time: Thu 26 Mar 2026 20:42:40 +0000 Manifest this update: Thu 26 Mar 2026 20:42:40 +0000 Manifest next update: Thu 02 Apr 2026 20:42:40 +0000 Files and hashes: 1: PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl (hash: f6rlOpHIP15h1hUCim7fscctlEy3BvrVEOIJhBVhbSE=) 2: 2037569602BD11EBB333DA0FC4F9AE02.roa (hash: ttDGmX8Wz8ITP3sU4vGhTPNCup0+jAVIOIBp2YmhCbk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD3FB, serialNumber=3D1F7FB146410A3C335B33C4982A73638BE5409E Validity Not Before: Mar 26 20:42:40 2026 GMT Not After : Apr 2 20:42:40 2026 GMT Subject: CN=69c59a40-f492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:77:06:22:86:13:29:ec:3e:2b:5b:28:ab:1d: 4f:a9:f1:00:b1:44:5d:91:44:d1:56:1b:47:bf:3f: a1:af:e3:38:e6:0e:72:9b:a4:49:59:a4:4a:ab:bd: 7e:13:3c:58:c4:11:d8:11:79:35:c3:ed:c8:04:0e: 7a:63:75:84:16:c9:cc:ea:ac:e4:39:2d:62:60:f2: 5f:76:03:1b:7c:90:50:bb:f9:73:fe:a4:27:f4:ae: 9d:21:42:cf:31:0d:85:8a:1f:52:11:48:1d:75:24: 6b:a2:56:24:db:cc:8c:49:23:9f:a9:82:97:2c:fb: 6a:5e:c8:30:f3:55:38:e9:23:bd:5c:7b:81:e5:6f: a9:cc:34:7f:06:69:8c:75:0a:b7:ff:86:ac:f5:ed: 57:00:ad:e8:5d:3a:55:8a:4e:7d:b8:c5:33:f0:4b: cb:ef:b5:b3:ea:af:57:99:ba:24:d4:b4:78:cf:e4: ca:67:5e:ff:b0:89:10:ef:48:b1:9c:3e:99:74:6a: 0d:a8:49:d6:ca:a9:20:83:b0:31:45:fb:6e:84:93: 6e:33:6a:b4:a4:55:5d:ac:55:c5:5e:6e:08:e5:9e: eb:fd:96:b6:ec:fd:a7:8e:c9:ff:e3:4c:46:1b:e0: 3b:5c:25:a6:28:65:34:9d:35:d8:e0:28:7d:de:7b: 09:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:3C:B8:DD:B2:9B:39:B3:EB:85:C9:0C:03:A5:96:55:E1:F7:3E X509v3 Authority Key Identifier: keyid:3D:1F:7F:B1:46:41:0A:3C:33:5B:33:C4:98:2A:73:63:8B:E5:40:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD3FB/4212BC9E02BB11EBB3D4040BC4F9AE02/PR9_sUZBCjwzWzPEmCpzY4vlQJ4.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:6a:34:45:ac:99:38:9b:63:0e:11:1e:5d:ae:40:4c:c4:1e: bc:55:ba:a4:a5:58:95:78:fa:99:59:78:67:c4:b0:b6:aa:ff: b9:46:8b:3b:67:bf:7e:96:4c:e5:33:74:08:7f:3b:4d:fb:a9: bc:69:77:d2:e7:2e:b1:35:c9:c6:50:a0:6c:4b:95:e6:0d:2f: 7e:29:23:af:89:ad:1c:68:a1:a4:94:a5:98:e5:7b:46:7c:27: 79:a7:82:79:0b:ef:b2:f1:9b:4e:63:1e:bd:ec:74:76:64:81: 14:29:fd:36:34:71:b3:3f:7f:bd:5a:cb:4a:8f:15:0b:25:0a: 3e:d0:08:0f:03:14:5a:39:63:59:a9:f0:35:ce:44:b8:b8:ff: b6:4d:97:53:2b:0e:59:df:74:27:e4:8b:1a:63:93:af:49:5e: 4a:17:7d:a5:68:fa:a2:37:9e:8e:64:b3:27:a3:17:2e:a8:f4: 91:3c:29:92:26:85:ef:55:9b:67:30:d2:8b:fe:4f:ed:98:23: 55:54:ec:e0:87:64:eb:cf:a3:6a:f1:aa:16:c1:d4:c2:c5:0e: ea:51:9b:7e:8e:53:04:fe:40:40:a6:b7:cb:ea:0e:78:87:6f: 3f:ad:f8:a3:4f:7c:07:bf:fe:1a:80:cb:9f:4d:23:dc:6f:8e: 18:17:c2:ab -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzRkIxMTAvBgNVBAUTKDNEMUY3RkIxNDY0MTBBM0MzMzVCMzNDNDk4MkE3MzYz OEJFNTQwOUUwHhcNMjYwMzI2MjA0MjQwWhcNMjYwNDAyMjA0MjQwWjAYMRYwFAYD VQQDEw02OWM1OWE0MC1mNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3cGIoYTKew+K1soqx1PqfEAsURdkUTRVhtHvz+hr+M45g5ym6RJWaRKq71+ EzxYxBHYEXk1w+3IBA56Y3WEFsnM6qzkOS1iYPJfdgMbfJBQu/lz/qQn9K6dIULP MQ2Fih9SEUgddSRrolYk28yMSSOfqYKXLPtqXsgw81U46SO9XHuB5W+pzDR/BmmM dQq3/4as9e1XAK3oXTpVik59uMUz8EvL77Wz6q9Xmbok1LR4z+TKZ17/sIkQ70ix nD6ZdGoNqEnWyqkgg7AxRftuhJNuM2q0pFVdrFXFXm4I5Z7r/Za27P2njsn/40xG G+A7XCWmKGU0nTXY4Ch93nsJawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMXRPLjd sps5s+uFyQwDpZZV4fc+MB8GA1UdIwQYMBaAFD0ff7FGQQo8M1szxJgqc2OL5UCe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDNGQi80MjEyQkM5RTAy QkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNqd3pXelBFbUNwelk0dmxR SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BSOV9zVVpCQ2p3eld6UEVtQ3B6WTR2bFFKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDNGQi80MjEyQkM5RTAyQkIxMUVCQjNENDA0MEJDNEY5QUUwMi9QUjlfc1VaQkNq d3pXelBFbUNwelk0dmxRSjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAc2o0RayZOJtjDhEeXa5ATMQevFW6pKVYlXj6mVl4Z8Swtqr/uUaLO2e/fpZM 5TN0CH87TfupvGl30ucusTXJxlCgbEuV5g0vfikjr4mtHGihpJSlmOV7RnwneaeC eQvvsvGbTmMevex0dmSBFCn9NjRxsz9/vVrLSo8VCyUKPtAIDwMUWjljWanwNc5E uLj/tk2XUysOWd90J+SLGmOTr0leShd9pWj6ojeejmSzJ6MXLqj0kTwpkiaF71Wb ZzDSi/5P7ZgjVVTs4Idk68+javGqFsHUwsUO6lGbfo5TBP5AQKa3y+oOeIdvP634 o098B7/+GoDLn00j3G+OGBfCqw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:39 2026 by rpki-client