$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft File: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft (raw, json) Hash identifier: p4PqmOAuiXh+qgraIQJYT1yLUW5G/QUzwrUEYo9VYGs= Subject key identifier: FE:F1:7E:BD:2B:8A:02:4D:6C:B4:7E:EE:0F:FE:11:53:7A:DB:BD:73 Authority key identifier: 97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 Certificate issuer: /CN=A91DF8DB/serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Certificate serial: 1429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft Manifest number: 141D Signing time: Tue 24 Mar 2026 16:48:02 +0000 Manifest this update: Tue 24 Mar 2026 16:48:02 +0000 Manifest next update: Tue 31 Mar 2026 16:48:02 +0000 Files and hashes: 1: l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl (hash: EueGZ4uqi1yXUYqV17D4gEDAehcedbQ6NVAImVeTWzI=) 2: A6C9934CA74111E88B3EAB2BC4F9AE02.roa (hash: AjTT+lsAXZJ+mpwW3X1wugvMUDDULjBU49kW3fhASOc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5161 (0x1429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF8DB, serialNumber=97D29B0D32455BB5C6F125785F40F5BC2709F7D4 Validity Not Before: Mar 24 16:48:02 2026 GMT Not After : Mar 31 16:48:02 2026 GMT Subject: CN=69c2c042-2c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:9f:8e:46:14:4e:f3:18:f8:ba:a3:53:09: ef:08:75:fa:68:92:fd:af:c0:13:5a:6f:02:56:79: b5:69:b7:e7:65:4c:90:a1:aa:e8:76:b8:49:d2:2c: 27:1f:35:73:e4:9b:b5:de:39:09:cc:38:d9:d0:1f: 0c:5e:dd:ec:8a:95:dd:02:b6:8a:cd:70:1f:fa:3b: 8a:6e:48:53:11:89:bb:83:11:bc:54:66:a3:3f:0d: da:af:6a:79:b6:5e:30:ee:3a:4e:22:82:97:b8:3f: 21:da:79:e7:c8:9a:f3:97:e8:03:63:6f:33:12:25: ff:a7:59:ac:22:ef:81:a8:54:ef:52:49:23:6b:92: 7f:f8:fa:a2:a5:bb:7e:e4:2c:c3:e3:f0:bf:77:49: 79:9d:6c:eb:63:d3:23:a4:1d:39:e2:aa:4b:6e:ab: 37:b0:83:49:1c:82:2f:c0:09:23:77:b2:52:23:41: d7:7d:67:a8:67:67:37:9c:fc:ab:58:99:ed:c1:81: ea:5f:3a:67:a3:14:7d:0d:9e:8c:aa:1d:e2:62:ef: ad:f9:e6:12:bb:42:1a:1f:be:1a:83:93:39:4f:4a: 41:0a:28:b4:61:61:8c:7d:7b:21:93:c7:77:35:29: c5:63:d6:04:6c:f8:f0:00:b3:58:61:89:43:c7:af: 02:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F1:7E:BD:2B:8A:02:4D:6C:B4:7E:EE:0F:FE:11:53:7A:DB:BD:73 X509v3 Authority Key Identifier: keyid:97:D2:9B:0D:32:45:5B:B5:C6:F1:25:78:5F:40:F5:BC:27:09:F7:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF8DB/6579378C993411E8A0373724C4F9AE02/l9KbDTJFW7XG8SV4X0D1vCcJ99Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:08:ab:5a:cf:0e:77:b0:6a:6b:a9:f5:dc:6e:63:5f:7e:fd: 27:6b:96:4e:41:22:d5:14:cb:56:2f:d2:1f:3b:e7:d4:a7:cc: 40:ba:28:a9:c5:b6:2a:4a:e0:63:66:71:45:52:27:7f:3b:1c: 82:cd:e2:92:41:37:6a:b2:11:26:2d:43:ea:3f:9b:66:fb:5e: 2b:8a:b3:af:14:7a:57:37:e7:6f:bf:ef:bc:6e:b9:98:8f:a0: 6f:23:83:54:a9:b2:73:b9:ce:e8:10:22:aa:0b:0e:e2:84:9c: e2:2b:d4:83:3c:5e:14:d5:be:19:de:4b:00:15:d3:ad:42:7f: 1c:e7:62:ce:7c:97:aa:e6:9a:95:1d:e1:5f:25:93:c3:53:c1: 66:44:80:ae:91:32:98:63:3b:79:da:d6:3c:9b:ad:0e:b6:3b: f0:20:77:e3:c2:08:86:21:f0:82:88:f5:af:27:db:c9:99:cf: ea:6f:40:5c:1c:81:f1:ca:50:a9:99:c8:8e:71:c3:39:d2:90: c3:f8:d5:3f:8e:99:7f:03:07:1f:bb:f5:13:84:be:1d:27:14: 75:a2:cb:18:27:ec:44:64:31:2b:59:c5:7b:5d:c8:ba:22:ed: 15:5f:cf:8e:dd:8a:52:6c:e8:db:09:58:8f:12:0f:1c:04:fa: 0f:b0:6f:80 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY4REIxMTAvBgNVBAUTKDk3RDI5QjBEMzI0NTVCQjVDNkYxMjU3ODVGNDBGNUJD MjcwOUY3RDQwHhcNMjYwMzI0MTY0ODAyWhcNMjYwMzMxMTY0ODAyWjAYMRYwFAYD VQQDEw02OWMyYzA0Mi0yYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgSfjkYUTvMY+LqjUwnvCHX6aJL9r8ATWm8CVnm1abfnZUyQoarodrhJ0iwn HzVz5Ju13jkJzDjZ0B8MXt3sipXdAraKzXAf+juKbkhTEYm7gxG8VGajPw3ar2p5 tl4w7jpOIoKXuD8h2nnnyJrzl+gDY28zEiX/p1msIu+BqFTvUkkja5J/+Pqipbt+ 5CzD4/C/d0l5nWzrY9MjpB054qpLbqs3sINJHIIvwAkjd7JSI0HXfWeoZ2c3nPyr WJntwYHqXzpnoxR9DZ6Mqh3iYu+t+eYSu0IaH74ag5M5T0pBCii0YWGMfXshk8d3 NSnFY9YEbPjwALNYYYlDx68CKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFP7xfr0r igJNbLR+7g/+EVN6271zMB8GA1UdIwQYMBaAFJfSmw0yRVu1xvEleF9A9bwnCffU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjhEQi82NTc5Mzc4Qzk5 MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3WEc4U1Y0WDBEMXZDY0o5 OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5S2JEVEpGVzdYRzhTVjRYMEQxdkNjSjk5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjhEQi82NTc5Mzc4Qzk5MzQxMUU4QTAzNzM3MjRDNEY5QUUwMi9sOUtiRFRKRlc3 WEc4U1Y0WDBEMXZDY0o5OVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAlwirWs8Od7Bqa6n13G5jX379J2uWTkEi1RTLVi/SHzvn1KfMQLooqcW2Kkrg Y2ZxRVInfzscgs3ikkE3arIRJi1D6j+bZvteK4qzrxR6Vzfnb7/vvG65mI+gbyOD VKmyc7nO6BAiqgsO4oSc4ivUgzxeFNW+Gd5LABXTrUJ/HOdiznyXquaalR3hXyWT w1PBZkSArpEymGM7edrWPJutDrY78CB348IIhiHwgoj1ryfbyZnP6m9AXByB8cpQ qZnIjnHDOdKQw/jVP46ZfwMHH7v1E4S+HScUdaLLGCfsRGQxK1nFe13IuiLtFV/P jt2KUmzo2wlYjxIPHAT6D7BvgA== -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:53 2026 by rpki-client