$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft File: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft (raw, json) Hash identifier: aYlUGNjGLL70M8WeZFgGaO+TaUJ65tQxc6WsMfrJfYc= Subject key identifier: 33:0D:A1:12:DF:67:4D:98:98:D4:BD:64:CA:D0:27:CD:D7:5C:40:21 Authority key identifier: F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 Certificate issuer: /CN=A91E2695/serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Certificate serial: 15D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft Manifest number: 15C4 Signing time: Tue 24 Mar 2026 16:38:57 +0000 Manifest this update: Tue 24 Mar 2026 16:38:57 +0000 Manifest next update: Tue 31 Mar 2026 16:38:57 +0000 Files and hashes: 1: 9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl (hash: 7uIc9cntfZ/PBcFNhSVKAtIQGEAQmkVp0xNHpQZSr9Y=) 2: 5E5F16A4551811F0B9246E54C4F9AE02.roa (hash: EPqw16UZs4OnmCADVn6Ufam9TmNvvzwwy0aV8LX+wk0=) 3: 6208BAD4499611E8B421BE5CC4F9AE02.roa (hash: TAyyXoTPcbbK7G+yCCqdnjIbOPrO1+rGTob4cAtBF5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 16:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5589 (0x15d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2695, serialNumber=F4CFCA1D660BF161B3F409ADCB0C13C0FA822464 Validity Not Before: Mar 24 16:38:57 2026 GMT Not After : Mar 31 16:38:57 2026 GMT Subject: CN=69c2be21-4764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:20:67:f6:12:4c:bf:85:91:c0:58:be:7c:50: b6:84:aa:64:a1:20:d9:76:67:38:c5:6e:ac:a4:b5: 5c:fb:0f:ef:5c:2e:68:f6:14:54:08:e3:df:f7:7c: f7:7c:89:d1:34:6b:68:95:f5:59:da:b9:da:fc:85: d6:df:8d:7a:e4:35:c2:9c:22:58:e1:ba:20:e1:0b: 98:ef:02:9f:0a:a7:11:99:d3:41:a3:07:97:e2:6f: 1f:2a:47:af:f1:1a:23:b2:5d:f9:09:79:a0:3d:f7: a8:28:e7:e8:80:57:c6:f5:6f:e2:3a:25:75:a8:80: be:7e:8d:e0:07:1c:b5:c1:11:d4:73:b1:ff:88:8f: 90:94:50:65:d0:3d:3f:c1:0d:d3:12:9d:cd:02:b3: 75:d9:c2:3b:3e:a2:c9:3a:c4:2f:6c:b0:52:4f:df: df:52:2b:40:15:c6:d2:97:27:a2:f8:65:27:17:db: ed:bf:98:db:89:b2:d9:89:01:72:98:f6:c2:32:fb: 4d:99:16:d6:04:d1:b6:95:b0:bd:d0:62:1a:6c:ec: b9:71:19:8a:a0:b0:a1:74:83:e3:5d:32:2d:61:6b: 6c:a1:51:e0:01:af:a9:3c:24:58:04:46:82:3f:6b: 6e:f2:47:a8:c2:52:b3:b9:a1:20:de:b9:10:19:03: a6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0D:A1:12:DF:67:4D:98:98:D4:BD:64:CA:D0:27:CD:D7:5C:40:21 X509v3 Authority Key Identifier: keyid:F4:CF:CA:1D:66:0B:F1:61:B3:F4:09:AD:CB:0C:13:C0:FA:82:24:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9M_KHWYL8WGz9AmtywwTwPqCJGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2695/BB87AC4A47F811E880E4F410C4F9AE02/9M_KHWYL8WGz9AmtywwTwPqCJGQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:81:45:af:72:a0:ee:73:7b:58:1d:e4:8d:6f:86:fa:38:ac: 43:d4:4d:18:cc:c1:fc:86:08:a6:17:12:ab:f0:5e:d5:b9:51: 5a:f2:be:9c:cd:0e:cd:81:c7:48:b4:65:08:95:ac:0d:92:c1: 61:e8:7d:9d:0c:59:40:35:44:d0:cd:28:99:4f:60:ef:6f:6a: 56:74:aa:1e:23:d0:fa:1e:12:f4:68:4c:ee:23:3e:9d:d4:b1: c5:a1:4a:e3:7c:ee:f9:28:dc:ab:c6:b0:16:b3:ea:ce:72:47: 8c:3a:24:9e:7c:00:e5:52:b5:26:82:94:42:9c:99:c6:e6:20: 48:8f:a8:be:25:99:fd:29:f0:ae:f7:35:4f:08:17:9d:15:2c: 27:d8:5d:75:55:17:11:fd:5c:61:8b:7c:c0:cc:bc:c8:10:11: 94:79:0b:f2:75:87:a1:f1:d0:29:26:3f:52:47:a6:fd:54:29: 35:fd:12:0d:37:c2:bc:05:be:da:cd:cd:5d:1d:db:09:5d:1f: 41:71:b9:67:25:7e:49:75:22:3f:76:53:f6:4e:d9:1d:6a:3d: 9e:48:44:30:c6:b8:96:4e:b6:63:3f:30:70:a6:e2:c0:a1:6a: 2b:d8:69:4c:e0:4e:78:1e:29:92:a2:2e:1c:8d:31:92:99:19: 8a:8e:9e:32 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICFdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI2OTUxMTAvBgNVBAUTKEY0Q0ZDQTFENjYwQkYxNjFCM0Y0MDlBRENCMEMxM0Mw RkE4MjI0NjQwHhcNMjYwMzI0MTYzODU3WhcNMjYwMzMxMTYzODU3WjAYMRYwFAYD VQQDEw02OWMyYmUyMS00NzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSBn9hJMv4WRwFi+fFC2hKpkoSDZdmc4xW6spLVc+w/vXC5o9hRUCOPf93z3 fInRNGtolfVZ2rna/IXW34165DXCnCJY4bog4QuY7wKfCqcRmdNBoweX4m8fKkev 8Rojsl35CXmgPfeoKOfogFfG9W/iOiV1qIC+fo3gBxy1wRHUc7H/iI+QlFBl0D0/ wQ3TEp3NArN12cI7PqLJOsQvbLBST9/fUitAFcbSlyei+GUnF9vtv5jbibLZiQFy mPbCMvtNmRbWBNG2lbC90GIabOy5cRmKoLChdIPjXTItYWtsoVHgAa+pPCRYBEaC P2tu8keowlKzuaEg3rkQGQOm3QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFDMNoRLf Z02YmNS9ZMrQJ83XXEAhMB8GA1UdIwQYMBaAFPTPyh1mC/Fhs/QJrcsME8D6giRk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjY5NS9CQjg3QUM0QTQ3 RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhXR3o5QW10eXd3VHdQcUNK R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlNX0tIV1lMOFdHejlBbXR5d3dUd1BxQ0pHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjY5NS9CQjg3QUM0QTQ3RjgxMUU4ODBFNEY0MTBDNEY5QUUwMi85TV9LSFdZTDhX R3o5QW10eXd3VHdQcUNKR1EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAMYFFr3Kg7nN7WB3kjW+G+jisQ9RNGMzB/IYIphcSq/Be1blRWvK+nM0OzYHH SLRlCJWsDZLBYeh9nQxZQDVE0M0omU9g729qVnSqHiPQ+h4S9GhM7iM+ndSxxaFK 43zu+Sjcq8awFrPqznJHjDoknnwA5VK1JoKUQpyZxuYgSI+oviWZ/Snwrvc1TwgX nRUsJ9hddVUXEf1cYYt8wMy8yBARlHkL8nWHofHQKSY/Ukem/VQpNf0SDTfCvAW+ 2s3NXR3bCV0fQXG5ZyV+SXUiP3ZT9k7ZHWo9nkhEMMa4lk62Yz8wcKbiwKFqK9hp TOBOeB4pkqIuHI0xkpkZio6eMg== -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:07 2026 by rpki-client