$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: fqoUH+diRm1Or1A+Dm/5p36/mgS6Qcd6jWHVhYIZet0= Subject key identifier: 07:2E:5F:8F:EF:DB:DA:A8:FD:BE:D2:BD:E3:FE:27:BA:E4:48:7F:AC Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0CFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0CDC Signing time: Tue 24 Mar 2026 18:14:59 +0000 Manifest this update: Tue 24 Mar 2026 18:14:59 +0000 Manifest next update: Tue 31 Mar 2026 18:14:59 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: 41P4BSNSGB1di9nDQGuN6CGPBe0GM4UyTZ7Tvarf9es=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: XeHkER619zIFoX+u6eX7dRCL1/8jXZkWE05+uf+I4wE=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: C2KkFw83+cx2w+Z/qXt6C6L4zz7RactfK1dd4njLIPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 18:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3327 (0xcff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Mar 24 18:14:59 2026 GMT Not After : Mar 31 18:14:59 2026 GMT Subject: CN=69c2d4a3-7212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:c6:d0:07:61:3d:e0:19:24:07:52:d5:b5: 61:32:16:30:65:4d:91:d2:4c:52:ea:aa:4c:de:20: 8f:1a:64:a6:30:26:95:25:d6:c2:e7:0b:c9:e6:2f: 4e:43:7e:16:39:47:8e:01:83:ac:bd:7c:e6:ff:9b: 5f:9e:f8:b8:6a:74:7c:35:b0:c2:4e:fa:2d:55:87: 30:8b:50:dc:37:70:fa:26:d9:3c:65:b2:16:55:8e: 4c:52:d7:57:13:4f:27:34:d6:68:c4:1d:40:52:61: 2c:4e:e9:bd:5a:e1:f3:80:5d:6b:c0:be:0e:e0:d2: e2:ba:ff:a8:e0:ee:a0:90:9a:f6:11:11:5c:e2:3f: 64:a6:48:ba:90:17:7a:79:94:eb:d2:e2:d5:7e:19: 85:9e:19:25:bf:e4:18:f2:8d:4b:97:c6:d8:50:5d: 32:89:43:b5:15:b9:86:42:f7:14:0d:0a:28:8e:dc: 6c:de:53:0d:0b:31:da:a6:e6:04:95:f1:b5:8b:df: 09:a5:4e:bd:4c:d9:8e:45:84:44:77:01:e3:b2:9b: 1d:6c:e6:6d:55:92:5c:d8:cb:ed:93:82:1a:3e:49: dd:e6:68:98:88:ac:ec:21:d7:f3:79:77:45:75:c0: 56:79:17:a8:f6:8d:ac:3f:c6:82:5c:d2:cd:b9:44: 59:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:2E:5F:8F:EF:DB:DA:A8:FD:BE:D2:BD:E3:FE:27:BA:E4:48:7F:AC X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:9b:89:a9:dc:40:4e:aa:64:aa:94:f5:98:3e:d1:f7:b6: 15:04:96:7f:cd:7f:11:33:bd:89:47:d5:c7:c5:51:21:ba:9a: af:c1:69:6e:09:80:5a:01:5c:49:79:81:37:03:fb:50:89:13: 38:11:e1:72:81:07:18:25:a8:f5:a2:8f:c8:44:ce:36:60:7f: 1e:43:13:a9:e4:60:74:d6:60:af:d2:59:70:bb:75:25:dc:31: 64:ee:70:6b:b2:5d:9c:c8:af:b0:5b:81:e5:60:f0:bd:e1:d1: 67:6d:a7:e9:ee:bc:9f:35:65:40:5b:ad:f7:04:13:61:db:3c: 6d:4a:58:21:d5:0b:35:db:a6:21:a8:5c:c4:6d:18:65:24:05: 24:40:ea:ac:40:e1:50:9c:9f:35:cb:61:57:36:e6:01:0a:a8: e2:a4:b5:6e:2c:e2:16:17:b9:86:26:94:5e:f1:85:21:2e:e4: 45:67:8b:b5:cc:aa:f5:8c:16:73:2c:ff:e8:34:bc:96:75:2c: 3b:3a:eb:b1:21:09:43:44:67:5d:df:93:56:0b:e1:9c:25:2e: 8c:aa:94:b2:de:59:08:4a:1a:b4:b8:fa:fd:46:73:6c:bb:90: 82:76:72:b0:ef:12:73:63:14:89:f3:b1:c6:18:f0:8c:c0:87: 38:06:91:c1 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjYwMzI0MTgxNDU5WhcNMjYwMzMxMTgxNDU5WjAYMRYwFAYD VQQDEw02OWMyZDRhMy03MjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe7G0AdhPeAZJAdS1bVhMhYwZU2R0kxS6qpM3iCPGmSmMCaVJdbC5wvJ5i9O Q34WOUeOAYOsvXzm/5tfnvi4anR8NbDCTvotVYcwi1DcN3D6Jtk8ZbIWVY5MUtdX E08nNNZoxB1AUmEsTum9WuHzgF1rwL4O4NLiuv+o4O6gkJr2ERFc4j9kpki6kBd6 eZTr0uLVfhmFnhklv+QY8o1Ll8bYUF0yiUO1FbmGQvcUDQoojtxs3lMNCzHapuYE lfG1i98JpU69TNmORYREdwHjspsdbOZtVZJc2Mvtk4IaPknd5miYiKzsIdfzeXdF dcBWeReo9o2sP8aCXNLNuURZtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAcuX4/v 29qo/b7SveP+J7rkSH+sMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAjMebiancQE6qZKqU9Zg+0fe2FQSWf81/ETO9iUfVx8VRIbqar8FpbgmAWgFc SXmBNwP7UIkTOBHhcoEHGCWo9aKPyETONmB/HkMTqeRgdNZgr9JZcLt1JdwxZO5w a7JdnMivsFuB5WDwveHRZ22n6e68nzVlQFut9wQTYds8bUpYIdULNdumIahcxG0Y ZSQFJEDqrEDhUJyfNcthVzbmAQqo4qS1biziFhe5hiaUXvGFIS7kRWeLtcyq9YwW cyz/6DS8lnUsOzrrsSEJQ0RnXd+TVgvhnCUujKqUst5ZCEoatLj6/UZzbLuQgnZy sO8Sc2MUifOxxhjwjMCHOAaRwQ== -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:21 2026 by rpki-client