$ rpki-client -vvf rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft File: SslcipdeTPMQhCyVVkBRdT3rAok.mft (raw, json) Hash identifier: sscSqWa7vk4HLNa03DMuRm5L2lvlae2pl+8nGy41fd0= Subject key identifier: 5C:88:80:7B:7B:49:60:DD:6C:48:FE:4A:A2:C6:9A:DA:17:24:4A:A6 Authority key identifier: 4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 Certificate issuer: /CN=A9110D07/serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Certificate serial: 0210 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft Manifest number: 01E1 Signing time: Fri 13 Mar 2026 03:06:01 +0000 Manifest this update: Fri 13 Mar 2026 03:06:00 +0000 Manifest next update: Fri 20 Mar 2026 03:06:00 +0000 Files and hashes: 1: SslcipdeTPMQhCyVVkBRdT3rAok.crl (hash: cJJ/2WSDcEY/cuWwRbixcEwNwv1MK9lhdxdGvqCzWbU=) 2: CDF495A4E47D11EFAFC6496FC4F9AE02.roa (hash: NLqzgNFavgTlNRmtQJjQn4BF1LQ5ql0PYZJVK2eWqBQ=) 3: 5B66C6FEB4DB11F0B3DC6D7BC4F9AE02.roa (hash: ByWsIE/4rVUD5qRgH7zOnv47Eu0MEqBdDSj3mKfG9BU=) 4: C93C3BD2BF1211F0825A8B67C4F9AE02.roa (hash: n9/IQR0BwLZbi9yJcCTUnntLY2aytZXC8mDV+WP0G4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 03:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 528 (0x210) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110D07, serialNumber=4AC95C8A975E4CF310842C95564051753DEB0289 Validity Not Before: Mar 13 03:06:00 2026 GMT Not After : Mar 20 03:06:00 2026 GMT Subject: CN=69b37f19-8a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:b4:10:43:03:b7:0b:d6:a6:c4:17:8f:4d: 29:28:d9:6c:58:62:f8:9f:7b:bc:40:2e:bb:d6:27: 70:82:de:6f:84:9a:fe:ac:92:aa:4e:07:7b:be:6d: 2f:a1:bc:9b:37:73:e0:a3:0c:45:22:48:dc:9d:b2: 29:39:84:b9:14:24:cc:72:6d:9c:ed:5e:17:1c:e3: 0c:c5:52:87:e6:e6:74:d7:70:2f:f3:1b:d7:83:84: ac:1f:b6:ff:f3:4b:98:e7:8a:32:04:f2:54:bf:d9: 2b:05:dc:92:13:18:dd:a0:8a:45:69:7a:0a:3c:18: f2:da:19:54:90:a6:45:63:c1:a6:a2:ea:62:9c:fa: 9d:04:b0:dd:e8:8f:b8:e1:98:11:94:cd:1e:07:a6: b9:9b:9c:96:16:50:67:7c:93:6a:d1:d9:2c:3b:45: 8a:c1:94:25:3d:2b:ea:f6:4c:61:85:44:82:59:e7: 80:ee:83:06:80:c8:8b:4e:74:6c:c4:fc:e7:58:bb: 50:e1:22:1c:3c:8e:cc:e4:2d:7b:18:ce:8e:08:4a: 6c:40:99:f8:01:f9:19:93:c0:20:80:f5:b9:8c:24: e2:d9:a5:33:6e:73:6b:c2:83:9b:d8:9a:ff:ac:d9: 39:32:6e:48:3c:40:90:5b:46:37:3d:bf:87:be:06: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:88:80:7B:7B:49:60:DD:6C:48:FE:4A:A2:C6:9A:DA:17:24:4A:A6 X509v3 Authority Key Identifier: keyid:4A:C9:5C:8A:97:5E:4C:F3:10:84:2C:95:56:40:51:75:3D:EB:02:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SslcipdeTPMQhCyVVkBRdT3rAok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110D07/D3E889D48E7F11EE8E97B484C4F9AE02/SslcipdeTPMQhCyVVkBRdT3rAok.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:88:00:21:9a:d3:f3:83:ca:dd:d6:ed:25:67:fa:33:55:2e: c8:83:f8:a0:fd:a1:0f:3b:fb:73:af:a3:1e:57:e1:47:a8:1f: 5d:b0:b7:97:4c:a2:bd:6c:58:2b:8a:8e:14:ed:6f:27:76:ef: ea:24:49:27:f1:ba:76:2a:e0:4b:c0:21:12:99:c2:cf:9c:44: be:84:81:ee:66:f9:f2:d9:7f:81:57:79:d3:32:e8:70:b0:e0: 2e:fa:4c:06:e0:f5:c1:8d:60:a1:47:8f:3c:d1:0e:9c:fc:2d: 91:99:b4:e6:88:a3:17:10:c7:a9:4f:35:e9:f2:54:3c:bc:94: 5b:c8:9b:69:1c:ab:e1:5f:d9:34:82:13:44:ef:62:9c:03:0c: 8c:19:18:cb:5d:35:3b:ce:0c:8a:b6:b3:be:aa:43:2d:eb:30: b1:8e:ac:23:be:b0:b5:46:08:c1:5a:fa:4a:bc:fd:2b:78:6e: 0d:16:97:09:52:3b:61:54:35:52:84:8d:3b:f2:d8:c0:4a:58: 3d:b1:62:d8:3c:ad:5b:03:c9:3d:2f:61:f4:a6:19:b0:7f:c2: c6:d2:c8:9e:5c:04:20:49:5f:80:57:ac:de:a2:07:e0:8e:86: 90:87:2f:ef:34:5c:33:f7:44:35:40:25:82:e0:24:9d:b5:93: 8f:04:14:95 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBEMDcxMTAvBgNVBAUTKDRBQzk1QzhBOTc1RTRDRjMxMDg0MkM5NTU2NDA1MTc1 M0RFQjAyODkwHhcNMjYwMzEzMDMwNjAwWhcNMjYwMzIwMDMwNjAwWjAYMRYwFAYD VQQDEw02OWIzN2YxOS04YTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJG0EEMDtwvWpsQXj00pKNlsWGL4n3u8QC671idwgt5vhJr+rJKqTgd7vm0v obybN3PgowxFIkjcnbIpOYS5FCTMcm2c7V4XHOMMxVKH5uZ013Av8xvXg4SsH7b/ 80uY54oyBPJUv9krBdySExjdoIpFaXoKPBjy2hlUkKZFY8GmoupinPqdBLDd6I+4 4ZgRlM0eB6a5m5yWFlBnfJNq0dksO0WKwZQlPSvq9kxhhUSCWeeA7oMGgMiLTnRs xPznWLtQ4SIcPI7M5C17GM6OCEpsQJn4AfkZk8AggPW5jCTi2aUzbnNrwoOb2Jr/ rNk5Mm5IPECQW0Y3Pb+HvgafPQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFyIgHt7 SWDdbEj+SqLGmtoXJEqmMB8GA1UdIwQYMBaAFErJXIqXXkzzEIQslVZAUXU96wKJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEQwNy9EM0U4ODlENDhF N0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQTVFoQ3lWVmtCUmRUM3JB b2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NzbGNpcGRlVFBNUWhDeVZWa0JSZFQzckFvay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEQwNy9EM0U4ODlENDhFN0YxMUVFOEU5N0I0ODRDNEY5QUUwMi9Tc2xjaXBkZVRQ TVFoQ3lWVmtCUmRUM3JBb2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAWogAIZrT84PK3dbtJWf6M1UuyIP4oP2hDzv7c6+jHlfhR6gfXbC3l0yivWxY K4qOFO1vJ3bv6iRJJ/G6dirgS8AhEpnCz5xEvoSB7mb58tl/gVd50zLocLDgLvpM BuD1wY1goUePPNEOnPwtkZm05oijFxDHqU816fJUPLyUW8ibaRyr4V/ZNIITRO9i nAMMjBkYy101O84MirazvqpDLeswsY6sI76wtUYIwVr6Srz9K3huDRaXCVI7YVQ1 UoSNO/LYwEpYPbFi2DytWwPJPS9h9KYZsH/CxtLInlwEIElfgFes3qIH4I6GkIcv 7zRcM/dENUAlguAknbWTjwQUlQ== -----END CERTIFICATE-----Generated at Sat Mar 14 01:47:56 2026 by rpki-client