$ rpki-client -vvf rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft File: sD57-ytL2vouqlCreZD3T_y8rdc.mft (raw, json) Hash identifier: dJdt9o2g2fJMOGwWPnvxWmHTipVlqoztwVUa8SgENkI= Subject key identifier: 08:5C:59:59:F2:13:25:5B:20:87:51:67:DE:59:A2:A6:97:A6:CE:9E Authority key identifier: B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 Certificate issuer: /CN=A9150CF2/serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Certificate serial: 0D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft Manifest number: 0D49 Signing time: Mon 30 Mar 2026 18:02:02 +0000 Manifest this update: Mon 30 Mar 2026 18:02:02 +0000 Manifest next update: Mon 06 Apr 2026 18:02:02 +0000 Files and hashes: 1: sD57-ytL2vouqlCreZD3T_y8rdc.crl (hash: R8LUBcDhD8EGS8f5DxqzuWMqVE87m91TsyQ2pIAyV6s=) 2: 34060B22C2B311EE97B0B776C4F9AE02.roa (hash: C7mWYt8BwOOq1nQu5Tay/Ds+1SGx2J5ybDPHnjoqgfU=) 3: 029E3ED44ADF11EEB17F2D4CC4F9AE02.roa (hash: 0aav2SojadrORDyi36eFDPixyT4HpgYJRilnRTO8Vew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3432 (0xd68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150CF2, serialNumber=B03E7BFB2B4BDAFA2EAA50AB7990F74FFCBCADD7 Validity Not Before: Mar 30 18:02:02 2026 GMT Not After : Apr 6 18:02:02 2026 GMT Subject: CN=69caba9a-a9cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3f:27:5e:ed:db:cc:1c:ac:30:d4:1e:50:d6: b0:c6:49:40:dc:62:97:c2:2f:20:20:8d:ad:80:3f: 64:73:60:fb:3c:a5:75:b3:be:27:c9:3b:64:02:51: 3d:72:99:13:f8:db:46:a4:f1:f7:28:6d:5d:3b:fc: 52:72:23:94:09:e9:da:a7:9b:71:1c:55:18:b6:37: 01:69:9c:26:07:2b:a9:35:93:88:db:9a:73:3e:8a: 65:17:6f:e7:24:99:61:67:48:49:1c:50:b1:37:38: 8d:72:96:00:99:3d:83:22:9c:1f:84:85:b4:ee:d0: 6f:79:76:e9:8c:b5:53:b8:d5:70:83:b9:53:d0:d1: 6b:34:14:1d:de:13:e1:b2:0b:cc:35:3a:a0:1a:2c: 6a:52:3a:8e:ba:de:b5:e0:3e:b7:cf:86:91:e7:64: 6b:40:3c:25:2a:d0:34:c3:53:d2:3f:78:7a:e4:9e: da:30:e4:ce:9d:39:ce:bb:69:94:4e:a1:94:49:75: 78:84:f6:1e:7c:65:7e:12:f7:7d:e4:fc:ac:34:f2: fe:9a:be:16:a3:7b:fb:2c:64:83:8e:3f:b0:24:47: 0b:be:9d:b9:4d:3a:ad:48:fe:aa:01:e2:4e:51:02: 45:db:dc:6d:25:61:9c:3f:f8:8a:93:a4:a4:1e:4c: b8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5C:59:59:F2:13:25:5B:20:87:51:67:DE:59:A2:A6:97:A6:CE:9E X509v3 Authority Key Identifier: keyid:B0:3E:7B:FB:2B:4B:DA:FA:2E:AA:50:AB:79:90:F7:4F:FC:BC:AD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sD57-ytL2vouqlCreZD3T_y8rdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150CF2/D00DB76EF4EE11E9AEFEA819C4F9AE02/sD57-ytL2vouqlCreZD3T_y8rdc.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:c9:62:7f:cf:d1:c8:78:3c:61:38:9e:a9:87:54:c4:38:6e: 44:a7:68:fc:48:d6:3c:3a:af:aa:e4:b3:0e:84:a5:6c:74:74: 18:45:c1:8a:eb:7f:c2:07:4f:37:65:e7:93:c3:d1:21:16:94: 5b:ba:a4:7a:48:ec:28:30:51:86:d5:0b:a5:64:17:fc:84:fa: cd:be:a5:44:74:f9:af:b8:57:30:bf:6d:9e:98:36:22:34:8c: e3:e9:4c:b2:85:55:e6:7b:1a:7a:f3:d1:23:0a:6e:1e:9b:f2: da:d3:3a:c2:42:d4:60:45:db:e5:d5:17:34:4c:82:56:a5:52: 6e:7a:69:a3:1e:89:53:b1:0d:5c:61:f1:0c:36:af:c2:56:ae: 5f:0e:ae:3a:4c:f3:c7:17:84:9a:c8:71:e8:a2:37:09:4c:ef: 1c:5a:2d:2c:f0:d5:13:3e:3f:e2:c7:d8:89:0c:06:a5:ed:f2: 9e:ca:4c:a3:b1:0f:51:3c:1c:0c:06:82:3f:0f:a3:6b:09:52: 70:2e:76:d1:42:7f:60:46:ca:10:ca:c6:ff:55:f4:cc:23:ca: 0c:f2:5d:c2:41:08:96:54:86:f0:1b:b9:1e:6b:c5:37:9d:63: c8:29:56:78:7e:62:eb:f0:8e:2c:8a:11:03:fe:c7:a4:f3:c9: fa:f7:41:cc -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTBDRjIxMTAvBgNVBAUTKEIwM0U3QkZCMkI0QkRBRkEyRUFBNTBBQjc5OTBGNzRG RkNCQ0FERDcwHhcNMjYwMzMwMTgwMjAyWhcNMjYwNDA2MTgwMjAyWjAYMRYwFAYD VQQDEw02OWNhYmE5YS1hOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3D8nXu3bzBysMNQeUNawxklA3GKXwi8gII2tgD9kc2D7PKV1s74nyTtkAlE9 cpkT+NtGpPH3KG1dO/xSciOUCenap5txHFUYtjcBaZwmByupNZOI25pzPoplF2/n JJlhZ0hJHFCxNziNcpYAmT2DIpwfhIW07tBveXbpjLVTuNVwg7lT0NFrNBQd3hPh sgvMNTqgGixqUjqOut614D63z4aR52RrQDwlKtA0w1PSP3h65J7aMOTOnTnOu2mU TqGUSXV4hPYefGV+Evd95PysNPL+mr4Wo3v7LGSDjj+wJEcLvp25TTqtSP6qAeJO UQJF29xtJWGcP/iKk6SkHky4NQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAhcWVny EyVbIIdRZ95ZoqaXps6eMB8GA1UdIwQYMBaAFLA+e/srS9r6LqpQq3mQ90/8vK3X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MENGMi9EMDBEQjc2RUY0 RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2b3VxbENyZVpEM1RfeThy ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NENTcteXRMMnZvdXFsQ3JlWkQzVF95OHJkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MENGMi9EMDBEQjc2RUY0RUUxMUU5QUVGRUE4MTlDNEY5QUUwMi9zRDU3LXl0TDJ2 b3VxbENyZVpEM1RfeThyZGMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAdslif8/RyHg8YTieqYdUxDhuRKdo/EjWPDqvquSzDoSlbHR0GEXBiut/wgdP N2Xnk8PRIRaUW7qkekjsKDBRhtULpWQX/IT6zb6lRHT5r7hXML9tnpg2IjSM4+lM soVV5nsaevPRIwpuHpvy2tM6wkLUYEXb5dUXNEyCVqVSbnppox6JU7ENXGHxDDav wlauXw6uOkzzxxeEmshx6KI3CUzvHFotLPDVEz4/4sfYiQwGpe3ynspMo7EPUTwc DAaCPw+jawlScC520UJ/YEbKEMrG/1X0zCPKDPJdwkEIllSG8Bu5HmvFN51jyClW eH5i6/COLIoRA/7HpPPJ+vdBzA== -----END CERTIFICATE-----Generated at Tue Mar 31 06:40:44 2026 by rpki-client