$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft File: R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft (raw, json) Hash identifier: skSAGf3rrriVpWz1EUmC8l785WhWpCEi+R6tGAGLokg= Subject key identifier: 35:76:96:81:BF:DE:91:83:2A:9B:F8:06:A6:AE:15:A7:B3:BA:BB:B5 Authority key identifier: 47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB Certificate issuer: /CN=A915D062/serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft Manifest number: 3C Signing time: Sun 05 Apr 2026 07:52:33 +0000 Manifest this update: Sun 05 Apr 2026 07:52:33 +0000 Manifest next update: Sun 12 Apr 2026 07:52:33 +0000 Files and hashes: 1: R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl (hash: 2cVQcnXFXCvmuZIG8kV0QMeqHgHWCem7QH+dizFFojo=) 2: 709A2E7CDB9A11F0BFEA763F67D3641D.roa (hash: /7uGSz2004/QvinO+aiI/2uroEEvFBnQnqFbErCydxo=) 3: 6A76054C222211F19C27099F3C3D8C67.roa (hash: MpiKoxYJnNsJjTtWTryJas1e5Scy/NyWv0hZW7Vx2Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 07:52:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D062, serialNumber=47D7DFF6B41BD468C1F0C9D04C5E85E0C33F9FAB Validity Not Before: Apr 5 07:52:33 2026 GMT Not After : Apr 12 07:52:33 2026 GMT Subject: CN=69d214c1-24cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:11:9d:ab:b0:53:e9:09:aa:e4:ab:92:51: 78:be:58:d3:d9:fc:1c:ef:14:0f:21:56:33:e8:2e: 29:28:5c:50:90:92:d8:3c:58:4b:6e:b8:3a:ca:b6: 0e:99:f7:a1:9c:50:48:82:10:27:ce:79:bb:99:7b: 90:eb:e0:f8:83:21:70:71:87:8d:29:76:a8:4d:a0: e5:aa:d0:de:79:1f:35:54:10:8d:b3:61:be:11:a5: e7:a9:a8:73:50:fe:02:3c:13:1d:40:68:b6:92:e1: c9:a7:9f:9e:4d:db:b3:72:62:c4:db:4b:cc:15:e8: df:35:39:6f:b9:4b:7b:20:50:19:c0:35:d3:b6:9f: 04:63:06:22:d0:6b:d4:ed:dc:f0:86:e7:ab:59:6c: 1d:4b:87:a2:7f:76:20:c5:53:2e:a0:f5:95:0f:f5: 30:e4:4d:e5:cb:b6:77:61:3f:7a:6c:a7:48:ca:cf: 3b:2d:89:03:87:86:71:12:b2:91:e6:99:3b:7b:53: 34:bd:9e:e8:6a:93:5b:d6:ad:cb:11:74:be:39:dd: d3:f4:9e:45:bf:f1:eb:76:eb:a7:51:ce:31:b0:fa: ba:e1:5f:7b:41:40:a8:9c:ec:dc:2e:72:83:06:30: 68:bc:a2:d2:57:ab:98:c6:ef:30:e4:45:8a:3e:35: d7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:76:96:81:BF:DE:91:83:2A:9B:F8:06:A6:AE:15:A7:B3:BA:BB:B5 X509v3 Authority Key Identifier: keyid:47:D7:DF:F6:B4:1B:D4:68:C1:F0:C9:D0:4C:5E:85:E0:C3:3F:9F:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/R9ff9rQb1GjB8MnQTF6F4MM_n6s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/B1B8BEA6DB9911F090A4BCD166D3641D/R9ff9rQb1GjB8MnQTF6F4MM_n6s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b3:7c:af:36:47:58:a3:6e:1b:d6:78:9b:77:c3:2b:11:0f: 73:72:6c:c8:e8:e4:a7:98:e1:5c:eb:24:48:46:c5:bb:f5:20: 24:e9:4f:a9:00:20:dd:3b:3a:f3:d4:c3:70:57:87:b0:24:3e: 86:85:83:49:3d:f3:b6:89:14:68:77:5e:2a:d3:19:75:50:6c: b7:30:82:50:1c:53:03:1f:14:4b:0b:95:28:fe:52:af:b3:14: b5:64:d7:fe:93:5f:69:fc:ff:49:df:85:cc:46:4e:e3:ec:05: 75:4c:45:7c:11:d1:21:cb:0a:f1:5e:f0:f9:f7:fc:29:30:f1: 94:ff:65:12:94:ae:47:9e:78:75:a5:4e:d1:6f:08:3e:61:ac: fb:d7:f5:b1:4a:e7:ad:17:e5:ad:20:c8:cc:1b:89:f1:54:e6: 6a:5f:3a:09:85:22:76:73:bb:0f:f1:59:bc:78:c3:3c:0f:8b: 1e:40:ff:3f:0c:99:4b:a2:c3:f6:ca:5e:88:06:60:01:c5:df: 51:3a:39:37:23:83:c2:eb:3c:e4:4b:2f:93:1e:24:5d:98:77: 0e:53:e0:d7:47:e2:68:08:ec:ee:2e:f6:4d:ff:d7:33:38:af: af:d9:cc:32:bd:c2:47:b7:80:47:1b:94:02:f6:ba:b5:0a:59: e4:c7:17:ac -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RDA2MjExMC8GA1UEBRMoNDdEN0RGRjZCNDFCRDQ2OEMxRjBDOUQwNEM1RTg1RTBD MzNGOUZBQjAeFw0yNjA0MDUwNzUyMzNaFw0yNjA0MTIwNzUyMzNaMBgxFjAUBgNV BAMTDTY5ZDIxNGMxLTI0Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9aRGdq7BT6Qmq5KuSUXi+WNPZ/BzvFA8hVjPoLikoXFCQktg8WEtuuDrKtg6Z 96GcUEiCECfOebuZe5Dr4PiDIXBxh40pdqhNoOWq0N55HzVUEI2zYb4RpeepqHNQ /gI8Ex1AaLaS4cmnn55N27NyYsTbS8wV6N81OW+5S3sgUBnANdO2nwRjBiLQa9Tt 3PCG56tZbB1Lh6J/diDFUy6g9ZUP9TDkTeXLtndhP3psp0jKzzstiQOHhnESspHm mTt7UzS9nuhqk1vWrcsRdL453dP0nkW/8et266dRzjGw+rrhX3tBQKic7NwucoMG MGi8otJXq5jG7zDkRYo+NdfvAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUNXaWgb/e kYMqm/gGpq4Vp7O6u7UwHwYDVR0jBBgwFoAUR9ff9rQb1GjB8MnQTF6F4MM/n6sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVEMDYyL0IxQjhCRUE2REI5 OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdqQjhNblFURjZGNE1NX242 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUjlmZjlyUWIxR2pCOE1uUVRGNkY0TU1fbjZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVE MDYyL0IxQjhCRUE2REI5OTExRjA5MEE0QkNEMTY2RDM2NDFEL1I5ZmY5clFiMUdq QjhNblFURjZGNE1NX242cy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCNs3yvNkdYo24b1nibd8MrEQ9zcmzI6OSnmOFc6yRIRsW79SAk6U+pACDdOzrz 1MNwV4ewJD6GhYNJPfO2iRRod14q0xl1UGy3MIJQHFMDHxRLC5Uo/lKvsxS1ZNf+ k19p/P9J34XMRk7j7AV1TEV8EdEhywrxXvD59/wpMPGU/2USlK5Hnnh1pU7Rbwg+ Yaz71/WxSuetF+WtIMjMG4nxVOZqXzoJhSJ2c7sP8Vm8eMM8D4seQP8/DJlLosP2 yl6IBmABxd9ROjk3I4PC6zzkSy+THiRdmHcOU+DXR+JoCOzuLvZN/9czOK+v2cwy vcJHt4BHG5QC9rq1Clnkxxes -----END CERTIFICATE-----Generated at Mon Apr 6 13:58:28 2026 by rpki-client