$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft File: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft (raw, json) Hash identifier: 4r7FsYVfD/C/QOZpdSG+uJGnAvdFE1hzjis8yDzUiz4= Subject key identifier: 1A:CC:68:15:DF:76:9A:A2:2C:80:B5:C6:A3:31:86:55:DB:CD:2A:37 Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Certificate serial: 0C5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft Manifest number: 0C36 Signing time: Thu 12 Mar 2026 18:31:59 +0000 Manifest this update: Thu 12 Mar 2026 18:31:58 +0000 Manifest next update: Thu 19 Mar 2026 18:31:58 +0000 Files and hashes: 1: l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl (hash: /jpT551kDzLei4+A88Wrm44b7OOWect5LWS+RBUIi5k=) 2: A64A2A9437E411EC9BA3E20AC4F9AE02.roa (hash: ouH4abzFqla8RyorGFEh8tsKVYnL5dBI2TdSDocSzXI=) 3: A6EF086637E411EC9BA3E20AC4F9AE02.roa (hash: 2kn/q1hOME//Yhn7qkH4G8jggbyrCgjoL4hoHZXGsZM=) 4: A807146437E411EC9BA3E20AC4F9AE02.roa (hash: yzY+pKYkZw0uNGaXwIqrPcHyCwkxCWHWqVxFG+uHRA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 18:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3165 (0xc5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E9B, serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB Validity Not Before: Mar 12 18:31:58 2026 GMT Not After : Mar 19 18:31:58 2026 GMT Subject: CN=69b3069e-8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a1:1d:4c:49:3b:be:19:6b:2a:ee:ef:a7:da: 96:74:f5:3a:4b:c1:84:10:1b:74:88:9b:05:19:18: 0a:88:15:1b:0e:2d:73:08:1c:1c:28:41:2e:31:51: 3b:9f:0d:7d:76:37:33:11:53:9a:85:0a:01:39:1a: e1:e8:e2:87:5e:07:dc:2e:85:19:e0:cc:e9:9e:b3: aa:53:ca:74:e4:ef:08:a3:5a:65:7d:e5:26:6f:ed: 5a:50:75:c9:6e:5c:9e:b2:41:51:2a:0e:f6:54:f4: b0:c3:0b:b2:a6:6d:07:44:1f:e6:0d:a8:bf:f5:ac: 80:a6:c0:26:29:ba:f0:eb:6d:0d:a9:23:57:8b:94: 72:3e:7d:0c:38:ce:eb:9c:62:00:ad:ee:c8:53:4d: 83:fc:e2:db:93:83:77:e4:d1:b7:f6:cc:1e:86:91: 59:cb:f1:78:d3:c0:a8:d1:b7:b3:17:45:b2:e0:8b: 55:1e:65:be:e6:5f:40:36:b4:0b:bc:10:13:cd:a7: 77:76:8c:a7:8a:46:39:76:88:bf:96:29:d4:4e:c5: 34:d1:41:ac:bf:ed:99:d8:9d:35:b0:64:7e:83:47: 9f:b7:f9:d3:a8:7e:da:c6:1d:1c:ef:ae:95:57:c6: 94:f7:01:5c:93:26:4f:0f:c2:3a:35:90:93:08:f2: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CC:68:15:DF:76:9A:A2:2C:80:B5:C6:A3:31:86:55:DB:CD:2A:37 X509v3 Authority Key Identifier: keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:77:6a:d1:03:3d:7a:50:91:f0:61:cc:0f:37:28:2b:79:74: 6c:4c:bf:53:fa:cc:f0:8f:20:6e:16:40:1b:8d:52:d4:51:f0: b5:b3:08:d3:9b:b0:3f:05:56:cf:f8:3c:d6:72:0d:fb:73:50: 32:e1:71:90:ea:0d:1f:8d:e4:91:ed:aa:51:67:62:12:ed:9f: b4:9e:4e:f1:41:1d:74:b6:2b:90:01:55:d3:3a:d0:be:b6:d7: 09:08:75:3d:39:d3:ab:4a:f0:98:92:16:52:73:ff:e4:47:ec: 92:c9:09:34:9d:4c:a9:6b:f6:f1:96:03:f0:04:aa:59:79:07: 6c:4c:2c:ff:ed:a4:55:8f:d5:14:f9:b8:a5:ab:26:26:73:4d: 79:67:f5:3b:a6:75:0f:c0:82:46:a4:bf:c3:da:36:0f:d9:e9: 6b:f4:91:d4:49:0d:6a:d4:38:57:4f:58:08:39:a7:36:fe:a8: a0:0e:43:11:d8:f0:2e:78:11:18:24:eb:d8:e5:49:17:34:ac: 58:52:54:ab:bc:2f:4a:90:1c:1c:0c:a2:a8:ac:a7:a7:a1:3c: 6f:44:0b:2f:11:de:77:50:6d:1d:e6:d8:a1:cf:c8:a8:c4:4e: 8b:0d:38:7f:e0:35:9c:a0:18:57:dd:2c:bf:5d:af:a2:97:5e: a8:b5:89:e5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDF0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFOUIxMTAvBgNVBAUTKDk3NDk1ODE2RDZEQjQ5REZFREVBQzRDMTc0MjkxMjZG RTNERjk3RkIwHhcNMjYwMzEyMTgzMTU4WhcNMjYwMzE5MTgzMTU4WjAYMRYwFAYD VQQDEw02OWIzMDY5ZS04MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqEdTEk7vhlrKu7vp9qWdPU6S8GEEBt0iJsFGRgKiBUbDi1zCBwcKEEuMVE7 nw19djczEVOahQoBORrh6OKHXgfcLoUZ4MzpnrOqU8p05O8Io1plfeUmb+1aUHXJ blyeskFRKg72VPSwwwuypm0HRB/mDai/9ayApsAmKbrw620NqSNXi5RyPn0MOM7r nGIAre7IU02D/OLbk4N35NG39swehpFZy/F408Co0bezF0Wy4ItVHmW+5l9ANrQL vBATzad3doynikY5doi/linUTsU00UGsv+2Z2J01sGR+g0eft/nTqH7axh0c766V V8aU9wFckyZPD8I6NZCTCPILcQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBrMaBXf dpqiLIC1xqMxhlXbzSo3MB8GA1UdIwQYMBaAFJdJWBbW20nf7erEwXQpEm/j35f7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU5Qi83QTUzQTYxODI1 QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNkX3Q2c1RCZENrU2ItUGZs X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2wwbFlGdGJiU2RfdDZzVEJkQ2tTYi1QZmxfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU5Qi83QTUzQTYxODI1QTMxMUVBQTQ3RjA1MjdDNEY5QUUwMi9sMGxZRnRiYlNk X3Q2c1RCZENrU2ItUGZsX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEACXdq0QM9elCR8GHMDzcoK3l0bEy/U/rM8I8gbhZAG41S1FHwtbMI05uwPwVW z/g81nIN+3NQMuFxkOoNH43kke2qUWdiEu2ftJ5O8UEddLYrkAFV0zrQvrbXCQh1 PTnTq0rwmJIWUnP/5EfskskJNJ1MqWv28ZYD8ASqWXkHbEws/+2kVY/VFPm4pasm JnNNeWf1O6Z1D8CCRqS/w9o2D9npa/SR1EkNatQ4V09YCDmnNv6ooA5DEdjwLngR GCTr2OVJFzSsWFJUq7wvSpAcHAyiqKynp6E8b0QLLxHed1BtHebYoc/IqMROiw04 f+A1nKAYV90sv12vopdeqLWJ5Q== -----END CERTIFICATE-----Generated at Sat Mar 14 07:37:22 2026 by rpki-client