$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: 6CWnSWMc9jAmywQq8JY3bFPAhCxL8vrgrKq7EYXsiew= Subject key identifier: F0:FF:1A:98:9C:12:3C:D0:92:D3:94:E5:DB:0F:A9:9B:CD:4D:91:6B Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 02D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 02C9 Signing time: Sun 05 Apr 2026 01:09:24 +0000 Manifest this update: Sun 05 Apr 2026 01:09:23 +0000 Manifest next update: Sun 12 Apr 2026 01:09:23 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: +jwdqQroJjpgbuOz3CepqXwf8rvaXuUjlsqpUmPciMk=) 2: 3A281348C8FF11F0A8BC2876C4F9AE02.roa (hash: qmW4boAu4mPyTeZ/1TM4f4A59PHbYduM7lK03RYvMz8=) 3: C4149072C8FF11F0AC8AE779C4F9AE02.roa (hash: e26HjI6IThHSTcyiS5wewUgNVLH1ZtA87nwKAQOfEN8=) 4: C3A9035CC8FF11F0BE76E779C4F9AE02.roa (hash: Qq87SJXaEP4qrP/T3bWQOCeWogcPQnVi06inH60FBfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:09:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 727 (0x2d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Apr 5 01:09:23 2026 GMT Not After : Apr 12 01:09:23 2026 GMT Subject: CN=69d1b644-4b4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:3a:24:9d:6c:1f:1d:31:a1:d9:f1:bc:1e: de:2e:6d:f5:36:66:a0:63:d2:80:e1:fc:62:7b:18: d7:fe:a2:61:14:7a:d7:98:47:7d:75:25:db:dc:b4: 5a:5d:b4:a9:db:a6:c6:9a:9c:2e:56:24:ec:84:45: 62:48:a3:15:d0:6f:53:b1:2f:70:1c:7b:51:31:16: 4d:ba:8c:74:4f:ec:4d:df:d0:b8:7d:96:4a:04:10: 19:90:f7:2b:9d:8f:61:d3:41:00:7f:3d:83:51:4e: 86:15:96:4b:92:01:6a:34:d7:15:71:60:90:d5:fa: a3:28:bb:89:e4:67:43:29:6a:c5:12:e5:58:65:fa: 87:f3:6a:5f:8c:a6:f2:3b:da:cc:b4:02:41:8d:cc: 05:fb:2f:21:27:e3:c0:2c:c0:ca:f1:e6:56:db:ba: 51:8d:7d:63:47:0b:14:e8:91:39:33:a6:13:45:cc: 65:8b:5a:44:9c:60:cd:b3:b3:ce:83:e7:30:b1:5f: 2c:09:b7:09:ee:83:f7:cc:42:9d:5e:a3:80:d6:9f: 7d:ae:41:f2:01:7e:a8:37:ce:3c:8f:2d:e2:c4:e7: d4:d6:c5:0c:18:05:ef:ac:89:17:e3:38:f3:00:29: ef:6a:6d:a8:52:d1:d7:07:21:49:4e:ca:c3:c7:82: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FF:1A:98:9C:12:3C:D0:92:D3:94:E5:DB:0F:A9:9B:CD:4D:91:6B X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:99:27:14:e3:74:d1:f2:52:c5:be:db:fe:a3:33:bb:34:30: 0a:54:5d:94:9c:47:4d:75:92:e4:9e:4d:a2:9e:f0:57:51:55: 59:73:2d:6d:6b:d6:42:03:bf:1b:ed:b6:2d:ff:b4:ba:9b:d2: 9b:2b:84:c7:49:24:ba:af:e1:79:05:ef:df:f9:d7:19:af:50: d6:d2:02:f8:b2:f3:57:f6:f8:d2:c3:0b:a8:d9:69:f9:9a:5a: 90:50:4d:81:71:77:82:c9:6b:a8:0e:7f:41:0e:9c:b0:cd:3f: c1:02:11:bc:00:02:f7:a2:05:de:5b:11:91:67:ec:c5:db:93: 88:87:44:3b:f3:34:5a:27:d9:08:e0:1a:7b:cf:cf:fb:e1:2a: da:5e:88:65:1f:7a:37:08:54:bf:49:67:68:f2:66:1a:73:81: 03:6a:37:d0:18:1e:8a:b5:94:40:29:2f:d7:1d:18:7d:65:ce: 1c:27:61:98:31:28:4b:9a:15:42:e1:be:14:a2:35:32:e9:1d: 81:36:27:36:75:bb:ee:48:33:67:5e:ba:ff:5f:a5:5a:a3:d4: c7:39:4e:4e:7d:c4:07:5c:35:8d:47:78:8c:9a:df:6a:10:f5: f4:4c:25:f5:09:d8:85:9f:d1:73:eb:33:0a:44:db:46:e0:d2: 20:3f:ba:3d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjYwNDA1MDEwOTIzWhcNMjYwNDEyMDEwOTIzWjAYMRYwFAYD VQQDEw02OWQxYjY0NC00YjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0c6JJ1sHx0xodnxvB7eLm31NmagY9KA4fxiexjX/qJhFHrXmEd9dSXb3LRa XbSp26bGmpwuViTshEViSKMV0G9TsS9wHHtRMRZNuox0T+xN39C4fZZKBBAZkPcr nY9h00EAfz2DUU6GFZZLkgFqNNcVcWCQ1fqjKLuJ5GdDKWrFEuVYZfqH82pfjKby O9rMtAJBjcwF+y8hJ+PALMDK8eZW27pRjX1jRwsU6JE5M6YTRcxli1pEnGDNs7PO g+cwsV8sCbcJ7oP3zEKdXqOA1p99rkHyAX6oN848jy3ixOfU1sUMGAXvrIkX4zjz ACnvam2oUtHXByFJTsrDx4I0ZwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPD/Gpic EjzQktOU5dsPqZvNTZFrMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAV5knFON00fJSxb7b/qMzuzQwClRdlJxHTXWS5J5Nop7wV1FVWXMtbWvWQgO/ G+22Lf+0upvSmyuEx0kkuq/heQXv3/nXGa9Q1tIC+LLzV/b40sMLqNlp+ZpakFBN gXF3gslrqA5/QQ6csM0/wQIRvAAC96IF3lsRkWfsxduTiIdEO/M0WifZCOAae8/P ++Eq2l6IZR96NwhUv0lnaPJmGnOBA2o30BgeirWUQCkv1x0YfWXOHCdhmDEoS5oV QuG+FKI1MukdgTYnNnW77kgzZ166/1+lWqPUxzlOTn3EB1w1jUd4jJrfahD19Ewl 9QnYhZ/Rc+szCkTbRuDSID+6PQ== -----END CERTIFICATE-----Generated at Mon Apr 6 09:01:32 2026 by rpki-client