$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft File: -fNN9--KMQSq91p3EaUvfbGlDaQ.mft (raw, json) Hash identifier: 0OSC94NbqhLHnWNssSP1yKwdJhZmseoQrZUE6cahvd8= Subject key identifier: 0D:BA:95:FC:E8:A4:21:75:ED:66:AC:F4:18:7A:2F:B8:38:D4:C5:59 Authority key identifier: F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 Certificate issuer: /CN=A9188A06/serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Certificate serial: 0D5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft Manifest number: 0D3A Signing time: Mon 30 Mar 2026 18:03:25 +0000 Manifest this update: Mon 30 Mar 2026 18:03:24 +0000 Manifest next update: Mon 06 Apr 2026 18:03:24 +0000 Files and hashes: 1: -fNN9--KMQSq91p3EaUvfbGlDaQ.crl (hash: 7eFz+6GamwzbbOGSkaKcQ5IGET8JD+pdo8XPEMRx3e8=) 2: 0D7B74CACE1111ED8BDB217CC4F9AE02.roa (hash: B8R1G5OUtPVlyi8UDUFhRxyGS4o93u26WgDd9Jne+9w=) 3: 4AD97410632C11EE96048122C4F9AE02.roa (hash: P6QJDerhi+lWqONjj1JCvPgAfIfcAnZgSWhjyXSzjnM=) 4: 23B27B60F68011E982571C3EC4F9AE02.roa (hash: sjwfe8XhFk6Jxj+5OnQzDtWQba/qtTmypv4cLyvI+GI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 05 Apr 2026 23:18:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3419 (0xd5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188A06, serialNumber=F9F34DF7EF8A3104AAF75A7711A52F7DB1A50DA4 Validity Not Before: Mar 30 18:03:24 2026 GMT Not After : Apr 6 18:03:24 2026 GMT Subject: CN=69cabaed-09e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:19:1c:a8:c6:95:fa:b0:a8:db:ec:be:e1:45: 5f:ea:95:36:48:c6:1e:14:dd:fe:00:54:bd:8a:48: e8:26:2d:6c:6d:52:bd:a1:57:fc:ac:50:b0:be:65: 5e:5b:b3:8c:c7:3b:04:62:d3:d7:ee:87:a6:80:7f: 29:37:88:76:db:e4:26:9f:f6:c8:a9:c0:01:3f:d6: ad:4b:5e:bc:d5:b6:cb:d6:90:44:51:8b:11:77:38: 59:75:4d:f2:1d:56:fa:ba:d0:2b:a5:12:8e:6b:05: c3:f7:72:f8:6e:b8:b6:8d:bd:e0:5c:f1:a9:75:7f: 8f:6a:16:6f:4f:68:49:44:17:fb:ce:8d:9e:f6:8b: 1c:78:b3:54:3a:2e:72:46:c9:60:b8:f3:4f:41:70: 7a:e9:e6:fb:e6:45:d6:33:71:69:06:9a:e6:8e:4e: 58:6c:cb:84:44:cf:84:08:d1:ca:d2:ce:00:c4:af: 3f:2f:ec:25:82:bb:1d:f2:9a:c6:ff:0f:45:6b:de: 36:32:e1:9b:0a:fa:d8:96:5d:08:26:93:18:35:ee: cc:99:9a:b7:25:42:36:87:95:44:55:9e:15:4b:98: 20:a3:ba:4b:33:11:58:27:47:f8:12:50:ec:19:c8: 2f:36:b7:0b:ef:1d:f6:d9:a8:8a:6f:68:da:29:d4: 07:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BA:95:FC:E8:A4:21:75:ED:66:AC:F4:18:7A:2F:B8:38:D4:C5:59 X509v3 Authority Key Identifier: keyid:F9:F3:4D:F7:EF:8A:31:04:AA:F7:5A:77:11:A5:2F:7D:B1:A5:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-fNN9--KMQSq91p3EaUvfbGlDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A06/801CA584F67F11E9AA3E703DC4F9AE02/-fNN9--KMQSq91p3EaUvfbGlDaQ.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e5:18:ba:9e:b6:9f:a6:43:5d:18:fc:73:61:11:97:2f:6a: 1d:0c:6d:5a:13:31:7f:7c:e7:34:01:90:ff:d9:de:bd:34:0b: 84:f6:c9:db:19:e4:9b:5a:ef:8b:fe:94:22:ee:fc:f3:69:51: 52:19:8f:c8:96:c3:ab:30:70:bb:48:32:ce:fc:43:21:4d:59: f4:f2:af:98:8a:cf:b4:3b:0d:43:2a:e6:60:8c:e9:93:e6:6f: f4:ce:5d:34:3a:97:b0:a0:e2:63:a6:59:6c:4a:22:c6:19:00: d7:55:64:00:7a:26:65:ec:5c:3f:00:27:51:9a:f5:74:47:33: a9:5e:d8:d4:ac:21:cc:01:fd:7c:89:7e:33:ae:e6:51:4e:aa: e6:81:4c:33:33:10:db:a0:8d:0c:50:b2:90:1f:5c:73:ef:08: 1b:f4:66:6c:52:ae:cd:6e:07:d6:8f:40:3b:1d:79:8b:d2:6d: 03:25:b7:9a:bd:23:2c:c2:c6:fe:29:3f:7c:50:e2:1f:5c:b0: bb:1e:bc:b7:ed:70:f1:b9:79:11:89:62:86:45:9f:ac:e2:45: 5f:97:62:12:8d:a0:8c:c2:b5:9a:d6:16:2b:7b:35:88:d0:44: 6f:b4:82:5b:c1:ca:ce:73:f9:89:8d:b7:64:48:aa:6f:b4:0d: 19:57:6b:ec -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhBMDYxMTAvBgNVBAUTKEY5RjM0REY3RUY4QTMxMDRBQUY3NUE3NzExQTUyRjdE QjFBNTBEQTQwHhcNMjYwMzMwMTgwMzI0WhcNMjYwNDA2MTgwMzI0WjAYMRYwFAYD VQQDEw02OWNhYmFlZC0wOWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxkcqMaV+rCo2+y+4UVf6pU2SMYeFN3+AFS9ikjoJi1sbVK9oVf8rFCwvmVe W7OMxzsEYtPX7oemgH8pN4h22+Qmn/bIqcABP9atS1681bbL1pBEUYsRdzhZdU3y HVb6utArpRKOawXD93L4bri2jb3gXPGpdX+PahZvT2hJRBf7zo2e9osceLNUOi5y RslguPNPQXB66eb75kXWM3FpBprmjk5YbMuERM+ECNHK0s4AxK8/L+wlgrsd8prG /w9Fa942MuGbCvrYll0IJpMYNe7MmZq3JUI2h5VEVZ4VS5ggo7pLMxFYJ0f4ElDs GcgvNrcL7x322aiKb2jaKdQHGQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA26lfzo pCF17Was9Bh6L7g41MVZMB8GA1UdIwQYMBaAFPnzTffvijEEqvdadxGlL32xpQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEEwNi84MDFDQTU4NEY2 N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01RU3E5MXAzRWFVdmZiR2xE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mTk45LS1LTVFTcTkxcDNFYVV2ZmJHbERhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEEwNi84MDFDQTU4NEY2N0YxMUU5QUEzRTcwM0RDNEY5QUUwMi8tZk5OOS0tS01R U3E5MXAzRWFVdmZiR2xEYVEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAmOUYup62n6ZDXRj8c2ERly9qHQxtWhMxf3znNAGQ/9nevTQLhPbJ2xnkm1rv i/6UIu7882lRUhmPyJbDqzBwu0gyzvxDIU1Z9PKvmIrPtDsNQyrmYIzpk+Zv9M5d NDqXsKDiY6ZZbEoixhkA11VkAHomZexcPwAnUZr1dEczqV7Y1KwhzAH9fIl+M67m UU6q5oFMMzMQ26CNDFCykB9cc+8IG/RmbFKuzW4H1o9AOx15i9JtAyW3mr0jLMLG /ik/fFDiH1ywux68t+1w8bl5EYlihkWfrOJFX5diEo2gjMK1mtYWK3s1iNBEb7SC W8HKznP5iY23ZEiqb7QNGVdr7A== -----END CERTIFICATE-----Generated at Mon Mar 30 22:44:54 2026 by rpki-client