$ rpki-client -vvf rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft File: 9lz9HPOxxajqYIcfo8NAYdtM84M.mft (raw, json) Hash identifier: 3bce6Z+f44q1+a7OqDOlzg8aVm5Q33i+edeJ3VOFPY8= Subject key identifier: 8B:09:37:1A:21:E3:7B:65:3D:E9:C9:B7:53:E0:29:1B:2C:68:99:5D Authority key identifier: F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 Certificate issuer: /CN=A9195BA9/serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Certificate serial: 01FD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft Manifest number: 01F7 Signing time: Sat 28 Mar 2026 19:33:42 +0000 Manifest this update: Sat 28 Mar 2026 19:33:42 +0000 Manifest next update: Sat 04 Apr 2026 19:33:42 +0000 Files and hashes: 1: 9lz9HPOxxajqYIcfo8NAYdtM84M.crl (hash: sVcdJMGeS5kbgVlDM8P9/ruvoIgAJLd0vXZ+DQhFWWE=) 2: 7A63013E3A4F11EEA10D3A7AC4F9AE02.roa (hash: hnwuStPXa2PnbC6upyuld+U4W5MZABYuzZ1Adf6fwaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 04 Apr 2026 19:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 509 (0x1fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195BA9, serialNumber=F65CFD1CF3B1C5A8EA60871FA3C34061DB4CF383 Validity Not Before: Mar 28 19:33:42 2026 GMT Not After : Apr 4 19:33:42 2026 GMT Subject: CN=69c82d16-32e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:69:e0:e4:c4:5e:9d:c7:80:2b:a8:55:fb:23: e2:82:4d:aa:c7:4e:00:5b:b8:da:53:61:ef:34:e1: b7:3f:bc:91:24:12:1c:bb:4e:6b:19:f6:15:1e:c1: d8:be:ec:ab:87:1f:eb:0d:68:54:ae:ec:ee:59:91: fa:6e:e0:80:59:c4:f1:40:9f:23:50:3b:2d:ae:f3: 6a:a7:f7:8f:6e:e2:77:cc:4b:ec:2a:59:f7:ad:d6: e7:17:40:db:4b:00:26:20:8f:55:e7:a0:55:57:ae: 6d:c4:f9:f1:97:cd:fc:5f:d0:ba:50:70:8b:7f:25: 77:af:08:80:4c:39:ad:14:43:96:43:84:ea:ed:56: 2e:32:a2:29:ff:c3:91:da:68:92:c3:03:c7:43:97: c7:d2:0d:8b:79:82:18:61:32:63:13:fb:bc:41:9b: 17:c0:cc:58:6d:a4:22:84:86:25:07:52:d6:2e:31: 4c:e3:80:e3:1c:13:81:9f:b6:76:75:e6:a4:6a:cd: 42:cc:55:96:31:89:4a:45:98:80:b4:41:15:19:47: d9:40:45:77:fd:9f:48:d4:fd:99:f0:5a:49:f4:c8: 40:50:cc:14:f5:88:d0:df:cf:39:8d:04:59:a5:2c: 3d:03:5d:bc:7c:c3:bb:3d:96:dc:9b:6b:ab:f3:b1: a0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:09:37:1A:21:E3:7B:65:3D:E9:C9:B7:53:E0:29:1B:2C:68:99:5D X509v3 Authority Key Identifier: keyid:F6:5C:FD:1C:F3:B1:C5:A8:EA:60:87:1F:A3:C3:40:61:DB:4C:F3:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9lz9HPOxxajqYIcfo8NAYdtM84M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195BA9/CEE6882237BE11EEA640AB55C4F9AE02/9lz9HPOxxajqYIcfo8NAYdtM84M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fc:b0:b5:8e:86:c0:f7:01:49:c0:28:4b:09:65:f5:45:b6: b3:1f:c2:30:20:20:fd:18:91:86:6f:19:9f:84:79:38:5c:c2: 25:4c:b3:f2:a8:e2:e4:62:9b:74:1f:c8:60:46:04:37:49:c5: 28:89:f6:0d:b1:88:c0:57:c6:81:26:65:05:89:57:84:ea:93: a6:50:84:95:da:9b:4b:86:81:64:61:a1:f3:79:ce:d0:fb:29: 29:2e:a9:6c:62:9b:1c:42:82:0d:14:0b:61:87:76:76:13:bc: 7a:43:d9:5e:df:b1:07:5d:ab:e4:30:5c:be:27:3e:1d:b8:1b: 66:61:ed:c9:42:b2:a2:33:65:fc:36:fb:22:e3:01:d6:9e:c3: 43:ab:4b:5f:3e:95:06:53:08:69:5b:59:77:83:f3:04:2d:64: 01:14:92:24:1a:1f:67:bb:e5:44:a1:ef:61:45:3a:c7:ab:a7: 37:b2:8a:52:11:59:55:d5:2a:4d:fb:e8:a9:b5:5b:a2:72:b0: 5d:10:5b:8f:1c:14:ea:8c:55:4d:93:3f:60:ce:9e:41:dd:41: 20:22:0f:42:a8:c9:e0:2f:7a:58:69:9e:07:be:ab:0c:27:30: 58:fd:63:31:74:08:58:48:07:3f:97:3c:46:81:bc:ca:d6:49: a1:68:7b:5c -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVCQTkxMTAvBgNVBAUTKEY2NUNGRDFDRjNCMUM1QThFQTYwODcxRkEzQzM0MDYx REI0Q0YzODMwHhcNMjYwMzI4MTkzMzQyWhcNMjYwNDA0MTkzMzQyWjAYMRYwFAYD VQQDEw02OWM4MmQxNi0zMmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWng5MRenceAK6hV+yPigk2qx04AW7jaU2HvNOG3P7yRJBIcu05rGfYVHsHY vuyrhx/rDWhUruzuWZH6buCAWcTxQJ8jUDstrvNqp/ePbuJ3zEvsKln3rdbnF0Db SwAmII9V56BVV65txPnxl838X9C6UHCLfyV3rwiATDmtFEOWQ4Tq7VYuMqIp/8OR 2miSwwPHQ5fH0g2LeYIYYTJjE/u8QZsXwMxYbaQihIYlB1LWLjFM44DjHBOBn7Z2 deakas1CzFWWMYlKRZiAtEEVGUfZQEV3/Z9I1P2Z8FpJ9MhAUMwU9YjQ3885jQRZ pSw9A128fMO7PZbcm2ur87Gg3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIsJNxoh 43tlPenJt1PgKRssaJldMB8GA1UdIwQYMBaAFPZc/RzzscWo6mCHH6PDQGHbTPOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUJBOS9DRUU2ODgyMjM3 QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhhanFZSWNmbzhOQVlkdE04 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzlsejlIUE94eGFqcVlJY2ZvOE5BWWR0TTg0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUJBOS9DRUU2ODgyMjM3QkUxMUVFQTY0MEFCNTVDNEY5QUUwMi85bHo5SFBPeHhh anFZSWNmbzhOQVlkdE04NE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO/ywtY6GwPcBScAoSwll9UW2sx/CMCAg/RiRhm8Zn4R5OFzCJUyz8qji5GKb dB/IYEYEN0nFKIn2DbGIwFfGgSZlBYlXhOqTplCEldqbS4aBZGGh83nO0PspKS6p bGKbHEKCDRQLYYd2dhO8ekPZXt+xB12r5DBcvic+HbgbZmHtyUKyojNl/Db7IuMB 1p7DQ6tLXz6VBlMIaVtZd4PzBC1kARSSJBofZ7vlRKHvYUU6x6unN7KKUhFZVdUq TfvoqbVbonKwXRBbjxwU6oxVTZM/YM6eQd1BICIPQqjJ4C96WGmeB76rDCcwWP1j MXQIWEgHP5c8RoG8ytZJoWh7XA== -----END CERTIFICATE-----Generated at Sun Mar 29 22:21:51 2026 by rpki-client