$ rpki-client -vvf rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft File: S9mZS8XP-ey2aDyU3G7s1e7uDng.mft (raw, json) Hash identifier: PeRqlXB2U45E17S6zCkS7H3P4Wd63Hzayhn61uCYh5E= Subject key identifier: 0A:DC:2F:A3:9D:46:B4:A7:2F:FC:51:67:0C:85:A8:8F:B9:4D:0C:74 Authority key identifier: 4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 Certificate issuer: /CN=A91E00FC/serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft Manifest number: 0A7D Signing time: Sun 22 Mar 2026 19:19:08 +0000 Manifest this update: Sun 22 Mar 2026 19:19:08 +0000 Manifest next update: Sun 29 Mar 2026 19:19:08 +0000 Files and hashes: 1: S9mZS8XP-ey2aDyU3G7s1e7uDng.crl (hash: MkQ0qRWB9O9/LGf+zK0q24h3ZbI30xTBtD3xUaYV1r4=) 2: CD26CAC0431611EE80B53A75C4F9AE02.roa (hash: loySozWUl5+0sXOVLBRCH081Kxyq/ilzC/iAZMz3ol4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E00FC, serialNumber=4BD9994BC5CFF9ECB6683C94DC6EECD5EEEE0E78 Validity Not Before: Mar 22 19:19:08 2026 GMT Not After : Mar 29 19:19:08 2026 GMT Subject: CN=69c040ac-265d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:4b:ff:df:61:44:70:bd:12:7d:f7:86:c8: 32:67:62:a7:55:7f:67:63:7d:b0:ee:08:17:d1:3b: 51:e6:f2:c8:ea:24:15:63:c1:fe:f9:d5:31:5b:28: ac:bb:37:62:63:fb:82:a1:53:03:c7:f7:8e:69:04: 4b:4b:87:99:e6:75:5e:a5:2c:d9:a1:ac:ed:f6:37: af:34:52:26:18:00:33:fa:79:03:e0:37:26:71:fb: 37:60:ad:eb:67:21:0f:39:ea:88:a2:2d:da:49:10: c9:be:64:45:c0:d1:5e:52:25:dd:f5:15:75:e2:d8: d8:ec:50:62:19:e0:e4:8c:b4:e1:57:af:f1:ac:02: ab:4e:7c:75:55:c9:3a:8c:43:7d:35:7a:9f:d6:88: 1d:10:cf:a8:c6:56:d2:d1:49:c6:87:18:d0:f5:4b: e4:3d:f7:62:36:86:fc:5e:a5:81:88:44:86:82:e3: ed:19:98:59:6d:5b:ff:6b:2b:e4:ea:8c:fc:6b:07: 75:c0:f5:16:7d:aa:f2:18:3f:3d:b4:f3:c3:53:15: 5e:7d:90:07:d4:31:ba:b5:2c:28:35:bc:60:ce:6b: 39:24:e1:62:7b:44:91:2a:69:d8:23:8d:aa:9d:5b: 7d:a8:e5:a1:c9:7a:11:48:4c:f9:ed:bd:31:2d:4d: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DC:2F:A3:9D:46:B4:A7:2F:FC:51:67:0C:85:A8:8F:B9:4D:0C:74 X509v3 Authority Key Identifier: keyid:4B:D9:99:4B:C5:CF:F9:EC:B6:68:3C:94:DC:6E:EC:D5:EE:EE:0E:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S9mZS8XP-ey2aDyU3G7s1e7uDng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E00FC/55F2C4C67F2F11EAADF4BF6AC4F9AE02/S9mZS8XP-ey2aDyU3G7s1e7uDng.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:1a:a5:03:6b:0a:52:5e:9e:11:bd:c4:6d:62:46:18:c7:ee: ce:2e:9b:a3:63:ad:c7:d5:25:74:e3:a1:a9:d8:10:88:ab:18: fd:56:23:77:d5:15:43:15:1d:b7:77:16:b5:1e:14:e6:d4:7c: c6:f6:ae:89:3c:66:e7:dd:e9:87:b4:22:6a:46:17:44:e6:8b: f9:24:04:79:b8:72:25:9d:f3:45:b6:12:b8:c2:5e:55:0c:37: 1d:71:a4:bd:76:92:40:81:22:98:04:2b:c8:11:3f:db:61:a3: 11:18:ff:77:3b:43:86:37:0d:3f:df:ec:d1:37:58:96:de:59: 8b:fa:f0:1e:06:57:c8:11:56:3b:aa:7d:ea:2d:ea:e6:6e:15: 27:bf:d6:67:1c:69:a0:28:62:a4:94:21:9f:9f:eb:3e:39:44: 48:1d:ab:e2:11:24:cc:a4:42:3b:c7:e6:ca:b8:7e:a3:e7:42: 06:5d:e2:e1:25:5a:4f:e1:40:1a:24:d6:94:28:b3:42:68:3e: 24:54:4f:38:aa:64:97:b3:1b:86:1f:7c:64:0e:ac:f6:bb:ac: f1:46:8d:06:75:57:f2:b0:72:1a:f6:9c:05:26:79:49:de:3e: 6a:ba:4c:13:5d:d8:8c:0f:54:28:2b:d7:0f:78:bc:ad:55:ab: b9:47:69:e7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAwRkMxMTAvBgNVBAUTKDRCRDk5OTRCQzVDRkY5RUNCNjY4M0M5NERDNkVFQ0Q1 RUVFRTBFNzgwHhcNMjYwMzIyMTkxOTA4WhcNMjYwMzI5MTkxOTA4WjAYMRYwFAYD VQQDEw02OWMwNDBhYy0yNjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArstL/99hRHC9En33hsgyZ2KnVX9nY32w7ggX0TtR5vLI6iQVY8H++dUxWyis uzdiY/uCoVMDx/eOaQRLS4eZ5nVepSzZoazt9jevNFImGAAz+nkD4Dcmcfs3YK3r ZyEPOeqIoi3aSRDJvmRFwNFeUiXd9RV14tjY7FBiGeDkjLThV6/xrAKrTnx1Vck6 jEN9NXqf1ogdEM+oxlbS0UnGhxjQ9UvkPfdiNob8XqWBiESGguPtGZhZbVv/ayvk 6oz8awd1wPUWfaryGD89tPPDUxVefZAH1DG6tSwoNbxgzms5JOFie0SRKmnYI42q nVt9qOWhyXoRSEz57b0xLU1rMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFArcL6Od RrSnL/xRZwyFqI+5TQx0MB8GA1UdIwQYMBaAFEvZmUvFz/nstmg8lNxu7NXu7g54 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDBGQy81NUYyQzRDNjdG MkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1leTJhRHlVM0c3czFlN3VE bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1M5bVpTOFhQLWV5MmFEeVUzRzdzMWU3dURuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDBGQy81NUYyQzRDNjdGMkYxMUVBQURGNEJGNkFDNEY5QUUwMi9TOW1aUzhYUC1l eTJhRHlVM0c3czFlN3VEbmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAwRqlA2sKUl6eEb3EbWJGGMfuzi6bo2Otx9UldOOhqdgQiKsY/VYjd9UVQxUd t3cWtR4U5tR8xvauiTxm593ph7QiakYXROaL+SQEebhyJZ3zRbYSuMJeVQw3HXGk vXaSQIEimAQryBE/22GjERj/dztDhjcNP9/s0TdYlt5Zi/rwHgZXyBFWO6p96i3q 5m4VJ7/WZxxpoChipJQhn5/rPjlESB2r4hEkzKRCO8fmyrh+o+dCBl3i4SVaT+FA GiTWlCizQmg+JFRPOKpkl7Mbhh98ZA6s9rus8UaNBnVX8rByGvacBSZ5Sd4+arpM E13YjA9UKCvXD3i8rVWruUdp5w== -----END CERTIFICATE-----Generated at Mon Mar 23 23:15:49 2026 by rpki-client