$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft File: 9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json) Hash identifier: G9/OENAhVniuN+nwxrODYpK+l9u8lNPCGiiuUpXeWEU= Subject key identifier: 5D:B8:83:B1:AA:21:DF:4D:85:35:A0:62:75:8E:12:B0:2D:80:0F:AF Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A Certificate issuer: /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft Manifest number: 0D33 Signing time: Mon 02 Mar 2026 00:55:48 +0000 Manifest this update: Mon 02 Mar 2026 00:55:47 +0000 Manifest next update: Mon 09 Mar 2026 00:55:47 +0000 Files and hashes: 1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: Iq6du5UISrd0+6YPSIOihZ3KCU6OJl0GkuQ+P5ogOxA=) 2: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: dpx8Fitt2qY4siqmSbEfm/GdhbE9JZeTjCFinGBWEQo=) 3: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: Ovbz8WfF+7T9XaocM/UJK9R5ceRemZg3T+1seHybZC0=) 4: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: 25uchPCaPtXTzOxA3qUpy/biQoKYvXtI+twbJ4Zclvw=) 5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: bc7ijVo5vduqW8ioP7RB+iEqiSLyRYnkxzY1f8x6Yv8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A Validity Not Before: Mar 2 00:55:47 2026 GMT Not After : Mar 9 00:55:47 2026 GMT Subject: CN=69a4e014-dcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:86:6b:6e:35:0e:5c:66:79:76:77:6d:e6:1f: 46:d8:77:39:ab:a6:66:7f:68:0a:7f:43:95:96:4f: cd:aa:84:9f:4e:25:17:09:7a:75:96:cd:11:8a:70: fe:63:cb:ff:70:78:46:64:6c:cf:2a:f2:15:47:87: 50:76:81:d9:15:4e:d0:24:f7:7e:20:39:a1:78:b9: 2a:c2:6a:44:7b:98:33:b7:5f:0e:9f:a1:f2:60:16: a8:7f:d5:c6:3d:c0:9d:4b:1f:88:ed:2d:8d:a9:57: 1a:3a:13:15:f1:73:66:42:26:19:a7:9f:b7:c7:9e: c5:ec:fe:4a:20:56:1f:5b:6e:cc:c7:b4:9a:c2:57: a9:7d:f8:59:3c:e1:29:24:7f:c3:a9:8f:01:59:e6: fb:f9:d7:b7:53:9f:32:57:ea:1f:6a:cc:29:81:74: 15:9d:80:d2:36:e8:3e:4b:34:8b:7b:8a:29:c4:34: f1:59:c7:4d:33:0b:18:07:31:15:13:0d:ba:3d:f8: 3d:28:6f:90:5c:9f:38:41:4d:8b:24:3a:20:73:7a: b8:79:6b:25:64:73:df:c8:01:74:eb:89:95:42:bd: db:c3:c9:93:0a:18:a1:f4:cd:6a:29:5d:0e:e6:bf: c8:6b:d1:21:a8:7c:c3:9d:a0:65:2a:0f:e3:08:dd: f6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B8:83:B1:AA:21:DF:4D:85:35:A0:62:75:8E:12:B0:2D:80:0F:AF X509v3 Authority Key Identifier: keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:0a:ab:73:9b:17:92:a1:8c:fe:5c:08:ad:ed:db:e3:ce:bf: 37:09:e4:09:7f:aa:7b:79:ff:ca:9a:56:44:ab:53:32:2e:02: 73:6e:96:30:38:aa:83:a8:53:7f:ed:e3:d4:0d:d9:1b:14:98: 8a:b8:36:03:c3:d0:06:37:37:fc:3b:bd:56:34:a5:7b:62:f6: 59:aa:29:36:9f:29:87:9d:19:4f:a7:f9:da:6a:e9:47:9d:ad: 35:5d:4c:75:f0:76:cf:8f:df:a0:3d:0b:3f:b2:97:d1:bb:46: 37:60:ac:26:71:78:d3:67:86:1a:2a:ab:10:60:64:98:94:d9: de:f3:89:2b:02:79:f7:ef:e5:fc:a8:43:ee:c3:23:b1:f8:8f: c7:79:2d:b0:04:7a:38:5e:12:75:42:43:03:97:70:26:ea:ac: 26:a2:f5:85:40:98:7b:46:87:2c:64:6a:bb:6d:a5:9f:c8:bf: c4:50:70:c6:09:35:7e:f7:bb:61:2d:06:e4:5c:42:da:c7:ec: 24:58:a3:9a:13:c3:89:c0:19:d5:a9:74:fd:e5:0d:1f:6a:6d: cb:8c:27:b4:ba:40:69:78:08:3d:34:14:3a:bc:f3:2c:34:cf: 83:84:ab:3f:d3:55:e4:a2:d4:3a:d9:57:97:71:76:ba:4e:21: c0:9e:6a:a0 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENzUxMTAvBgNVBAUTKEY0MzQ1QzMxNEQ2RUJFREVCNDVGRTA3NTVGOEZGRUFD RjM2M0NCOEEwHhcNMjYwMzAyMDA1NTQ3WhcNMjYwMzA5MDA1NTQ3WjAYMRYwFAYD VQQDEw02OWE0ZTAxNC1kY2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7oZrbjUOXGZ5dndt5h9G2Hc5q6Zmf2gKf0OVlk/NqoSfTiUXCXp1ls0RinD+ Y8v/cHhGZGzPKvIVR4dQdoHZFU7QJPd+IDmheLkqwmpEe5gzt18On6HyYBaof9XG PcCdSx+I7S2NqVcaOhMV8XNmQiYZp5+3x57F7P5KIFYfW27Mx7SawlepffhZPOEp JH/DqY8BWeb7+de3U58yV+ofaswpgXQVnYDSNug+SzSLe4opxDTxWcdNMwsYBzEV Ew26Pfg9KG+QXJ84QU2LJDogc3q4eWslZHPfyAF064mVQr3bw8mTChih9M1qKV0O 5r/Ia9EhqHzDnaBlKg/jCN32YwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFF24g7Gq Id9NhTWgYnWOErAtgA+vMB8GA1UdIwQYMBaAFPQ0XDFNbr7etF/gdV+P/qzzY8uK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ3NS83NDM0OTQwRUYy NUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0NjBYLUIxWDRfLXJQTmp5 NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlEUmNNVTF1dnQ2MFgtQjFYNF8tclBOank0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ3NS83NDM0OTQwRUYyNUUxMUU5OTEzMEIxODFDNEY5QUUwMi85RFJjTVUxdXZ0 NjBYLUIxWDRfLXJQTmp5NG8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAHwqrc5sXkqGM/lwIre3b486/NwnkCX+qe3n/yppWRKtTMi4Cc26WMDiqg6hT f+3j1A3ZGxSYirg2A8PQBjc3/Du9VjSle2L2WaopNp8ph50ZT6f52mrpR52tNV1M dfB2z4/foD0LP7KX0btGN2CsJnF402eGGiqrEGBkmJTZ3vOJKwJ59+/l/KhD7sMj sfiPx3ktsAR6OF4SdUJDA5dwJuqsJqL1hUCYe0aHLGRqu22ln8i/xFBwxgk1fve7 YS0G5FxC2sfsJFijmhPDicAZ1al0/eUNH2pty4wntLpAaXgIPTQUOrzzLDTPg4Sr P9NV5KLUOtlXl3F2uk4hwJ5qoA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:59:10 2026 by rpki-client