$ rpki-client -vvf rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft File: 9kmjoLYxxWnKvzPjzkXIqllY3AU.mft (raw, json) Hash identifier: LHEgEv4FRrgDp182mhNpFJWscmYJFuMyTDncEEYwJmc= Subject key identifier: 9B:34:7B:C2:52:D0:AC:67:F4:DF:1E:C6:D8:B7:67:8A:13:FB:4D:AA Authority key identifier: F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 Certificate issuer: /CN=A9166D02/serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft Manifest number: 15 Signing time: Mon 02 Mar 2026 12:44:56 +0000 Manifest this update: Mon 02 Mar 2026 12:44:55 +0000 Manifest next update: Mon 09 Mar 2026 12:44:55 +0000 Files and hashes: 1: 9kmjoLYxxWnKvzPjzkXIqllY3AU.crl (hash: s8IARvs5cWKxLWvBIgcnOxnrubbqs80zrhe4M7IxwcU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9166D02, serialNumber=F649A3A0B631C569CABF33E3CE45C8AA5958DC05 Validity Not Before: Mar 2 12:44:55 2026 GMT Not After : Mar 9 12:44:55 2026 GMT Subject: CN=69a58648-41f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:96:2f:54:c0:7c:15:8a:d6:67:53:d8:bd: a1:ab:88:0e:21:1a:e3:b5:2b:40:3d:6f:ac:d2:2f: 61:ca:05:c6:10:f9:d8:3e:25:f2:a0:c5:1a:1b:95: 41:5d:a0:2e:8e:62:a1:a6:ae:2e:99:90:85:1f:fa: af:43:ab:8c:d2:7c:97:97:8f:73:69:bc:ee:05:9b: 9e:cc:b7:cb:ac:e8:0a:4d:75:04:82:71:8f:40:0b: e2:81:22:35:64:ba:7e:ed:1e:bd:71:a8:b0:cf:f5: 1f:2b:80:f0:c2:0d:66:84:bc:19:b3:53:6c:c9:d8: c2:10:c5:d2:a0:57:de:d4:24:50:0b:3a:85:ea:37: ed:ed:a3:a9:9f:c1:78:e7:90:3b:59:86:50:93:76: 5d:65:bc:ab:c4:fb:8b:7c:0a:c8:21:29:80:28:00: 98:9e:5a:1f:18:e8:c1:20:c7:af:ae:1a:b6:97:99: 49:0c:a8:ee:64:9e:a1:c7:c7:d0:46:d0:b5:72:ed: 0a:fb:cd:17:27:98:f5:50:70:60:9a:59:88:d5:1b: e0:3a:04:12:92:21:36:f9:e0:39:25:b3:54:4c:70: 92:64:13:32:68:dd:e1:c1:8d:83:6e:7d:3d:1c:66: 44:00:2c:4b:7c:7d:c1:82:1f:9e:df:9c:41:aa:ac: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:34:7B:C2:52:D0:AC:67:F4:DF:1E:C6:D8:B7:67:8A:13:FB:4D:AA X509v3 Authority Key Identifier: keyid:F6:49:A3:A0:B6:31:C5:69:CA:BF:33:E3:CE:45:C8:AA:59:58:DC:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9kmjoLYxxWnKvzPjzkXIqllY3AU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166D02/C7B0A3BC00DE11F1B34EAD84756F56BC/9kmjoLYxxWnKvzPjzkXIqllY3AU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:be:a4:2d:f8:e6:e3:59:b9:00:92:d4:2f:9d:56:c3:80:b2: 25:4a:89:27:a4:5c:15:04:62:2d:9c:b0:75:1c:ae:e5:2d:87: 4f:3c:ad:9a:67:fc:0d:10:e4:b2:76:ff:7e:c7:50:58:c0:73: ee:7e:ad:16:1e:b9:f0:7f:01:b5:35:0d:8a:b1:24:0c:39:df: 79:7d:d2:fe:b5:67:d1:14:9c:d4:df:a5:e5:2e:52:35:11:17: cf:7e:a3:46:30:1f:c7:39:e2:58:47:de:0b:b1:e1:fd:43:5b: ec:68:6c:9a:2c:f0:dd:06:b0:83:9d:fb:ef:fa:44:34:66:c0: f2:8d:c5:cf:35:cd:c1:69:0a:d2:cc:a6:6c:fc:57:93:3c:37: 69:e9:2b:00:38:43:c8:dc:98:2e:a9:4f:19:75:36:9a:d2:cf: 35:93:60:f7:9b:a6:95:db:b5:7d:1b:e8:c9:cc:06:8a:03:ac: ab:8c:bd:f3:0f:cc:20:c0:a2:92:17:49:60:5f:bf:07:95:6c: 2a:aa:db:5f:35:85:a9:ca:95:fc:32:77:e9:74:6c:94:46:89: 73:8e:f5:a9:2d:b5:1f:8b:f2:55:5c:0f:07:35:45:ec:c3:e1: 2c:84:ec:90:ad:91:04:21:11:b5:31:ce:1e:0c:de:ba:42:b6: 3f:fa:0d:29 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NkQwMjExMC8GA1UEBRMoRjY0OUEzQTBCNjMxQzU2OUNBQkYzM0UzQ0U0NUM4QUE1 OTU4REMwNTAeFw0yNjAzMDIxMjQ0NTVaFw0yNjAzMDkxMjQ0NTVaMBgxFjAUBgNV BAMTDTY5YTU4NjQ4LTQxZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCFJYvVMB8FYrWZ1PYvaGriA4hGuO1K0A9b6zSL2HKBcYQ+dg+JfKgxRoblUFd oC6OYqGmri6ZkIUf+q9Dq4zSfJeXj3NpvO4Fm57Mt8us6ApNdQSCcY9AC+KBIjVk un7tHr1xqLDP9R8rgPDCDWaEvBmzU2zJ2MIQxdKgV97UJFALOoXqN+3to6mfwXjn kDtZhlCTdl1lvKvE+4t8CsghKYAoAJieWh8Y6MEgx6+uGraXmUkMqO5knqHHx9BG 0LVy7Qr7zRcnmPVQcGCaWYjVG+A6BBKSITb54Dkls1RMcJJkEzJo3eHBjYNufT0c ZkQALEt8fcGCH57fnEGqrA+LAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUmzR7wlLQ rGf03x7G2LdnihP7TaowHwYDVR0jBBgwFoAU9kmjoLYxxWnKvzPjzkXIqllY3AUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RDAyL0M3QjBBM0JDMDBE RTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFduS3Z6UGp6a1hJcWxsWTNB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOWttam9MWXh4V25LdnpQanprWElxbGxZM0FVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2 RDAyL0M3QjBBM0JDMDBERTExRjFCMzRFQUQ4NDc1NkY1NkJDLzlrbWpvTFl4eFdu S3Z6UGp6a1hJcWxsWTNBVS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQAWvqQt+ObjWbkAktQvnVbDgLIlSoknpFwVBGItnLB1HK7lLYdPPK2aZ/wNEOSy dv9+x1BYwHPufq0WHrnwfwG1NQ2KsSQMOd95fdL+tWfRFJzU36XlLlI1ERfPfqNG MB/HOeJYR94LseH9Q1vsaGyaLPDdBrCDnfvv+kQ0ZsDyjcXPNc3BaQrSzKZs/FeT PDdp6SsAOEPI3JguqU8ZdTaa0s81k2D3m6aV27V9G+jJzAaKA6yrjL3zD8wgwKKS F0lgX78HlWwqqttfNYWpypX8MnfpdGyURolzjvWpLbUfi/JVXA8HNUXsw+EshOyQ rZEEIRG1Mc4eDN66QrY/+g0p -----END CERTIFICATE-----Generated at Mon Mar 2 18:06:32 2026 by rpki-client