$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft File: D9Qkj9SLoa4LYNjPakPbM7b09ro.mft (raw, json) Hash identifier: 3zTr9m4H8HYlYIJmJYE//8q7mnKcXUXdh026wGGveNI= Subject key identifier: D4:B1:8A:F0:AC:E0:71:91:D3:DC:1E:2E:4F:74:DC:82:AC:28:08:40 Authority key identifier: 0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA Certificate issuer: /CN=A911B5AC/serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Certificate serial: 0263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft Manifest number: 025D Signing time: Mon 02 Mar 2026 01:10:00 +0000 Manifest this update: Mon 02 Mar 2026 01:09:58 +0000 Manifest next update: Mon 09 Mar 2026 01:09:58 +0000 Files and hashes: 1: D9Qkj9SLoa4LYNjPakPbM7b09ro.crl (hash: mkzqdm+7y7ex105UcB59Mf2F073XfzzLNQdHwee/FK0=) 2: CA181F42791211ED9D926781C4F9AE02.roa (hash: yfzx4N8e3wjfsr320pF+EFitreK6BjvCPZ0wmG/4y/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 611 (0x263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=0FD4248FD48BA1AE0B60D8CF6A43DB33B6F4F6BA Validity Not Before: Mar 2 01:09:58 2026 GMT Not After : Mar 9 01:09:58 2026 GMT Subject: CN=69a4e368-399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:59:dc:3f:ef:02:f3:d8:5f:91:3d:18:e7: 5a:52:13:b3:ab:f5:44:cf:75:c1:56:06:db:c7:be: 15:79:87:b7:33:8c:83:76:6e:99:6e:c6:a7:19:09: 78:66:8c:49:eb:e4:a8:09:a2:12:23:4b:fd:55:b5: 4a:ba:97:76:ad:e9:30:1a:04:d4:6e:fe:b0:37:fc: aa:49:84:68:27:35:dd:d1:f9:57:87:20:73:86:5a: 5a:03:81:03:4e:5b:46:84:86:be:70:64:29:a6:85: 98:f9:fc:39:c0:ef:9d:51:50:18:97:83:c5:74:95: b3:18:8a:73:23:fa:dc:17:68:85:d0:c1:3a:5f:15: 8f:4f:44:41:18:29:90:53:28:19:c6:cc:5f:54:ba: 58:94:50:c5:fa:7c:80:25:51:d6:bc:f1:2c:ef:82: 04:92:25:eb:97:d1:b0:3f:cc:95:72:ba:02:43:44: de:82:09:af:c3:10:46:93:f3:59:76:4e:2f:31:98: 27:7e:dc:b7:fc:82:17:be:13:be:88:0b:07:e8:6f: 3c:10:15:bd:01:bd:47:0f:ba:b7:b3:a9:67:ab:a6: 8b:da:a7:6c:c5:36:07:55:5f:1c:58:bb:de:bc:58: 86:11:f2:16:0c:ef:0f:03:64:e7:07:e6:ba:fb:d0: 2f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B1:8A:F0:AC:E0:71:91:D3:DC:1E:2E:4F:74:DC:82:AC:28:08:40 X509v3 Authority Key Identifier: keyid:0F:D4:24:8F:D4:8B:A1:AE:0B:60:D8:CF:6A:43:DB:33:B6:F4:F6:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9Qkj9SLoa4LYNjPakPbM7b09ro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/5FAF5642790E11ED8E7C1B79C4F9AE02/D9Qkj9SLoa4LYNjPakPbM7b09ro.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:08:bb:41:8b:ca:3b:3c:b3:fd:68:44:e2:ef:3a:bd:fe:51: 88:a4:12:50:12:48:0d:ad:32:50:7e:ba:3d:8f:da:a4:ea:9a: d9:02:02:42:9f:23:fc:7d:d1:7c:9d:0d:cd:1d:0c:73:84:62: 21:9e:18:6e:98:ae:d2:4a:0a:e9:c3:27:40:c9:f4:2d:f6:0e: f2:62:ea:77:ba:cb:a1:3d:72:1e:ff:a7:fd:13:10:1c:5a:08: 9e:7f:2d:bc:24:dd:b4:69:97:f6:54:65:52:a3:7a:3d:66:b5: 9b:08:27:60:11:53:f2:c7:31:2d:f8:e1:d8:7a:c2:2c:25:98: d9:5b:d9:0a:d4:96:db:3c:b5:96:13:b6:52:12:16:2c:7d:7d: b2:4c:06:7e:cc:8e:48:92:4b:78:ae:08:0d:9e:4f:43:14:e9: d9:e3:c5:6c:6d:c4:ea:6f:32:33:e0:a7:0b:45:7a:1e:f4:48: 99:36:a4:a8:26:88:25:3d:29:ac:69:7d:4a:a3:e6:2f:73:bb: 7a:89:f5:7e:da:6f:13:66:20:40:8a:1f:60:ff:2a:41:ca:e6: a1:d6:d1:7f:86:8a:24:9c:25:a9:8a:ce:53:28:a0:9b:e5:6e: 92:3f:a2:b9:38:f3:3a:c6:3c:b3:7a:ce:6c:77:64:fc:46:c1: 25:25:65:8e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QUMxMTAvBgNVBAUTKDBGRDQyNDhGRDQ4QkExQUUwQjYwRDhDRjZBNDNEQjMz QjZGNEY2QkEwHhcNMjYwMzAyMDEwOTU4WhcNMjYwMzA5MDEwOTU4WjAYMRYwFAYD VQQDEw02OWE0ZTM2OC0zOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjtZ3D/vAvPYX5E9GOdaUhOzq/VEz3XBVgbbx74VeYe3M4yDdm6ZbsanGQl4 ZoxJ6+SoCaISI0v9VbVKupd2rekwGgTUbv6wN/yqSYRoJzXd0flXhyBzhlpaA4ED TltGhIa+cGQppoWY+fw5wO+dUVAYl4PFdJWzGIpzI/rcF2iF0ME6XxWPT0RBGCmQ UygZxsxfVLpYlFDF+nyAJVHWvPEs74IEkiXrl9GwP8yVcroCQ0TeggmvwxBGk/NZ dk4vMZgnfty3/IIXvhO+iAsH6G88EBW9Ab1HD7q3s6lnq6aL2qdsxTYHVV8cWLve vFiGEfIWDO8PA2TnB+a6+9AvOQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNSxivCs 4HGR09weLk903IKsKAhAMB8GA1UdIwQYMBaAFA/UJI/Ui6GuC2DYz2pD2zO29Pa6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVBQy81RkFGNTY0Mjc5 MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9hNExZTmpQYWtQYk03YjA5 cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Q5UWtqOVNMb2E0TFlOalBha1BiTTdiMDlyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVBQy81RkFGNTY0Mjc5MEUxMUVEOEU3QzFCNzlDNEY5QUUwMi9EOVFrajlTTG9h NExZTmpQYWtQYk03YjA5cm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfgi7QYvKOzyz/WhE4u86vf5RiKQSUBJIDa0yUH66PY/apOqa2QICQp8j/H3R fJ0NzR0Mc4RiIZ4Ybpiu0koK6cMnQMn0LfYO8mLqd7rLoT1yHv+n/RMQHFoInn8t vCTdtGmX9lRlUqN6PWa1mwgnYBFT8scxLfjh2HrCLCWY2VvZCtSW2zy1lhO2UhIW LH19skwGfsyOSJJLeK4IDZ5PQxTp2ePFbG3E6m8yM+CnC0V6HvRImTakqCaIJT0p rGl9SqPmL3O7eon1ftpvE2YgQIofYP8qQcrmodbRf4aKJJwlqYrOUyigm+Vukj+i uTjzOsY8s3rObHdk/EbBJSVljg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:46 2026 by rpki-client