$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft File: v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft (raw, json) Hash identifier: Y6jnIo6gm9DGwNut32L5VjpZ0qjKSRGKq78vlU/NtXI= Subject key identifier: 2D:FD:C1:E2:98:30:7A:EF:8B:0D:F1:56:D2:15:A7:36:F9:8D:C8:B5 Authority key identifier: BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 Certificate issuer: /CN=A9123F5D/serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Certificate serial: 0B0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft Manifest number: 0AEF Signing time: Sat 28 Feb 2026 19:38:57 +0000 Manifest this update: Sat 28 Feb 2026 19:38:56 +0000 Manifest next update: Sat 07 Mar 2026 19:38:56 +0000 Files and hashes: 1: v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl (hash: i+b83G27W1Gw+wEjZ6JSG9/Nn0bzAMMkOylhfz4yCHo=) 2: 99CFA3844DF511ED91A8AB4BC4F9AE02.roa (hash: SvGpd5pCGO9/pwIUeRowgxIT0zcF1gs1tLMG2Scm/1Q=) 3: 4DF99E0E934311ED882FFE24C4F9AE02.roa (hash: UQI8Fd4IsbMRQfXyTMFvSmN0fjZzMOEN8kbfmrroqXA=) 4: AF4E5B08483911EEB846EA36C4F9AE02.roa (hash: O6xTukSXkRkmptzUfSfbkc6euxNs5PIvwDcK/m8EIkw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 19:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2831 (0xb0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123F5D, serialNumber=BF522D9925A5846280F60530AD39D766E4ABF093 Validity Not Before: Feb 28 19:38:56 2026 GMT Not After : Mar 7 19:38:56 2026 GMT Subject: CN=69a34451-a96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f6:30:d3:61:01:74:40:ea:a4:24:8b:1d:91: 5c:49:f5:7d:85:c9:5a:7b:77:2c:e0:64:1b:cc:1a: 22:0b:7d:43:2b:f2:d1:f5:de:20:d9:f2:7a:ca:09: 58:e5:3e:9b:b7:44:bf:1f:db:cd:e4:4f:8f:3b:cd: 11:23:fc:3a:b7:86:2d:8d:78:5b:0f:70:96:6a:41: c6:1f:b9:b5:13:b5:b9:01:cd:9f:a6:23:38:92:74: e6:37:0b:38:9f:96:fc:e7:d5:d6:89:75:ac:6e:a7: 82:c4:c5:2a:96:4e:2f:95:14:b6:47:01:e3:e4:df: 53:01:fc:2f:25:f0:9a:fd:85:49:19:25:ac:2d:3f: 80:b6:bd:a6:f5:09:65:17:95:6c:12:f5:7a:e9:ce: 22:e2:85:ba:fc:d3:09:33:f0:41:ff:18:30:56:f5: 34:ff:b7:c4:3e:76:e4:ad:93:ac:44:de:df:77:54: f4:fd:68:ce:b5:c3:b9:5b:65:94:bf:77:6c:17:12: 39:22:be:56:12:19:77:3e:09:50:86:3d:ca:aa:bd: 54:62:da:15:b4:5f:51:b7:b3:b0:bf:a6:7a:b9:ea: 0b:bd:18:1b:c5:93:f8:04:ed:d7:0e:29:22:6a:ba: 3c:36:71:41:d6:21:eb:ff:a7:57:8d:e6:96:73:19: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FD:C1:E2:98:30:7A:EF:8B:0D:F1:56:D2:15:A7:36:F9:8D:C8:B5 X509v3 Authority Key Identifier: keyid:BF:52:2D:99:25:A5:84:62:80:F6:05:30:AD:39:D7:66:E4:AB:F0:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1ItmSWlhGKA9gUwrTnXZuSr8JM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F5D/75F875F2669011EA9683FB2FC4F9AE02/v1ItmSWlhGKA9gUwrTnXZuSr8JM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:12:1e:73:ad:6f:4c:52:f1:81:b1:6a:aa:de:81:6b:32:64: 12:20:92:f8:d7:39:11:8f:81:05:c2:87:56:45:ff:84:58:75: dd:b0:5e:07:ec:a5:1e:14:b8:52:b8:b1:9b:30:5d:a4:fb:c5: 42:80:77:5f:43:9a:1b:8a:56:06:d6:ae:d7:d6:fe:b3:d1:fc: 76:f9:ad:0a:60:3d:ee:4e:78:a4:c8:49:3c:9b:a3:ef:64:1a: 04:2a:b8:8c:4e:38:1e:ce:04:0c:a8:ef:b0:6a:7d:e4:f2:1f: 18:0c:ad:e6:41:fd:b8:c0:1d:0a:91:7b:64:b0:11:d4:9b:12: 8a:23:e7:31:d3:b0:e4:19:eb:e4:1f:5f:02:eb:b9:0c:63:44: 5c:6d:28:39:b7:3f:de:34:71:dd:2b:cb:bf:9a:a9:11:3c:00: 5e:8e:32:e1:3f:01:d7:f7:7c:b0:0f:0f:e3:fb:d6:7f:a0:95: 54:b8:11:4b:48:60:5b:38:51:34:45:f2:d8:8c:46:d8:d8:43: a9:96:0c:01:1b:ca:43:36:4f:25:52:ed:2f:dc:7e:75:f4:e9: a3:e2:80:e8:19:02:2e:cb:e8:09:d5:dd:d2:42:5a:fa:06:00: 2b:e8:85:75:fc:d4:12:ca:b0:63:39:0d:62:2c:8c:d0:a8:f0: 1b:51:f8:90 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCw8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjNGNUQxMTAvBgNVBAUTKEJGNTIyRDk5MjVBNTg0NjI4MEY2MDUzMEFEMzlENzY2 RTRBQkYwOTMwHhcNMjYwMjI4MTkzODU2WhcNMjYwMzA3MTkzODU2WjAYMRYwFAYD VQQDDA02OWEzNDQ1MS1hOTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/Yw02EBdEDqpCSLHZFcSfV9hclae3cs4GQbzBoiC31DK/LR9d4g2fJ6yglY 5T6bt0S/H9vN5E+PO80RI/w6t4YtjXhbD3CWakHGH7m1E7W5Ac2fpiM4knTmNws4 n5b859XWiXWsbqeCxMUqlk4vlRS2RwHj5N9TAfwvJfCa/YVJGSWsLT+Atr2m9Qll F5VsEvV66c4i4oW6/NMJM/BB/xgwVvU0/7fEPnbkrZOsRN7fd1T0/WjOtcO5W2WU v3dsFxI5Ir5WEhl3PglQhj3Kqr1UYtoVtF9Rt7Owv6Z6ueoLvRgbxZP4BO3XDiki aro8NnFB1iHr/6dXjeaWcxmm8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC39weKY MHrviw3xVtIVpzb5jci1MB8GA1UdIwQYMBaAFL9SLZklpYRigPYFMK0512bkq/CT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyM0Y1RC83NUY4NzVGMjY2 OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhHS0E5Z1V3clRuWFp1U3I4 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxSXRtU1dsaEdLQTlnVXdyVG5YWnVTcjhKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy M0Y1RC83NUY4NzVGMjY2OTAxMUVBOTY4M0ZCMkZDNEY5QUUwMi92MUl0bVNXbGhH S0E5Z1V3clRuWFp1U3I4Sk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAghIec61vTFLxgbFqqt6BazJkEiCS+Nc5EY+BBcKHVkX/hFh13bBeB+ylHhS4 UrixmzBdpPvFQoB3X0OaG4pWBtau19b+s9H8dvmtCmA97k54pMhJPJuj72QaBCq4 jE44Hs4EDKjvsGp95PIfGAyt5kH9uMAdCpF7ZLAR1JsSiiPnMdOw5Bnr5B9fAuu5 DGNEXG0oObc/3jRx3SvLv5qpETwAXo4y4T8B1/d8sA8P4/vWf6CVVLgRS0hgWzhR NEXy2IxG2NhDqZYMARvKQzZPJVLtL9x+dfTpo+KA6BkCLsvoCdXd0kJa+gYAK+iF dfzUEsqwYzkNYiyM0KjwG1H4kA== -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:14 2026 by rpki-client