$ rpki-client -vvf rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft File: cGWovjQWOF29AyJATk9jTG7-XYI.mft (raw, json) Hash identifier: t8MRwlKgnGkqVnzCPRyQUWn5/q9TVTJW1HGKRfEHeAs= Subject key identifier: 2B:B0:51:56:07:C6:5B:E1:2A:39:92:AA:0F:8A:E3:D5:82:2D:E3:43 Authority key identifier: 70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 Certificate issuer: /CN=A9125AE9/serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Certificate serial: 031E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft Manifest number: 0316 Signing time: Sun 01 Mar 2026 01:58:22 +0000 Manifest this update: Sun 01 Mar 2026 01:58:22 +0000 Manifest next update: Sun 08 Mar 2026 01:58:22 +0000 Files and hashes: 1: cGWovjQWOF29AyJATk9jTG7-XYI.crl (hash: fUJOR1/eDknhlIs+W85dhN4JR9o1xBUCcGKdegbAYIM=) 2: 6FE0D496064A11EDA0A92068C4F9AE02.roa (hash: JRRHFHRH/uVW0PHutMy6lJB/eW/QXu294EFbaPi8iXI=) 3: 70BB6C14064A11EDA0A92068C4F9AE02.roa (hash: JT4dplBUu4v9YQvNGUvDei5LqVZTJF+BU50zqJrOD2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 01:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 798 (0x31e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125AE9, serialNumber=7065A8BE3416385DBD0322404E4F634C6EFE5D82 Validity Not Before: Mar 1 01:58:22 2026 GMT Not After : Mar 8 01:58:22 2026 GMT Subject: CN=69a39d3e-b08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:67:19:b0:31:ad:e1:aa:b3:5c:57:2c:c5: 61:c9:99:5c:c8:7e:fe:b7:56:d1:50:99:48:e6:9b: 52:b3:ea:26:ac:86:30:6b:39:73:17:c0:6e:fa:80: 45:4e:8b:3a:bc:2c:dd:8f:52:8b:a4:6a:24:09:3e: 1f:97:a2:77:d5:7e:95:f6:1a:da:d0:cd:46:a1:5c: b8:42:48:a2:10:65:30:84:a1:cc:6e:9b:04:05:36: 92:12:4a:43:fc:04:18:32:fd:6e:46:55:f0:ec:4c: f0:77:55:4a:53:03:34:31:c5:8e:72:af:92:7b:bf: f7:9d:fd:63:0e:46:b7:9c:6a:27:0f:41:a1:8e:27: e7:f2:7e:92:b3:7d:fb:a7:20:8f:24:f7:0a:1f:96: 53:8e:6c:bf:42:45:d0:2c:e3:fe:61:50:ba:78:88: 29:08:38:0c:f1:5a:6c:2e:52:d0:b5:11:2e:b4:0f: b1:3a:29:63:aa:c0:92:21:e5:6b:2d:cf:d7:e0:91: 8e:80:7f:c1:f1:fc:fa:75:cd:eb:d9:2a:3c:6b:97: fa:64:2e:a4:9f:b3:a4:aa:03:68:fd:aa:d5:84:a7: d2:ad:a3:79:77:07:65:32:13:da:c4:85:66:65:e6: 5c:0a:34:b3:28:31:99:d1:ab:96:26:ab:db:36:4e: cb:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B0:51:56:07:C6:5B:E1:2A:39:92:AA:0F:8A:E3:D5:82:2D:E3:43 X509v3 Authority Key Identifier: keyid:70:65:A8:BE:34:16:38:5D:BD:03:22:40:4E:4F:63:4C:6E:FE:5D:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGWovjQWOF29AyJATk9jTG7-XYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125AE9/FFEB7F9A064611ED9CB73163C4F9AE02/cGWovjQWOF29AyJATk9jTG7-XYI.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:4d:31:6b:d3:3e:73:46:c9:09:9f:65:cc:95:3a:5e:be:2c: 05:ec:18:11:2c:38:e6:f0:ae:3d:37:fd:97:94:68:01:bc:93: 5b:a2:5d:bd:3f:d3:8b:e6:4e:97:ec:aa:78:f3:f5:54:fc:5a: 9f:82:d8:e2:46:a0:0f:32:b3:3b:85:c2:8f:7a:11:52:bb:bb: 18:80:32:2b:0e:b9:19:71:c0:8d:98:52:4a:c9:ee:59:e5:2e: d5:03:61:cb:a6:de:81:af:8d:bf:a8:31:50:b8:96:0b:5a:18: 82:6d:b2:0e:80:fb:4a:ab:d0:ed:60:54:d1:54:3a:47:c9:11: 76:08:83:88:4e:2a:08:90:b0:d9:cf:b2:03:f3:92:69:fb:f1: 4c:26:ff:33:e5:f0:3e:5e:23:71:40:a7:e0:b8:00:22:c1:63: 49:20:87:7c:bf:3b:9f:e7:f9:c4:97:c9:f6:aa:0b:47:77:23: 52:26:e0:cb:dd:c2:3c:76:a2:95:29:f4:ef:11:21:6a:6d:74: 4b:a2:b1:f6:bb:3d:0c:41:0d:82:94:c1:30:51:c2:ba:0b:4e: 37:82:c5:b5:9a:3f:06:01:ff:ae:1d:96:83:fb:5c:72:8d:60: 3d:58:05:6a:fd:15:4a:c9:ec:e4:6a:1a:a4:07:b8:95:55:ed: 6f:9b:10:d7 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVBRTkxMTAvBgNVBAUTKDcwNjVBOEJFMzQxNjM4NURCRDAzMjI0MDRFNEY2MzRD NkVGRTVEODIwHhcNMjYwMzAxMDE1ODIyWhcNMjYwMzA4MDE1ODIyWjAYMRYwFAYD VQQDDA02OWEzOWQzZS1iMDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKJnGbAxreGqs1xXLMVhyZlcyH7+t1bRUJlI5ptSs+omrIYwazlzF8Bu+oBF Tos6vCzdj1KLpGokCT4fl6J31X6V9hra0M1GoVy4QkiiEGUwhKHMbpsEBTaSEkpD /AQYMv1uRlXw7Ezwd1VKUwM0McWOcq+Se7/3nf1jDka3nGonD0Ghjifn8n6Ss337 pyCPJPcKH5ZTjmy/QkXQLOP+YVC6eIgpCDgM8VpsLlLQtREutA+xOiljqsCSIeVr Lc/X4JGOgH/B8fz6dc3r2So8a5f6ZC6kn7OkqgNo/arVhKfSraN5dwdlMhPaxIVm ZeZcCjSzKDGZ0auWJqvbNk7LkQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCuwUVYH xlvhKjmSqg+K49WCLeNDMB8GA1UdIwQYMBaAFHBlqL40FjhdvQMiQE5PY0xu/l2C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUFFOS9GRkVCN0Y5QTA2 NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09GMjlBeUpBVGs5alRHNy1Y WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NHV292alFXT0YyOUF5SkFUazlqVEc3LVhZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUFFOS9GRkVCN0Y5QTA2NDYxMUVEOUNCNzMxNjNDNEY5QUUwMi9jR1dvdmpRV09G MjlBeUpBVGs5alRHNy1YWUkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAtE0xa9M+c0bJCZ9lzJU6Xr4sBewYESw45vCuPTf9l5RoAbyTW6JdvT/Ti+ZO l+yqePP1VPxan4LY4kagDzKzO4XCj3oRUru7GIAyKw65GXHAjZhSSsnuWeUu1QNh y6bega+Nv6gxULiWC1oYgm2yDoD7SqvQ7WBU0VQ6R8kRdgiDiE4qCJCw2c+yA/OS afvxTCb/M+XwPl4jcUCn4LgAIsFjSSCHfL87n+f5xJfJ9qoLR3cjUibgy93CPHai lSn07xEham10S6Kx9rs9DEENgpTBMFHCugtON4LFtZo/BgH/rh2Wg/tcco1gPVgF av0VSsns5GoapAe4lVXtb5sQ1w== -----END CERTIFICATE-----Generated at Mon Mar 2 00:51:26 2026 by rpki-client