$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft File: cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft (raw, json) Hash identifier: fC1gYCIw9YlOcGi8N95y2+MsoxNIJkevgRWsGChAV5Y= Subject key identifier: E4:BF:E4:2C:F8:09:3F:D3:EB:E9:71:AF:6E:5C:74:31:B4:43:FE:80 Authority key identifier: 71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 Certificate issuer: /CN=A9125C31/serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Certificate serial: 0C89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft Manifest number: 0C7F Signing time: Sun 01 Mar 2026 22:20:29 +0000 Manifest this update: Sun 01 Mar 2026 22:20:28 +0000 Manifest next update: Sun 08 Mar 2026 22:20:28 +0000 Files and hashes: 1: cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl (hash: p/RxKxSj0/FBlC9e2O/lhvOObE7ilpEBMkEuRBFuluI=) 2: 4697751815B111EA8277BA34C4F9AE02.roa (hash: mpWE3JxWmusWHtsdnUiKvPMOgwCqfgCScdAt8K/8YQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3209 (0xc89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C31, serialNumber=7105372446A2064546D9629F421C376FDCEF21D6 Validity Not Before: Mar 1 22:20:28 2026 GMT Not After : Mar 8 22:20:28 2026 GMT Subject: CN=69a4bbad-dae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4b:52:37:d8:db:68:c3:6d:64:a6:95:25:2d: 00:61:eb:b4:7d:ed:2b:91:18:50:d5:49:42:f1:ba: 68:1d:dc:62:80:c5:80:e8:2d:02:2b:fb:04:c5:09: 9c:9f:18:82:94:ea:50:aa:ef:2a:f8:81:9c:d0:21: 5e:8c:41:35:e5:4f:a6:f5:51:70:ec:93:7d:e6:79: 63:47:1c:02:ef:d4:41:1b:f7:c6:4d:27:b2:4c:58: 7b:3d:fc:16:5b:4d:b8:da:90:5e:ec:d7:f5:0e:a4: c8:44:f2:f9:17:8c:f1:c4:f3:80:4b:45:14:05:68: a2:ea:42:9c:fc:3e:f3:af:da:e1:c7:17:94:f6:8c: d5:ae:c1:11:95:df:4e:f2:e7:1f:48:13:6b:c4:3e: 3e:3e:91:2e:ee:18:3f:ee:a0:7f:13:38:d4:ab:c3: 69:fb:dc:5b:5a:a1:e8:11:82:ec:91:42:8e:95:70: 1a:45:40:b6:5f:92:de:f1:28:e6:1d:67:93:b7:88: ca:0d:8f:58:bb:67:33:71:45:36:f6:0c:ac:d2:ed: 67:97:0f:f5:8c:4b:63:c7:27:dc:cf:37:b0:a3:83: 57:90:e7:35:c8:d5:09:85:20:44:7c:36:d9:1c:80: 29:33:74:dd:2d:1a:ae:a6:d8:2a:0b:81:19:f4:b5: 36:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BF:E4:2C:F8:09:3F:D3:EB:E9:71:AF:6E:5C:74:31:B4:43:FE:80 X509v3 Authority Key Identifier: keyid:71:05:37:24:46:A2:06:45:46:D9:62:9F:42:1C:37:6F:DC:EF:21:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQU3JEaiBkVG2WKfQhw3b9zvIdY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C31/38BF409A159011EA9C413652C4F9AE02/cQU3JEaiBkVG2WKfQhw3b9zvIdY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:6d:b3:7b:21:fe:7d:c0:d9:c8:57:df:e8:3c:84:13:84:19: 08:11:90:01:12:fa:a0:33:91:1e:b6:3b:cc:d6:a0:a3:11:f0: 15:07:b0:c9:dc:d8:43:0e:57:e2:05:21:9f:1b:cf:61:f6:4f: 59:6b:81:7a:bd:cc:27:98:38:d3:c9:07:7a:ea:11:ac:b9:5b: 43:88:8f:a3:9b:39:85:c6:55:50:3a:64:bb:ea:fd:83:10:36: 3e:08:e5:02:cd:90:1d:94:f1:24:77:34:75:7c:6b:6a:8b:c1: 5b:5e:a2:8b:b4:76:05:71:f2:0f:7b:2d:5e:56:2f:34:e1:c9: b2:93:3a:58:d7:3a:9a:1e:a3:8d:fd:d3:04:84:05:07:9b:39: 55:08:16:01:51:f9:56:67:b6:f4:da:28:71:d9:b1:3a:28:24: 63:9d:4c:c3:23:32:81:70:9d:e9:b9:b9:25:66:89:f1:79:08: c9:39:6d:24:37:58:7e:21:b0:41:d4:c0:84:ba:0c:17:f5:27: 45:92:61:50:77:eb:89:0f:ac:50:77:86:70:db:32:74:99:50: 24:48:c9:4e:0a:4c:74:16:3d:20:ba:92:a4:95:8e:b7:c5:e7: a6:57:27:ac:df:4f:06:90:b6:ed:fc:5c:04:ef:11:41:93:8a: d5:20:e5:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICDIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMzExMTAvBgNVBAUTKDcxMDUzNzI0NDZBMjA2NDU0NkQ5NjI5RjQyMUMzNzZG RENFRjIxRDYwHhcNMjYwMzAxMjIyMDI4WhcNMjYwMzA4MjIyMDI4WjAYMRYwFAYD VQQDEw02OWE0YmJhZC1kYWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20tSN9jbaMNtZKaVJS0AYeu0fe0rkRhQ1UlC8bpoHdxigMWA6C0CK/sExQmc nxiClOpQqu8q+IGc0CFejEE15U+m9VFw7JN95nljRxwC79RBG/fGTSeyTFh7PfwW W0242pBe7Nf1DqTIRPL5F4zxxPOAS0UUBWii6kKc/D7zr9rhxxeU9ozVrsERld9O 8ucfSBNrxD4+PpEu7hg/7qB/EzjUq8Np+9xbWqHoEYLskUKOlXAaRUC2X5Le8Sjm HWeTt4jKDY9Yu2czcUU29gys0u1nlw/1jEtjxyfczzewo4NXkOc1yNUJhSBEfDbZ HIApM3TdLRquptgqC4EZ9LU2QwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOS/5Cz4 CT/T6+lxr25cdDG0Q/6AMB8GA1UdIwQYMBaAFHEFNyRGogZFRtlin0IcN2/c7yHW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMzMS8zOEJGNDA5QTE1 OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJrVkcyV0tmUWh3M2I5enZJ ZFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRVTNKRWFpQmtWRzJXS2ZRaHczYjl6dklkWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMzMS8zOEJGNDA5QTE1OTAxMUVBOUM0MTM2NTJDNEY5QUUwMi9jUVUzSkVhaUJr VkcyV0tmUWh3M2I5enZJZFkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAAW2zeyH+fcDZyFff6DyEE4QZCBGQARL6oDORHrY7zNagoxHwFQewydzYQw5X 4gUhnxvPYfZPWWuBer3MJ5g408kHeuoRrLlbQ4iPo5s5hcZVUDpku+r9gxA2Pgjl As2QHZTxJHc0dXxraovBW16ii7R2BXHyD3stXlYvNOHJspM6WNc6mh6jjf3TBIQF B5s5VQgWAVH5Vme29NoocdmxOigkY51MwyMygXCd6bm5JWaJ8XkIyTltJDdYfiGw QdTAhLoMF/UnRZJhUHfriQ+sUHeGcNsydJlQJEjJTgpMdBY9ILqSpJWOt8Xnplcn rN9PBpC27fxcBO8RQZOK1SDlXg== -----END CERTIFICATE-----Generated at Mon Mar 2 19:29:51 2026 by rpki-client