$ rpki-client -vvf rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft File: pxA_0z9simRI_GOUCql9k_gfgQU.mft (raw, json) Hash identifier: 3cnwAT3N0lRIQ9jNVoh8yNeotZXyGHfm8yTFKvbWOjM= Subject key identifier: 10:EA:A4:56:4F:13:06:D7:52:AB:A4:7D:B2:E5:36:2F:F9:7B:13:BB Authority key identifier: A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 Certificate issuer: /CN=A9126D40/serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Certificate serial: 05D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft Manifest number: 05CE Signing time: Sun 01 Mar 2026 23:57:47 +0000 Manifest this update: Sun 01 Mar 2026 23:57:46 +0000 Manifest next update: Sun 08 Mar 2026 23:57:46 +0000 Files and hashes: 1: pxA_0z9simRI_GOUCql9k_gfgQU.crl (hash: OIWpbv3hOVblgw4fzADhNOCTgifEjnq8ZGjzmg3otGs=) 2: 5B0A7AFCF3F611EB8DD81585C4F9AE02.roa (hash: aqvU+UiVz5EiQm3aVLx9pIrD5pXO9qkeQ5aR6UKmmFg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1492 (0x5d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126D40, serialNumber=A7103FD33F6C8A6448FC63940AA97D93F81F8105 Validity Not Before: Mar 1 23:57:46 2026 GMT Not After : Mar 8 23:57:46 2026 GMT Subject: CN=69a4d27b-620e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7b:05:bd:65:40:8d:1f:25:97:df:76:9b:a3: cb:a4:7d:62:4e:e2:38:ad:61:5d:3b:83:c9:77:52: 3a:ae:dd:ef:ec:1a:5d:20:30:55:56:d0:f2:e0:c6: 9b:ec:7b:89:4d:da:fd:ae:c4:70:f1:22:46:15:43: f2:c5:81:9b:70:c9:42:29:61:b8:14:c0:a8:c8:6c: 51:71:c9:1d:e9:b9:73:6b:85:26:ad:af:99:95:02: fc:32:2c:29:66:b2:53:44:91:4f:4b:f6:bf:26:2f: 69:b6:aa:0b:d6:e8:c7:c2:8d:0f:e7:13:4a:eb:f1: 8e:ae:6a:b9:c2:84:92:25:0d:5d:92:a2:20:96:6d: 8f:86:a1:a5:e9:72:77:aa:c0:a0:e5:3c:83:c5:62: 99:a9:48:e3:4b:88:99:95:69:b7:7e:5d:d9:57:a0: 12:32:46:63:6b:73:fa:a2:99:67:66:6b:22:8d:17: c5:ab:fd:95:cd:79:7e:ce:40:25:81:63:2e:5f:e7: da:db:ee:db:57:cc:e9:33:f0:f6:83:ec:bb:6a:5e: 2d:12:b8:d7:6a:77:31:85:12:ee:9a:ab:1b:88:90: d6:99:c5:cd:cc:fe:8f:eb:39:cf:ea:92:ec:2e:f7: 17:01:4f:42:33:cb:31:ae:87:95:82:67:cd:6e:35: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EA:A4:56:4F:13:06:D7:52:AB:A4:7D:B2:E5:36:2F:F9:7B:13:BB X509v3 Authority Key Identifier: keyid:A7:10:3F:D3:3F:6C:8A:64:48:FC:63:94:0A:A9:7D:93:F8:1F:81:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pxA_0z9simRI_GOUCql9k_gfgQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126D40/3C6333C6F3F311EBA292E580C4F9AE02/pxA_0z9simRI_GOUCql9k_gfgQU.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4d:3b:23:28:44:49:a4:5b:1d:8a:4e:d9:50:11:10:19:d8: e6:ca:52:7e:1a:6b:23:bd:f5:2d:ac:eb:77:fa:7a:f0:df:d2: e2:1e:ec:49:90:01:dc:a4:fe:6f:e5:c2:3d:27:f4:b5:62:3a: 97:e2:9a:56:39:7e:9c:ee:b9:cc:f6:70:89:42:26:50:97:06: cc:21:af:e4:0b:57:9e:7f:1c:29:61:2e:50:5c:76:45:9c:71: 2b:ff:87:91:3c:26:d3:82:10:d9:04:fe:96:53:d1:62:ff:82: 83:95:17:27:5d:bb:1a:d5:ab:da:cc:8f:aa:6e:e9:0b:40:0d: 88:25:77:f6:3b:a1:65:7e:74:00:c3:5d:eb:f2:cf:de:e5:3d: 8a:cf:74:19:e1:50:ea:69:b5:ad:03:f2:6e:9d:8e:2c:54:2a: 51:c8:bd:93:c3:bf:96:ca:80:6a:fb:7e:70:6d:62:d0:64:8e: bd:dc:fe:39:0d:b6:69:b0:85:2a:92:a8:c5:cb:c7:8d:bb:89: 54:36:b9:49:4c:2f:c1:78:07:b8:63:74:f4:a1:33:a4:88:14: 31:42:2e:bc:7e:d2:00:bd:17:af:f6:c6:66:47:22:54:f3:81: b0:21:ee:a5:fb:28:b7:0f:8e:a9:ef:72:76:f7:09:3b:fa:ae: 7b:ac:86:46 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZENDAxMTAvBgNVBAUTKEE3MTAzRkQzM0Y2QzhBNjQ0OEZDNjM5NDBBQTk3RDkz RjgxRjgxMDUwHhcNMjYwMzAxMjM1NzQ2WhcNMjYwMzA4MjM1NzQ2WjAYMRYwFAYD VQQDEw02OWE0ZDI3Yi02MjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjXsFvWVAjR8ll992m6PLpH1iTuI4rWFdO4PJd1I6rt3v7BpdIDBVVtDy4Mab 7HuJTdr9rsRw8SJGFUPyxYGbcMlCKWG4FMCoyGxRcckd6blza4Umra+ZlQL8Miwp ZrJTRJFPS/a/Ji9ptqoL1ujHwo0P5xNK6/GOrmq5woSSJQ1dkqIglm2PhqGl6XJ3 qsCg5TyDxWKZqUjjS4iZlWm3fl3ZV6ASMkZja3P6oplnZmsijRfFq/2VzXl+zkAl gWMuX+fa2+7bV8zpM/D2g+y7al4tErjXancxhRLumqsbiJDWmcXNzP6P6znP6pLs LvcXAU9CM8sxroeVgmfNbjWS0QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBDqpFZP EwbXUqukfbLlNi/5exO7MB8GA1UdIwQYMBaAFKcQP9M/bIpkSPxjlAqpfZP4H4EF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkQ0MC8zQzYzMzNDNkYz RjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2ltUklfR09VQ3FsOWtfZ2Zn UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B4QV8wejlzaW1SSV9HT1VDcWw5a19nZmdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkQ0MC8zQzYzMzNDNkYzRjMxMUVCQTI5MkU1ODBDNEY5QUUwMi9weEFfMHo5c2lt UklfR09VQ3FsOWtfZ2ZnUVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAO007IyhESaRbHYpO2VAREBnY5spSfhprI731Lazrd/p68N/S4h7sSZAB3KT+ b+XCPSf0tWI6l+KaVjl+nO65zPZwiUImUJcGzCGv5AtXnn8cKWEuUFx2RZxxK/+H kTwm04IQ2QT+llPRYv+Cg5UXJ127GtWr2syPqm7pC0ANiCV39juhZX50AMNd6/LP 3uU9is90GeFQ6mm1rQPybp2OLFQqUci9k8O/lsqAavt+cG1i0GSOvdz+OQ22abCF KpKoxcvHjbuJVDa5SUwvwXgHuGN09KEzpIgUMUIuvH7SAL0Xr/bGZkciVPOBsCHu pfsotw+Oqe9ydvcJO/que6yGRg== -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:13 2026 by rpki-client