$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft File: c7ohvjbd39WGkBFtbux73H7--yg.mft (raw, json) Hash identifier: vM5SFNVar8+Pu605WBXZ8a4wCYLupqwLtCFL+jyHaBw= Subject key identifier: 95:23:61:F2:E9:DE:9D:5F:4E:CD:97:BF:FA:F6:D9:42:21:28:90:E7 Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 Certificate issuer: /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Certificate serial: 0445 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft Manifest number: 040A Signing time: Mon 02 Mar 2026 00:49:50 +0000 Manifest this update: Mon 02 Mar 2026 00:49:49 +0000 Manifest next update: Mon 09 Mar 2026 00:49:49 +0000 Files and hashes: 1: c7ohvjbd39WGkBFtbux73H7--yg.crl (hash: zJpcJFRBspAEdRYdAig3BvzD0b+a6dy5q3ri1RxIWAE=) 2: 9B39DA4A17B611F0949B3513C4F9AE02.roa (hash: c8UFaho10sHWq4V66Fx+BVNv/vFU1ajRLCGfXC+In2c=) 3: DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (hash: wHIEc0JT3olfj86i79xTv/WCaO/VfEKTQ7Om7UWFzE4=) 4: 1ABD64C4FC4B11EC9E374483C4F9AE02.roa (hash: UcvM8IWUVo62fNbVlItsUgMGb0u4yppk8S9qIfLe7pI=) 5: 3143DEC26C8811EEBAB7F227C4F9AE02.roa (hash: bujDqUQBYDEOHRylquQ9lrhwkzTG5J4D6+3AWwTVyYY=) 6: AB95EEC4BCFA11EDAD328D3AC4F9AE02.roa (hash: kHDQejmqjPobOzP4RpQqwvEFOqclUXhG9PAka+bN9iQ=) 7: 63F359F0620711EE8BBCFF68C4F9AE02.roa (hash: XKoeDmYjE0yysdP5l673w8or1oKAp76jZNEv1XZ67fc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1093 (0x445) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28 Validity Not Before: Mar 2 00:49:49 2026 GMT Not After : Mar 9 00:49:49 2026 GMT Subject: CN=69a4deae-976c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a2:e7:7b:3d:c2:89:9d:88:33:41:74:28:6f: 94:29:4d:ee:bf:09:6e:04:ef:72:63:2b:df:45:93: 50:21:05:13:84:e8:e2:50:bf:ad:4f:50:64:72:f3: c7:c8:0d:3c:41:4a:97:5d:73:ef:5f:d5:bd:41:e3: 7f:fe:5e:53:83:27:53:ac:55:f1:6a:6d:14:79:c2: e3:34:94:4d:4f:98:8b:ce:77:fb:90:f1:ca:35:1e: b3:a6:27:34:ed:1a:a4:82:24:fe:23:b6:1d:6c:6f: 3c:de:22:f6:81:b0:92:84:40:d4:07:d0:37:23:55: 86:a5:a9:f2:40:c5:05:5a:91:9d:d5:29:ea:d7:ff: ac:fa:db:44:e7:ab:ec:6b:60:49:34:d5:40:a4:a8: 73:62:4a:85:a6:ad:fb:67:9a:f7:8b:bc:ba:04:ab: 54:cf:04:6e:58:00:e6:2d:a5:25:e5:de:e5:81:75: 1f:77:37:6a:a3:63:36:ee:12:1a:0a:a4:b8:3d:a7: ba:2b:06:01:7c:d5:14:39:af:16:fe:86:42:6b:a7: 22:70:02:e5:06:b8:41:ba:bd:38:8d:57:de:d6:b5: d0:c2:e3:cc:58:01:02:d1:23:e9:46:e8:5c:6a:35: b3:45:fc:16:34:d6:fd:64:a1:27:b9:01:ab:dd:a7: e0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:23:61:F2:E9:DE:9D:5F:4E:CD:97:BF:FA:F6:D9:42:21:28:90:E7 X509v3 Authority Key Identifier: keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:55:fe:66:aa:2a:db:f2:4c:21:9b:04:86:bc:ad:0e:44:e9: 5a:ee:76:0f:fc:ed:ab:b9:fb:ab:8d:66:61:fa:2e:18:60:cf: 93:f5:5e:df:02:0c:c1:c0:0a:e8:df:d1:91:ab:17:50:b6:35: d9:4c:d1:ce:f9:06:2f:1f:6e:6f:c2:76:79:b9:eb:e7:ca:69: 79:2c:8c:ef:b7:8c:79:de:84:34:00:b2:83:d0:70:4b:e2:52: ec:20:c9:e3:fb:c3:b7:49:31:3d:f8:d7:c6:f9:97:98:0c:96: d4:2b:5b:5f:72:eb:db:5f:52:ad:66:70:fb:6f:cb:dc:e0:ce: aa:00:8d:04:66:10:c1:85:2b:a7:f2:c9:10:a3:de:fd:9e:b8: 90:cb:59:ae:43:09:7b:aa:84:15:0a:1b:2e:80:20:d8:5b:8e: 95:ae:a1:4a:86:8e:17:28:94:ac:08:36:fd:64:87:7e:7b:96: 18:c7:40:70:45:c5:6d:52:e8:b8:2d:4d:bc:3b:eb:bd:b0:81: 27:ad:a1:33:87:46:95:dd:5e:ab:24:65:10:1b:72:99:dc:a6: 71:42:b7:95:b3:22:44:a0:15:71:ba:09:cf:8d:5a:fc:83:93: df:04:f3:cf:6e:17:dc:6e:3f:e6:e2:b1:c4:0a:da:8d:62:03: 80:1d:ed:04 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdGQzIxMTAvBgNVBAUTKDczQkEyMUJFMzZERERGRDU4NjkwMTE2RDZFRUM3QkRD N0VGRUZCMjgwHhcNMjYwMzAyMDA0OTQ5WhcNMjYwMzA5MDA0OTQ5WjAYMRYwFAYD VQQDEw02OWE0ZGVhZS05NzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi6Lnez3CiZ2IM0F0KG+UKU3uvwluBO9yYyvfRZNQIQUThOjiUL+tT1BkcvPH yA08QUqXXXPvX9W9QeN//l5TgydTrFXxam0UecLjNJRNT5iLznf7kPHKNR6zpic0 7RqkgiT+I7YdbG883iL2gbCShEDUB9A3I1WGpanyQMUFWpGd1Snq1/+s+ttE56vs a2BJNNVApKhzYkqFpq37Z5r3i7y6BKtUzwRuWADmLaUl5d7lgXUfdzdqo2M27hIa CqS4Pae6KwYBfNUUOa8W/oZCa6cicALlBrhBur04jVfe1rXQwuPMWAEC0SPpRuhc ajWzRfwWNNb9ZKEnuQGr3afg0wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUjYfLp 3p1fTs2Xv/r22UIhKJDnMB8GA1UdIwQYMBaAFHO6Ib423d/VhpARbW7se9x+/vso MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0ZDMi81RTMwQkY3MEJC QTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5V0drQkZ0YnV4NzNINy0t eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3b2h2amJkMzlXR2tCRnRidXg3M0g3LS15Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0ZDMi81RTMwQkY3MEJCQTYxMUVDQkFGNDMxNTZDNEY5QUUwMi9jN29odmpiZDM5 V0drQkZ0YnV4NzNINy0teWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAilX+Zqoq2/JMIZsEhrytDkTpWu52D/ztq7n7q41mYfouGGDPk/Ve3wIMwcAK 6N/RkasXULY12UzRzvkGLx9ub8J2ebnr58ppeSyM77eMed6ENACyg9BwS+JS7CDJ 4/vDt0kxPfjXxvmXmAyW1CtbX3Lr219SrWZw+2/L3ODOqgCNBGYQwYUrp/LJEKPe /Z64kMtZrkMJe6qEFQobLoAg2FuOla6hSoaOFyiUrAg2/WSHfnuWGMdAcEXFbVLo uC1NvDvrvbCBJ62hM4dGld1eqyRlEBtymdymcUK3lbMiRKAVcboJz41a/IOT3wTz z24X3G4/5uKxxArajWIDgB3tBA== -----END CERTIFICATE-----Generated at Mon Mar 2 08:32:23 2026 by rpki-client