$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: S5DujrdNre365/b77LYA0VdCjJ78suw7c7988TuRkfw= Subject key identifier: BD:C6:C3:7F:8A:6C:78:EA:8F:B6:51:BC:1A:FB:C8:8E:48:46:3B:37 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 01A7 Signing time: Mon 02 Mar 2026 11:13:12 +0000 Manifest this update: Mon 02 Mar 2026 11:13:11 +0000 Manifest next update: Mon 09 Mar 2026 11:13:11 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: WETNHV4fDXaEJSLbG/1jwU6NYFV4Uv0C80ijVHkM8wM=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: QoE1m+HACK8J3A+YnYjvloYWRg7sbY6UhfCwLWcDdvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 11:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Mar 2 11:13:11 2026 GMT Not After : Mar 9 11:13:11 2026 GMT Subject: CN=69a570c8-5c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7f:19:d4:a0:1a:df:b7:1c:80:00:ac:9f:8b: bc:21:44:43:35:64:ad:2a:36:fe:d8:0b:87:d0:d7: 29:78:31:6f:36:fd:de:cc:3e:16:31:28:53:8d:b0: 32:59:df:54:1f:b4:20:99:07:22:7f:5b:2a:b5:5c: 32:d5:0e:5a:45:5c:eb:7a:25:07:3d:cc:b3:e5:f1: b5:ef:a7:d0:45:64:84:a1:dd:80:66:b2:9d:64:83: fe:b5:7f:44:ab:c8:9c:0e:3f:6d:64:fe:83:88:e7: 46:ce:0d:a0:b2:cc:08:b0:81:1a:28:6d:3b:45:48: 47:e2:68:64:0b:21:0a:20:d4:95:48:01:ad:ac:1a: 77:8f:90:2d:c6:39:fc:f9:26:c9:49:be:e3:fa:c2: 51:78:cd:70:48:d8:41:62:ea:1d:18:02:8f:78:bb: f8:ba:78:7a:c5:22:55:63:b3:e3:08:1c:6d:76:6f: 9c:e1:7c:e7:91:1c:bd:e8:b1:cd:af:38:ce:5d:d3: a7:b9:ed:2f:aa:fc:10:82:2e:4d:97:80:3b:d8:f7: 04:47:a9:56:18:03:61:65:2b:c6:0d:1a:21:f3:be: 83:d1:c5:50:35:68:70:82:38:6a:87:db:f3:88:45: e9:a7:97:1a:80:64:52:56:b8:26:ad:4c:30:b6:c9: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C6:C3:7F:8A:6C:78:EA:8F:B6:51:BC:1A:FB:C8:8E:48:46:3B:37 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b5:6a:85:2a:08:83:c7:0a:a0:af:82:b7:23:2f:42:56:03: 20:7f:7c:8f:3a:77:90:87:2c:57:e7:9a:09:af:20:78:0e:f7: 3a:95:8e:de:e3:02:94:01:cc:06:06:a8:b5:cc:98:6d:ba:31: 12:a0:51:d5:4f:37:59:64:d3:ca:01:64:c5:90:d6:33:c9:72: 4e:34:05:f0:a9:46:0d:40:b7:d5:03:80:f7:ea:16:07:e1:0b: 72:ea:f4:20:3a:c9:53:37:55:60:a2:4e:9c:f0:50:71:59:46: 9f:4c:db:ed:f3:5d:e3:e4:40:3c:7a:fd:e5:c6:36:fa:67:28: 24:cf:71:d2:3f:71:b7:86:aa:c6:59:c3:76:b3:82:eb:e9:d1: b8:04:70:78:08:7a:dc:c0:ce:79:cf:38:d5:81:a9:c6:55:41: f7:c1:f1:73:77:80:05:96:fb:e7:e4:1d:fb:47:50:36:51:52: 43:9c:81:c2:3a:84:07:fb:86:16:a2:2d:94:03:ac:b4:7a:72: d2:1b:50:a6:fb:11:ad:8b:c7:56:ad:83:f4:ff:fd:c3:d9:07: 5f:64:ea:e5:eb:9a:b8:c7:17:99:8a:09:23:88:ea:19:ab:cf: c7:62:b6:3e:76:34:7f:9b:6a:cd:17:1e:9e:43:6a:4f:9d:27: da:b0:5e:10 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjYwMzAyMTExMzExWhcNMjYwMzA5MTExMzExWjAYMRYwFAYD VQQDEw02OWE1NzBjOC01YzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApH8Z1KAa37ccgACsn4u8IURDNWStKjb+2AuH0NcpeDFvNv3ezD4WMShTjbAy Wd9UH7QgmQcif1sqtVwy1Q5aRVzreiUHPcyz5fG176fQRWSEod2AZrKdZIP+tX9E q8icDj9tZP6DiOdGzg2gsswIsIEaKG07RUhH4mhkCyEKINSVSAGtrBp3j5Atxjn8 +SbJSb7j+sJReM1wSNhBYuodGAKPeLv4unh6xSJVY7PjCBxtdm+c4XznkRy96LHN rzjOXdOnue0vqvwQgi5Nl4A72PcER6lWGANhZSvGDRoh876D0cVQNWhwgjhqh9vz iEXpp5cagGRSVrgmrUwwtsnf+QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFL3Gw3+K bHjqj7ZRvBr7yI5IRjs3MB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQ7VqhSoIg8cKoK+CtyMvQlYDIH98jzp3kIcsV+eaCa8geA73OpWO3uMClAHM BgaotcyYbboxEqBR1U83WWTTygFkxZDWM8lyTjQF8KlGDUC31QOA9+oWB+ELcur0 IDrJUzdVYKJOnPBQcVlGn0zb7fNd4+RAPHr95cY2+mcoJM9x0j9xt4aqxlnDdrOC 6+nRuARweAh63MDOec841YGpxlVB98Hxc3eABZb75+Qd+0dQNlFSQ5yBwjqEB/uG FqItlAOstHpy0htQpvsRrYvHVq2D9P/9w9kHX2Tq5euauMcXmYoJI4jqGavPx2K2 PnY0f5tqzRcenkNqT50n2rBeEA== -----END CERTIFICATE-----Generated at Mon Mar 2 17:16:14 2026 by rpki-client